https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:22:39.324485+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4226 ALSA-2021:4226 — Moderate: grafana security, bug fix, and enhancement update 2026-10-03T11:22:39.866093+00:00

Affected: AlmaLinux:8: grafana

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

The following packages have been upgraded to a later upstream version: grafana (7.5.9). (BZ#1921191)

Security Fix(es):

* golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)

* grafana: snapshot feature allow an unauthenticated remote attacker to trigger a DoS via a remote API call (CVE-2021-27358)

* golang: net: lookup functions may return invalid host names (CVE-2021-33195)

* golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197)

* golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-01056 bdu:2021-01056 2026-10-03T11:22:39.866201+00:00 bdu:2021-01056 https://cve.radiocsirt.org/vuln/bell-cve-2021-3114 Withdrawn: BELL-CVE-2021-3114 — CVE-2021-3114 does not affect BellSoft software 2026-10-03T11:22:39.866223+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-golang-2021-3114 BIT-golang-2021-3114 2026-10-03T11:22:39.866240+00:00

Affected: Bitnami: golang

In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0976 certfr-2023-avi-0976 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T11:22:39.866263+00:00 certfr-2023-avi-0976 https://cve.radiocsirt.org/vuln/euvd-2026-20708 EUVD-2026-20708 2026-10-03T11:22:39.866279+00:00 EUVD-2026-20708 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3114 fkie_cve-2021-3114 2026-10-03T11:22:39.866290+00:00

In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.

 https://cve.radiocsirt.org/vuln/ghsa-gwfm-9vvh-63r3 GHSA-gwfm-9vvh-63r3 2026-10-03T11:22:39.866311+00:00

In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.

 https://cve.radiocsirt.org/vuln/gsd-2021-3114 gsd-2021-3114 2026-10-03T11:22:39.866326+00:00 gsd-2021-3114 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3114 msrc_CVE-2021-3114 — In Go before 1.14.14 and 1.15.x before 1.15.7 crypto/elliptic/p224.go can generate incorrect outputs related to an unde… 2026-10-03T11:22:39.866337+00:00 msrc_CVE-2021-3114 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0190-1 openSUSE-SU-2021:0190-1 — Security update for go1.14 2026-10-03T11:22:39.866356+00:00

Security update for go1.14

 https://cve.radiocsirt.org/vuln/rhba-2021:0959 RHBA-2021:0959 — Red Hat Bug Fix Advisory: OpenShift Container Platform 4.7.4 extras update 2026-10-03T11:22:39.866373+00:00

golang: crypto/elliptic: incorrect operations on the P-224 curve

 https://cve.radiocsirt.org/vuln/suse-su-2021:0222-1 SUSE-SU-2021:0222-1 — Security update for go1.14 2026-10-03T11:22:39.866390+00:00

Security update for go1.14

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3114 UBUNTU-CVE-2021-3114 2026-10-03T11:22:39.866406+00:00

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.8, Ubuntu:18.04:LTS: golang-1.9, Ubuntu:20.04:LTS: golang-1.13, Ubuntu:20.04:LTS: golang-1.14 and 1 more

In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794 WID-SEC-W-2024-0794 — Dell ECS: Mehrere Schwachstellen 2026-10-03T11:22:39.866442+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.