https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:03:18.008255+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2021-31525 Withdrawn: BELL-CVE-2021-31525 — CVE-2021-31525 does not affect BellSoft software 2026-10-05T23:03:18.512631+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-golang-2021-31525 BIT-golang-2021-31525 2026-10-05T23:03:18.512693+00:00

Affected: Bitnami: golang

net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-490 certfr-2021-avi-490 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum Protect. Certaines d'entre elles permettent à un atta… 2026-10-05T23:03:18.512725+00:00 certfr-2021-avi-490 https://cve.radiocsirt.org/vuln/cleanstart-2026-lx99611 CLEANSTART-2026-LX99611 — Security fix for CVE-2021-31525 applied in: cfssl 1.5.0-r1 2026-10-05T23:03:18.512743+00:00

Affected: CleanStart: cfssl

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2021-44960 cnvd-2021-44960 2026-10-05T23:03:18.512763+00:00 cnvd-2021-44960 https://cve.radiocsirt.org/vuln/euvd-2026-27533 EUVD-2026-27533 2026-10-05T23:03:18.512776+00:00 EUVD-2026-27533 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31525 fkie_cve-2021-31525 2026-10-05T23:03:18.512786+00:00

net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.

 https://cve.radiocsirt.org/vuln/ghsa-h86h-8ppg-mxmh GHSA-h86h-8ppg-mxmh — golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion 2026-10-05T23:03:18.512806+00:00

Affected: Go: golang.org/x/net

golang.org/x/net/http/httpguts in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.

 https://cve.radiocsirt.org/vuln/gsd-2021-31525 gsd-2021-31525 2026-10-05T23:03:18.512826+00:00 gsd-2021-31525 https://cve.radiocsirt.org/vuln/msrc_cve-2021-31525 msrc_CVE-2021-31525 — net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via… 2026-10-05T23:03:18.512836+00:00 msrc_CVE-2021-31525 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0904-1 openSUSE-SU-2021:0904-1 — Security update for go1.15 2026-10-05T23:03:18.512852+00:00

Security update for go1.15

 https://cve.radiocsirt.org/vuln/rhba-2021:2854 RHBA-2021:2854 — Red Hat Bug Fix Advisory: Migration Toolkit for Containers (MTC) 1.4.6 release advisory 2026-10-05T23:03:18.512867+00:00

libwebp: heap-based buffer overflow in PutLE16() nss: TLS 1.3 CCS flood remote DoS Attack openldap: NULL pointer dereference for unauthenticated packet in slapd kernel: security bypass in certs/blacklist.c and certs/system_keyring.c jetty: local temporary directory hijacking vulnerability jetty: buffer not correctly recycled in Gzip Request inflation jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS libwebp: heap-based buffer overflow in WebPDecode*Into functions libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c lz4: memory corruption due to an integer overflow bug caused by memmove argument libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms rpm: Signature checks bypass via corrupted rpm package jenkins-2-plugins/config-file-provider: Does not configure its XML parser to prevent XML external entity (XXE) attacks. jenkins-2-plugins/config-file-provider: Does not correctly perform permission checks in several HTTP endpoints. jenkins-2-plugins/config-file-provider: does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnera…

 https://cve.radiocsirt.org/vuln/suse-su-2021:2082-1 SUSE-SU-2021:2082-1 — Security update for go1.15 2026-10-05T23:03:18.512925+00:00

Security update for go1.15

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-31525 UBUNTU-CVE-2021-31525 2026-10-05T23:03:18.512940+00:00

Affected: Ubuntu:Pro:16.04:LTS: golang-golang-x-net-dev, Ubuntu:Pro:16.04:LTS: google-guest-agent, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:Pro:18.04:LTS: golang-golang-x-net-dev, Ubuntu:Pro:20.04:LTS: golang-1.16, Ubuntu:Pro:20.04:LTS: golang-golang-x-net-dev

net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 WID-SEC-W-2022-0510 — IBM DB2: Mehrere Schwachstellen 2026-10-05T23:03:18.512968+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.