https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:55:05.788579+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-547 certfr-2022-avi-547 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-03T21:55:05.864508+00:00 certfr-2022-avi-547 https://cve.radiocsirt.org/vuln/cnvd-2022-45223 cnvd-2022-45223 2026-10-03T21:55:05.864547+00:00 cnvd-2022-45223 https://cve.radiocsirt.org/vuln/euvd-2026-17278 EUVD-2026-17278 2026-10-03T21:55:05.864563+00:00 EUVD-2026-17278 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32258 fkie_cve-2022-32258 2026-10-03T21:55:05.864575+00:00

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains an older feature that allows to import device configurations via a specific endpoint. An attacker could use this vulnerability for information disclosure.

 https://cve.radiocsirt.org/vuln/ghsa-5hq8-vhxc-cc6q GHSA-5hq8-vhxc-cc6q 2026-10-03T21:55:05.864602+00:00

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains an older feature that allows to import device configurations via a specific endpoint. An attacker could use this vulnerability for information disclosure.

 https://cve.radiocsirt.org/vuln/gsd-2022-32258 gsd-2022-32258 2026-10-03T21:55:05.864618+00:00 gsd-2022-32258 https://cve.radiocsirt.org/vuln/icsa-22-167-17 ICSA-22-167-17 — Siemens OpenSSL Affecting Industrial Products 2026-10-03T21:55:05.864629+00:00

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse, if one of them matches the setup. Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*, which could lead to libcurl reusing wrong connections. File paths are, or can be, case sensitive on many systems but not all, and can even vary depending on used file systems. The comparison also didn't include the 'issuer cert' which a transfer can set to qualify how to verify the server certificate. curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl. This rarely used option is used to send variable=content pairs to TELNET servers. Due to flaw in the option parser for sending `NEW_ENV` variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server. Therefore potentially revealing sensitive internal information to the server using a clear-text network protocol. This could happen because curl did not call and use sscanf() correctly when parsing the string provided by the application. In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory). In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize. addBinding in xmlparse.c in Exp…