https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:35:27.169233+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:6523 ALSA-2023:6523 — Moderate: python-tornado security update 2026-10-03T05:35:27.595572+00:00

Affected: AlmaLinux:9: python3-tornado

Tornado is a Python web framework and asynchronous networking library that provides an open source version of scalable, non-blocking web server and tools.

Security Fix(es):

* python-tornado: open redirect vulnerability in StaticFileHandler under certain configurations (CVE-2023-28370)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-00947 bdu:2025-00947 2026-10-03T05:35:27.595636+00:00 bdu:2025-00947 https://cve.radiocsirt.org/vuln/brew-jupyterlab-cve-2023-28370 BREW-jupyterlab-CVE-2023-28370 — Open redirect in Tornado 2026-10-03T05:35:27.595654+00:00

Affected: Homebrew: jupyterlab

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0486 certfr-2025-avi-0486 — De multiples vulnérabilités ont été découvertes dans les produits Qnap. Certaines d'entre elles permettent à un attaqua… 2026-10-03T05:35:27.595677+00:00 certfr-2025-avi-0486 https://cve.radiocsirt.org/vuln/euvd-2026-258390 EUVD-2026-258390 2026-10-03T05:35:27.595699+00:00 EUVD-2026-258390 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28370 fkie_cve-2023-28370 2026-10-03T05:35:27.595711+00:00

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-hj3f-6gcp-jg8j GHSA-hj3f-6gcp-jg8j — Open redirect in Tornado 2026-10-03T05:35:27.595730+00:00

Affected: PyPI: tornado

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2023-28370 gsd-2023-28370 2026-10-03T05:35:27.595750+00:00 gsd-2023-28370 https://cve.radiocsirt.org/vuln/jvndb-2023-000053 jvndb-2023-000053 2026-10-03T05:35:27.595761+00:00

Tornado provided by tornadoweb contains a vulnerability that triggers open redirect (CWE-601) under certain non-default configurations. Masashi Yamane of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/msrc_cve-2023-28370 msrc_CVE-2023-28370 — Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect… 2026-10-03T05:35:27.595777+00:00 msrc_CVE-2023-28370 https://cve.radiocsirt.org/vuln/oesa-2023-1370 OESA-2023-1370 — python-tornado security update 2026-10-03T05:35:27.595795+00:00

Affected: openEuler:20.03-LTS-SP1: python-tornado, openEuler:20.03-LTS-SP3: python-tornado, openEuler:22.03-LTS: python-tornado, openEuler:22.03-LTS-SP1: python-tornado

Tornado is an open source version of the scalable, non-blocking web server and tools.

Security Fix(es):

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.(CVE-2023-28370)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13107-1 openSUSE-SU-2024:13107-1 — python310-tornado6-6.3.2-2.1 on GA media 2026-10-03T05:35:27.595823+00:00

python310-tornado6-6.3.2-2.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2023-75 PYSEC-2023-75 2026-10-03T05:35:27.595839+00:00

Affected: PyPI: tornado

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.

 https://cve.radiocsirt.org/vuln/suse-el-9-client-tools-2023-3137 SUSE-EL-9-CLIENT-TOOLS-2023-3137 — Security update for SUSE Manager Salt Bundle 2026-10-03T05:35:27.595856+00:00

Security update for SUSE Manager Salt Bundle

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28370 UBUNTU-CVE-2023-28370 2026-10-03T05:35:27.595871+00:00

Affected: Ubuntu:Pro:14.04:LTS: salt, Ubuntu:Pro:16.04:LTS: python-tornado, Ubuntu:Pro:16.04:LTS: salt, Ubuntu:Pro:18.04:LTS: python-tornado, Ubuntu:Pro:18.04:LTS: salt, Ubuntu:Pro:20.04:LTS: python-tornado, Ubuntu:22.04:LTS: salt, Ubuntu:Pro:22.04:LTS: python-tornado

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2853 WID-SEC-W-2023-2853 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-03T05:35:27.595900+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen oder beliebigen Code auszuführen.