https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:52:53.491698+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06274 bdu:2023-06274 2026-10-04T23:52:53.644054+00:00 bdu:2023-06274 https://cve.radiocsirt.org/vuln/certfr-2023-ale-010 certfr-2023-ale-010 — Le 27 septembre 2023, Zero Day Initiative (ZDI) a publié six avis de sécurité \[1\] concernant des vulnérabilités de ty… 2026-10-04T23:52:53.644103+00:00 certfr-2023-ale-010 https://cve.radiocsirt.org/vuln/cleanstart-2025-vv41786 CLEANSTART-2025-VV41786 — Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability 2026-10-04T23:52:53.644132+00:00

Affected: CleanStart: exim

Security vulnerability affects the exim package. Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability.

 https://cve.radiocsirt.org/vuln/euvd-2026-258462 EUVD-2026-258462 2026-10-04T23:52:53.644169+00:00 EUVD-2026-258462 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42117 fkie_cve-2023-42117 2026-10-04T23:52:53.644181+00:00

Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17554.

 https://cve.radiocsirt.org/vuln/ghsa-qf54-2qx8-3vcv GHSA-qf54-2qx8-3vcv 2026-10-04T23:52:53.644208+00:00

Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17554.

 https://cve.radiocsirt.org/vuln/gsd-2023-42117 gsd-2023-42117 2026-10-04T23:52:53.644225+00:00 gsd-2023-42117 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0303-1 openSUSE-SU-2023:0303-1 — Security update for exim 2026-10-04T23:52:53.644235+00:00

Security update for exim

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-42117 UBUNTU-CVE-2023-42117 2026-10-04T23:52:53.644252+00:00

Affected: Ubuntu:Pro:14.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: exim4, Ubuntu:Pro:18.04:LTS: exim4, Ubuntu:20.04:LTS: exim4, Ubuntu:22.04:LTS: exim4

Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17554.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2505 WID-SEC-W-2023-2505 — Exim: Mehrere Schwachstellen 2026-10-04T23:52:53.644280+00:00

Ein Angreifer kann mehrere Schwachstellen in Exim ausnutzen, um beliebigen Programmcode auszuführen oder Informationen offenzulegen.