https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:51:54.199412+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06276 bdu:2023-06276 2026-10-03T21:51:54.209459+00:00 bdu:2023-06276 https://cve.radiocsirt.org/vuln/certfr-2023-ale-010 certfr-2023-ale-010 — Le 27 septembre 2023, Zero Day Initiative (ZDI) a publié six avis de sécurité \[1\] concernant des vulnérabilités de ty… 2026-10-03T21:51:54.209500+00:00 certfr-2023-ale-010 https://cve.radiocsirt.org/vuln/cleanstart-2025-dx69052 CLEANSTART-2025-DX69052 — Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability 2026-10-03T21:51:54.209545+00:00

Affected: CleanStart: exim

Security vulnerability affects the exim package. Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability.

 https://cve.radiocsirt.org/vuln/euvd-2026-258463 EUVD-2026-258463 2026-10-03T21:51:54.209588+00:00 EUVD-2026-258463 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42119 fkie_cve-2023-42119 2026-10-03T21:51:54.209609+00:00

Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account. . Was ZDI-CAN-17643.

 https://cve.radiocsirt.org/vuln/ghsa-hpcw-47wp-rc8h GHSA-hpcw-47wp-rc8h 2026-10-03T21:51:54.209646+00:00

Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account. Was ZDI-CAN-17643.

 https://cve.radiocsirt.org/vuln/gsd-2023-42119 gsd-2023-42119 2026-10-03T21:51:54.209675+00:00 gsd-2023-42119 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0303-1 openSUSE-SU-2023:0303-1 — Security update for exim 2026-10-03T21:51:54.209695+00:00

Security update for exim

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-42119 UBUNTU-CVE-2023-42119 2026-10-03T21:51:54.209730+00:00

Affected: Ubuntu:Pro:14.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: exim4, Ubuntu:Pro:18.04:LTS: exim4, Ubuntu:20.04:LTS: exim4, Ubuntu:22.04:LTS: exim4

Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account. . Was ZDI-CAN-17643.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2505 WID-SEC-W-2023-2505 — Exim: Mehrere Schwachstellen 2026-10-03T21:51:54.209790+00:00

Ein Angreifer kann mehrere Schwachstellen in Exim ausnutzen, um beliebigen Programmcode auszuführen oder Informationen offenzulegen.