https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T11:37:26.256610+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-07134 bdu:2025-07134 2026-10-22T11:37:26.275654+00:00 bdu:2025-07134 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0938 certfr-2025-avi-0938 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-22T11:37:26.275738+00:00 certfr-2025-avi-0938 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2723 fkie_cve-2025-2723 2026-10-22T11:37:26.276107+00:00

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "[the] call is invalid [as] the buffer pointed to by "data" must have "len" valid bytes." The documentation was fixed to make that clear.

 https://cve.radiocsirt.org/vuln/ghsa-vx3m-9554-cpqq GHSA-vx3m-9554-cpqq 2026-10-22T11:37:26.276484+00:00

A vulnerability was found in GNOME libgsf up to 1.14.53. It has been rated as critical. This issue affects the function gsf_property_settings_collec. The manipulation of the argument n_alloced_params leads to heap-based buffer overflow. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-2723 Withdrawn: UBUNTU-CVE-2025-2723 2026-10-22T11:37:26.276525+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: libgsf, Ubuntu:Pro:16.04:LTS: libgsf, Ubuntu:Pro:18.04:LTS: libgsf, Ubuntu:20.04:LTS: libgsf, Ubuntu:22.04:LTS: libgsf, Ubuntu:24.10: libgsf, Ubuntu:24.04:LTS: libgsf, Ubuntu:25.04: libgsf

A vulnerability was found in GNOME libgsf up to 1.14.53. It has been rated as critical. This issue affects the function gsf_property_settings_collec. The manipulation of the argument n_alloced_params leads to heap-based buffer overflow. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.