https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:36:58.284062+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-06538 bdu:2015-06538 2026-10-10T14:36:58.288871+00:00 bdu:2015-06538 https://cve.radiocsirt.org/vuln/euvd-2026-113680 EUVD-2026-113680 2026-10-10T14:36:58.288910+00:00 EUVD-2026-113680 https://cve.radiocsirt.org/vuln/fkie_cve-2011-0012 fkie_cve-2011-0012 2026-10-10T14:36:58.288932+00:00

The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name.

 https://cve.radiocsirt.org/vuln/ghsa-pp7j-p833-2h5r GHSA-pp7j-p833-2h5r 2026-10-10T14:36:58.288972+00:00

The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name.

 https://cve.radiocsirt.org/vuln/gsd-2011-0012 gsd-2011-0012 2026-10-10T14:36:58.288999+00:00 gsd-2011-0012 https://cve.radiocsirt.org/vuln/rhsa-2011:0426 RHSA-2011:0426 — Red Hat Security Advisory: spice-xpi security update 2026-10-10T14:36:58.289018+00:00

spice-xpi: symlink attack on usbrdrctl log file spice-xpi: unitialized pointer writes possible when getting plugin properties