https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:41:30.802272+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-107370 EUVD-2026-107370 2026-10-09T12:41:30.824116+00:00 EUVD-2026-107370 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4347 fkie_cve-2013-4347 2026-10-09T12:41:30.824158+00:00

The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.

 https://cve.radiocsirt.org/vuln/ghsa-rv8h-p43r-4x5r GHSA-rv8h-p43r-4x5r — SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces 2026-10-09T12:41:30.824191+00:00

Affected: PyPI: oauth2

The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.

 https://cve.radiocsirt.org/vuln/gsd-2013-4347 gsd-2013-4347 2026-10-09T12:41:30.824214+00:00 gsd-2013-4347 https://cve.radiocsirt.org/vuln/pysec-2014-86 PYSEC-2014-86 2026-10-09T12:41:30.824226+00:00

Affected: PyPI: oauth2

The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.

 https://cve.radiocsirt.org/vuln/rhsa-2015:1591 RHSA-2015:1591 — Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 7 2026-10-09T12:41:30.824243+00:00

TLS: MITM attacks via session renegotiation python-oauth2: _check_signature() ignores the nonce value when validating signed urls python-oauth2: Uses poor PRNG in nonce foreman: cross-site scripting (XSS) flaw in template preview screen foreman: lack of SSL certificate validation when performing LDAPS authentication foreman: API not scoping resources to taxonomies foreman: the _session_id cookie is issued without the Secure flag foreman: edit_users permission allows changing of admin passwords