https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:15:11.220303+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-438 certfr-2014-avi-438 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Pidgin</span>. Certaines d'entre elles permette… 2026-10-04T11:15:11.342500+00:00 certfr-2014-avi-438 https://cve.radiocsirt.org/vuln/euvd-2026-99407 EUVD-2026-99407 2026-10-04T11:15:11.342552+00:00 EUVD-2026-99407 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3694 fkie_cve-2014-3694 2026-10-04T11:15:11.342575+00:00

The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 do not properly consider the Basic Constraints extension during verification of X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

 https://cve.radiocsirt.org/vuln/ghsa-qfvv-4jjj-6cq2 GHSA-qfvv-4jjj-6cq2 2026-10-04T11:15:11.342616+00:00

The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 do not properly consider the Basic Constraints extension during verification of X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

 https://cve.radiocsirt.org/vuln/gsd-2014-3694 gsd-2014-3694 2026-10-04T11:15:11.342641+00:00 gsd-2014-3694 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10432-1 openSUSE-SU-2024:10432-1 — finch-2.11.0-4.1 on GA media 2026-10-04T11:15:11.342658+00:00

finch-2.11.0-4.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3694 UBUNTU-CVE-2014-3694 2026-10-04T11:15:11.342717+00:00

Affected: Ubuntu:14.04:LTS: pidgin

The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 do not properly consider the Basic Constraints extension during verification of X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.