https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:57:43.590145+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2017-01816 bdu:2017-01816 2026-10-02T14:57:43.720021+00:00 bdu:2017-01816 https://cve.radiocsirt.org/vuln/bell-cve-2016-9841 Withdrawn: BELL-CVE-2016-9841 — CVE-2016-9841 does not affect BellSoft software 2026-10-02T14:57:43.720115+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2017-avi-320 certfr-2017-avi-320 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-02T14:57:43.720150+00:00 certfr-2017-avi-320 https://cve.radiocsirt.org/vuln/cnvd-2016-13298 cnvd-2016-13298 2026-10-02T14:57:43.720179+00:00 cnvd-2016-13298 https://cve.radiocsirt.org/vuln/euvd-2026-336229 EUVD-2026-336229 2026-10-02T14:57:43.720199+00:00 EUVD-2026-336229 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9841 fkie_cve-2016-9841 2026-10-02T14:57:43.720218+00:00

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

 https://cve.radiocsirt.org/vuln/ghsa-5f8r-846v-423w GHSA-5f8r-846v-423w 2026-10-02T14:57:43.720260+00:00

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

 https://cve.radiocsirt.org/vuln/gsd-2016-9841 gsd-2016-9841 2026-10-02T14:57:43.720286+00:00 gsd-2016-9841 https://cve.radiocsirt.org/vuln/icsa-19-155-01 ICSA-19-155-01 — PHOENIX CONTACT PLCNext AXC F 2152 2026-10-02T14:57:43.720312+00:00

A remote attacker can exploit a server 's private key by sending carefully constructed UserIdentityTokens encrypted with the Basic128Rsa15 security policy. This could allow an attacker to decrypt passwords even if encrypted with another security policy such as Basic256Sha256. CVE-2018-7559 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L). An attacker with physical access to the device can manipulate SD card data, which could allow an attacker to bypass the authentication of the device. This device is designed for use in a protected industrial environment with restricted physical access.CVE-2019-10998 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). An attacker trying to connect to the device using a man-in-the-middle setup may crash the PLC service, resulting in a denial of service condition. The device must then be rebooted, or the PLC service must be restarted manually via Linux shell.CVE-2019-10997 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly ha…

 https://cve.radiocsirt.org/vuln/msrc_cve-2016-9841 msrc_CVE-2016-9841 — inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper point… 2026-10-02T14:57:43.720504+00:00 msrc_CVE-2016-9841 https://cve.radiocsirt.org/vuln/ncsc-2026-0229 NCSC-2026-0229 — Kwetsbaarheden verholpen in Siemens producten 2026-10-02T14:57:43.720525+00:00 NCSC-2026-0229 https://cve.radiocsirt.org/vuln/oesa-2023-1422 OESA-2023-1422 — syslinux security update 2026-10-02T14:57:43.720641+00:00

Affected: openEuler:20.03-LTS-SP1: syslinux, openEuler:20.03-LTS-SP3: syslinux, openEuler:22.03-LTS: syslinux, openEuler:22.03-LTS-SP1: syslinux, openEuler:22.03-LTS-SP2: syslinux

The Syslinux Project covers lightweight bootloaders for MS-DOS FAT filesystems (SYSLINUX), network booting (PXELINUX), bootable "El Torito" CD-ROMs (ISOLINUX), and Linux ext2/ext3/ext4 or btrfs filesystems (EXTLINUX). The project also includes MEMDISK, a tool to boot legacy operating systems (such as DOS) from nontraditional media; it is usually used in conjunction with PXELINUX and ISOLINUX.

Security Fix(es):

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.(CVE-2016-9841)

 https://cve.radiocsirt.org/vuln/rhsa-2017:1220 RHSA-2017:1220 — Red Hat Security Advisory: java-1.8.0-ibm security update 2026-10-02T14:57:43.720689+00:00

zlib: Out-of-bound pointer arithmetic in inftrees.c zlib: Out-of-bounds pointer arithmetic in inffast.c zlib: Undefined left shift of negative number zlib: Big-endian out-of-bounds pointer JDK: XML External Entity Injection (XXE) error when processing XML data OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520) OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528) OpenJDK: newline injection in the FTP client (Networking, 8170222) OpenJDK: MD5 allowed for jar verification (Security, 8171121) OpenJDK: newline injection in the SMTP client (Networking, 8171533)

 https://cve.radiocsirt.org/vuln/ssa-470355 SSA-470355 — SSA-470355: Zlib and Foxit Vulnerabilities in CADRA 2026-10-02T14:57:43.720727+00:00

CADRA is affected by multiple zlib and Foxit vulnerabilities.

Siemens has released a new version for CADRA and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

 https://cve.radiocsirt.org/vuln/suse-su-2016:3209-1 SUSE-SU-2016:3209-1 — Security update for zlib 2026-10-02T14:57:43.720755+00:00

Security update for zlib

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-9841 UBUNTU-CVE-2016-9841 2026-10-02T14:57:43.720777+00:00

Affected: Ubuntu:Pro:14.04:LTS: klibc, Ubuntu:Pro:14.04:LTS: zlib, Ubuntu:16.04:LTS: rsync, Ubuntu:16.04:LTS: zlib, Ubuntu:Pro:16.04:LTS: klibc, Ubuntu:16.04:LTS: zsync, Ubuntu:18.04:LTS: rsync, Ubuntu:Pro:18.04:LTS: klibc, Ubuntu:18.04:LTS: zsync, Ubuntu:20.04:LTS: klibc and 9 more

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

 https://cve.radiocsirt.org/vuln/vde-2019-009 VDE-2019-009 — PHOENIX CONTACT: Multiple Vulnerabilities in AXC F 2152 2026-10-02T14:57:43.720865+00:00

Multiple vulnerabilities have been identified in PHOENIX CONTACT AXC F 2152 with firmware versions 1.x

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1232 WID-SEC-W-2024-1232 — Rsync: Mehrere Schwachstellen 2026-10-02T14:57:43.720915+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Rsync ausnutzen, um beliebigen Programmcode auszuführen, oder einen Denial of Service Zustand herbeizuführen.