<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-02T16:31:12.970007+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2023-07738</id>
    <title>bdu:2023-07738</title>
    <updated>2026-10-02T16:31:13.012975+00:00</updated>
    <content>bdu:2023-07738</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2023-07738"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bell-cve-2017-12652</id>
    <title>Withdrawn: BELL-CVE-2017-12652 — CVE-2017-12652 does not affect BellSoft software</title>
    <updated>2026-10-02T16:31:13.013015+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>
          <strong>Withdrawn by the publisher.</strong>
        </p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bell-cve-2017-12652"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2021-avi-589</id>
    <title>certfr-2021-avi-589 — De multiples vulnérabilités ont été découvertes dans Juniper Junos Space
Log Collector. Certaines d'entre elles permett…</title>
    <updated>2026-10-02T16:31:13.013035+00:00</updated>
    <content>certfr-2021-avi-589</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2021-avi-589"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-243475</id>
    <title>EUVD-2026-243475</title>
    <updated>2026-10-02T16:31:13.013050+00:00</updated>
    <content>EUVD-2026-243475</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-243475"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2017-12652</id>
    <title>fkie_cve-2017-12652</title>
    <updated>2026-10-02T16:31:13.013061+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>libpng before 1.6.32 does not properly check the length of chunks against the user limit.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2017-12652"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-94xg-qm4r-9r7c</id>
    <title>GHSA-94xg-qm4r-9r7c</title>
    <updated>2026-10-02T16:31:13.013087+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>libpng before 1.6.32 does not properly check the length of chunks against the user limit.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-94xg-qm4r-9r7c"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2017-12652</id>
    <title>gsd-2017-12652</title>
    <updated>2026-10-02T16:31:13.013101+00:00</updated>
    <content>gsd-2017-12652</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2017-12652"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/icsa-23-271-01</id>
    <title>ICSA-23-271-01 — Rockwell Automation PanelView 800</title>
    <updated>2026-10-02T16:31:13.013111+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An input/output validation vulnerability exists in a third-party component that the PanelView 800 utilizes. Libpng, which is PNG's reference library, version 1.6.32 and earlier does not properly check the length of chunks against the user limit. Libpng versions prior to 1.6.32 are susceptible to a vulnerability which, when successfully exploited, could potentially lead to a disclosure of sensitive information, addition or modification of data, or a denial-of-service condition.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/icsa-23-271-01"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2017-12652</id>
    <title>msrc_CVE-2017-12652 — libpng before 1.6.32 does not properly check the length of chunks against the user limit.</title>
    <updated>2026-10-02T16:31:13.013131+00:00</updated>
    <content>msrc_CVE-2017-12652</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2017-12652"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2024-2091</id>
    <title>OESA-2024-2091 — syslinux security update</title>
    <updated>2026-10-02T16:31:13.013146+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:24.03-LTS: syslinux, openEuler:22.03-LTS-SP4: syslinux, openEuler:22.03-LTS-SP3: syslinux, openEuler:20.03-LTS-SP4: syslinux, openEuler:22.03-LTS-SP1: syslinux</p>
<p>Security Fix(es):</p>
<p>The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data.  NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.(CVE-2011-2501)</p>
<p>Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.(CVE-2011-2690)</p>
<p>The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.(CVE-2011-2691)</p>
<p>The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly hav…</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2024-2091"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2024:10971-1</id>
    <title>openSUSE-SU-2024:10971-1 — libpng12-0-1.2.59-1.9 on GA media</title>
    <updated>2026-10-02T16:31:13.013201+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>libpng12-0-1.2.59-1.9 on GA media</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2024:10971-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2019:3060-2</id>
    <title>SUSE-SU-2019:3060-2 — Security update for libpng16</title>
    <updated>2026-10-02T16:31:13.013219+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for libpng16</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2019:3060-2"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12652</id>
    <title>UBUNTU-CVE-2017-12652</title>
    <updated>2026-10-02T16:31:13.013234+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libpng, Ubuntu:Pro:16.04:LTS: libpng, Ubuntu:Pro:16.04:LTS: libpng1.6</p>
<p>libpng before 1.6.32 does not properly check the length of chunks against the user limit.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12652"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0915</id>
    <title>WID-SEC-W-2026-0915 — Kyocera Drucker: Mehrere Schwachstellen</title>
    <updated>2026-10-02T16:31:13.013254+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein Angreifer aus dem lokalen Netzwerk kann mehrere Schwachstellen in verschiedenen Modellen der Kyocera ECOSYS und TASKalfa Produktfamilien ausnutzen, um Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0915"/>
  </entry>
</feed>
