https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T10:58:41.918509+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2018-00118 bdu:2018-00118 2026-10-05T10:58:41.993466+00:00 bdu:2018-00118 https://cve.radiocsirt.org/vuln/certfr-2018-avi-189 certfr-2018-avi-189 — De multiples vulnérabilités ont été découvertes dans Oracle Sun Systems. Certaines d'entre elles permettent à un attaqu… 2026-10-05T10:58:41.993514+00:00 certfr-2018-avi-189 https://cve.radiocsirt.org/vuln/cnvd-2017-37422 cnvd-2017-37422 2026-10-05T10:58:41.993551+00:00 cnvd-2017-37422 https://cve.radiocsirt.org/vuln/euvd-2026-256298 EUVD-2026-256298 2026-10-05T10:58:41.993567+00:00 EUVD-2026-256298 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17562 fkie_cve-2017-17562 2026-10-05T10:58:41.993578+00:00

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc dynamic linker, this behaviour can be abused for remote code execution using special parameter names such as LD_PRELOAD. An attacker can POST their shared object payload in the body of the request, and reference it using /proc/self/fd/0.

 https://cve.radiocsirt.org/vuln/ghsa-q5wm-274q-f3v6 GHSA-q5wm-274q-f3v6 2026-10-05T10:58:41.993610+00:00

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc dynamic linker, this behaviour can be abused for remote code execution using special parameter names such as LD_PRELOAD. An attacker can POST their shared object payload in the body of the request, and reference it using /proc/self/fd/0.

 https://cve.radiocsirt.org/vuln/gsd-2017-17562 gsd-2017-17562 2026-10-05T10:58:41.993627+00:00 gsd-2017-17562 https://cve.radiocsirt.org/vuln/icsa-22-090-06 ICSA-22-090-06 — General Electric Renewable Energy MDS Radios 2026-10-05T10:58:41.993638+00:00

This previously disclosed vulnerability in the GoAhead Webserver may allow remote code execution in iNET/iNET II, TD220X, and TD220MAX series radios.CVE-2017-17562 has been assigned to this vulnerability. A CVSS v3 base score of 10.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). iNET/iNET II series radios allow unauthenticated local and network access to the device configuration shell.CVE-2022-24119 has been assigned to this vulnerability. A CVSS v3 base score of 10.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). This vulnerability identifies a weakness in the wireless security software and chipset implementations in iNET/iNET II series radios.CVE-2022-24116 has been assigned to this vulnerability. A CVSS v3 base score of 8.0 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). A feature can allow the use of an authentication code to cause iNET/iNET II, SD, TD220X, and TD220MAX series radios to reset back to the factory default configuration and reboot.CVE-2022-24118 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H). iNET and iNET II series radios store credentials in plaintext on the system flash memory.CVE-2022-24120 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:U/C:H/…