https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:13:47.868213+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2018-avi-288 certfr-2018-avi-288 — De multiples vulnérabilités ont été découvertes dans Tenable Nessus. Elles permettent à un attaquant de provoquer un pr… 2026-10-03T21:13:48.018399+00:00 certfr-2018-avi-288 https://cve.radiocsirt.org/vuln/cnvd-2017-04911 cnvd-2017-04911 2026-10-03T21:13:48.018444+00:00 cnvd-2017-04911 https://cve.radiocsirt.org/vuln/euvd-2026-74605 EUVD-2026-74605 2026-10-03T21:13:48.018460+00:00 EUVD-2026-74605 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7244 fkie_cve-2017-7244 2026-10-03T21:13:48.018472+00:00

The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.

 https://cve.radiocsirt.org/vuln/ghsa-2j3f-972q-6fv5 GHSA-2j3f-972q-6fv5 2026-10-03T21:13:48.018500+00:00

The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.

 https://cve.radiocsirt.org/vuln/gsd-2017-7244 gsd-2017-7244 2026-10-03T21:13:48.018515+00:00 gsd-2017-7244 https://cve.radiocsirt.org/vuln/rhsa-2018:2486 RHSA-2018:2486 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 security update 2026-10-03T21:13:48.018526+00:00

expat: Out-of-bounds heap read on crafted input causing crash httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir libxml2: Use after free triggered by XPointer paths beginning with range-to curl: escape and unescape integer overflows curl: Cookie injection for other servers curl: Case insensitive password comparison curl: Out-of-bounds write via unchecked multiplication curl: Double-free in curl_maprintf curl: Double-free in krb5 code curl: curl_getdate out-of-bounds read curl: URL unescape heap overflow via integer truncation curl: Use-after-free via shared cookies curl: Invalid URL parsing with '#' curl: IDNA 2003 makes curl use wrong host libxml2: XML External Entity vulnerability libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS) libxml2: stack overflow before detecting invalid XML file (unfixed CVE-2016-3705 in JBCS) libxml2: out-of-bounds read (unfixed CVE-2016-4483 in JBCS) pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3) pcre: Invalid Unicode property lookup (8.41/7, 10.24/2) pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c) pcre: stack-based buffer overflow write in pcre32_copy_substring pcre: stack-based buffer overflow write in pcre32_copy_substring libxml2: Buffer overflow in function xmlSnprintfElementContent libxml2: Stack-based buffer overflow in function xmlSnprintfElementContent libxml2: Heap-based buffer over-read in function xmlDic…

 https://cve.radiocsirt.org/vuln/suse-su-2021:3652-1 SUSE-SU-2021:3652-1 — Security update for pcre 2026-10-03T21:13:48.018600+00:00

Security update for pcre

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7244 UBUNTU-CVE-2017-7244 2026-10-03T21:13:48.018621+00:00

Affected: Ubuntu:Pro:16.04:LTS: pcre3

The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.