https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:30:55.832505+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-02406 cnvd-2018-02406 2026-10-02T16:30:55.936473+00:00 cnvd-2018-02406 https://cve.radiocsirt.org/vuln/euvd-2026-60729 EUVD-2026-60729 2026-10-02T16:30:55.936499+00:00 EUVD-2026-60729 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0486 fkie_cve-2018-0486 2026-10-02T16:30:55.936514+00:00

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD.

 https://cve.radiocsirt.org/vuln/ghsa-34v3-mf7p-7v76 GHSA-34v3-mf7p-7v76 2026-10-02T16:30:55.936539+00:00

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD.

 https://cve.radiocsirt.org/vuln/gsd-2018-0486 gsd-2018-0486 2026-10-02T16:30:55.936556+00:00 gsd-2018-0486 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11523-1 openSUSE-SU-2024:11523-1 — libxmltooling-devel-3.2.0-1.2 on GA media 2026-10-02T16:30:55.936568+00:00

libxmltooling-devel-3.2.0-1.2 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2018:0140-1 SUSE-SU-2018:0140-1 — Security update for xmltooling 2026-10-02T16:30:55.936587+00:00

Security update for xmltooling

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-0486 UBUNTU-CVE-2018-0486 2026-10-02T16:30:55.936602+00:00

Affected: Ubuntu:14.04:LTS: xmltooling, Ubuntu:16.04:LTS: xmltooling

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD.