<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-15T10:21:37.089940+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2025-12486</id>
    <title>bdu:2025-12486</title>
    <updated>2026-10-15T10:21:37.096082+00:00</updated>
    <content>bdu:2025-12486</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2025-12486"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-221842</id>
    <title>EUVD-2026-221842</title>
    <updated>2026-10-15T10:21:37.096112+00:00</updated>
    <content>EUVD-2026-221842</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-221842"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2023-1055</id>
    <title>fkie_cve-2023-1055</title>
    <updated>2026-10-15T10:21:37.096125+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2023-1055"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-w8wv-xqxw-7vgx</id>
    <title>GHSA-w8wv-xqxw-7vgx</title>
    <updated>2026-10-15T10:21:37.096152+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-w8wv-xqxw-7vgx"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2023-1055</id>
    <title>gsd-2023-1055</title>
    <updated>2026-10-15T10:21:37.096169+00:00</updated>
    <content>gsd-2023-1055</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2023-1055"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhsa-2023:3489</id>
    <title>RHSA-2023:3489 — Red Hat Security Advisory: redhat-ds:12 security, bug fix, and enhancement update</title>
    <updated>2026-10-15T10:21:37.096179+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>RHDS: LDAP browser tries to decode userPassword instead of userCertificate attribute</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhsa-2023:3489"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1055</id>
    <title>UBUNTU-CVE-2023-1055</title>
    <updated>2026-10-15T10:21:37.096196+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base</p>
<p>A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1055"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1382</id>
    <title>WID-SEC-W-2023-1382 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Offenlegung von Informationen</title>
    <updated>2026-10-15T10:21:37.096224+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1382"/>
  </entry>
</feed>
