https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T05:51:15.594373+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01734 bdu:2024-01734 2026-10-13T05:51:15.603125+00:00 bdu:2024-01734 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0104 certfr-2024-avi-0104 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits ClamAV</span>. Elles permettent… 2026-10-13T05:51:15.603155+00:00 certfr-2024-avi-0104 https://cve.radiocsirt.org/vuln/cleanstart-2026-la13761 Withdrawn: CLEANSTART-2026-LA13761 — vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denia… 2026-10-13T05:51:15.603173+00:00

Withdrawn by the publisher.

Affected: CleanStart: clamav

Multiple security vulnerabilities affect the clamav package. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2024-12709 cnvd-2024-12709 2026-10-13T05:51:15.603202+00:00 cnvd-2024-12709 https://cve.radiocsirt.org/vuln/euvd-2026-259358 EUVD-2026-259358 2026-10-13T05:51:15.603215+00:00 EUVD-2026-259358 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20328 fkie_cve-2024-20328 2026-10-13T05:51:15.603225+00:00

A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file name containing command-line sequences. When processed on a system using configuration options for the VirusEvent feature, the attacker could cause the application to execute arbitrary commands. ClamAV has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-vhq6-cjc8-x8v9 GHSA-vhq6-cjc8-x8v9 2026-10-13T05:51:15.603246+00:00

A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file name containing command-line sequences. When processed on a system using configuration options for the VirusEvent feature, the attacker could cause the application to execute arbitrary commands. ClamAV has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2024-20328 gsd-2024-20328 2026-10-13T05:51:15.603262+00:00 gsd-2024-20328 https://cve.radiocsirt.org/vuln/msrc_cve-2024-20328 msrc_CVE-2024-20328 — ClamAV VirusEvent File Processing Command Injection Vulnerability 2026-10-13T05:51:15.603271+00:00 msrc_CVE-2024-20328 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-20328 UBUNTU-CVE-2024-20328 2026-10-13T05:51:15.603284+00:00

Affected: Ubuntu:24.04:LTS: clamav

A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file name containing command-line sequences. When processed on a system using configuration options for the VirusEvent feature, the attacker could cause the application to execute arbitrary commands. ClamAV has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0322 WID-SEC-W-2024-0322 — ClamAV: Mehrere Schwachstellen 2026-10-13T05:51:15.603303+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in ClamAV ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder beliebigen Code auszuführen.