https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T07:53:31.005803+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-07129 bdu:2025-07129 2026-10-27T07:53:31.009051+00:00 bdu:2025-07129 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0938 certfr-2025-avi-0938 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-27T07:53:31.009087+00:00 certfr-2025-avi-0938 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2724 fkie_cve-2025-2724 2026-10-27T07:53:31.009106+00:00

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the only way to get an object of type GsfMSOleSortingKey is via gsf_msole_sorting_key_new which adds that extra zero element".

 https://cve.radiocsirt.org/vuln/ghsa-qfqf-rmhj-ffx6 GHSA-qfqf-rmhj-ffx6 2026-10-27T07:53:31.009135+00:00

A vulnerability classified as problematic has been found in GNOME libgsf up to 1.14.53. Affected is the function sorting_key_copy. The manipulation of the argument Name leads to out-of-bounds read. It is possible to launch the attack on the local host. The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-2724 Withdrawn: UBUNTU-CVE-2025-2724 2026-10-27T07:53:31.009153+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: libgsf, Ubuntu:Pro:16.04:LTS: libgsf, Ubuntu:Pro:18.04:LTS: libgsf, Ubuntu:20.04:LTS: libgsf, Ubuntu:22.04:LTS: libgsf, Ubuntu:24.10: libgsf, Ubuntu:24.04:LTS: libgsf, Ubuntu:25.04: libgsf

A vulnerability classified as problematic has been found in GNOME libgsf up to 1.14.53. Affected is the function sorting_key_copy. The manipulation of the argument Name leads to out-of-bounds read. It is possible to launch the attack on the local host. The vendor was contacted early about this disclosure but did not respond in any way.