https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:30:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06599 bdu:2025-06599 https://cve.radiocsirt.org/vuln/bdu:2025-06599 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1001 certfr-2022-avi-1001 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1001 https://cve.radiocsirt.org/vuln/euvd-2026-215888 EUVD-2026-215888 https://cve.radiocsirt.org/vuln/euvd-2026-215888 https://cve.radiocsirt.org/vuln/fkie_cve-2002-20001 <p>The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.</p> <p>The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2002-20001 https://cve.radiocsirt.org/vuln/ghsa-jx4r-qc68-xjr5 <p>The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.</p> <p>The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.</p> https://cve.radiocsirt.org/vuln/ghsa-jx4r-qc68-xjr5 https://cve.radiocsirt.org/vuln/gsd-2002-20001 gsd-2002-20001 https://cve.radiocsirt.org/vuln/gsd-2002-20001 https://cve.radiocsirt.org/vuln/icsa-22-314-10 <p>The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE. (ATLWL-266) A buffer overflow vulnerability in an underlying service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI UDP port (8211). (ATLWL-253) A buffer overflow vulnerability in an underlying service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI UDP port (8211). (ATLWL-254) A buffer overflow vulnerability in an underlying service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI UDP port (8211). (ATLWL-299) A buffer overflow vulnerability in an underlying service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI UDP port (8211). (ATLWL-300) A buffer overflow vulnerability in an underlying service could lead to unauthenticated remote code execution by sending spec…</p> <p>The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE. (ATLWL-266) A buffer overflow vulnerability in an underlying service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI UDP port (8211). (ATLWL-253) A buffer overflow vulnerability in an underlying service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI UDP port (8211). (ATLWL-254) A buffer overflow vulnerability in an underlying service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI UDP port (8211). (ATLWL-299) A buffer overflow vulnerability in an underlying service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI UDP port (8211). (ATLWL-300) A buffer overflow vulnerability in an underlying service could lead to unauthenticated remote code execution by sending spec…</p> https://cve.radiocsirt.org/vuln/icsa-22-314-10 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11905-1 <p>libopenssl-1_1-devel-1.1.1m-4.1 on GA media</p> <p>libopenssl-1_1-devel-1.1.1m-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11905-1 https://cve.radiocsirt.org/vuln/vde-2023-001 <p>A new LTS Firmware release fixes known vulnerabilities in used open-source libraries. In addition, the following improvements have been implemented: HMI - Hardening against DoS attacks. - Hardening against memory leak problems in case of network attacks. WBM - Umlauts in the password of the &#39;User Manager&#39; were not handled correctly. The password rule for upper and lower case was not followed. This could lead to unintentionally weaker passwords.- Hardening of WBM against Cross-Site-Scripting. User Manager - In security notifications &#39;SecurityToken&#39; was always displayed as &#39;0000000&#39; when creating or modifying users.- Hardening of Trust and Identity Stores.</p> <p>A new LTS Firmware release fixes known vulnerabilities in used open-source libraries. In addition, the following improvements have been implemented: HMI - Hardening against DoS attacks. - Hardening against memory leak problems in case of network attacks. WBM - Umlauts in the password of the &#39;User Manager&#39; were not handled correctly. The password rule for upper and lower case was not followed. This could lead to unintentionally weaker passwords.- Hardening of WBM against Cross-Site-Scripting. User Manager - In security notifications &#39;SecurityToken&#39; was always displayed as &#39;0000000&#39; when creating or modifying users.- Hardening of Trust and Identity Stores.</p> https://cve.radiocsirt.org/vuln/vde-2023-001 https://cve.radiocsirt.org/vuln/vde-2024-017 <p>Critical vulnerabilities have been discovered in the product due to outdated software components.The impact of the vulnerabilities on the affected device may result in</p> <p>Denial of service Bypassing of authentication Information disclosure</p> <p>Critical vulnerabilities have been discovered in the product due to outdated software components.The impact of the vulnerabilities on the affected device may result in</p> <p>Denial of service Bypassing of authentication Information disclosure</p> https://cve.radiocsirt.org/vuln/vde-2024-017 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2251 <p>Ein Angreifer kann mehrere Schwachstellen in Aruba ClearPass Policy Manager ausnutzen, um SQL Injection- und Cross Site Scripting Angriffe durchzuführen, Code zur Ausführung zu bringen, seine Rechte zu erweitern oder Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Aruba ClearPass Policy Manager ausnutzen, um SQL Injection- und Cross Site Scripting Angriffe durchzuführen, Code zur Ausführung zu bringen, seine Rechte zu erweitern oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2251