https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:18:47 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0754 certfr-2024-avi-0754 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0754 https://cve.radiocsirt.org/vuln/euvd-2026-106849 EUVD-2026-106849 https://cve.radiocsirt.org/vuln/euvd-2026-106849 https://cve.radiocsirt.org/vuln/fkie_cve-2013-3587 <p>The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for man-in-the-middle attackers to obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a &#34;BREACH&#34; attack, a different issue than CVE-2012-4929.</p> <p>The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for man-in-the-middle attackers to obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a &#34;BREACH&#34; attack, a different issue than CVE-2012-4929.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-3587 https://cve.radiocsirt.org/vuln/ghsa-hh3m-fgxm-fq25 <p>The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for man-in-the-middle attackers to obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a &amp;quot;BREACH&amp;quot; attack, a different issue than CVE-2012-4929.</p> <p>The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for man-in-the-middle attackers to obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a &amp;quot;BREACH&amp;quot; attack, a different issue than CVE-2012-4929.</p> https://cve.radiocsirt.org/vuln/ghsa-hh3m-fgxm-fq25 https://cve.radiocsirt.org/vuln/gsd-2013-3587 gsd-2013-3587 https://cve.radiocsirt.org/vuln/gsd-2013-3587 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2086 <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu erzeugen oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu erzeugen oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2086