https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:48:29 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1129 certfr-2026-avi-1129 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1129 https://cve.radiocsirt.org/vuln/cnvd-2017-10715 cnvd-2017-10715 https://cve.radiocsirt.org/vuln/cnvd-2017-10715 https://cve.radiocsirt.org/vuln/euvd-2026-262499 EUVD-2026-262499 https://cve.radiocsirt.org/vuln/euvd-2026-262499 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9023 <p>The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.</p> <p>The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9023 https://cve.radiocsirt.org/vuln/ghsa-3vpr-mhgf-fgjv <p>The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.</p> <p>The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.</p> https://cve.radiocsirt.org/vuln/ghsa-3vpr-mhgf-fgjv https://cve.radiocsirt.org/vuln/gsd-2017-9023 gsd-2017-9023 https://cve.radiocsirt.org/vuln/gsd-2017-9023 https://cve.radiocsirt.org/vuln/icsa-19-155-01 <p>A remote attacker can exploit a server &#39;s private key by sending carefully constructed UserIdentityTokens encrypted with the Basic128Rsa15 security policy. This could allow an attacker to decrypt passwords even if encrypted with another security policy such as Basic256Sha256. CVE-2018-7559 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L). An attacker with physical access to the device can manipulate SD card data, which could allow an attacker to bypass the authentication of the device. This device is designed for use in a protected industrial environment with restricted physical access.CVE-2019-10998 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). An attacker trying to connect to the device using a man-in-the-middle setup may crash the PLC service, resulting in a denial of service condition. The device must then be rebooted, or the PLC service must be restarted manually via Linux shell.CVE-2019-10997 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly ha…</p> <p>A remote attacker can exploit a server &#39;s private key by sending carefully constructed UserIdentityTokens encrypted with the Basic128Rsa15 security policy. This could allow an attacker to decrypt passwords even if encrypted with another security policy such as Basic256Sha256. CVE-2018-7559 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L). An attacker with physical access to the device can manipulate SD card data, which could allow an attacker to bypass the authentication of the device. This device is designed for use in a protected industrial environment with restricted physical access.CVE-2019-10998 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). An attacker trying to connect to the device using a man-in-the-middle setup may crash the PLC service, resulting in a denial of service condition. The device must then be rebooted, or the PLC service must be restarted manually via Linux shell.CVE-2019-10997 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly ha…</p> https://cve.radiocsirt.org/vuln/icsa-19-155-01 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11411-1 <p>strongswan-5.9.0-1.9 on GA media</p> <p>strongswan-5.9.0-1.9 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11411-1 https://cve.radiocsirt.org/vuln/suse-su-2017:1471-1 <p>Security update for strongswan</p> <p>Security update for strongswan</p> https://cve.radiocsirt.org/vuln/suse-su-2017:1471-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9023 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: strongswan, Ubuntu:16.04:LTS: strongswan</p> <p>The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: strongswan, Ubuntu:16.04:LTS: strongswan</p> <p>The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9023 https://cve.radiocsirt.org/vuln/vde-2019-009 <p>Multiple vulnerabilities have been identified in PHOENIX CONTACT AXC F 2152 with firmware versions 1.x</p> <p>Multiple vulnerabilities have been identified in PHOENIX CONTACT AXC F 2152 with firmware versions 1.x</p> https://cve.radiocsirt.org/vuln/vde-2019-009 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2085 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in strongSwan ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in strongSwan ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2085