https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:30:25 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/euvd-2026-61052 EUVD-2026-61052 https://cve.radiocsirt.org/vuln/euvd-2026-61052 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1098 <p>A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set up a website that tries to send a POST request to the etcd server and modify a key. Adding a key is done with PUT so it is theoretically safe (can&#39;t PUT from an HTML form or such) but POST allows creating in-order keys that an attacker can send.</p> <p>A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set up a website that tries to send a POST request to the etcd server and modify a key. Adding a key is done with PUT so it is theoretically safe (can&#39;t PUT from an HTML form or such) but POST allows creating in-order keys that an attacker can send.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1098 https://cve.radiocsirt.org/vuln/ghsa-5gjm-fj42-x983 <p><strong>Affected:</strong> Go: go.etcd.io/etcd/v3</p> <p>A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set up a website that tries to send a POST request to the etcd server and modify a key. Adding a key is done with PUT so it is theoretically safe (can&#39;t PUT from an HTML form or such) but POST allows creating in-order keys that an attacker can send.</p> <p><strong>Affected:</strong> Go: go.etcd.io/etcd/v3</p> <p>A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set up a website that tries to send a POST request to the etcd server and modify a key. Adding a key is done with PUT so it is theoretically safe (can&#39;t PUT from an HTML form or such) but POST allows creating in-order keys that an attacker can send.</p> https://cve.radiocsirt.org/vuln/ghsa-5gjm-fj42-x983 https://cve.radiocsirt.org/vuln/gsd-2018-1098 gsd-2018-1098 https://cve.radiocsirt.org/vuln/gsd-2018-1098 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1098 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: etcd, Ubuntu:Pro:18.04:LTS: etcd, Ubuntu:Pro:20.04:LTS: etcd, Ubuntu:Pro:22.04:LTS: etcd, Ubuntu:Pro:24.04:LTS: etcd, Ubuntu:25.10: etcd, Ubuntu:Pro:26.04:LTS: etcd</p> <p>A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set up a website that tries to send a POST request to the etcd server and modify a key. Adding a key is done with PUT so it is theoretically safe (can&#39;t PUT from an HTML form or such) but POST allows creating in-order keys that an attacker can send.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: etcd, Ubuntu:Pro:18.04:LTS: etcd, Ubuntu:Pro:20.04:LTS: etcd, Ubuntu:Pro:22.04:LTS: etcd, Ubuntu:Pro:24.04:LTS: etcd, Ubuntu:25.10: etcd, Ubuntu:Pro:26.04:LTS: etcd</p> <p>A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set up a website that tries to send a POST request to the etcd server and modify a key. Adding a key is done with PUT so it is theoretically safe (can&#39;t PUT from an HTML form or such) but POST allows creating in-order keys that an attacker can send.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1098 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510