https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:28:56 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-00716 bdu:2022-00716 https://cve.radiocsirt.org/vuln/bdu:2022-00716 https://cve.radiocsirt.org/vuln/bell-cve-2021-20271 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2021-20271 https://cve.radiocsirt.org/vuln/certfr-2021-avi-791 certfr-2021-avi-791 https://cve.radiocsirt.org/vuln/certfr-2021-avi-791 https://cve.radiocsirt.org/vuln/euvd-2026-21639 EUVD-2026-21639 https://cve.radiocsirt.org/vuln/euvd-2026-21639 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20271 <p>A flaw was found in RPM&#39;s signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.</p> <p>A flaw was found in RPM&#39;s signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-20271 https://cve.radiocsirt.org/vuln/ghsa-77pm-gxx7-5c5f <p>A flaw was found in RPM&#39;s signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.</p> <p>A flaw was found in RPM&#39;s signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.</p> https://cve.radiocsirt.org/vuln/ghsa-77pm-gxx7-5c5f https://cve.radiocsirt.org/vuln/gsd-2021-20271 gsd-2021-20271 https://cve.radiocsirt.org/vuln/gsd-2021-20271 https://cve.radiocsirt.org/vuln/msrc_cve-2021-20271 msrc_CVE-2021-20271 https://cve.radiocsirt.org/vuln/msrc_cve-2021-20271 https://cve.radiocsirt.org/vuln/oesa-2021-1163 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: rpm</p> <p>The RPM Package Manager (RPM) is a powerful package management system capability as below -building computer software from source into easily distributable packages -installing, updating and uninstalling packaged software -querying detailed information about the packaged software, whether installed or not -verifying integrity of packaged software and resulting software installation Security Fix(es): A flaw was found in RPM&amp;apos;s signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.(CVE-2021-20271)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: rpm</p> <p>The RPM Package Manager (RPM) is a powerful package management system capability as below -building computer software from source into easily distributable packages -installing, updating and uninstalling packaged software -querying detailed information about the packaged software, whether installed or not -verifying integrity of packaged software and resulting software installation Security Fix(es): A flaw was found in RPM&amp;apos;s signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.(CVE-2021-20271)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1163 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1366-1 <p>Security update for rpm</p> <p>Security update for rpm</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1366-1 https://cve.radiocsirt.org/vuln/rhba-2021:2854 <p>libwebp: heap-based buffer overflow in PutLE16() nss: TLS 1.3 CCS flood remote DoS Attack openldap: NULL pointer dereference for unauthenticated packet in slapd kernel: security bypass in certs/blacklist.c and certs/system_keyring.c jetty: local temporary directory hijacking vulnerability jetty: buffer not correctly recycled in Gzip Request inflation jetty: request containing multiple Accept headers with a large number of &#34;quality&#34; parameters may lead to DoS libwebp: heap-based buffer overflow in WebPDecode*Into functions libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c lz4: memory corruption due to an integer overflow bug caused by memmove argument libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms rpm: Signature checks bypass via corrupted rpm package jenkins-2-plugins/config-file-provider: Does not configure its XML parser to prevent XML external entity (XXE) attacks. jenkins-2-plugins/config-file-provider: Does not correctly perform permission checks in several HTTP endpoints. jenkins-2-plugins/config-file-provider: does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnera…</p> <p>libwebp: heap-based buffer overflow in PutLE16() nss: TLS 1.3 CCS flood remote DoS Attack openldap: NULL pointer dereference for unauthenticated packet in slapd kernel: security bypass in certs/blacklist.c and certs/system_keyring.c jetty: local temporary directory hijacking vulnerability jetty: buffer not correctly recycled in Gzip Request inflation jetty: request containing multiple Accept headers with a large number of &#34;quality&#34; parameters may lead to DoS libwebp: heap-based buffer overflow in WebPDecode*Into functions libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c lz4: memory corruption due to an integer overflow bug caused by memmove argument libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms rpm: Signature checks bypass via corrupted rpm package jenkins-2-plugins/config-file-provider: Does not configure its XML parser to prevent XML external entity (XXE) attacks. jenkins-2-plugins/config-file-provider: Does not correctly perform permission checks in several HTTP endpoints. jenkins-2-plugins/config-file-provider: does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnera…</p> https://cve.radiocsirt.org/vuln/rhba-2021:2854 https://cve.radiocsirt.org/vuln/suse-su-2021:2682-1 <p>Security update for rpm</p> <p>Security update for rpm</p> https://cve.radiocsirt.org/vuln/suse-su-2021:2682-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20271 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: rpm, Ubuntu:Pro:16.04:LTS: rpm, Ubuntu:Pro:18.04:LTS: rpm, Ubuntu:Pro:20.04:LTS: rpm</p> <p>A flaw was found in RPM&#39;s signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: rpm, Ubuntu:Pro:16.04:LTS: rpm, Ubuntu:Pro:18.04:LTS: rpm, Ubuntu:Pro:20.04:LTS: rpm</p> <p>A flaw was found in RPM&#39;s signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20271 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0676 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu verändern, seine Privilegien zu erweitern und Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu verändern, seine Privilegien zu erweitern und Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0676