https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:12:48 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-785 certfr-2022-avi-785 https://cve.radiocsirt.org/vuln/certfr-2022-avi-785 https://cve.radiocsirt.org/vuln/euvd-2026-26321 EUVD-2026-26321 https://cve.radiocsirt.org/vuln/euvd-2026-26321 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29418 <p>The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This (in some situations) allows attackers to bypass access control that is based on IP addresses. NOTE: this issue exists because of an incomplete fix for CVE-2021-28918.</p> <p>The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This (in some situations) allows attackers to bypass access control that is based on IP addresses. NOTE: this issue exists because of an incomplete fix for CVE-2021-28918.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-29418 https://cve.radiocsirt.org/vuln/ghsa-pch5-whg9-qr2r <p><strong>Affected:</strong> npm: netmask</p> <p>The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This (in some situations) allows attackers to bypass access control that is based on IP addresses. NOTE: this issue exists because of an incomplete fix for CVE-2021-28918.</p> <p><strong>Affected:</strong> npm: netmask</p> <p>The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This (in some situations) allows attackers to bypass access control that is based on IP addresses. NOTE: this issue exists because of an incomplete fix for CVE-2021-28918.</p> https://cve.radiocsirt.org/vuln/ghsa-pch5-whg9-qr2r https://cve.radiocsirt.org/vuln/gsd-2021-29418 gsd-2021-29418 https://cve.radiocsirt.org/vuln/gsd-2021-29418 https://cve.radiocsirt.org/vuln/rhsa-2021:1499 <p>nodejs-glob-parent: Regular expression denial of service nodejs-underscore: Arbitrary code execution via the template function nodejs-is-svg: ReDoS via malicious string nodejs-netmask: improper input validation of octal input data nodejs-netmask: incorrectly parses an IP address that has octal integer with invalid character</p> <p>nodejs-glob-parent: Regular expression denial of service nodejs-underscore: Arbitrary code execution via the template function nodejs-is-svg: ReDoS via malicious string nodejs-netmask: improper input validation of octal input data nodejs-netmask: incorrectly parses an IP address that has octal integer with invalid character</p> https://cve.radiocsirt.org/vuln/rhsa-2021:1499 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1354 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1354