https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:26:35 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-87044 cnvd-2021-87044 https://cve.radiocsirt.org/vuln/cnvd-2021-87044 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41874 <p>Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.</p> <p>Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-41874 https://cve.radiocsirt.org/vuln/ghsa-g8gr-9g9f-c52h <p>An unauthorized access vulnerabiitly exists in all versions of Portainer, which could let a malicious user obtain sensitive information.</p> <p>An unauthorized access vulnerabiitly exists in all versions of Portainer, which could let a malicious user obtain sensitive information.</p> https://cve.radiocsirt.org/vuln/ghsa-g8gr-9g9f-c52h https://cve.radiocsirt.org/vuln/gsd-2021-41874 gsd-2021-41874 https://cve.radiocsirt.org/vuln/gsd-2021-41874 https://cve.radiocsirt.org/vuln/sca-2025-0009 <p>The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009. A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact. The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the remote server to overwrite arbitrary files in the client&#39;s download directory by creating a crafted subdirectory anywhere on the remote server. The victim must use the command scp -rp to download a file hierarchy containing, anywhere inside, this crafted subdirectory. NOTE: the vendor points out that &#34;this attack can achieve no more than a hostile peer is already able to achieve within the scp protocol&#34; and &#34;utimes does not fail under normal circumstances. An unauthorized access vulnerabiitly exists in all versions of Portainer, which could let a malicious user obtain sensitive information. NOTE: Portainer has received no detail of this CVE report. There is also no response after multiple attempts of contacting the original source. In ISC DHCP 4.1-ESV-R…</p> <p>The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009. A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact. The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the remote server to overwrite arbitrary files in the client&#39;s download directory by creating a crafted subdirectory anywhere on the remote server. The victim must use the command scp -rp to download a file hierarchy containing, anywhere inside, this crafted subdirectory. NOTE: the vendor points out that &#34;this attack can achieve no more than a hostile peer is already able to achieve within the scp protocol&#34; and &#34;utimes does not fail under normal circumstances. An unauthorized access vulnerabiitly exists in all versions of Portainer, which could let a malicious user obtain sensitive information. NOTE: Portainer has received no detail of this CVE report. There is also no response after multiple attempts of contacting the original source. In ISC DHCP 4.1-ESV-R…</p> https://cve.radiocsirt.org/vuln/sca-2025-0009