https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:11:44 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05839 bdu:2023-05839 https://cve.radiocsirt.org/vuln/bdu:2023-05839 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/cleanstart-2026-ea18639 <p><strong>Affected:</strong> CleanStart: cfssl</p> <p>Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: cfssl</p> <p>Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ea18639 https://cve.radiocsirt.org/vuln/euvd-2026-32547 EUVD-2026-32547 https://cve.radiocsirt.org/vuln/euvd-2026-32547 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43565 <p>The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.</p> <p>The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-43565 https://cve.radiocsirt.org/vuln/ghsa-gwc9-m7rh-j2ww <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an unauthenticated attacker to panic an SSH server. When using AES-GCM or ChaCha20Poly1305, consuming a malformed packet which contains an empty plaintext causes a panic.</p> <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an unauthenticated attacker to panic an SSH server. When using AES-GCM or ChaCha20Poly1305, consuming a malformed packet which contains an empty plaintext causes a panic.</p> https://cve.radiocsirt.org/vuln/ghsa-gwc9-m7rh-j2ww https://cve.radiocsirt.org/vuln/gsd-2021-43565 gsd-2021-43565 https://cve.radiocsirt.org/vuln/gsd-2021-43565 https://cve.radiocsirt.org/vuln/msrc_cve-2021-43565 msrc_CVE-2021-43565 https://cve.radiocsirt.org/vuln/msrc_cve-2021-43565 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0040-1 <p>Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container</p> <p>Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container</p> https://cve.radiocsirt.org/vuln/opensuse-su-2022:0040-1 https://cve.radiocsirt.org/vuln/rhsa-2022:0735 <p>nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes nodejs-json-schema: Prototype pollution vulnerability fastify-static: open redirect via an URL with double slash followed by a domain moby: `docker cp` allows unexpected chmod of host file moby: data directory contains subdirectories with insufficiently restricted permissions, which could lead to directory traversal golang.org/x/crypto: empty plaintext packet causes panic containerd: Unprivileged pod may bind mount any privileged regular file on disk minio: user privilege escalation in AddUser() admin API node-fetch: exposure of sensitive information to an unauthorized actor nats-server: misusing the &#34;dynamically provisioned sandbox accounts&#34; feature authenticated user can obtain the privileges of the System account</p> <p>nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes nodejs-json-schema: Prototype pollution vulnerability fastify-static: open redirect via an URL with double slash followed by a domain moby: `docker cp` allows unexpected chmod of host file moby: data directory contains subdirectories with insufficiently restricted permissions, which could lead to directory traversal golang.org/x/crypto: empty plaintext packet causes panic containerd: Unprivileged pod may bind mount any privileged regular file on disk minio: user privilege escalation in AddUser() admin API node-fetch: exposure of sensitive information to an unauthorized actor nats-server: misusing the &#34;dynamically provisioned sandbox accounts&#34; feature authenticated user can obtain the privileges of the System account</p> https://cve.radiocsirt.org/vuln/rhsa-2022:0735 https://cve.radiocsirt.org/vuln/suse-su-2022:0040-1 <p>Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container</p> <p>Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container</p> https://cve.radiocsirt.org/vuln/suse-su-2022:0040-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-43565 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: golang-go.crypto, Ubuntu:Pro:18.04:LTS: golang-go.crypto, Ubuntu:Pro:20.04:LTS: golang-go.crypto, Ubuntu:Pro:22.04:LTS: golang-go.crypto, Ubuntu:Pro:24.04:LTS: golang-go.crypto, Ubuntu:25.10: golang-go.crypto, Ubuntu:Pro:26.04:LTS: golang-go.crypto</p> <p>The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: golang-go.crypto, Ubuntu:Pro:18.04:LTS: golang-go.crypto, Ubuntu:Pro:20.04:LTS: golang-go.crypto, Ubuntu:Pro:22.04:LTS: golang-go.crypto, Ubuntu:Pro:24.04:LTS: golang-go.crypto, Ubuntu:25.10: golang-go.crypto, Ubuntu:Pro:26.04:LTS: golang-go.crypto</p> <p>The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-43565 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0235 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Advanced Cluster Management ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Advanced Cluster Management ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0235