https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:30:41 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0220 certfr-2023-avi-0220 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0220 https://cve.radiocsirt.org/vuln/euvd-2026-13786 EUVD-2026-13786 https://cve.radiocsirt.org/vuln/euvd-2026-13786 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23395 <p>jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).</p> <p>jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-23395 https://cve.radiocsirt.org/vuln/ghsa-gcx5-3p5f-f8vp <p><strong>Affected:</strong> NuGet: jquery.cookie</p> <p>jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).</p> <p><strong>Affected:</strong> NuGet: jquery.cookie</p> <p>jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).</p> https://cve.radiocsirt.org/vuln/ghsa-gcx5-3p5f-f8vp https://cve.radiocsirt.org/vuln/gsd-2022-23395 gsd-2022-23395 https://cve.radiocsirt.org/vuln/gsd-2022-23395 https://cve.radiocsirt.org/vuln/icsa-23-080-07 <p>stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against. zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. A NULL pointer dereference in Busybox&#39;s man applet leads to denial of service when a section name is supplied but no page argument is given. An out-of-bounds heap read in Busybox&#39;s unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that internally supports LZMA compression. An incorrect handling of a special element in Busybox&#39;s ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input. A NULL pointer dereference in Busybox&#39;s hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under ver…</p> <p>stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against. zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. A NULL pointer dereference in Busybox&#39;s man applet leads to denial of service when a section name is supplied but no page argument is given. An out-of-bounds heap read in Busybox&#39;s unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that internally supports LZMA compression. An incorrect handling of a special element in Busybox&#39;s ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input. A NULL pointer dereference in Busybox&#39;s hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under ver…</p> https://cve.radiocsirt.org/vuln/icsa-23-080-07 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1614 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1614