https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:11:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-03801 bdu:2025-03801 https://cve.radiocsirt.org/vuln/bdu:2025-03801 https://cve.radiocsirt.org/vuln/euvd-2026-14895 EUVD-2026-14895 https://cve.radiocsirt.org/vuln/euvd-2026-14895 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26491 <p>An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The client will perform TLS certificate verification of the malicious domain name instead of the original XMPP service domain, allowing the attacker to take over control over the XMPP connection and to obtain user credentials and all communication content. This is similar to CVE-2022-24968.</p> <p>An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The client will perform TLS certificate verification of the malicious domain name instead of the original XMPP service domain, allowing the attacker to take over control over the XMPP connection and to obtain user credentials and all communication content. This is similar to CVE-2022-24968.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-26491 https://cve.radiocsirt.org/vuln/ghsa-4hw8-r3fw-2q2x <p>An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The client will perform TLS certificate verification of the malicious domain name instead of the original XMPP service domain, allowing the attacker to take over control over the XMPP connection and to obtain user credentials and all communication content. This is similar to CVE-2022-24968.</p> <p>An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The client will perform TLS certificate verification of the malicious domain name instead of the original XMPP service domain, allowing the attacker to take over control over the XMPP connection and to obtain user credentials and all communication content. This is similar to CVE-2022-24968.</p> https://cve.radiocsirt.org/vuln/ghsa-4hw8-r3fw-2q2x https://cve.radiocsirt.org/vuln/gsd-2022-26491 gsd-2022-26491 https://cve.radiocsirt.org/vuln/gsd-2022-26491 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12036-1 <p>finch-2.14.9-1.1 on GA media</p> <p>finch-2.14.9-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12036-1 https://cve.radiocsirt.org/vuln/suse-su-2022:1664-1 <p>Security update for pidgin</p> <p>Security update for pidgin</p> https://cve.radiocsirt.org/vuln/suse-su-2022:1664-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-26491 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: pidgin, Ubuntu:16.04:LTS: pidgin, Ubuntu:18.04:LTS: pidgin, Ubuntu:20.04:LTS: pidgin, Ubuntu:22.04:LTS: pidgin, Ubuntu:24.04:LTS: pidgin, Ubuntu:25.10: pidgin, Ubuntu:26.04:LTS: pidgin</p> <p>An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The client will perform TLS certificate verification of the malicious domain name instead of the original XMPP service domain, allowing the attacker to take over control over the XMPP connection and to obtain user credentials and all communication content. This is similar to CVE-2022-24968.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: pidgin, Ubuntu:16.04:LTS: pidgin, Ubuntu:18.04:LTS: pidgin, Ubuntu:20.04:LTS: pidgin, Ubuntu:22.04:LTS: pidgin, Ubuntu:24.04:LTS: pidgin, Ubuntu:25.10: pidgin, Ubuntu:26.04:LTS: pidgin</p> <p>An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The client will perform TLS certificate verification of the malicious domain name instead of the original XMPP service domain, allowing the attacker to take over control over the XMPP connection and to obtain user credentials and all communication content. This is similar to CVE-2022-24968.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-26491