https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:11:44 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-547 certfr-2022-avi-547 https://cve.radiocsirt.org/vuln/certfr-2022-avi-547 https://cve.radiocsirt.org/vuln/cnvd-2022-45224 cnvd-2022-45224 https://cve.radiocsirt.org/vuln/cnvd-2022-45224 https://cve.radiocsirt.org/vuln/euvd-2026-17249 EUVD-2026-17249 https://cve.radiocsirt.org/vuln/euvd-2026-17249 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32256 <p>A vulnerability has been identified in SINEMA Remote Connect Server (All versions &lt; V3.1). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to low privileged users accessing privileged information.</p> <p>A vulnerability has been identified in SINEMA Remote Connect Server (All versions &lt; V3.1). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to low privileged users accessing privileged information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-32256 https://cve.radiocsirt.org/vuln/ghsa-h6fj-5j3m-pjgv <p>A vulnerability has been identified in SINEMA Remote Connect Server (All versions &lt; V3.1). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to low privileged users accessing privileged information.</p> <p>A vulnerability has been identified in SINEMA Remote Connect Server (All versions &lt; V3.1). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to low privileged users accessing privileged information.</p> https://cve.radiocsirt.org/vuln/ghsa-h6fj-5j3m-pjgv https://cve.radiocsirt.org/vuln/gsd-2022-32256 gsd-2022-32256 https://cve.radiocsirt.org/vuln/gsd-2022-32256 https://cve.radiocsirt.org/vuln/icsa-22-167-17 <p>libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse, if one of them matches the setup. Due to errors in the logic, the config matching function did not take &#39;issuercert&#39; into account and it compared the involved paths *case insensitively*, which could lead to libcurl reusing wrong connections. File paths are, or can be, case sensitive on many systems but not all, and can even vary depending on used file systems. The comparison also didn&#39;t include the &#39;issuer cert&#39; which a transfer can set to qualify how to verify the server certificate. curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl. This rarely used option is used to send variable=content pairs to TELNET servers. Due to flaw in the option parser for sending `NEW_ENV` variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server. Therefore potentially revealing sensitive internal information to the server using a clear-text network protocol. This could happen because curl did not call and use sscanf() correctly when parsing the string provided by the application. In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory). In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize. addBinding in xmlparse.c in Exp…</p> <p>libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse, if one of them matches the setup. Due to errors in the logic, the config matching function did not take &#39;issuercert&#39; into account and it compared the involved paths *case insensitively*, which could lead to libcurl reusing wrong connections. File paths are, or can be, case sensitive on many systems but not all, and can even vary depending on used file systems. The comparison also didn&#39;t include the &#39;issuer cert&#39; which a transfer can set to qualify how to verify the server certificate. curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl. This rarely used option is used to send variable=content pairs to TELNET servers. Due to flaw in the option parser for sending `NEW_ENV` variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server. Therefore potentially revealing sensitive internal information to the server using a clear-text network protocol. This could happen because curl did not call and use sscanf() correctly when parsing the string provided by the application. In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory). In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize. addBinding in xmlparse.c in Exp…</p> https://cve.radiocsirt.org/vuln/icsa-22-167-17