https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:25:52 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0101 certfr-2024-avi-0101 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0101 https://cve.radiocsirt.org/vuln/euvd-2026-159436 EUVD-2026-159436 https://cve.radiocsirt.org/vuln/euvd-2026-159436 https://cve.radiocsirt.org/vuln/fkie_cve-2023-43522 <p>Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.</p> <p>Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-43522 https://cve.radiocsirt.org/vuln/ghsa-xvvv-2v53-5hxv <p>Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.</p> <p>Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.</p> https://cve.radiocsirt.org/vuln/ghsa-xvvv-2v53-5hxv https://cve.radiocsirt.org/vuln/gsd-2023-43522 gsd-2023-43522 https://cve.radiocsirt.org/vuln/gsd-2023-43522 https://cve.radiocsirt.org/vuln/icsa-25-044-09 <p>Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability. A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a se…</p> <p>Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability. A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a se…</p> https://cve.radiocsirt.org/vuln/icsa-25-044-09 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0297 <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder seine Rechte zu erweitern.</p> <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder seine Rechte zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0297