https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:11:03 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0733 certfr-2024-avi-0733 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0733 https://cve.radiocsirt.org/vuln/euvd-2026-160979 EUVD-2026-160979 https://cve.radiocsirt.org/vuln/euvd-2026-160979 https://cve.radiocsirt.org/vuln/fkie_cve-2024-33016 <p>memory corruption when an invalid firehose patch command is invoked.</p> <p>memory corruption when an invalid firehose patch command is invoked.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-33016 https://cve.radiocsirt.org/vuln/ghsa-3m5m-x34p-6vq4 <p>memory corruption when an invalid firehose patch command is invoked.</p> <p>memory corruption when an invalid firehose patch command is invoked.</p> https://cve.radiocsirt.org/vuln/ghsa-3m5m-x34p-6vq4 https://cve.radiocsirt.org/vuln/gsd-2024-33016 gsd-2024-33016 https://cve.radiocsirt.org/vuln/gsd-2024-33016 https://cve.radiocsirt.org/vuln/icsa-25-044-09 <p>Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability. A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a se…</p> <p>Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability. A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a se…</p> https://cve.radiocsirt.org/vuln/icsa-25-044-09 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2045 <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2045