https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 17:23:32 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-13371 bdu:2025-13371 https://cve.radiocsirt.org/vuln/bdu:2025-13371 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0158 certfr-2025-avi-0158 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0158 https://cve.radiocsirt.org/vuln/cnvd-2025-09230 cnvd-2025-09230 https://cve.radiocsirt.org/vuln/cnvd-2025-09230 https://cve.radiocsirt.org/vuln/euvd-2026-214252 EUVD-2026-214252 https://cve.radiocsirt.org/vuln/euvd-2026-214252 https://cve.radiocsirt.org/vuln/fkie_cve-2025-0374 <p>When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts. This version does not preserve the mode of the input file, and is world-readable. This applies to files that would normally have restricted visibility, such as /etc/master.passwd.</p> <p>An unprivileged local user may be able to read encrypted root and user passwords from the temporary master.passwd file created in /var/db/etcupdate/conflicts. This is possible only when conflicts within the password file arise during an update, and the unprotected file is deleted when conflicts are resolved.</p> <p>When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts. This version does not preserve the mode of the input file, and is world-readable. This applies to files that would normally have restricted visibility, such as /etc/master.passwd.</p> <p>An unprivileged local user may be able to read encrypted root and user passwords from the temporary master.passwd file created in /var/db/etcupdate/conflicts. This is possible only when conflicts within the password file arise during an update, and the unprotected file is deleted when conflicts are resolved.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-0374 https://cve.radiocsirt.org/vuln/ghsa-2ffg-9hw7-35q4 <p>When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts. This version does not preserve the mode of the input file, and is world-readable. This applies to files that would normally have restricted visibility, such as /etc/master.passwd.</p> <p>An unprivileged local user may be able to read encrypted root and user passwords from the temporary master.passwd file created in /var/db/etcupdate/conflicts. This is possible only when conflicts within the password file arise during an update, and the unprotected file is deleted when conflicts are resolved.</p> <p>When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts. This version does not preserve the mode of the input file, and is world-readable. This applies to files that would normally have restricted visibility, such as /etc/master.passwd.</p> <p>An unprivileged local user may be able to read encrypted root and user passwords from the temporary master.passwd file created in /var/db/etcupdate/conflicts. This is possible only when conflicts within the password file arise during an update, and the unprotected file is deleted when conflicts are resolved.</p> https://cve.radiocsirt.org/vuln/ghsa-2ffg-9hw7-35q4 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0224 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im FreeBSD Project FreeBSD OS ausnutzen, um eine Denial-of-Service-Attacke durchzuführen oder Informationen auszuspähen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im FreeBSD Project FreeBSD OS ausnutzen, um eine Denial-of-Service-Attacke durchzuführen oder Informationen auszuspähen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0224