https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:14:59 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/cnvd-2018-09687 cnvd-2018-09687 https://cve.radiocsirt.org/vuln/cnvd-2018-09687 https://cve.radiocsirt.org/vuln/euvd-2026-76220 EUVD-2026-76220 https://cve.radiocsirt.org/vuln/euvd-2026-76220 https://cve.radiocsirt.org/vuln/fkie_cve-2017-10140 <p>Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.</p> <p>Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-10140 https://cve.radiocsirt.org/vuln/ghsa-698c-frxg-8qf9 <p>Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.</p> <p>Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.</p> https://cve.radiocsirt.org/vuln/ghsa-698c-frxg-8qf9 https://cve.radiocsirt.org/vuln/gsd-2017-10140 gsd-2017-10140 https://cve.radiocsirt.org/vuln/gsd-2017-10140 https://cve.radiocsirt.org/vuln/rhsa-2019:0366 <p>libdb: Reads DB_CONFIG from the current working directory httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values httpd: &lt;FilesMatch&gt; bypass with a trailing newline in the file name openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications httpd: Out of bounds access after failure in reading the HTTP request httpd: Use-after-free on HTTP/2 stream shutdown httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause DoS httpd: Weak Digest auth nonce generation in mod_auth_digest httpd: mod_http2: Too much time allocated to workers, possibly leading to DoS mod_jk: connector path traversal due to mishandled HTTP requests in httpd httpd: DoS for HTTP/2 connections by continuous SETTINGS frames nghttp2: Null pointer dereference when too large ALTSVC frame is received</p> <p>libdb: Reads DB_CONFIG from the current working directory httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values httpd: &lt;FilesMatch&gt; bypass with a trailing newline in the file name openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications httpd: Out of bounds access after failure in reading the HTTP request httpd: Use-after-free on HTTP/2 stream shutdown httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause DoS httpd: Weak Digest auth nonce generation in mod_auth_digest httpd: mod_http2: Too much time allocated to workers, possibly leading to DoS mod_jk: connector path traversal due to mishandled HTTP requests in httpd httpd: DoS for HTTP/2 connections by continuous SETTINGS frames nghttp2: Null pointer dereference when too large ALTSVC frame is received</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0366 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-10140 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: db5.3, Ubuntu:16.04:LTS: db5.3, Ubuntu:18.04:LTS: db5.3</p> <p>Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: db5.3, Ubuntu:16.04:LTS: db5.3, Ubuntu:18.04:LTS: db5.3</p> <p>Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-10140 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0582 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in der Oracle Berkeley DB ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in der Oracle Berkeley DB ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0582