https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:01:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-8255 EUVD-2026-8255 https://cve.radiocsirt.org/vuln/euvd-2026-8255 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26438 <p>External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use (TOCTOU) weakness, involving the JDK DNS cache. Attackers that were timing DNS cache expiry correctly were able to inject configuration that would bypass existing network deny-lists. Attackers could exploit this weakness to discover the existence of restricted network infrastructure and service availability. Improvements were made to include deny-lists not only during the check of the provided connection data, but also during use. No publicly available exploits are known.</p> <p>External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use (TOCTOU) weakness, involving the JDK DNS cache. Attackers that were timing DNS cache expiry correctly were able to inject configuration that would bypass existing network deny-lists. Attackers could exploit this weakness to discover the existence of restricted network infrastructure and service availability. Improvements were made to include deny-lists not only during the check of the provided connection data, but also during use. No publicly available exploits are known.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26438 https://cve.radiocsirt.org/vuln/ghsa-cp3q-q6mx-w79j <p>External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use (TOCTOU) weakness, involving the JDK DNS cache. Attackers that were timing DNS cache expiry correctly were able to inject configuration that would bypass existing network deny-lists. Attackers could exploit this weakness to discover the existence of restricted network infrastructure and service availability. Improvements were made to include deny-lists not only during the check of the provided connection data, but also during use. No publicly available exploits are known.</p> <p>External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use (TOCTOU) weakness, involving the JDK DNS cache. Attackers that were timing DNS cache expiry correctly were able to inject configuration that would bypass existing network deny-lists. Attackers could exploit this weakness to discover the existence of restricted network infrastructure and service availability. Improvements were made to include deny-lists not only during the check of the provided connection data, but also during use. No publicly available exploits are known.</p> https://cve.radiocsirt.org/vuln/ghsa-cp3q-q6mx-w79j https://cve.radiocsirt.org/vuln/gsd-2023-26438 gsd-2023-26438 https://cve.radiocsirt.org/vuln/gsd-2023-26438 https://cve.radiocsirt.org/vuln/oxas-adv-2023-0003 OXAS-ADV-2023-0003 https://cve.radiocsirt.org/vuln/oxas-adv-2023-0003