https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:41:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-207684 EUVD-2026-207684 https://cve.radiocsirt.org/vuln/euvd-2026-207684 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12908 <p>Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI&#39;s were compared before normalization and canonicalization, potentially leading to over matching against the approved list. If this attack were successfully exploited, a remote attacker may be able to convince a user to visit a malicious web-page, or open a malicious document which could trigger the vulnerable handler, allowing them to execute arbitrary code on the user&#39;s machine. Delinea added additional validation that the downloaded installer&#39;s batch file was in the expected format.</p> <p>Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI&#39;s were compared before normalization and canonicalization, potentially leading to over matching against the approved list. If this attack were successfully exploited, a remote attacker may be able to convince a user to visit a malicious web-page, or open a malicious document which could trigger the vulnerable handler, allowing them to execute arbitrary code on the user&#39;s machine. Delinea added additional validation that the downloaded installer&#39;s batch file was in the expected format.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-12908 https://cve.radiocsirt.org/vuln/ghsa-qq79-x2qm-v335 <p>Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI&#39;s were compared before normalization and canonicalization, potentially leading to over matching against the approved list. If this attack were successfully exploited, a remote attacker may be able to convince a user to visit a malicious web-page, or open a malicious document which could trigger the vulnerable handler, allowing them to execute arbitrary code on the user&#39;s machine. Delinea added additional validation that the downloaded installer&#39;s batch file was in the expected format.</p> <p>Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI&#39;s were compared before normalization and canonicalization, potentially leading to over matching against the approved list. If this attack were successfully exploited, a remote attacker may be able to convince a user to visit a malicious web-page, or open a malicious document which could trigger the vulnerable handler, allowing them to execute arbitrary code on the user&#39;s machine. Delinea added additional validation that the downloaded installer&#39;s batch file was in the expected format.</p> https://cve.radiocsirt.org/vuln/ghsa-qq79-x2qm-v335