https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 05:50:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01734 bdu:2024-01734 https://cve.radiocsirt.org/vuln/bdu:2024-01734 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0104 certfr-2024-avi-0104 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0104 https://cve.radiocsirt.org/vuln/cleanstart-2026-la13761 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: clamav</p> <p>Multiple security vulnerabilities affect the clamav package. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: clamav</p> <p>Multiple security vulnerabilities affect the clamav package. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-la13761 https://cve.radiocsirt.org/vuln/cnvd-2024-12709 cnvd-2024-12709 https://cve.radiocsirt.org/vuln/cnvd-2024-12709 https://cve.radiocsirt.org/vuln/euvd-2026-259358 EUVD-2026-259358 https://cve.radiocsirt.org/vuln/euvd-2026-259358 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20328 <p>A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file name containing command-line sequences. When processed on a system using configuration options for the VirusEvent feature, the attacker could cause the application to execute arbitrary commands. ClamAV has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file name containing command-line sequences. When processed on a system using configuration options for the VirusEvent feature, the attacker could cause the application to execute arbitrary commands. ClamAV has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20328 https://cve.radiocsirt.org/vuln/ghsa-vhq6-cjc8-x8v9 <p>A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file name containing command-line sequences. When processed on a system using configuration options for the VirusEvent feature, the attacker could cause the application to execute arbitrary commands. ClamAV has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file name containing command-line sequences. When processed on a system using configuration options for the VirusEvent feature, the attacker could cause the application to execute arbitrary commands. ClamAV has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-vhq6-cjc8-x8v9 https://cve.radiocsirt.org/vuln/gsd-2024-20328 gsd-2024-20328 https://cve.radiocsirt.org/vuln/gsd-2024-20328 https://cve.radiocsirt.org/vuln/msrc_cve-2024-20328 msrc_CVE-2024-20328 https://cve.radiocsirt.org/vuln/msrc_cve-2024-20328 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-20328 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: clamav</p> <p>A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file name containing command-line sequences. When processed on a system using configuration options for the VirusEvent feature, the attacker could cause the application to execute arbitrary commands. ClamAV has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: clamav</p> <p>A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file name containing command-line sequences. When processed on a system using configuration options for the VirusEvent feature, the attacker could cause the application to execute arbitrary commands. ClamAV has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-20328 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0322 <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in ClamAV ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder beliebigen Code auszuführen.</p> <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in ClamAV ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0322