https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T04:38:20.456828+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-137127 EUVD-2026-137127 2026-10-28T04:38:20.459517+00:00 EUVD-2026-137127 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5289 fkie_cve-2007-5289 2026-10-28T04:38:20.459550+00:00

HP Mercury Quality Center (QC) 9.2 and earlier, and possibly TestDirector, relies on cached client-side scripts to implement "workflow" and decisions about the "capability" of a user, which allows remote attackers to execute arbitrary code via crafted use of the Open Test Architecture (OTA) API, as demonstrated by modifying (1) common.tds, (2) defects.tds, (3) manrun.tds, (4) req.tds, (5) testlab.tds, or (6) testplan.tds in %tmp%\TD_80, and then setting the file's properties to read-only.

 https://cve.radiocsirt.org/vuln/ghsa-9wv3-hv7v-qxrg GHSA-9wv3-hv7v-qxrg 2026-10-28T04:38:20.459583+00:00

HP Mercury Quality Center (QC) 9.2 and earlier, and possibly TestDirector, relies on cached client-side scripts to implement "workflow" and decisions about the "capability" of a user, which allows remote attackers to execute arbitrary code via crafted use of the Open Test Architecture (OTA) API, as demonstrated by modifying (1) common.tds, (2) defects.tds, (3) manrun.tds, (4) req.tds, (5) testlab.tds, or (6) testplan.tds in %tmp%\TD_80, and then setting the file's properties to read-only.

 https://cve.radiocsirt.org/vuln/gsd-2007-5289 gsd-2007-5289 2026-10-28T04:38:20.459603+00:00 gsd-2007-5289