https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:51:54.017453+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2014-00327 bdu:2014-00327 2026-10-08T19:51:54.029928+00:00 bdu:2014-00327 https://cve.radiocsirt.org/vuln/certa-2009-avi-017 certa-2009-avi-017 — Deux vulnérabilités de type « injection de code indirecte » ont été identifiées dans le serveur HTTP du système Cisco I… 2026-10-08T19:51:54.029967+00:00 certa-2009-avi-017 https://cve.radiocsirt.org/vuln/euvd-2026-128865 EUVD-2026-128865 2026-10-08T19:51:54.029987+00:00 EUVD-2026-128865 https://cve.radiocsirt.org/vuln/fkie_cve-2008-3821 fkie_cve-2008-3821 2026-10-08T19:51:54.029999+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.

 https://cve.radiocsirt.org/vuln/ghsa-xrr6-c8rc-c2wp GHSA-xrr6-c8rc-c2wp 2026-10-08T19:51:54.030028+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.

 https://cve.radiocsirt.org/vuln/gsd-2008-3821 gsd-2008-3821 2026-10-08T19:51:54.030044+00:00 gsd-2008-3821 https://cve.radiocsirt.org/vuln/jvndb-2009-000006 jvndb-2009-000006 2026-10-08T19:51:54.030054+00:00

The web-based interface implemented in Cisco IOS is vulnerable to cross-site scripting. Some versions of the Cisco IOS provide a web-based interface to configure the device. This web-based interface contains a cross-site scripting vulnerability. A wide range of versions are affected. If the web-based interface is disabled, it is not affected. Some versions of the Cisco IOS have the web-based interface enabled by default. For more information, refer to the information provided by Cisco. NOBUHIRO TSUJI of NTT DATA SECURITY CORPORATION reported this vulnerability to IPA. JPCERT/CC coordinated with the vendor under Information Security Early Warning Partnership.