https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:21:27.577674+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-105670 EUVD-2026-105670 2026-10-03T10:21:27.651520+00:00 EUVD-2026-105670 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1823 fkie_cve-2013-1823 2026-10-03T10:21:27.651563+00:00

Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.

 https://cve.radiocsirt.org/vuln/ghsa-4365-vm8j-8w63 GHSA-4365-vm8j-8w63 2026-10-03T10:21:27.651598+00:00

Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.

 https://cve.radiocsirt.org/vuln/gsd-2013-1823 gsd-2013-1823 2026-10-03T10:21:27.651616+00:00 gsd-2013-1823 https://cve.radiocsirt.org/vuln/rhsa-2013:0686 RHSA-2013:0686 — Red Hat Security Advisory: Subscription Asset Manager 1.2.1 update 2026-10-03T10:21:27.651628+00:00

Candlepin: bootstrap RPM deploys CA certificate file with mode 666 Candlepin: Re-enable manifest signature checking rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template rubygem-rack: Timing attack in cookie sessions rubygem-json: Denial of Service and SQL Injection rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected Katello: Notifications page Username XSS