https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:41:30.690857+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-08120 cnvd-2020-08120 2026-10-02T17:41:30.778366+00:00 cnvd-2020-08120 https://cve.radiocsirt.org/vuln/euvd-2026-106852 EUVD-2026-106852 2026-10-02T17:41:30.778409+00:00 EUVD-2026-106852 https://cve.radiocsirt.org/vuln/fkie_cve-2013-3565 fkie_cve-2013-3565 2026-10-02T17:41:30.778431+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) command parameter to requests/vlm_cmd.xml, (2) dir parameter to requests/browse.xml, or (3) URI in a request, which is returned in an error message through share/lua/intf/http.lua.

 https://cve.radiocsirt.org/vuln/ghsa-4php-vvmh-7vx6 GHSA-4php-vvmh-7vx6 2026-10-02T17:41:30.778476+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) command parameter to requests/vlm_cmd.xml, (2) dir parameter to requests/browse.xml, or (3) URI in a request, which is returned in an error message through share/lua/intf/http.lua.

 https://cve.radiocsirt.org/vuln/gsd-2013-3565 gsd-2013-3565 2026-10-02T17:41:30.778506+00:00 gsd-2013-3565 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-3565 Withdrawn: UBUNTU-CVE-2013-3565 2026-10-02T17:41:30.778524+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: vlc

Multiple cross-site scripting (XSS) vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) command parameter to requests/vlm_cmd.xml, (2) dir parameter to requests/browse.xml, or (3) URI in a request, which is returned in an error message through share/lua/intf/http.lua.