https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:46:39.209546+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-96627 EUVD-2026-96627 2026-10-02T20:46:39.266307+00:00 EUVD-2026-96627 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0089 fkie_cve-2014-0089 2026-10-02T20:46:39.266345+00:00

Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark.

 https://cve.radiocsirt.org/vuln/ghsa-mh5h-8x3h-9w7c GHSA-mh5h-8x3h-9w7c 2026-10-02T20:46:39.266378+00:00

Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark.

 https://cve.radiocsirt.org/vuln/gsd-2014-0089 gsd-2014-0089 2026-10-02T20:46:39.266394+00:00 gsd-2014-0089 https://cve.radiocsirt.org/vuln/rhea-2014:1175 RHEA-2014:1175 — Red Hat Enhancement Advisory: Release of Satellite 6.0 2026-10-02T20:46:39.266405+00:00

mongodb: memory over-read via incorrect BSON object length Katello: Multiple XSS in various entities Foreman: app/controllers/bookmarks_controller.rb remote code execution v8: remote DoS or unspecified other impact via type confusion Foreman: hosts_controller.rb power/ipmi_boot Symbol creation DoS foreman: app/controllers/api/v1/hosts_controller.rb API privilege escalation Katello: CLI - user without access can call "system remove_deletion" command Katello: proxied Candlepin calls authorization bypass Foreman: host and host group parameter SQL injection v8: DoS (out-of-bounds write) in DehoistArrayIndex function in hydrogen.cc v8: DoS (out-of-bounds read) in DehoistArrayIndex function in hydrogen.cc v8: incorrect handling of popular pages python: wildcard matching rules do not follow RFC 6125 foreman-proxy: smart-proxy remote command injection Foreman: Stored Cross Site Scripting Foreman: Session fixation Foreman: Improper input validation rubygem-kafo: temporary file creation vulnerability when creating /tmp/default_values.yaml Foreman: provisioning templates are world accessible foreman: XSS in key name auto-completion rubygem-hammer_cli_foreman: /etc/hammer/cli.modules.d/foreman.yml is world-readable v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.149 foreman: XSS with operating system name/description python: missing boundary check in JSON module