https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:01:05.441163+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-32872 cnvd-2017-32872 2026-10-02T18:01:05.499846+00:00 cnvd-2017-32872 https://cve.radiocsirt.org/vuln/euvd-2026-99301 EUVD-2026-99301 2026-10-02T18:01:05.499886+00:00 EUVD-2026-99301 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3531 fkie_cve-2014-3531 2026-10-02T18:01:05.499902+00:00

Multiple cross-site scripting (XSS) vulnerabilities in Foreman before 1.5.2 allow remote authenticated users to inject arbitrary web script or HTML via the operating system (1) name or (2) description.

 https://cve.radiocsirt.org/vuln/ghsa-fvgq-9cr6-84mj GHSA-fvgq-9cr6-84mj 2026-10-02T18:01:05.499941+00:00

Multiple cross-site scripting (XSS) vulnerabilities in Foreman before 1.5.2 allow remote authenticated users to inject arbitrary web script or HTML via the operating system (1) name or (2) description.

 https://cve.radiocsirt.org/vuln/gsd-2014-3531 gsd-2014-3531 2026-10-02T18:01:05.499959+00:00 gsd-2014-3531 https://cve.radiocsirt.org/vuln/rhea-2014:1175 RHEA-2014:1175 — Red Hat Enhancement Advisory: Release of Satellite 6.0 2026-10-02T18:01:05.499971+00:00

mongodb: memory over-read via incorrect BSON object length Katello: Multiple XSS in various entities Foreman: app/controllers/bookmarks_controller.rb remote code execution v8: remote DoS or unspecified other impact via type confusion Foreman: hosts_controller.rb power/ipmi_boot Symbol creation DoS foreman: app/controllers/api/v1/hosts_controller.rb API privilege escalation Katello: CLI - user without access can call "system remove_deletion" command Katello: proxied Candlepin calls authorization bypass Foreman: host and host group parameter SQL injection v8: DoS (out-of-bounds write) in DehoistArrayIndex function in hydrogen.cc v8: DoS (out-of-bounds read) in DehoistArrayIndex function in hydrogen.cc v8: incorrect handling of popular pages python: wildcard matching rules do not follow RFC 6125 foreman-proxy: smart-proxy remote command injection Foreman: Stored Cross Site Scripting Foreman: Session fixation Foreman: Improper input validation rubygem-kafo: temporary file creation vulnerability when creating /tmp/default_values.yaml Foreman: provisioning templates are world accessible foreman: XSS in key name auto-completion rubygem-hammer_cli_foreman: /etc/hammer/cli.modules.d/foreman.yml is world-readable v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.149 foreman: XSS with operating system name/description python: missing boundary check in JSON module