https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:49:39.673126+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-grip-cve-2016-10516 BREW-grip-CVE-2016-10516 — Pallets Werkzeug cross-site scripting vulnerability 2026-10-03T04:49:39.855971+00:00

Affected: Homebrew: grip

Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0366 certfr-2024-avi-0366 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-03T04:49:39.856023+00:00 certfr-2024-avi-0366 https://cve.radiocsirt.org/vuln/cnvd-2017-36079 cnvd-2017-36079 2026-10-03T04:49:39.856044+00:00 cnvd-2017-36079 https://cve.radiocsirt.org/vuln/euvd-2026-88500 EUVD-2026-88500 2026-10-03T04:49:39.856057+00:00 EUVD-2026-88500 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10516 fkie_cve-2016-10516 2026-10-03T04:49:39.856068+00:00

Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message.

 https://cve.radiocsirt.org/vuln/ghsa-h2fp-xgx6-xh6f GHSA-h2fp-xgx6-xh6f — Pallets Werkzeug cross-site scripting vulnerability 2026-10-03T04:49:39.856089+00:00

Affected: PyPI: Werkzeug

Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message.

 https://cve.radiocsirt.org/vuln/gsd-2016-10516 gsd-2016-10516 2026-10-03T04:49:39.856110+00:00 gsd-2016-10516 https://cve.radiocsirt.org/vuln/pysec-2017-43 PYSEC-2017-43 2026-10-03T04:49:39.856121+00:00

Affected: PyPI: werkzeug

Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message.

 https://cve.radiocsirt.org/vuln/rhsa-2019:3172 RHSA-2019:3172 — Red Hat Security Advisory: Red Hat Satellite 6 security, bug fix, and enhancement update 2026-10-03T04:49:39.856139+00:00

python-werkzeug: Cross-site scripting in render_full function in debug/tbtools.py python-jinja2: Sandbox escape due to information disclosure via str.format rubygem-rack: Buffer size in multipart parser allows for denial of service dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents foreman: Recover of plaintext password or token for the compute resources foreman: authorization bypasses in foreman-tasks leading to information disclosure python-jinja2: str.format_map allows sandbox escape python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods katello: registry credentials are captured in plain text during repository discovery

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-10516 UBUNTU-CVE-2016-10516 2026-10-03T04:49:39.856172+00:00

Affected: Ubuntu:14.04:LTS: python-werkzeug, Ubuntu:16.04:LTS: python-werkzeug

Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message.