https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:24:58.609849+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4670 ALSA-2020:4670 — Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update 2026-10-03T02:24:58.971816+00:00

Affected: AlmaLinux:8: custodia, AlmaLinux:8: python3-custodia, AlmaLinux:8: python3-jwcrypto, AlmaLinux:8: python3-kdcproxy, AlmaLinux:8: python3-pyusb, AlmaLinux:8: python3-qrcode, AlmaLinux:8: python3-qrcode-core, AlmaLinux:8: python3-yubico

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

The following packages have been upgraded to a later upstream version: ipa (4.8.7), softhsm (2.6.0), opendnssec (2.1.6). (BZ#1759888, BZ#1818765, BZ#1818877)

Security Fix(es):

* js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)

* bootstrap: XSS in the data-target attribute (CVE-2016-10735)

* bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)

* bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)

* bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676)

* bootstrap: XSS in the affix configuration target property (CVE-2018-20677)

* bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)

* js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)

* jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)

* ipa: No password length restriction leads to denial of service (CVE-2020-1722)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information o…

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-571 certfr-2021-avi-571 — De multiples vulnérabilités ont été découvertes dans Tenable. Elles permettent à un attaquant de provoquer une exécutio… 2026-10-03T02:24:58.971940+00:00 certfr-2021-avi-571 https://cve.radiocsirt.org/vuln/cnvd-2019-23272 cnvd-2019-23272 2026-10-03T02:24:58.971962+00:00 cnvd-2019-23272 https://cve.radiocsirt.org/vuln/euvd-2026-88524 EUVD-2026-88524 2026-10-03T02:24:58.971977+00:00 EUVD-2026-88524 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10735 fkie_cve-2016-10735 2026-10-03T02:24:58.971988+00:00

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

 https://cve.radiocsirt.org/vuln/ghsa-4p24-vmcr-4gqj GHSA-4p24-vmcr-4gqj — Bootstrap Cross-site Scripting vulnerability 2026-10-03T02:24:58.972010+00:00

Affected: npm: bootstrap, Maven: org.webjars:bootstrap, RubyGems: bootstrap, Packagist: twbs/bootstrap, NuGet: bootstrap, npm: bootstrap-sass, RubyGems: bootstrap-sass, NuGet: bootstrap.sass

In Bootstrap 2.x from 2.0.4, 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute. Note that this is a different vulnerability than CVE-2018-14041.

See https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0/ for more info.

 https://cve.radiocsirt.org/vuln/gsd-2016-10735 gsd-2016-10735 2026-10-03T02:24:58.972047+00:00 gsd-2016-10735 https://cve.radiocsirt.org/vuln/icsa-22-055-02 ICSA-22-055-02 — Mitsubishi Electric EcoWebServerIII 2026-10-03T02:24:58.972058+00:00

Multiple vulnerabilities due to cross-site scripting exist in Energy Saving Data Collecting Server (EcoWebServerIII), which may result in information disclosure or information tampering of the product.CVE-2016-10735, CVE-2018-14040, CVE-2018-14042, CVE-2018-20676, CVE-2019-8331, CVE-2020-11022, and CVE-2020-11023 have been assigned to these vulnerabilities. A CVSS v3 base score of 6.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N ). A vulnerability due to uncontrolled resource consumption exists in Energy Saving Data Collecting Server (EcoWebServerIII), which may result in a denial-of-service condition.CVE-2017-18214 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated for; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). A vulnerability due to improperly controlled modification of dynamically determined object attributes exists in Energy Saving Data Collecting Server (EcoWebServerIII), which may result in a denial-of-service condition.CVE-2020-7746 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated for; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

 https://cve.radiocsirt.org/vuln/rhba-2019:1076 RHBA-2019:1076 — Red Hat Bug Fix Advisory: ovirt-engine-api-explorer bug fix and enhancement update for RHV 4.3 2026-10-03T02:24:58.972084+00:00

bootstrap: XSS in the data-target attribute bootstrap: XSS in the tooltip data-viewport attribute bootstrap: XSS in the affix configuration target property

 https://cve.radiocsirt.org/vuln/rhsa-2020:3936 RHSA-2020:3936 — Red Hat Security Advisory: ipa security, bug fix, and enhancement update 2026-10-03T02:24:58.972102+00:00

jquery: Cross-site scripting via cross-domain ajax requests bootstrap: XSS in the data-target attribute bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip bootstrap: XSS in the tooltip data-viewport attribute bootstrap: XSS in the affix configuration target property bootstrap: XSS in the tooltip or popover data-template attribute jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection ipa: No password length restriction leads to denial of service jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-10735 UBUNTU-CVE-2016-10735 2026-10-03T02:24:58.972133+00:00

Affected: Ubuntu:Pro:16.04:LTS: twitter-bootstrap3, Ubuntu:Pro:18.04:LTS: twitter-bootstrap3

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1947 WID-SEC-W-2022-1947 — Red Hat Single Sign On: Mehrere Schwachstellen 2026-10-03T02:24:58.972154+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Single Sign On ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, einen Denial of Service Zustand hervorzurufen, Informationen auszuspähen, Sicherheitsvorkehrungen zu umgehen oder beliebigen Programmcode auszuführen.