https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:48:32.131367+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-35447 cnvd-2017-35447 2026-10-02T19:48:32.239739+00:00 cnvd-2017-35447 https://cve.radiocsirt.org/vuln/euvd-2026-78466 EUVD-2026-78466 2026-10-02T19:48:32.239776+00:00 EUVD-2026-78466 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15100 fkie_cve-2017-15100 2026-10-02T19:48:32.239791+00:00

An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: (1) Facts page, when clicking on the "chart" button and hovering over the chart; (2) Trends page, when checking the graph for a trend based on a such fact; (3) Statistics page, for facts that are aggregated on this page.

 https://cve.radiocsirt.org/vuln/ghsa-7rg9-xhxc-j3pm GHSA-7rg9-xhxc-j3pm 2026-10-02T19:48:32.239821+00:00

An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: (1) Facts page, when clicking on the "chart" button and hovering over the chart; (2) Trends page, when checking the graph for a trend based on a such fact; (3) Statistics page, for facts that are aggregated on this page.

 https://cve.radiocsirt.org/vuln/gsd-2017-15100 gsd-2017-15100 2026-10-02T19:48:32.239839+00:00 gsd-2017-15100 https://cve.radiocsirt.org/vuln/rhsa-2018:2927 RHSA-2018:2927 — Red Hat Security Advisory: Satellite 6.4 security, bug fix, and enhancement update 2026-10-02T19:48:32.239851+00:00

bouncycastle: Information disclosure in GCMBlockCipher bouncycastle: DSA does not fully validate ASN.1 encoding during signature verification allowing for injection of unsigned data bouncycastle: Information leak in AESFastEngine class bouncycastle: Carry propagation bug in math.raw.Nat??? class bouncycastle: Information exposure in DSA signature generation via timing attack bouncycastle: ECDSA improper validation of ASN.1 encoding of signature bouncycastle: DSA key pair generator generates a weak private key by default bouncycastle: DHIES implementation allowed the use of ECB mode bouncycastle: DHIES/ECIES CBC modes are vulnerable to padding oracle attack bouncycastle: Other party DH public keys are not fully validated bouncycastle: ECIES implementation allowed the use of ECB mode logback: Serialization vulnerability in SocketServer and ServerSocketReceiver python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs hibernate-validator: Privilege escalation when running under the security manager puppet: Unpacking of tarballs in tar/mini.rb can create files with insecure permissions puppet: Environment leakage in puppet-agent 6: XSS in discovery rule filter autocomplete functionality jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) foreman: Stored XSS in fact name or value pulp: sensitive credentials revealed through the API foreman: SQL injection due to improper handling of the widget…