https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T15:16:52.943770+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-12876 cnvd-2018-12876 2026-10-16T15:16:52.947305+00:00 cnvd-2018-12876 https://cve.radiocsirt.org/vuln/euvd-2026-71211 EUVD-2026-71211 2026-10-16T15:16:52.947336+00:00 EUVD-2026-71211 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000557 fkie_cve-2018-1000557 2026-10-16T15:16:52.947350+00:00

OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS) vulnerability in login form and search functionality that can result in An attacker is able to execute arbitrary (javascript) code within a victims' browser. This attack appear to be exploitable via Victim must open a crafted link to the application. This vulnerability appears to have been fixed in ocsreports 2.4.1.

 https://cve.radiocsirt.org/vuln/ghsa-gvrm-g2q6-r5f7 GHSA-gvrm-g2q6-r5f7 2026-10-16T15:16:52.947380+00:00

OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS) vulnerability in login form and search functionality that can result in An attacker is able to execute arbitrary (javascript) code within a victims' browser. This attack appear to be exploitable via Victim must open a crafted link to the application. This vulnerability appears to have been fixed in ocsreports 2.4.1.

 https://cve.radiocsirt.org/vuln/gsd-2018-1000557 gsd-2018-1000557 2026-10-16T15:16:52.947398+00:00 gsd-2018-1000557 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000557 UBUNTU-CVE-2018-1000557 2026-10-16T15:16:52.947409+00:00

Affected: Ubuntu:16.04:LTS: ocsinventory-server, Ubuntu:18.04:LTS: ocsinventory-server

OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS) vulnerability in login form and search functionality that can result in An attacker is able to execute arbitrary (javascript) code within a victims' browser. This attack appear to be exploitable via Victim must open a crafted link to the application. This vulnerability appears to have been fixed in ocsreports 2.4.1.