https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:36:46.334363+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02248 bdu:2020-02248 2026-10-03T13:36:46.460872+00:00 bdu:2020-02248 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1015 certfr-2024-avi-1015 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T13:36:46.460928+00:00 certfr-2024-avi-1015 https://cve.radiocsirt.org/vuln/cnvd-2018-13373 cnvd-2018-13373 2026-10-03T13:36:46.460950+00:00 cnvd-2018-13373 https://cve.radiocsirt.org/vuln/euvd-2026-66833 EUVD-2026-66833 2026-10-03T13:36:46.460963+00:00 EUVD-2026-66833 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14041 fkie_cve-2018-14041 2026-10-03T13:36:46.460974+00:00

In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.

 https://cve.radiocsirt.org/vuln/ghsa-pj7m-g53m-7638 GHSA-pj7m-g53m-7638 — Bootstrap Cross-site Scripting vulnerability 2026-10-03T13:36:46.461002+00:00

Affected: npm: bootstrap, Packagist: typo3/cms-core, Packagist: typo3/cms, RubyGems: bootstrap, Packagist: twbs/bootstrap, NuGet: bootstrap, NuGet: bootstrap.sass, Maven: org.webjars:bootstrap

In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042.

 https://cve.radiocsirt.org/vuln/gsd-2018-14041 gsd-2018-14041 2026-10-03T13:36:46.461037+00:00 gsd-2018-14041 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11242-1 openSUSE-SU-2024:11242-1 — jupyter-notebook-6.2.0-1.4 on GA media 2026-10-03T13:36:46.461048+00:00

jupyter-notebook-6.2.0-1.4 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2019:1456 RHSA-2019:1456 — Red Hat Security Advisory: Red Hat Single Sign-On 7.3.2 security update 2026-10-03T13:36:46.461068+00:00

bootstrap: XSS in the data-target attribute bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy bootstrap: XSS in the tooltip data-viewport attribute bootstrap: XSS in the affix configuration target property picketlink: reflected XSS in SAMLRequest via RelayState parameter picketlink: URL injection via xinclude parameter keycloak: missing signatures validation on CRL used to verify client certificates undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed bootstrap: XSS in the tooltip or popover data-template attribute keycloak: Node.js adapter internal NBF can be manipulated leading to DoS. jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1947 WID-SEC-W-2022-1947 — Red Hat Single Sign On: Mehrere Schwachstellen 2026-10-03T13:36:46.461101+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Single Sign On ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, einen Denial of Service Zustand hervorzurufen, Informationen auszuspähen, Sicherheitsvorkehrungen zu umgehen oder beliebigen Programmcode auszuführen.