https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:21:09.372884+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2018-avi-162 certfr-2018-avi-162 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-02T19:21:09.395576+00:00 certfr-2018-avi-162 https://cve.radiocsirt.org/vuln/cnvd-2018-07657 cnvd-2018-07657 2026-10-02T19:21:09.395644+00:00 cnvd-2018-07657 https://cve.radiocsirt.org/vuln/euvd-2026-61468 EUVD-2026-61468 2026-10-02T19:21:09.395669+00:00 EUVD-2026-61468 https://cve.radiocsirt.org/vuln/fkie_cve-2018-4133 fkie_cve-2018-4133 2026-10-02T19:21:09.395690+00:00

An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-8r9c-gc7v-2v7w GHSA-8r9c-gc7v-2v7w 2026-10-02T19:21:09.395735+00:00

An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2018-4133 gsd-2018-4133 2026-10-02T19:21:09.395763+00:00 gsd-2018-4133 https://cve.radiocsirt.org/vuln/jvndb-2018-000029 jvndb-2018-000029 2026-10-02T19:21:09.395781+00:00

Safari provided by Apple Inc. contains a script injection vulnerability (CWE-81) in the processing of displaying an error page when it fails to verify server certificates. In an error page Safari displays when it fails to verify server certificates, a domain name of the website accessed is output straightly. Therefore by exploiting this vulnerability, an arbitrary script may be executed on the user's web browser via an error page that is displayed when a user is led to visit a website with a specially crafted domain name. Yuji Tonai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11506-1 openSUSE-SU-2024:11506-1 — libjavascriptcoregtk-4_0-18-2.32.4-1.1 on GA media 2026-10-02T19:21:09.395814+00:00

libjavascriptcoregtk-4_0-18-2.32.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2018:3387-1 SUSE-SU-2018:3387-1 — Security update for webkit2gtk3 2026-10-02T19:21:09.395932+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-4133 UBUNTU-CVE-2018-4133 2026-10-02T19:21:09.395987+00:00

Affected: Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src, Ubuntu:22.04:LTS: qtwebkit-opensource-src, Ubuntu:24.04:LTS: qtwebkit-opensource-src

An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.