https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:18:56.074180+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0051 certfr-2023-avi-0051 — De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un atta… 2026-10-02T20:18:56.078211+00:00 certfr-2023-avi-0051 https://cve.radiocsirt.org/vuln/cnvd-2018-13038 cnvd-2018-13038 2026-10-02T20:18:56.078247+00:00 cnvd-2018-13038 https://cve.radiocsirt.org/vuln/euvd-2026-63529 EUVD-2026-63529 2026-10-02T20:18:56.078262+00:00 EUVD-2026-63529 https://cve.radiocsirt.org/vuln/fkie_cve-2018-8046 fkie_cve-2018-8046 2026-10-02T20:18:56.078273+00:00

The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip() method of Action Columns takes HTML-escaped data and un-escapes it. If the tooltip contains user-controlled data, an attacker could exploit this to create a cross-site scripting attack, even when developers took precautions and escaped data.

 https://cve.radiocsirt.org/vuln/ghsa-wjgq-2g8m-w698 GHSA-wjgq-2g8m-w698 2026-10-02T20:18:56.078301+00:00

The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip() method of Action Columns takes HTML-escaped data and un-escapes it. If the tooltip contains user-controlled data, an attacker could exploit this to create a cross-site scripting attack, even when developers took precautions and escaped data.

 https://cve.radiocsirt.org/vuln/gsd-2018-8046 gsd-2018-8046 2026-10-02T20:18:56.078319+00:00 gsd-2018-8046