https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T14:00:04.330298+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-27179 cnvd-2020-27179 2026-10-15T14:00:04.335150+00:00 cnvd-2020-27179 https://cve.radiocsirt.org/vuln/euvd-2026-53410 EUVD-2026-53410 2026-10-15T14:00:04.335183+00:00 EUVD-2026-53410 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10180 fkie_cve-2019-10180 2026-10-15T14:00:04.335197+00:00

A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly resulting in a Stored Cross Site Scripting (XSS) vulnerability. An attacker able to modify the parameters of any token could use this flaw to trick an authenticated user into executing arbitrary JavaScript code.

 https://cve.radiocsirt.org/vuln/ghsa-3r6g-5p5v-m39h GHSA-3r6g-5p5v-m39h 2026-10-15T14:00:04.335226+00:00

A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly resulting in a Stored Cross Site Scripting (XSS) vulnerability. An attacker able to modify the parameters of any token could use this flaw to trick an authenticated user into executing arbitrary JavaScript code.

 https://cve.radiocsirt.org/vuln/gsd-2019-10180 gsd-2019-10180 2026-10-15T14:00:04.335243+00:00 gsd-2019-10180 https://cve.radiocsirt.org/vuln/rhsa-2021:0947 RHSA-2021:0947 — Red Hat Security Advisory: pki-core and redhat-pki-theme security and bug fix update 2026-10-15T14:00:04.335255+00:00

pki-core: stored Cross-site scripting (XSS) in the pki-tps web Activity tab pki-core: unsanitized token parameters in TPS resulting in stored XSS pki-core: Stored XSS in TPS profile creation

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10180 UBUNTU-CVE-2019-10180 2026-10-15T14:00:04.335275+00:00

Affected: Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki

A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly resulting in a Stored Cross Site Scripting (XSS) vulnerability. An attacker able to modify the parameters of any token could use this flaw to trick an authenticated user into executing arbitrary JavaScript code.