https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:12:12.314068+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-05182 bdu:2020-05182 2026-10-02T17:12:12.396716+00:00 bdu:2020-05182 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0395 certfr-2024-avi-0395 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-02T17:12:12.396762+00:00 certfr-2024-avi-0395 https://cve.radiocsirt.org/vuln/cnvd-2019-36999 cnvd-2019-36999 2026-10-02T17:12:12.396799+00:00 cnvd-2019-36999 https://cve.radiocsirt.org/vuln/euvd-2026-58444 EUVD-2026-58444 2026-10-02T17:12:12.396814+00:00 EUVD-2026-58444 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17495 fkie_cve-2019-17495 2026-10-02T17:12:12.396826+00:00

A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untrusted JSON data from remote servers, but it was not previously known that <style>@import within the JSON data was a functional attack method.

 https://cve.radiocsirt.org/vuln/ghsa-c427-hjc3-wrfw GHSA-c427-hjc3-wrfw — Cross-site scripting in Swagger-UI 2026-10-02T17:12:12.396858+00:00

Affected: npm: swagger-ui, Maven: org.webjars:swagger-ui, Maven: org.webjars.npm:swagger-ui, Maven: io.springfox:springfox-swagger-ui

A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untrusted JSON data from remote servers, but it was not previously known that <style>@import within the JSON data was a functional attack method.

 https://cve.radiocsirt.org/vuln/gsd-2019-17495 gsd-2019-17495 2026-10-02T17:12:12.396889+00:00 gsd-2019-17495 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1048 WID-SEC-W-2023-1048 — Oracle Construction and Engineering: Mehrere Schwachstellen 2026-10-02T17:12:12.396901+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Construction and Engineering ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.