https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:47:59.826800+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-204136 EUVD-2026-204136 2026-10-03T16:47:59.932155+00:00 EUVD-2026-204136 https://cve.radiocsirt.org/vuln/fkie_cve-2019-20921 fkie_cve-2019-20921 2026-10-03T16:47:59.932198+00:00

bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS). It does not escape title values in OPTION elements. This may allow attackers to execute arbitrary JavaScript in a victim's browser.

 https://cve.radiocsirt.org/vuln/ghsa-7c82-mp33-r854 GHSA-7c82-mp33-r854 — Cross-site scripting in bootstrap-select 2026-10-03T16:47:59.932233+00:00

Affected: npm: bootstrap-select, NuGet: bootstrap-select

bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS). It does not escape title values in OPTION elements. This may allow attackers to execute arbitrary JavaScript in a victim's browser.

 https://cve.radiocsirt.org/vuln/gsd-2019-20921 gsd-2019-20921 2026-10-03T16:47:59.932260+00:00 gsd-2019-20921 https://cve.radiocsirt.org/vuln/rhsa-2021:1169 RHSA-2021:1169 — Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4.z [ovirt-4.4.5] security, bug fix, enhancement 2026-10-03T16:47:59.932273+00:00

nodejs-bootstrap-select: not escaping title values on <option> may lead to XSS m2crypto: bleichenbacher timing attacks in the RSA decryption API datatables.net: prototype pollution if 'constructor' were used in a data property name nodejs-immer: prototype pollution may lead to DoS or remote code execution

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0808 WID-SEC-W-2022-0808 — Red Hat Virtualization Engine: Mehrere Schwachstellen 2026-10-03T16:47:59.932299+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der Red Hat Virtualization Engine ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, einen Denial of Service Zustand auszulösen und kryptographische Maßnahmen zu umgehen.