https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T14:01:06.328049+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-27182 cnvd-2020-27182 2026-10-15T14:01:06.333447+00:00 cnvd-2020-27182 https://cve.radiocsirt.org/vuln/euvd-2026-35591 EUVD-2026-35591 2026-10-15T14:01:06.333484+00:00 EUVD-2026-35591 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1696 fkie_cve-2020-1696 2026-10-15T14:01:06.333498+00:00

A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.

 https://cve.radiocsirt.org/vuln/ghsa-59m3-5f56-55x8 GHSA-59m3-5f56-55x8 2026-10-15T14:01:06.333528+00:00

A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.

 https://cve.radiocsirt.org/vuln/gsd-2020-1696 gsd-2020-1696 2026-10-15T14:01:06.333544+00:00 gsd-2020-1696 https://cve.radiocsirt.org/vuln/rhsa-2021:0947 RHSA-2021:0947 — Red Hat Security Advisory: pki-core and redhat-pki-theme security and bug fix update 2026-10-15T14:01:06.333555+00:00

pki-core: stored Cross-site scripting (XSS) in the pki-tps web Activity tab pki-core: unsanitized token parameters in TPS resulting in stored XSS pki-core: Stored XSS in TPS profile creation

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1696 UBUNTU-CVE-2020-1696 2026-10-15T14:01:06.333575+00:00

Affected: Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki

A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.