https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:29:42.996238+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-43980 EUVD-2026-43980 2026-10-04T11:29:43.058248+00:00 EUVD-2026-43980 https://cve.radiocsirt.org/vuln/fkie_cve-2020-19203 fkie_cve-2020-19203 2026-10-04T11:29:43.058287+00:00

An authenticated Cross-Site Scripting (XSS) vulnerability was found in widgets/widgets/wake_on_lan_widget.php, a component of the pfSense software WebGUI, on version 2.4.4-p2 and earlier. The widget did not encode the descr (description) parameter of wake-on-LAN entries in its output, leading to a possible stored XSS.

 https://cve.radiocsirt.org/vuln/ghsa-4wj2-v574-g827 GHSA-4wj2-v574-g827 2026-10-04T11:29:43.058321+00:00

Netgate pfSense Community Edition 2.4.4 - p2 (arm64) is affected by: Cross Site Scripting (XSS). The impact is: Session Hijacking, Information Leakage (local). The component is: pfSense Dashboard, Work-on-LAN Service configuration. The attack vector is: Inject the malicious JavaScript code in Description text box or parameter.

 https://cve.radiocsirt.org/vuln/gsd-2020-19203 gsd-2020-19203 2026-10-04T11:29:43.058339+00:00 gsd-2020-19203