https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T09:37:03.516738+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07697 bdu:2023-07697 2026-10-05T09:37:03.667612+00:00 bdu:2023-07697 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0203 certfr-2024-avi-0203 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits Siemens</span>. Certaines d'entr… 2026-10-05T09:37:03.667651+00:00 certfr-2024-avi-0203 https://cve.radiocsirt.org/vuln/fkie_cve-2020-23064 fkie_cve-2020-23064 2026-10-05T09:37:03.667671+00:00

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-2020-11023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

 https://cve.radiocsirt.org/vuln/ghsa-257q-pv89-v3xv Withdrawn: GHSA-257q-pv89-v3xv — Duplicate Advisory: jQuery Cross Site Scripting vulnerability 2026-10-05T09:37:03.667701+00:00

Withdrawn by the publisher.

Affected: npm: jquery, NuGet: jQuery, RubyGems: jquery-rails, Maven: org.webjars.npm:jquery

## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of [GHSA-jpcq-cgw6-v4j6](https://github.com/advisories/GHSA-jpcq-cgw6-v4j6). This link is maintained to preserve external references.

## Original Description

Cross Site Scripting vulnerability in jQuery v.2.2.0 until v.3.5.0 allows a remote attacker to execute arbitrary code via the `<options>` element.

 https://cve.radiocsirt.org/vuln/gsd-2020-23064 gsd-2020-23064 2026-10-05T09:37:03.667735+00:00 gsd-2020-23064 https://cve.radiocsirt.org/vuln/icsa-24-074-03 ICSA-24-074-03 — Siemens SINEMA Remote Connect Server 2026-10-05T09:37:03.667747+00:00

Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element. The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to resources and potentially lead to code execution.

 https://cve.radiocsirt.org/vuln/oesa-2023-1446 OESA-2023-1446 — doxygen security update 2026-10-05T09:37:03.667768+00:00

Affected: openEuler:20.03-LTS-SP1: doxygen

Doxygen is the de facto standard tool for generating documentation from annotated C++ sources, but it also supports other popular programming languages such as C, Objective-C, C#, PHP, Java, Python, IDL (Corba, Microsoft, and UNO/OpenOffice flavors), Fortran, VHDL, Tcl, and to some extent D.

Security Fix(es):

Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the &lt;options&gt; element.(CVE-2020-23064)

 https://cve.radiocsirt.org/vuln/rhsa-2025:7625 RHSA-2025:7625 — Red Hat Security Advisory: Red Hat AMQ Broker 7.13.0 release and security update 2026-10-05T09:37:03.667791+00:00

jquery: Cross-site scripting commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file commons-compress: OutOfMemoryError unpacking broken Pack200 file

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-23064 Withdrawn: UBUNTU-CVE-2020-23064 2026-10-05T09:37:03.667809+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: jquery, Ubuntu:Pro:16.04:LTS: jquery, Ubuntu:Pro:18.04:LTS: jquery, Ubuntu:Pro:20.04:LTS: jquery

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-2020-11023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1572 WID-SEC-W-2023-1572 — jQuery: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-05T09:37:03.667833+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in jQuery ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.