https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:08:46.914211+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-45751 EUVD-2026-45751 2026-10-04T20:08:47.065168+00:00 EUVD-2026-45751 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25715 fkie_cve-2020-25715 2026-10-04T20:08:47.065207+00:00

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity.

 https://cve.radiocsirt.org/vuln/ghsa-cg99-xqcm-67pf GHSA-cg99-xqcm-67pf 2026-10-04T20:08:47.065240+00:00

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity.

 https://cve.radiocsirt.org/vuln/gsd-2020-25715 gsd-2020-25715 2026-10-04T20:08:47.065259+00:00 gsd-2020-25715 https://cve.radiocsirt.org/vuln/rhsa-2020:4847 RHSA-2020:4847 — Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update 2026-10-04T20:08:47.065270+00:00

jquery: Cross-site scripting via cross-domain ajax requests bootstrap: XSS in the data-target attribute bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip bootstrap: XSS in the tooltip or popover data-template attribute pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab pki-core: Reflected XSS in getcookies?url= endpoint in CA jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection pki-core: KRA vulnerable to reflected XSS via the getPk12 page tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods pki: Dogtag's python client does not validate certificates pki-core: XSS in the certificate search results tomcat: request mixup

 https://cve.radiocsirt.org/vuln/rhsa-2021:0851 RHSA-2021:0851 — Red Hat Security Advisory: pki-core security and bug fix update 2026-10-04T20:08:47.065319+00:00

pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab pki-core: Reflected XSS in getcookies?url= endpoint in CA pki-core: KRA vulnerable to reflected XSS via the getPk12 page jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods pki-core: XSS in the certificate search results pki-core: Unprivileged users can renew any certificate

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25715 UBUNTU-CVE-2020-25715 2026-10-04T20:08:47.065356+00:00

Affected: Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3648 WID-SEC-W-2024-3648 — Red Hat Enterprise Linux pki-core: Mehrere Schwachstellen 2026-10-04T20:08:47.065382+00:00

Ein entfernter, anonymer oder authentifizierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Sicherheitsmaßnahmen zu umgehen.