https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:47:23.125655+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0575 certfr-2024-avi-0575 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent… 2026-10-04T03:47:23.225951+00:00 certfr-2024-avi-0575 https://cve.radiocsirt.org/vuln/euvd-2026-174990 EUVD-2026-174990 2026-10-04T03:47:23.225993+00:00 EUVD-2026-174990 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28502 fkie_cve-2020-28502 2026-10-04T03:47:23.226008+00:00

This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (async=False on xhr.open), malicious user input flowing into xhr.send could result in arbitrary code being injected and run.

 https://cve.radiocsirt.org/vuln/ghsa-h4j5-c7cj-74xg GHSA-h4j5-c7cj-74xg — xmlhttprequest and xmlhttprequest-ssl vulnerable to Arbitrary Code Injection 2026-10-04T03:47:23.226040+00:00

Affected: npm: xmlhttprequest, npm: xmlhttprequest-ssl

This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (`async=False` on `xhr.open`), malicious user input flowing into `xhr.send` could result in arbitrary code being injected and run.

 https://cve.radiocsirt.org/vuln/gsd-2020-28502 gsd-2020-28502 2026-10-04T03:47:23.226067+00:00 gsd-2020-28502 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-28502 UBUNTU-CVE-2020-28502 2026-10-04T03:47:23.226080+00:00

Affected: Ubuntu:16.04:LTS: node-xmlhttprequest, Ubuntu:18.04:LTS: node-xmlhttprequest, Ubuntu:18.04:LTS: node-xmlhttprequest-ssl, Ubuntu:20.04:LTS: node-xmlhttprequest-ssl

This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (async=False on xhr.open), malicious user input flowing into xhr.send could result in arbitrary code being injected and run.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1591 WID-SEC-W-2024-1591 — Juniper JUNOS: Mehrere Schwachstellen 2026-10-04T03:47:23.226105+00:00

Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS ausnutzen, um einen Denial of Service zu verursachen, Informationen offenzulegen, Privilegien zu erweitern und Sicherheitsmechanismen inklusive zu umgehen.