https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:59:05.864091+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4142 ALSA-2021:4142 — Low: pcs security, bug fix, and enhancement update 2026-10-02T14:59:05.884425+00:00

Affected: AlmaLinux:8: pcs, AlmaLinux:8: pcs-snmp

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

The following packages have been upgraded to a later upstream version: pcs (0.10.10). (BZ#1935594)

Security Fix(es):

* jquery: Cross-site scripting (XSS) via <script> HTML tags containing whitespaces (CVE-2020-7656)

* jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-07536 bdu:2023-07536 2026-10-02T14:59:05.884490+00:00 bdu:2023-07536 https://cve.radiocsirt.org/vuln/certfr-2021-avi-943 certfr-2021-avi-943 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T14:59:05.884508+00:00 certfr-2021-avi-943 https://cve.radiocsirt.org/vuln/cnvd-2021-28270 cnvd-2021-28270 2026-10-02T14:59:05.884524+00:00 cnvd-2021-28270 https://cve.radiocsirt.org/vuln/euvd-2026-38066 EUVD-2026-38066 2026-10-02T14:59:05.884536+00:00 EUVD-2026-38066 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7656 fkie_cve-2020-7656 2026-10-02T14:59:05.884546+00:00

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

 https://cve.radiocsirt.org/vuln/ghsa-q4m3-2j7h-f7xw GHSA-q4m3-2j7h-f7xw — Cross-Site Scripting in jquery 2026-10-02T14:59:05.884568+00:00

Affected: npm: jquery, NuGet: jQuery, RubyGems: jquery-rails, Maven: org.webjars.npm:jquery

Versions of `jquery` prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove `<script>` HTML tags that contain a whitespace character, i.e: `</script >`, which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a victim's browser.

## Recommendation

Upgrade to version 1.9.0 or later.

 https://cve.radiocsirt.org/vuln/gsd-2020-7656 gsd-2020-7656 2026-10-02T14:59:05.884599+00:00 gsd-2020-7656 https://cve.radiocsirt.org/vuln/icsa-22-097-01 ICSA-22-097-01 — Pepperl+Fuchs WirelessHART-Gateway 2026-10-02T14:59:05.884610+00:00

The affected product allows active SSH and telnet services with hard-coded credentials.CVE-2021-34565 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). jQuery 3.0.0-rc.1 is vulnerable to a denial-of-service condition due to removing a logic a lowercased attribute names. Any attribute using a mixed-cased name for boolean attributes goes into an infinite recursion, exceeding the stack call limit.CVE-2016-10707 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). If the application is not externally accessible or uses IP-based access restrictions, attackers can use DNS rebinding to bypass any IP or firewall-based access restrictions by proxying through their target's browser. This vulnerability only affects Versions 3.0.7 through 3.0.8.CVE-2021-34561 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). The filename parameter is vulnerable to unauthenticated path traversal attacks, enabling read access to arbitrary files on the server. This vulnerability only affects Version 3.0.7.CVE-2021-33555 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). jQuery Version 1.4.2 allows…

 https://cve.radiocsirt.org/vuln/rhsa-2020:4211 RHSA-2020:4211 — Red Hat Security Advisory: Red Hat AMQ Interconnect 1.9.0 release and security update 2026-10-02T14:59:05.884678+00:00

jquery: Cross-site scripting (XSS) via <script> HTML tags containing whitespaces jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

 https://cve.radiocsirt.org/vuln/rhsa-2021:4142 RHSA-2021:4142 — Red Hat Security Advisory: pcs security, bug fix, and enhancement update 2026-10-02T14:59:05.884700+00:00

jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection jquery: Cross-site scripting (XSS) via <script> HTML tags containing whitespaces jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-7656 UBUNTU-CVE-2020-7656 2026-10-02T14:59:05.884721+00:00

Affected: Ubuntu:Pro:14.04:LTS: jquery, Ubuntu:Pro:16.04:LTS: jquery

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

 https://cve.radiocsirt.org/vuln/vde-2021-027 VDE-2021-027 — Pepperl+Fuchs: WirelessHART-Gateway - Vulnerability may allow remote attackers to cause a Denial Of Service 2026-10-02T14:59:05.884742+00:00

Critical vulnerabilities have been discovered in the product and in the utilized components jQuery by jQuery Team and TLS Version 1.0/1.1.

The impact of the vulnerabilities on the affected device may result in

- denial of service - remote code execution - code exposure

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0558 WID-SEC-W-2023-0558 — jQuery: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-02T14:59:05.884769+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in jQuery ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.