https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:25:16.765185+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-1046 certfr-2022-avi-1046 — De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer une exécution… 2026-10-02T13:25:16.769872+00:00 certfr-2022-avi-1046 https://cve.radiocsirt.org/vuln/euvd-2026-176762 EUVD-2026-176762 2026-10-02T13:25:16.769916+00:00 EUVD-2026-176762 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23414 fkie_cve-2021-23414 2026-10-02T13:25:16.769931+00:00

This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.

 https://cve.radiocsirt.org/vuln/fsa-202301 FSA-202301 — Festo: Cross-Site-Scripting (XSS) vulnerability in LX-Appliance 2026-10-02T13:25:16.769960+00:00

A vulnerability in the Video.js package could allow a user of LX Appliance, with a high privilege account (i.e., with the "Teacher" role), to craft a malicious course and launch an XSS attack.

 https://cve.radiocsirt.org/vuln/ghsa-pp7m-6j83-m7r6 GHSA-pp7m-6j83-m7r6 — Cross-site Scripting in video.js 2026-10-02T13:25:16.769980+00:00

Affected: npm: video.js

This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.

 https://cve.radiocsirt.org/vuln/gsd-2021-23414 gsd-2021-23414 2026-10-02T13:25:16.770001+00:00 gsd-2021-23414 https://cve.radiocsirt.org/vuln/icsa-25-343-02 ICSA-25-343-02 — Festo LX Appliance 2026-10-02T13:25:16.770012+00:00

A vulnerability in the Video.js package could allow a user of LX Appliance, with a high privilege account (i.e., with the "Teacher" role), to craft a malicious course and launch an XSS attack.