https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:59:24.230656+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04887 bdu:2021-04887 2026-10-03T18:59:24.324393+00:00 bdu:2021-04887 https://cve.radiocsirt.org/vuln/bit-drupal-2021-33829 BIT-drupal-2021-33829 2026-10-03T18:59:24.324431+00:00

Affected: Bitnami: drupal

A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --!> is mishandled.

 https://cve.radiocsirt.org/vuln/euvd-2026-28593 EUVD-2026-28593 2026-10-03T18:59:24.324462+00:00 EUVD-2026-28593 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33829 fkie_cve-2021-33829 2026-10-03T18:59:24.324476+00:00

A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --!> is mishandled.

 https://cve.radiocsirt.org/vuln/ghsa-rgx6-rjj4-c388 GHSA-rgx6-rjj4-c388 — ckeditor4 vulnerable to cross-site scripting 2026-10-03T18:59:24.324498+00:00

Affected: npm: ckeditor4, Packagist: drupal/core, Packagist: drupal/drupal

A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because `--!>` is mishandled.

 https://cve.radiocsirt.org/vuln/gsd-2021-33829 gsd-2021-33829 2026-10-03T18:59:24.324528+00:00 gsd-2021-33829 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-33829 UBUNTU-CVE-2021-33829 2026-10-03T18:59:24.324540+00:00

Affected: Ubuntu:Pro:16.04:LTS: ckeditor, Ubuntu:18.04:LTS: ckeditor, Ubuntu:20.04:LTS: ckeditor

A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --!> is mishandled.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0234 WID-SEC-W-2024-0234 — OTRS: Mehrere Schwachstellen 2026-10-03T18:59:24.324560+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OTRS ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder einen Cross Site Scripting Angriff durchzuführen.