https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:54:58.558115+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-659 certfr-2022-avi-659 — De multiples vulnérabilités ont été découvertes dans Oracle WebLogic. Certaines d'entre elles permettent à un attaquant… 2026-10-03T11:54:58.642990+00:00 certfr-2022-avi-659 https://cve.radiocsirt.org/vuln/euvd-2026-257664 EUVD-2026-257664 2026-10-03T11:54:58.643031+00:00 EUVD-2026-257664 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24891 fkie_cve-2022-24891 2026-10-03T11:54:58.643048+00:00

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, there is a potential for a cross-site scripting vulnerability in ESAPI caused by a incorrect regular expression for "onsiteURL" in the **antisamy-esapi.xml** configuration file that can cause "javascript:" URLs to fail to be correctly sanitized. This issue is patched in ESAPI 2.3.0.0. As a workaround, manually edit the **antisamy-esapi.xml** configuration files to change the "onsiteURL" regular expression. More information about remediation of the vulnerability, including the workaround, is available in the maintainers' release notes and security bulletin.

 https://cve.radiocsirt.org/vuln/ghsa-q77q-vx4q-xx6q GHSA-q77q-vx4q-xx6q — Cross-site Scripting in org.owasp.esapi:esapi 2026-10-03T11:54:58.643082+00:00

Affected: Maven: org.owasp.esapi:esapi

### Impact There is a potential for an XSS vulnerability in ESAPI caused by a incorrect regular expression for "onsiteURL" in the **antisamy-esapi.xml** configuration file that can cause URLs with the "javascript:" scheme to NOT be sanitized. See the reference below for full details.

### Patches Patched in ESAPI 2.3.0.0 and later. See important remediation details in the reference given below.

### Workarounds Manually edit your **antisamy-esapi.xml** configuration files to change the "onsiteURL" regular expression as per remediation instructions in the reference below.

### References [Security Bulletin 8](https://github.com/ESAPI/esapi-java-legacy/blob/develop/documentation/ESAPI-security-bulletin8.pdf)

### For more information If you have any questions or comments about this advisory: * Email one of the project co-leaders. See email addresses listed on the [OWASP ESAPI wiki](https://owasp.org/www-project-enterprise-security-api/) page, under "Leaders". * Send email to one of the two ESAPI related Google Groups listed under [Where to Find More Information on ESAPI](https://github.com/ESAPI/esapi-java-legacy#where-to-find-more-information-on-esapi) on our [README.md](https://github.com/ESAPI/esapi-java-legacy#readme) page.

 https://cve.radiocsirt.org/vuln/gsd-2022-24891 gsd-2022-24891 2026-10-03T11:54:58.643119+00:00 gsd-2022-24891 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24891 UBUNTU-CVE-2022-24891 2026-10-03T11:54:58.643133+00:00

Affected: Ubuntu:Pro:16.04:LTS: libowasp-esapi-java, Ubuntu:Pro:18.04:LTS: libowasp-esapi-java, Ubuntu:Pro:20.04:LTS: libowasp-esapi-java, Ubuntu:Pro:22.04:LTS: libowasp-esapi-java

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, there is a potential for a cross-site scripting vulnerability in ESAPI caused by a incorrect regular expression for "onsiteURL" in the **antisamy-esapi.xml** configuration file that can cause "javascript:" URLs to fail to be correctly sanitized. This issue is patched in ESAPI 2.3.0.0. As a workaround, manually edit the **antisamy-esapi.xml** configuration files to change the "onsiteURL" regular expression. More information about remediation of the vulnerability, including the workaround, is available in the maintainers' release notes and security bulletin.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0217 WID-SEC-W-2023-0217 — NetApp ActiveIQ Unified Manager: Mehrere Schwachstellen 2026-10-03T11:54:58.643162+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in NetApp ActiveIQ Unified Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Scripting-Angriff durchzuführen.