https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:36:29.334158+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-736 certfr-2022-avi-736 — De multiples vulnérabilités ont été découvertes dans Zimbra. Elles permettent à un attaquant de provoquer une exécution… 2026-10-02T22:36:29.396024+00:00 certfr-2022-avi-736 https://cve.radiocsirt.org/vuln/euvd-2026-18731 EUVD-2026-18731 2026-10-02T22:36:29.396074+00:00 EUVD-2026-18731 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37044 fkie_cve-2022-37044 2026-10-02T22:36:29.396089+00:00

In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/search?action accepts parameters called extra, title, and onload that are partially sanitised and lead to reflected XSS that allows executing arbitrary JavaScript on the victim's machine.

 https://cve.radiocsirt.org/vuln/ghsa-ccw4-c8wx-mv68 GHSA-ccw4-c8wx-mv68 2026-10-02T22:36:29.396120+00:00

In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/search?action accepts parameters called extra, title, and onload that are partially sanitised and lead to reflected XSS that allows executing arbitrary JavaScript on the victim's machine.

 https://cve.radiocsirt.org/vuln/gsd-2022-37044 gsd-2022-37044 2026-10-02T22:36:29.396136+00:00 gsd-2022-37044