https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:45:17.943559+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0493 certfr-2025-avi-0493 — De multiples vulnérabilités ont été découvertes dans les produits Centreon. Elles permettent à un attaquant de provoque… 2026-10-03T19:45:18.036807+00:00 certfr-2025-avi-0493 https://cve.radiocsirt.org/vuln/euvd-2026-258391 EUVD-2026-258391 2026-10-03T19:45:18.036859+00:00 EUVD-2026-258391 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28447 fkie_cve-2023-28447 2026-10-03T19:45:18.036884+00:00

Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user's browser session. This may lead to unauthorized access to sensitive user data, manipulation of the web application's behavior, or unauthorized actions performed on behalf of the user. Users are advised to upgrade to either version 3.1.48 or to 4.3.1 to resolve this issue. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-7j98-h7fp-4vwj GHSA-7j98-h7fp-4vwj — smarty Cross-site Scripting vulnerability in Javascript escaping 2026-10-03T19:45:18.036947+00:00

Affected: Packagist: smarty/smarty

### Impact An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user's browser session. This may lead to unauthorized access to sensitive user data, manipulation of the web application's behavior, or unauthorized actions performed on behalf of the user.

### Patches Please upgrade to the most recent version of Smarty v3 or v4.

### For more information If you have any questions or comments about this advisory please open an issue in [the Smarty repo](https://github.com/smarty-php/smarty)

 https://cve.radiocsirt.org/vuln/gsd-2023-28447 gsd-2023-28447 2026-10-03T19:45:18.036979+00:00 gsd-2023-28447 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28447 UBUNTU-CVE-2023-28447 2026-10-03T19:45:18.036992+00:00

Affected: Ubuntu:Pro:16.04:LTS: civicrm, Ubuntu:Pro:16.04:LTS: smarty3, Ubuntu:Pro:18.04:LTS: civicrm, Ubuntu:Pro:18.04:LTS: postfixadmin, Ubuntu:Pro:18.04:LTS: smarty3, Ubuntu:20.04:LTS: smarty3, Ubuntu:Pro:20.04:LTS: civicrm, Ubuntu:Pro:20.04:LTS: postfixadmin, Ubuntu:22.04:LTS: smarty3, Ubuntu:Pro:22.04:LTS: civicrm and 3 more

Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user's browser session. This may lead to unauthorized access to sensitive user data, manipulation of the web application's behavior, or unauthorized actions performed on behalf of the user. Users are advised to upgrade to either version 3.1.48 or to 4.3.1 to resolve this issue. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0849 WID-SEC-W-2023-0849 — MediaWiki: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-03T19:45:18.037055+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen oder einen Denial of Service Zustand herbeizuführen.