https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:21:11.415755+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01737 bdu:2024-01737 2026-10-03T13:21:11.421966+00:00 bdu:2024-01737 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0992 certfr-2024-avi-0992 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T13:21:11.421998+00:00 certfr-2024-avi-0992 https://cve.radiocsirt.org/vuln/cnvd-2024-09867 cnvd-2024-09867 2026-10-03T13:21:11.422016+00:00 cnvd-2024-09867 https://cve.radiocsirt.org/vuln/euvd-2026-4135 EUVD-2026-4135 2026-10-03T13:21:11.422028+00:00 EUVD-2026-4135 https://cve.radiocsirt.org/vuln/fkie_cve-2024-24816 fkie_cve-2024-24816 2026-10-03T13:21:11.422038+00:00

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability vulnerability has been discovered in versions prior to 4.24.0-lts in samples that use the `preview` feature. All integrators that use these samples in the production code can be affected. The vulnerability allows an attacker to execute JavaScript code by abusing the misconfigured preview feature. It affects all users using the CKEditor 4 at version < 4.24.0-lts with affected samples used in a production environment. A fix is available in version 4.24.0-lts.

 https://cve.radiocsirt.org/vuln/ghsa-mw2c-vx6j-mg76 GHSA-mw2c-vx6j-mg76 — CKEditor4 Cross-site Scripting vulnerability in samples with enabled the preview feature 2026-10-03T13:21:11.422067+00:00

Affected: npm: ckeditor4

### Affected packages The vulnerability has been discovered in the samples that use the [preview](https://ckeditor.com/cke4/addon/preview) feature:

* `samples/old/**/*.html` * `plugins/[plugin name]/samples/**/*.html`

All integrators that use these samples in the production code can be affected.

### Impact

A potential vulnerability has been discovered in one of CKEditor's 4 samples that are shipped with production code. The vulnerability allowed to execute JavaScript code by abusing the misconfigured [preview feature](https://ckeditor.com/cke4/addon/preview). It affects all users using the CKEditor 4 at version < 4.24.0-lts with affected samples used in a production environment.

### Patches The problem has been recognized and patched. The fix will be available in version 4.24.0-lts.

### For more information Email us at [security@cksource.com](mailto:security@cksource.com) if you have any questions or comments about this advisory.

### Acknowledgements The CKEditor 4 team would like to thank [Marcin Wyczechowski](https://www.linkedin.com/in/marcin-wyczechowski-0a823795/) & [Michał Majchrowicz](https://www.linkedin.com/in/micha%C5%82-majchrowicz-mwsc/) [AFINE Team](https://afine.com/) for recognizing and reporting this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2024-24816 gsd-2024-24816 2026-10-03T13:21:11.422106+00:00 gsd-2024-24816 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-24816 UBUNTU-CVE-2024-24816 2026-10-03T13:21:11.422118+00:00

Affected: Ubuntu:Pro:16.04:LTS: ckeditor, Ubuntu:16.04:LTS: ldap-account-manager, Ubuntu:16.04:LTS: request-tracker4, Ubuntu:Pro:18.04:LTS: ckeditor, Ubuntu:18.04:LTS: ckeditor3, Ubuntu:18.04:LTS: ldap-account-manager, Ubuntu:Pro:18.04:LTS: request-tracker4, Ubuntu:Pro:20.04:LTS: ckeditor, Ubuntu:20.04:LTS: ckeditor3, Ubuntu:20.04:LTS: ldap-account-manager and 14 more

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability vulnerability has been discovered in versions prior to 4.24.0-lts in samples that use the `preview` feature. All integrators that use these samples in the production code can be affected. The vulnerability allows an attacker to execute JavaScript code by abusing the misconfigured preview feature. It affects all users using the CKEditor 4 at version < 4.24.0-lts with affected samples used in a production environment. A fix is available in version 4.24.0-lts.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0896 WID-SEC-W-2024-0896 — Oracle Insurance Applications: Mehrere Schwachstellen 2026-10-03T13:21:11.422166+00:00

Ein Angreifer kann mehrere Schwachstellen in Oracle Insurance Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.