https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:23:14.622826+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/fkie_cve-2024-25704 fkie_cve-2024-25704 2026-10-07T21:23:14.625604+00:00

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because this item is scheduled to be patched at a future time.

 https://cve.radiocsirt.org/vuln/ghsa-ffgg-5wp9-rrp5 GHSA-ffgg-5wp9-rrp5 2026-10-07T21:23:14.625655+00:00

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Experience Builder versions <= 11.1 that may allow a remote, authenticated attacker to create a crafted link that is stored in the Experience Builder Embed widget which when loaded could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high.

 https://cve.radiocsirt.org/vuln/gsd-2024-25704 gsd-2024-25704 2026-10-07T21:23:14.625679+00:00 gsd-2024-25704 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0800 WID-SEC-W-2024-0800 — ESRI Portal for ArcGIS: Mehrere Schwachstellen 2026-10-07T21:23:14.625692+00:00

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in ESRI ArcGIS ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.