https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:06:25.603717+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-267516 EUVD-2026-267516 2026-10-07T17:06:25.702115+00:00 EUVD-2026-267516 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25709 fkie_cve-2024-25709 2026-10-07T17:06:25.702154+00:00

There is a stored Cross‑Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS versions 11.2 and below that may allow a remote, authenticated attacker to create a crafted link that can be saved as a new location when moving an existing item, which could potentially execute arbitrary JavaScript code in a victim’s browser. Exploitation does not require any privileges and can be performed by an anonymous user.

 https://cve.radiocsirt.org/vuln/ghsa-8fvm-73q4-3j6f GHSA-8fvm-73q4-3j6f 2026-10-07T17:06:25.702193+00:00

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS versions 10.8.1 – 1121 that may allow a remote, authenticated attacker to create a crafted link that can be saved as a new location when moving an existing item which will potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high.

 https://cve.radiocsirt.org/vuln/gsd-2024-25709 gsd-2024-25709 2026-10-07T17:06:25.702214+00:00 gsd-2024-25709 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0800 WID-SEC-W-2024-0800 — ESRI Portal for ArcGIS: Mehrere Schwachstellen 2026-10-07T17:06:25.702226+00:00

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in ESRI ArcGIS ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.