https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:18:13.566352+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-06440 bdu:2024-06440 2026-10-04T06:18:13.655382+00:00 bdu:2024-06440 https://cve.radiocsirt.org/vuln/euvd-2026-199823 EUVD-2026-199823 2026-10-04T06:18:13.655454+00:00 EUVD-2026-199823 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36453 fkie_cve-2024-36453 2026-10-04T06:18:13.655493+00:00

Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a webpage may be altered or sensitive information such as a credential may be disclosed.

 https://cve.radiocsirt.org/vuln/ghsa-w2jv-599h-mr48 GHSA-w2jv-599h-mr48 2026-10-04T06:18:13.655568+00:00

Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a webpage may be altered or sensitive information such as a credential may be disclosed.

 https://cve.radiocsirt.org/vuln/jvndb-2024-000059 jvndb-2024-000059 2026-10-04T06:18:13.655619+00:00

Multiple Webmin products contain multiple vulnerabilities listed below. * sysinfo.cgi is vulnerable to cross-site scripting (CWE-79) CVE-2024-36450 * session_login.cgi is vulnerable to cross-site scripting (CWE-79) CVE-2024-36453 * ajaxterm module is vulnerable to improper handling of insufficient permissions or privileges (CWE-280) CVE-2024-36451 * ajaxterm module is vulnerable to cross-site request forgery (CWE-352) CVE-2024-36452 CVE-2024-36450, CVE-2024-36451, CVE-2024-36452 Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-36453 hibiki moriyama of STNet, Incorporated reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1545 WID-SEC-W-2024-1545 — Webmin: Mehrere Schwachstellen 2026-10-04T06:18:13.655670+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Webmin ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und seine Rechte zu erweitern.