https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:13:05.538763+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09390 bdu:2025-09390 2026-10-03T11:13:05.603421+00:00 bdu:2025-09390 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0742 certfr-2024-avi-0742 — De multiples vulnérabilités ont été découvertes dans Synacor Zimbra Collaboration. Elles permettent à un attaquant de p… 2026-10-03T11:13:05.603462+00:00 certfr-2024-avi-0742 https://cve.radiocsirt.org/vuln/euvd-2026-248737 EUVD-2026-248737 2026-10-03T11:13:05.603482+00:00 EUVD-2026-248737 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45515 fkie_cve-2024-45515 2026-10-03T11:13:05.603495+00:00

An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A Cross-Site Scripting (XSS) vulnerability exists in Zimbra webmail due to insufficient validation of the content type metadata when importing files into the briefcase. Attackers can exploit this issue by crafting a file with manipulated metadata, allowing them to bypass content type checks and execute arbitrary JavaScript within the victim's session.

 https://cve.radiocsirt.org/vuln/ghsa-63g8-5j2r-qj8f GHSA-63g8-5j2r-qj8f 2026-10-03T11:13:05.603526+00:00

An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A Cross-Site Scripting (XSS) vulnerability exists in Zimbra webmail due to insufficient validation of the content type metadata when importing files into the briefcase. Attackers can exploit this issue by crafting a file with manipulated metadata, allowing them to bypass content type checks and execute arbitrary JavaScript within the victim's session.