https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T12:16:42.240491+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-235405 EUVD-2026-235405 2026-10-15T12:16:42.243623+00:00 EUVD-2026-235405 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4011 fkie_cve-2025-4011 2026-10-15T12:16:42.243656+00:00

A vulnerability has been found in Redmine 6.0.0/6.0.1/6.0.2/6.0.3 and classified as problematic. This vulnerability affects unknown code of the component Custom Query Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 6.0.4 is able to address this issue. It is recommended to upgrade the affected component.

 https://cve.radiocsirt.org/vuln/ghsa-hhw5-9q3f-7w82 GHSA-hhw5-9q3f-7w82 2026-10-15T12:16:42.243691+00:00

A vulnerability has been found in Redmine 6.0.0/6.0.1/6.0.2/6.0.3 and classified as problematic. This vulnerability affects unknown code of the component Custom Query Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 6.0.4 is able to address this issue. It is recommended to upgrade the affected component.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4011 UBUNTU-CVE-2025-4011 2026-10-15T12:16:42.243710+00:00

Affected: Ubuntu:16.04:LTS: redmine, Ubuntu:18.04:LTS: redmine, Ubuntu:20.04:LTS: redmine

A vulnerability has been found in Redmine 6.0.0/6.0.1/6.0.2/6.0.3 and classified as problematic. This vulnerability affects unknown code of the component Custom Query Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 6.0.4 is able to address this issue. It is recommended to upgrade the affected component.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0899 WID-SEC-W-2025-0899 — Redmine.org Redmine: Mehrere Schwachstellen 2026-10-15T12:16:42.243734+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Redmine.org Redmine ausnutzen, um Informationen offenzulegen, einen Cross-Site Scripting Angriff durchzuführen und weitere, nicht spezifizierte Auswirkungen zu verursachen.