https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T06:02:32.512904+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-361353 EUVD-2026-361353 2026-10-16T06:02:32.516045+00:00 EUVD-2026-361353 https://cve.radiocsirt.org/vuln/fkie_cve-2026-77643 fkie_cve-2026-77643 2026-10-16T06:02:32.516083+00:00

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet(). NOTE: this issue exists because of a missed corner case of CVE-2018-0499.

 https://cve.radiocsirt.org/vuln/ghsa-955x-jgcw-hcxh GHSA-955x-jgcw-hcxh 2026-10-16T06:02:32.516117+00:00

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet(). NOTE: this issue exists because of a missed corner case of CVE-2018-0499.

 https://cve.radiocsirt.org/vuln/oesa-2026-4058 OESA-2026-4058 — xapian-core security update 2026-10-16T06:02:32.516134+00:00

Affected: openEuler:24.03-LTS-SP1: xapian-core, openEuler:24.03-LTS-SP3: xapian-core, openEuler:24.03-LTS-SP4: xapian-core, openEuler:20.03-LTS-SP4: xapian-core, openEuler:22.03-LTS-SP4: xapian-core

Xapian is an Open Source Search Engine Library, released under the GPL v2+. It is a highly adaptable toolkit which allows developers to easily add advanced indexing and search facilities to their own applications. It has built-in support for several families of weighting models and also supports a rich set of boolean query operators. Security Fix(es):

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet(). NOTE: this issue exists because of a missed corner case of CVE-2018-0499.(CVE-2026-77643)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-77643 UBUNTU-CVE-2026-77643 2026-10-16T06:02:32.516166+00:00

Affected: Ubuntu:14.04:LTS: xapian-core, Ubuntu:16.04:LTS: xapian-core, Ubuntu:18.04:LTS: xapian-core, Ubuntu:20.04:LTS: xapian-core, Ubuntu:22.04:LTS: xapian-core, Ubuntu:24.04:LTS: xapian-core, Ubuntu:26.04:LTS: xapian-core

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet(). NOTE: this issue exists because of a missed corner case of CVE-2018-0499.