https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:53:56.360248+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-11454 CVE-2019-11454 2026-10-09T18:53:56.362847+00:00

Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unauthenticated attacker to introduce arbitrary JavaScript via manipulation of an unsanitized user field of the Authorization header for HTTP Basic Authentication, which is mishandled during an _viewlog operation.

 https://cve.radiocsirt.org/vuln/usn-4860-1 USN-4860-1 — monit vulnerabilities 2026-10-09T18:53:56.362914+00:00

Affected: Ubuntu:Pro:14.04:LTS: monit, Ubuntu:Pro:16.04:LTS: monit, Ubuntu:Pro:18.04:LTS: monit

Zack Flack discovered that Monit incorrectly handled certain input. A remote authenticated user could exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2019-11454)

Zack Flack discovered a buffer overread when Monit decoded certain crafted URLs. An attacker could exploit this to potentially leak sensitive information. (CVE-2019-11455)