https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:22:47.131993+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-140749 EUVD-2026-140749 2026-10-04T21:22:47.233232+00:00 EUVD-2026-140749 https://cve.radiocsirt.org/vuln/fkie_cve-2006-2501 fkie_cve-2006-2501 2026-10-04T21:22:47.233271+00:00

Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages.

 https://cve.radiocsirt.org/vuln/ghsa-2m9f-g829-9w5c GHSA-2m9f-g829-9w5c 2026-10-04T21:22:47.233304+00:00

Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages.

 https://cve.radiocsirt.org/vuln/gsd-2006-2501 gsd-2006-2501 2026-10-04T21:22:47.233323+00:00 gsd-2006-2501 https://cve.radiocsirt.org/vuln/jvndb-2006-000293 jvndb-2006-000293 2026-10-04T21:22:47.233335+00:00

Sun Java System Web Server (originally called Sun ONE Web Server) contains a cross-site scripting vulnerability. A vulnerable web server does not adequately validate the HTTP REFERER header before using the contents in the default error page.