https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:46:42.441761+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-03044 bdu:2015-03044 2026-10-09T12:46:42.445391+00:00 bdu:2015-03044 https://cve.radiocsirt.org/vuln/euvd-2026-112499 EUVD-2026-112499 2026-10-09T12:46:42.445426+00:00 EUVD-2026-112499 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4533 fkie_cve-2012-4533 2026-10-09T12:46:42.445440+00:00

Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows remote authenticated users with repository commit access to inject arbitrary web script or HTML via the "function name" line.

 https://cve.radiocsirt.org/vuln/ghsa-6cx5-w8wc-hcvh GHSA-6cx5-w8wc-hcvh 2026-10-09T12:46:42.445470+00:00

Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows remote authenticated users with repository commit access to inject arbitrary web script or HTML via the "function name" line.

 https://cve.radiocsirt.org/vuln/gsd-2012-4533 gsd-2012-4533 2026-10-09T12:46:42.445487+00:00 gsd-2012-4533 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-4533 Withdrawn: UBUNTU-CVE-2012-4533 2026-10-09T12:46:42.445497+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: viewvc

Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows remote authenticated users with repository commit access to inject arbitrary web script or HTML via the "function name" line.