https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:31:13.791623+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2018-00142 bdu:2018-00142 2026-10-03T17:31:13.796710+00:00 bdu:2018-00142 https://cve.radiocsirt.org/vuln/euvd-2026-96622 EUVD-2026-96622 2026-10-03T17:31:13.796742+00:00 EUVD-2026-96622 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0073 fkie_cve-2014-0073 2026-10-03T17:31:13.796756+00:00

The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 through 2.9.0 does not properly validate callback identifiers, which allows remote attackers to execute arbitrary JavaScript in the host page and consequently gain privileges via a crafted gap-iab: URI.

 https://cve.radiocsirt.org/vuln/ghsa-5f44-2f3g-gf6q GHSA-5f44-2f3g-gf6q 2026-10-03T17:31:13.796786+00:00

The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 through 2.9.0 does not properly validate callback identifiers, which allows remote attackers to execute arbitrary JavaScript in the host page and consequently gain privileges via a crafted gap-iab: URI.

 https://cve.radiocsirt.org/vuln/gsd-2014-0073 gsd-2014-0073 2026-10-03T17:31:13.796803+00:00 gsd-2014-0073