https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T23:25:46.480467+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-00965 cnvd-2015-00965 2026-10-22T23:25:46.484221+00:00 cnvd-2015-00965 https://cve.radiocsirt.org/vuln/euvd-2026-89851 EUVD-2026-89851 2026-10-22T23:25:46.484258+00:00 EUVD-2026-89851 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0923 fkie_cve-2015-0923 2026-10-22T23:25:46.484273+00:00

The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an XML document named in the xslt parameter, related to an XML External Entity (XXE) issue.

 https://cve.radiocsirt.org/vuln/ghsa-h69p-g798-v94v GHSA-h69p-g798-v94v 2026-10-22T23:25:46.484305+00:00

The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an XML document named in the xslt parameter, related to an XML External Entity (XXE) issue.

 https://cve.radiocsirt.org/vuln/gsd-2015-0923 gsd-2015-0923 2026-10-22T23:25:46.484323+00:00 gsd-2015-0923