https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:42:34.008829+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-03619 cnvd-2015-03619 2026-10-08T22:42:34.093987+00:00 cnvd-2015-03619 https://cve.radiocsirt.org/vuln/euvd-2026-91485 EUVD-2026-91485 2026-10-08T22:42:34.094032+00:00 EUVD-2026-91485 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2944 fkie_cve-2015-2944 2026-10-08T22:42:34.094046+00:00

Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web script or HTML via the URI, related to (1) org/apache/sling/api/servlets/HtmlResponse and (2) org/apache/sling/servlets/post/HtmlResponse.

 https://cve.radiocsirt.org/vuln/ghsa-rxvx-44w5-44r7 GHSA-rxvx-44w5-44r7 — Improper Neutralization of Input During Web Page Generation in Apache Sling 2026-10-08T22:42:34.094079+00:00

Affected: Maven: org.apache.sling:org.apache.sling.api, Maven: org.apache.sling:org.apache.sling.servlets.post

Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web script or HTML via the URI, related to (1) org/apache/sling/api/servlets/HtmlResponse and (2) org/apache/sling/servlets/post/HtmlResponse.

 https://cve.radiocsirt.org/vuln/gsd-2015-2944 gsd-2015-2944 2026-10-08T22:42:34.094106+00:00 gsd-2015-2944 https://cve.radiocsirt.org/vuln/jvndb-2015-000069 jvndb-2015-000069 2026-10-08T22:42:34.094119+00:00

Apache Sling is an open source web application framework provided by The Apache Software Foundation. Sling API and Servlet Post components included in Apache Sling contain a cross-site scripting vulnerability (CWE-79) in the error page and the generation of the job completion. MORI Shingo and Toshiharu Sugiyama of DeNA Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.