https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:28:21.152329+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-01287 cnvd-2016-01287 2026-10-08T18:28:21.244662+00:00 cnvd-2016-01287 https://cve.radiocsirt.org/vuln/euvd-2026-82714 EUVD-2026-82714 2026-10-08T18:28:21.244708+00:00 EUVD-2026-82714 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2058 fkie_cve-2016-2058 2026-10-08T18:28:21.244729+00:00

Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is not properly handled in the "detailed status" page, or (2) remote authenticated users to inject arbitrary web script or HTML via an acknowledgement message, which is not properly handled in the "status" page.

 https://cve.radiocsirt.org/vuln/ghsa-jq5m-m9q5-jj6q GHSA-jq5m-m9q5-jj6q 2026-10-08T18:28:21.244775+00:00

Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is not properly handled in the "detailed status" page, or (2) remote authenticated users to inject arbitrary web script or HTML via an acknowledgement message, which is not properly handled in the "status" page.

 https://cve.radiocsirt.org/vuln/gsd-2016-2058 gsd-2016-2058 2026-10-08T18:28:21.244807+00:00 gsd-2016-2058 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2058 Withdrawn: UBUNTU-CVE-2016-2058 2026-10-08T18:28:21.244825+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: xymon

Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is not properly handled in the "detailed status" page, or (2) remote authenticated users to inject arbitrary web script or HTML via an acknowledgement message, which is not properly handled in the "status" page.