https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T10:53:57.258516+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-33582 cnvd-2017-33582 2026-10-22T10:53:57.262700+00:00 cnvd-2017-33582 https://cve.radiocsirt.org/vuln/euvd-2026-77883 EUVD-2026-77883 2026-10-22T10:53:57.262739+00:00 EUVD-2026-77883 https://cve.radiocsirt.org/vuln/fkie_cve-2017-14142 fkie_cve-2017-14142 2026-10-22T10:53:57.262754+00:00

Multiple cross-site scripting (XSS) vulnerabilities in Kaltura before 13.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) partnerId or (2) playerVersion parameter to server/admin_console/web/tools/bigRedButton.php; the (3) partnerId, (4) playerVersion, (5) secret, (6) entryId, (7) adminUiConfId, or (8) uiConfId parameter to server/admin_console/web/tools/bigRedButtonPtsPoc.php; the (9) streamUsername, (10) streamPassword, (11) streamRemoteId, (12) streamRemoteBackupId, or (13) entryId parameter to server/admin_console/web/tools/AkamaiBroadcaster.php; the (14) entryId parameter to server/admin_console/web/tools/XmlJWPlayer.php; or the (15) partnerId or (16) playerVersion parameter to server/alpha/web/lib/bigRedButtonPtsPocHlsjs.php.

 https://cve.radiocsirt.org/vuln/ghsa-3xx8-9wcm-jhmc GHSA-3xx8-9wcm-jhmc 2026-10-22T10:53:57.262787+00:00

Multiple cross-site scripting (XSS) vulnerabilities in Kaltura before 13.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) partnerId or (2) playerVersion parameter to server/admin_console/web/tools/bigRedButton.php; the (3) partnerId, (4) playerVersion, (5) secret, (6) entryId, (7) adminUiConfId, or (8) uiConfId parameter to server/admin_console/web/tools/bigRedButtonPtsPoc.php; the (9) streamUsername, (10) streamPassword, (11) streamRemoteId, (12) streamRemoteBackupId, or (13) entryId parameter to server/admin_console/web/tools/AkamaiBroadcaster.php; the (14) entryId parameter to server/admin_console/web/tools/XmlJWPlayer.php; or the (15) partnerId or (16) playerVersion parameter to server/alpha/web/lib/bigRedButtonPtsPocHlsjs.php.

 https://cve.radiocsirt.org/vuln/gsd-2017-14142 gsd-2017-14142 2026-10-22T10:53:57.262807+00:00 gsd-2017-14142