https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:22:13.136064+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-27181 cnvd-2020-27181 2026-10-05T23:22:13.424776+00:00 cnvd-2020-27181 https://cve.radiocsirt.org/vuln/euvd-2026-53481 EUVD-2026-53481 2026-10-05T23:22:13.424814+00:00 EUVD-2026-53481 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10221 fkie_cve-2019-10221 2026-10-05T23:22:13.424828+00:00

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.

 https://cve.radiocsirt.org/vuln/ghsa-wfff-rc4w-hpx2 GHSA-wfff-rc4w-hpx2 2026-10-05T23:22:13.424857+00:00

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.

 https://cve.radiocsirt.org/vuln/gsd-2019-10221 gsd-2019-10221 2026-10-05T23:22:13.424874+00:00 gsd-2019-10221 https://cve.radiocsirt.org/vuln/rhsa-2020:4847 RHSA-2020:4847 — Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update 2026-10-05T23:22:13.424885+00:00

jquery: Cross-site scripting via cross-domain ajax requests bootstrap: XSS in the data-target attribute bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip bootstrap: XSS in the tooltip or popover data-template attribute pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab pki-core: Reflected XSS in getcookies?url= endpoint in CA jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection pki-core: KRA vulnerable to reflected XSS via the getPk12 page tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods pki: Dogtag's python client does not validate certificates pki-core: XSS in the certificate search results tomcat: request mixup

 https://cve.radiocsirt.org/vuln/rhsa-2021:0851 RHSA-2021:0851 — Red Hat Security Advisory: pki-core security and bug fix update 2026-10-05T23:22:13.424944+00:00

pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab pki-core: Reflected XSS in getcookies?url= endpoint in CA pki-core: KRA vulnerable to reflected XSS via the getPk12 page jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods pki-core: XSS in the certificate search results pki-core: Unprivileged users can renew any certificate

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10221 UBUNTU-CVE-2019-10221 2026-10-05T23:22:13.424973+00:00

Affected: Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3648 WID-SEC-W-2024-3648 — Red Hat Enterprise Linux pki-core: Mehrere Schwachstellen 2026-10-05T23:22:13.424998+00:00

Ein entfernter, anonymer oder authentifizierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Sicherheitsmaßnahmen zu umgehen.