https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T11:20:42.480732+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2020-avi-265 certfr-2020-avi-265 — Une vulnérabilité a été découverte dans Zimbra 9.x. Elle permet à un attaquant de provoquer une injection de code indir… 2026-10-19T11:20:42.485038+00:00 certfr-2020-avi-265 https://cve.radiocsirt.org/vuln/cnvd-2021-39701 cnvd-2021-39701 2026-10-19T11:20:42.485085+00:00 cnvd-2021-39701 https://cve.radiocsirt.org/vuln/euvd-2026-40793 EUVD-2026-40793 2026-10-19T11:20:42.485109+00:00 EUVD-2026-40793 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11737 fkie_cve-2020-11737 2026-10-19T11:20:42.485130+00:00

A cross-site scripting (XSS) vulnerability in Web Client in Zimbra 9.0 allows a remote attacker to craft links in an E-Mail message or calendar invite to execute arbitrary JavaScript. The attack requires an A element containing an href attribute with a "www" substring (including the quotes) followed immediately by a DOM event listener such as onmouseover. This is fixed in 9.0.0 Patch 2.

 https://cve.radiocsirt.org/vuln/ghsa-v5c5-9fh5-f3wx GHSA-v5c5-9fh5-f3wx — Cross-site scripting in Zimbra 2026-10-19T11:20:42.485171+00:00

A cross-site scripting (XSS) vulnerability in Web Client in Zimbra 9.0 allows a remote attacker to craft links in an E-Mail message or calendar invite to execute arbitrary JavaScript. The attack requires an A element containing an href attribute with a "www" substring (including the quotes) followed immediately by a DOM event listener such as onmouseover. This is fixed in 9.0.0 Patch 2.

 https://cve.radiocsirt.org/vuln/gsd-2020-11737 gsd-2020-11737 2026-10-19T11:20:42.485202+00:00 gsd-2020-11737