https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:24:32.446272+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-260895 EUVD-2026-260895 2026-10-07T10:24:32.494312+00:00 EUVD-2026-260895 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12921 fkie_cve-2025-12921 2026-10-07T10:24:32.494351+00:00

A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13. Affected by this issue is some unknown functionality of the file /ImportCRFData?action=confirm of the component CRF Data Import. Such manipulation of the argument xml_file leads to xml injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ghsa-jxxq-v434-pmg5 GHSA-jxxq-v434-pmg5 2026-10-07T10:24:32.494385+00:00

A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13. Affected by this issue is some unknown functionality of the file /ImportCRFData?action=confirm of the component CRF Data Import. Such manipulation of the argument xml_file leads to xml injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.