https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:17:58.552038+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-251655 EUVD-2026-251655 2026-10-09T05:17:58.554250+00:00 EUVD-2026-251655 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9737 fkie_cve-2025-9737 2026-10-09T05:17:58.554288+00:00

A vulnerability was detected in O2OA up to 10.0-410. Affected is an unknown function of the file /x_query_assemble_designer/jaxrs/importmodel of the component Personal Profile Page. Performing manipulation of the argument description/applicationName/queryName results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor replied in the GitHub issue (translated from simplified Chinese): "This issue will be fixed in the new version."

 https://cve.radiocsirt.org/vuln/ghsa-hggh-mrgq-wcfh GHSA-hggh-mrgq-wcfh 2026-10-09T05:17:58.554324+00:00

A vulnerability was detected in O2OA up to 10.0-410. Affected is an unknown function of the file /x_query_assemble_designer/jaxrs/importmodel of the component Personal Profile Page. Performing manipulation of the argument description/applicationName/queryName results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor replied in the GitHub issue (translated from simplified Chinese): "This issue will be fixed in the new version."