https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:18:52 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-00734 bdu:2015-00734 https://cve.radiocsirt.org/vuln/bdu:2015-00734 https://cve.radiocsirt.org/vuln/certfr-2014-avi-313 certfr-2014-avi-313 https://cve.radiocsirt.org/vuln/certfr-2014-avi-313 https://cve.radiocsirt.org/vuln/euvd-2026-108290 EUVD-2026-108290 https://cve.radiocsirt.org/vuln/euvd-2026-108290 https://cve.radiocsirt.org/vuln/fkie_cve-2013-5855 <p>Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) &lt;h:outputText&gt; tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.</p> <p>Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) &lt;h:outputText&gt; tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-5855 https://cve.radiocsirt.org/vuln/ghsa-3m3r-82gc-53mj <p><strong>Affected:</strong> Maven: org.glassfish:javax.faces</p> <p>Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) &lt;h:outputText&gt; tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.</p> <p><strong>Affected:</strong> Maven: org.glassfish:javax.faces</p> <p>Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) &lt;h:outputText&gt; tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-3m3r-82gc-53mj https://cve.radiocsirt.org/vuln/gsd-2013-5855 gsd-2013-5855 https://cve.radiocsirt.org/vuln/gsd-2013-5855 https://cve.radiocsirt.org/vuln/rhsa-2014:0896 <p>bouncycastle: TLS CBC padding timing attack JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions</p> <p>bouncycastle: TLS CBC padding timing attack JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0896 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-5855 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mojarra, Ubuntu:18.04:LTS: mojarra</p> <p>Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) &lt;h:outputText&gt; tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mojarra, Ubuntu:18.04:LTS: mojarra</p> <p>Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) &lt;h:outputText&gt; tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-5855