https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:54:51 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-05630 cnvd-2017-05630 https://cve.radiocsirt.org/vuln/cnvd-2017-05630 https://cve.radiocsirt.org/vuln/euvd-2026-87883 EUVD-2026-87883 https://cve.radiocsirt.org/vuln/euvd-2026-87883 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9471 <p>Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren&#39;t properly sanitised when creating users on a Revive Adserver instance. Especially, control characters were not filtered, allowing apparently identical usernames to co-exist in the system, due to the fact that such characters are normally ignored when an HTML page is displayed in a browser. The issue could have therefore been exploited for user spoofing, although elevated privileges are required to create users within Revive Adserver.</p> <p>Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren&#39;t properly sanitised when creating users on a Revive Adserver instance. Especially, control characters were not filtered, allowing apparently identical usernames to co-exist in the system, due to the fact that such characters are normally ignored when an HTML page is displayed in a browser. The issue could have therefore been exploited for user spoofing, although elevated privileges are required to create users within Revive Adserver.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-9471 https://cve.radiocsirt.org/vuln/ghsa-j7g3-qm5c-2j6r <p>Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren&#39;t properly sanitised when creating users on a Revive Adserver instance. Especially, control characters were not filtered, allowing apparently identical usernames to co-exist in the system, due to the fact that such characters are normally ignored when an HTML page is displayed in a browser. The issue could have therefore been exploited for user spoofing, although elevated privileges are required to create users within Revive Adserver.</p> <p>Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren&#39;t properly sanitised when creating users on a Revive Adserver instance. Especially, control characters were not filtered, allowing apparently identical usernames to co-exist in the system, due to the fact that such characters are normally ignored when an HTML page is displayed in a browser. The issue could have therefore been exploited for user spoofing, although elevated privileges are required to create users within Revive Adserver.</p> https://cve.radiocsirt.org/vuln/ghsa-j7g3-qm5c-2j6r https://cve.radiocsirt.org/vuln/gsd-2016-9471 gsd-2016-9471 https://cve.radiocsirt.org/vuln/gsd-2016-9471