https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:50:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2018-01279 bdu:2018-01279 https://cve.radiocsirt.org/vuln/bdu:2018-01279 https://cve.radiocsirt.org/vuln/certfr-2017-avi-429 certfr-2017-avi-429 https://cve.radiocsirt.org/vuln/certfr-2017-avi-429 https://cve.radiocsirt.org/vuln/cnvd-2017-38257 cnvd-2017-38257 https://cve.radiocsirt.org/vuln/cnvd-2017-38257 https://cve.radiocsirt.org/vuln/euvd-2026-197662 EUVD-2026-197662 https://cve.radiocsirt.org/vuln/euvd-2026-197662 https://cve.radiocsirt.org/vuln/fkie_cve-2017-14186 <p>A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web portal allows a remote user to inject arbitrary web script or HTML in the context of the victim&#39;s browser via the login redir parameter. An URL Redirection attack may also be feasible by injecting an external URL via the affected parameter.</p> <p>A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web portal allows a remote user to inject arbitrary web script or HTML in the context of the victim&#39;s browser via the login redir parameter. An URL Redirection attack may also be feasible by injecting an external URL via the affected parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-14186 https://cve.radiocsirt.org/vuln/ghsa-c8pf-wf99-pr3g <p>A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web portal allows a remote user to inject arbitrary web script or HTML in the context of the victim&#39;s browser via the login redir parameter. An URL Redirection attack may also be feasible by injecting an external URL via the affected parameter.</p> <p>A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web portal allows a remote user to inject arbitrary web script or HTML in the context of the victim&#39;s browser via the login redir parameter. An URL Redirection attack may also be feasible by injecting an external URL via the affected parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-c8pf-wf99-pr3g https://cve.radiocsirt.org/vuln/gsd-2017-14186 gsd-2017-14186 https://cve.radiocsirt.org/vuln/gsd-2017-14186