Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:11:27 +0000 cnvd-2017-36361 https://cve.radiocsirt.org/vuln/cnvd-2017-36361 cnvd-2017-36361 https://cve.radiocsirt.org/vuln/cnvd-2017-36361 EUVD-2026-213537 https://cve.radiocsirt.org/vuln/euvd-2026-213537 EUVD-2026-213537 https://cve.radiocsirt.org/vuln/euvd-2026-213537 fkie_cve-2017-16567 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16567 <p>Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the &#34;Favorites&#34; feature. This vulnerability allows remote attackers to inject and permanently store malicious JavaScript payloads, which are executed when users access the affected functionality. Exploitation of this vulnerability can lead to Session Hijacking and Credential Theft, Execution of unauthorized actions on behalf of users, and Exfiltration of sensitive data. This vulnerability presents a potential risk for widespread exploitation in connected IoT environments.</p> <p>Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the &#34;Favorites&#34; feature. This vulnerability allows remote attackers to inject and permanently store malicious JavaScript payloads, which are executed when users access the affected functionality. Exploitation of this vulnerability can lead to Session Hijacking and Credential Theft, Execution of unauthorized actions on behalf of users, and Exfiltration of sensitive data. This vulnerability presents a potential risk for widespread exploitation in connected IoT environments.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16567 GHSA-g6xh-vmjv-c9qj https://cve.radiocsirt.org/vuln/ghsa-g6xh-vmjv-c9qj <p>Cross-site scripting (XSS) vulnerability in Logitech Media Server 7.9.0 allows remote attackers to inject arbitrary web script or HTML via a &#34;favorite.&#34;</p> <p>Cross-site scripting (XSS) vulnerability in Logitech Media Server 7.9.0 allows remote attackers to inject arbitrary web script or HTML via a &#34;favorite.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-g6xh-vmjv-c9qj gsd-2017-16567 https://cve.radiocsirt.org/vuln/gsd-2017-16567 gsd-2017-16567 https://cve.radiocsirt.org/vuln/gsd-2017-16567