Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:43:07 +0000 cnvd-2017-28628 https://cve.radiocsirt.org/vuln/cnvd-2017-28628 cnvd-2017-28628 https://cve.radiocsirt.org/vuln/cnvd-2017-28628 EUVD-2026-76175 https://cve.radiocsirt.org/vuln/euvd-2026-76175 EUVD-2026-76175 https://cve.radiocsirt.org/vuln/euvd-2026-76175 fkie_cve-2017-9979 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9979 <p>On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, if the REST call invoked does not exist, an error will be triggered containing the invalid method previously invoked. The response sent to the user isn&#39;t sanitized in this case. An attacker can leverage this issue by including arbitrary HTML or JavaScript code as a parameter, aka XSS.</p> <p>On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, if the REST call invoked does not exist, an error will be triggered containing the invalid method previously invoked. The response sent to the user isn&#39;t sanitized in this case. An attacker can leverage this issue by including arbitrary HTML or JavaScript code as a parameter, aka XSS.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9979 GHSA-4fcm-h243-v25v https://cve.radiocsirt.org/vuln/ghsa-4fcm-h243-v25v <p>On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, if the REST call invoked does not exist, an error will be triggered containing the invalid method previously invoked. The response sent to the user isn&#39;t sanitized in this case. An attacker can leverage this issue by including arbitrary HTML or JavaScript code as a parameter, aka XSS.</p> <p>On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, if the REST call invoked does not exist, an error will be triggered containing the invalid method previously invoked. The response sent to the user isn&#39;t sanitized in this case. An attacker can leverage this issue by including arbitrary HTML or JavaScript code as a parameter, aka XSS.</p> https://cve.radiocsirt.org/vuln/ghsa-4fcm-h243-v25v gsd-2017-9979 https://cve.radiocsirt.org/vuln/gsd-2017-9979 gsd-2017-9979 https://cve.radiocsirt.org/vuln/gsd-2017-9979