https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:53:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-04506 bdu:2020-04506 https://cve.radiocsirt.org/vuln/bdu:2020-04506 https://cve.radiocsirt.org/vuln/euvd-2026-56659 EUVD-2026-56659 https://cve.radiocsirt.org/vuln/euvd-2026-56659 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14862 <p>There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.</p> <p>There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-14862 https://cve.radiocsirt.org/vuln/ghsa-vcjj-xf2r-mwvc <p><strong>Affected:</strong> npm: knockout</p> <p>There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.</p> <p><strong>Affected:</strong> npm: knockout</p> <p>There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.</p> https://cve.radiocsirt.org/vuln/ghsa-vcjj-xf2r-mwvc https://cve.radiocsirt.org/vuln/gsd-2019-14862 gsd-2019-14862 https://cve.radiocsirt.org/vuln/gsd-2019-14862 https://cve.radiocsirt.org/vuln/rhsa-2019:4069 <p>knockout: Cross-site Scripting (XSS) attacks due to not escaping the name attribute. angular: Cross-site Scripting (XSS) due to no proper sanitization of xlink:href attributes</p> <p>knockout: Cross-site Scripting (XSS) attacks due to not escaping the name attribute. angular: Cross-site Scripting (XSS) due to no proper sanitization of xlink:href attributes</p> https://cve.radiocsirt.org/vuln/rhsa-2019:4069 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14862 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: node-knockout</p> <p>There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: node-knockout</p> <p>There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14862 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2181 <p>Ein Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2181