https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 14:01:09 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-27182 cnvd-2020-27182 https://cve.radiocsirt.org/vuln/cnvd-2020-27182 https://cve.radiocsirt.org/vuln/euvd-2026-35591 EUVD-2026-35591 https://cve.radiocsirt.org/vuln/euvd-2026-35591 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1696 <p>A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.</p> <p>A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-1696 https://cve.radiocsirt.org/vuln/ghsa-59m3-5f56-55x8 <p>A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.</p> <p>A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.</p> https://cve.radiocsirt.org/vuln/ghsa-59m3-5f56-55x8 https://cve.radiocsirt.org/vuln/gsd-2020-1696 gsd-2020-1696 https://cve.radiocsirt.org/vuln/gsd-2020-1696 https://cve.radiocsirt.org/vuln/rhsa-2021:0947 <p>pki-core: stored Cross-site scripting (XSS) in the pki-tps web Activity tab pki-core: unsanitized token parameters in TPS resulting in stored XSS pki-core: Stored XSS in TPS profile creation</p> <p>pki-core: stored Cross-site scripting (XSS) in the pki-tps web Activity tab pki-core: unsanitized token parameters in TPS resulting in stored XSS pki-core: Stored XSS in TPS profile creation</p> https://cve.radiocsirt.org/vuln/rhsa-2021:0947 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1696 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki</p> <p>A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki</p> <p>A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1696