Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:21:14 +0000 EUVD-2026-46155 https://cve.radiocsirt.org/vuln/euvd-2026-46155 EUVD-2026-46155 https://cve.radiocsirt.org/vuln/euvd-2026-46155 fkie_cve-2020-26564 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26564 <p>ObjectPlanet Opinio before 7.15 allows XXE attacks via three steps: modify a .css file to have &lt;!ENTITY content, create a .xml file for a generic survey template (containing a link to this .css file), and import this .xml file at the survey/admin/folderSurvey.do?action=viewImportSurvey[&#39;importFile&#39;] URI. The XXE can then be triggered at a admin/preview.do?action=previewSurvey&amp;surveyId= URI.</p> <p>ObjectPlanet Opinio before 7.15 allows XXE attacks via three steps: modify a .css file to have &lt;!ENTITY content, create a .xml file for a generic survey template (containing a link to this .css file), and import this .xml file at the survey/admin/folderSurvey.do?action=viewImportSurvey[&#39;importFile&#39;] URI. The XXE can then be triggered at a admin/preview.do?action=previewSurvey&amp;surveyId= URI.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-26564 GHSA-rr3f-mhhr-6wv3 https://cve.radiocsirt.org/vuln/ghsa-rr3f-mhhr-6wv3 <p>ObjectPlanet Opinio before 7.15 allows XXE attacks via three steps: modify a .css file to have &lt;!ENTITY content, create a .xml file for a generic survey template (containing a link to this .css file), and import this .xml file at the survey/admin/folderSurvey.do?action=viewImportSurvey[&#39;importFile&#39;] URI. The XXE can then be triggered at a admin/preview.do?action=previewSurvey&amp;surveyId= URI.</p> <p>ObjectPlanet Opinio before 7.15 allows XXE attacks via three steps: modify a .css file to have &lt;!ENTITY content, create a .xml file for a generic survey template (containing a link to this .css file), and import this .xml file at the survey/admin/folderSurvey.do?action=viewImportSurvey[&#39;importFile&#39;] URI. The XXE can then be triggered at a admin/preview.do?action=previewSurvey&amp;surveyId= URI.</p> https://cve.radiocsirt.org/vuln/ghsa-rr3f-mhhr-6wv3 gsd-2020-26564 https://cve.radiocsirt.org/vuln/gsd-2020-26564 gsd-2020-26564 https://cve.radiocsirt.org/vuln/gsd-2020-26564