Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:24:59 +0000 certfr-2022-avi-1046 — De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer une exécution… https://cve.radiocsirt.org/vuln/certfr-2022-avi-1046 certfr-2022-avi-1046 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1046 EUVD-2026-176762 https://cve.radiocsirt.org/vuln/euvd-2026-176762 EUVD-2026-176762 https://cve.radiocsirt.org/vuln/euvd-2026-176762 fkie_cve-2021-23414 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23414 <p>This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.</p> <p>This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-23414 FSA-202301 — Festo: Cross-Site-Scripting (XSS) vulnerability in LX-Appliance https://cve.radiocsirt.org/vuln/fsa-202301 <p>A vulnerability in the Video.js package could allow a user of LX Appliance, with a high privilege account (i.e., with the &#34;Teacher&#34; role), to craft a malicious course and launch an XSS attack.</p> <p>A vulnerability in the Video.js package could allow a user of LX Appliance, with a high privilege account (i.e., with the &#34;Teacher&#34; role), to craft a malicious course and launch an XSS attack.</p> https://cve.radiocsirt.org/vuln/fsa-202301 GHSA-pp7m-6j83-m7r6 — Cross-site Scripting in video.js https://cve.radiocsirt.org/vuln/ghsa-pp7m-6j83-m7r6 <p><strong>Affected:</strong> npm: video.js</p> <p>This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.</p> <p><strong>Affected:</strong> npm: video.js</p> <p>This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/ghsa-pp7m-6j83-m7r6 gsd-2021-23414 https://cve.radiocsirt.org/vuln/gsd-2021-23414 gsd-2021-23414 https://cve.radiocsirt.org/vuln/gsd-2021-23414 ICSA-25-343-02 — Festo LX Appliance https://cve.radiocsirt.org/vuln/icsa-25-343-02 <p>A vulnerability in the Video.js package could allow a user of LX Appliance, with a high privilege account (i.e., with the &#34;Teacher&#34; role), to craft a malicious course and launch an XSS attack.</p> <p>A vulnerability in the Video.js package could allow a user of LX Appliance, with a high privilege account (i.e., with the &#34;Teacher&#34; role), to craft a malicious course and launch an XSS attack.</p> https://cve.radiocsirt.org/vuln/icsa-25-343-02