https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:29:37 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-39649 cnvd-2021-39649 https://cve.radiocsirt.org/vuln/cnvd-2021-39649 https://cve.radiocsirt.org/vuln/euvd-2026-26760 EUVD-2026-26760 https://cve.radiocsirt.org/vuln/euvd-2026-26760 https://cve.radiocsirt.org/vuln/fkie_cve-2021-30151 <p>Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.</p> <p>Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-30151 https://cve.radiocsirt.org/vuln/ghsa-grh7-935j-hg6w <p><strong>Affected:</strong> RubyGems: sidekiq</p> <p>Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.</p> <p><strong>Affected:</strong> RubyGems: sidekiq</p> <p>Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.</p> https://cve.radiocsirt.org/vuln/ghsa-grh7-935j-hg6w https://cve.radiocsirt.org/vuln/gsd-2021-30151 gsd-2021-30151 https://cve.radiocsirt.org/vuln/gsd-2021-30151 https://cve.radiocsirt.org/vuln/rhsa-2022:5498 <p>libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c foreman: Authenticate remote code execution through Sendmail configuration Satellite: Allow unintended SCA certificate to authenticate Candlepin netty: Information disclosure via the local system temporary directory netty: possible request smuggling in HTTP/2 due missing validation netty: Request smuggling via content-length header sidekiq: XSS via the queue name of the live-poll feature python-sqlparse: ReDoS via regular expression in StripComments filter libsolv: heap-based buffer overflow in pool_installable() in src/repo.h libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c rubygem-puma: Inconsistent Interpretation of HTTP Requests (&#39;HTTP Request Smuggling&#39;) in puma logback: remote code execution through JNDI call from within its configuration file netty: control chars in header names may lead to HTTP request smuggling python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through django: potential bypass of an upstream access control based on URL paths libsolv: heap-overflows in resolve_dependencies function django: Denial-of-service possibility in UserAttributeSimilarityValidator django: Potential information disclosure in dictsort template filter django: Potential directory-traversal via Stor…</p> <p>libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c foreman: Authenticate remote code execution through Sendmail configuration Satellite: Allow unintended SCA certificate to authenticate Candlepin netty: Information disclosure via the local system temporary directory netty: possible request smuggling in HTTP/2 due missing validation netty: Request smuggling via content-length header sidekiq: XSS via the queue name of the live-poll feature python-sqlparse: ReDoS via regular expression in StripComments filter libsolv: heap-based buffer overflow in pool_installable() in src/repo.h libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c rubygem-puma: Inconsistent Interpretation of HTTP Requests (&#39;HTTP Request Smuggling&#39;) in puma logback: remote code execution through JNDI call from within its configuration file netty: control chars in header names may lead to HTTP request smuggling python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through django: potential bypass of an upstream access control based on URL paths libsolv: heap-overflows in resolve_dependencies function django: Denial-of-service possibility in UserAttributeSimilarityValidator django: Potential information disclosure in dictsort template filter django: Potential directory-traversal via Stor…</p> https://cve.radiocsirt.org/vuln/rhsa-2022:5498 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-30151 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-sidekiq, Ubuntu:Pro:18.04:LTS: ruby-sidekiq, Ubuntu:Pro:20.04:LTS: ruby-sidekiq</p> <p>Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-sidekiq, Ubuntu:Pro:18.04:LTS: ruby-sidekiq, Ubuntu:Pro:20.04:LTS: ruby-sidekiq</p> <p>Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-30151