https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:12:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08857 bdu:2023-08857 https://cve.radiocsirt.org/vuln/bdu:2023-08857 https://cve.radiocsirt.org/vuln/euvd-2026-8341 EUVD-2026-8341 https://cve.radiocsirt.org/vuln/euvd-2026-8341 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27990 <p>The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow an authenticated attacker with administrator privileges to store malicious scripts in a vulnerable device. A successful XSS attack could then result in the stored malicious scripts being executed when the user visits the Logs page of the GUI on the device.</p> <p>The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow an authenticated attacker with administrator privileges to store malicious scripts in a vulnerable device. A successful XSS attack could then result in the stored malicious scripts being executed when the user visits the Logs page of the GUI on the device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-27990 https://cve.radiocsirt.org/vuln/ghsa-6qw9-cqm2-283v <p>The XSS vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow an authenticated attacker with administrator privileges to store malicious scripts in a vulnerable device. A successful XSS attack could then result in the stored malicious scripts being executed when the user visits the Logs page of the GUI on the device.</p> <p>The XSS vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow an authenticated attacker with administrator privileges to store malicious scripts in a vulnerable device. A successful XSS attack could then result in the stored malicious scripts being executed when the user visits the Logs page of the GUI on the device.</p> https://cve.radiocsirt.org/vuln/ghsa-6qw9-cqm2-283v https://cve.radiocsirt.org/vuln/gsd-2023-27990 gsd-2023-27990 https://cve.radiocsirt.org/vuln/gsd-2023-27990 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1070 <p>Ein Angreifer kann mehrere Schwachstellen in Zyxel Firewall ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service zu verursachen, einen Cross Site Scripting Angriff durchzuführen oder die Konfiguration zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Zyxel Firewall ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service zu verursachen, einen Cross Site Scripting Angriff durchzuführen oder die Konfiguration zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1070