https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 02:43:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-187564 EUVD-2026-187564 https://cve.radiocsirt.org/vuln/euvd-2026-187564 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38343 <p>An XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti Endpoint Manager before 2022 SU4. External entity references are enabled in the XML parser configuration. Exploitation of this vulnerability can lead to file disclosure or Server Side Request Forgery.</p> <p>An XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti Endpoint Manager before 2022 SU4. External entity references are enabled in the XML parser configuration. Exploitation of this vulnerability can lead to file disclosure or Server Side Request Forgery.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-38343 https://cve.radiocsirt.org/vuln/ghsa-rfx9-vc4c-6rwm <p>An XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti Endpoint Manager before 2022 SU4. External entity references are enabled in the XML parser configuration. Exploitation of this vulnerability can lead to file disclosure or Server Side Request Forgery.</p> <p>An XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti Endpoint Manager before 2022 SU4. External entity references are enabled in the XML parser configuration. Exploitation of this vulnerability can lead to file disclosure or Server Side Request Forgery.</p> https://cve.radiocsirt.org/vuln/ghsa-rfx9-vc4c-6rwm https://cve.radiocsirt.org/vuln/gsd-2023-38343 gsd-2023-38343 https://cve.radiocsirt.org/vuln/gsd-2023-38343 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2421 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um Informationen offenzulegen oder einen Server Side Request Forgery-Angriff durchzuführen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um Informationen offenzulegen oder einen Server Side Request Forgery-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2421