https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:53:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-160009 EUVD-2026-160009 https://cve.radiocsirt.org/vuln/euvd-2026-160009 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3850 <p>Uniview NVR301-04S2-P4 is vulnerable to reflected cross-site scripting attack (XSS). An attacker could send a user a URL that if clicked on could execute malicious JavaScript in their browser. This vulnerability also requires authentication before it can be exploited, so the scope and severity is limited. Also, even if JavaScript is executed, no additional benefits are obtained.</p> <p>Uniview NVR301-04S2-P4 is vulnerable to reflected cross-site scripting attack (XSS). An attacker could send a user a URL that if clicked on could execute malicious JavaScript in their browser. This vulnerability also requires authentication before it can be exploited, so the scope and severity is limited. Also, even if JavaScript is executed, no additional benefits are obtained.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3850 https://cve.radiocsirt.org/vuln/ghsa-r4pf-fm74-w9rw <p>Uniview NVR301-04S2-P4 is vulnerable to reflected cross-site scripting attack (XSS). An attacker could send a user a URL that if clicked on could execute malicious JavaScript in their browser. This vulnerability also requires authentication before it can be exploited, so the scope and severity is limited. Also, even if JavaScript is executed, no additional benefits are obtained.</p> <p>Uniview NVR301-04S2-P4 is vulnerable to reflected cross-site scripting attack (XSS). An attacker could send a user a URL that if clicked on could execute malicious JavaScript in their browser. This vulnerability also requires authentication before it can be exploited, so the scope and severity is limited. Also, even if JavaScript is executed, no additional benefits are obtained.</p> https://cve.radiocsirt.org/vuln/ghsa-r4pf-fm74-w9rw https://cve.radiocsirt.org/vuln/gsd-2024-3850 gsd-2024-3850 https://cve.radiocsirt.org/vuln/gsd-2024-3850 https://cve.radiocsirt.org/vuln/icsa-24-156-01 <p>The affected product is vulnerable to reflected cross-site scripting attack (XSS). An attacker could send a user a URL that if clicked on could execute malicious JavaScript in their browser. This vulnerability affects both authenticated and unauthenticated pages under the /LAPI/ directory. As session data is unavailable, the scope is limited.</p> <p>The affected product is vulnerable to reflected cross-site scripting attack (XSS). An attacker could send a user a URL that if clicked on could execute malicious JavaScript in their browser. This vulnerability affects both authenticated and unauthenticated pages under the /LAPI/ directory. As session data is unavailable, the scope is limited.</p> https://cve.radiocsirt.org/vuln/icsa-24-156-01