https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 08:10:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06647 bdu:2025-06647 https://cve.radiocsirt.org/vuln/bdu:2025-06647 https://cve.radiocsirt.org/vuln/euvd-2026-239103 EUVD-2026-239103 https://cve.radiocsirt.org/vuln/euvd-2026-239103 https://cve.radiocsirt.org/vuln/fkie_cve-2024-51447 <p>A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions &lt; V2404.2). The login implementation of the affected application contains an observable response discrepancy vulnerability when validating usernames. This could allow an unauthenticated remote attacker to distinguish between valid and invalid usernames.</p> <p>A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions &lt; V2404.2). The login implementation of the affected application contains an observable response discrepancy vulnerability when validating usernames. This could allow an unauthenticated remote attacker to distinguish between valid and invalid usernames.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-51447 https://cve.radiocsirt.org/vuln/ghsa-xw86-q236-p57v <p>A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions &lt; V2404.2). The login implementation of the affected application contains an observable response discrepancy vulnerability when validating usernames. This could allow an unauthenticated remote attacker to distinguish between valid and invalid usernames.</p> <p>A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions &lt; V2404.2). The login implementation of the affected application contains an observable response discrepancy vulnerability when validating usernames. This could allow an unauthenticated remote attacker to distinguish between valid and invalid usernames.</p> https://cve.radiocsirt.org/vuln/ghsa-xw86-q236-p57v https://cve.radiocsirt.org/vuln/icsa-25-135-11 <p>The application insufficiently validates user input for database read queries. This could allow an authenticated remote attacker to conduct an SQL injection attack that bypasses authorization controls and allows to download any data from the application&#39;s database. The affected application contains a XML External Entity Injection (XXE) vulnerability in the docx import feature. This could allow an authenticated remote attacker to read arbitrary data from the application server. The file upload feature of the affected application improperly sanitizes xml files. This could allow an authenticated remote attacker to conduct a stored cross-site scripting attack by uploading specially crafted xml files that are later downloaded and viewed by other users of the application. The login implementation of the affected application contains an observable response discrepancy vulnerability when validating usernames. This could allow an unauthenticated remote attacker to distinguish between valid and invalid usernames.</p> <p>The application insufficiently validates user input for database read queries. This could allow an authenticated remote attacker to conduct an SQL injection attack that bypasses authorization controls and allows to download any data from the application&#39;s database. The affected application contains a XML External Entity Injection (XXE) vulnerability in the docx import feature. This could allow an authenticated remote attacker to read arbitrary data from the application server. The file upload feature of the affected application improperly sanitizes xml files. This could allow an authenticated remote attacker to conduct a stored cross-site scripting attack by uploading specially crafted xml files that are later downloaded and viewed by other users of the application. The login implementation of the affected application contains an observable response discrepancy vulnerability when validating usernames. This could allow an unauthenticated remote attacker to distinguish between valid and invalid usernames.</p> https://cve.radiocsirt.org/vuln/icsa-25-135-11