https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:51:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-217480 EUVD-2026-217480 https://cve.radiocsirt.org/vuln/euvd-2026-217480 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5410 <p>Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.</p> <p>Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-5410 https://cve.radiocsirt.org/vuln/icsa-25-044-15 <p>A stored cross-site scripting can be triggered by placing JavaScript code into the SSID input field of the web interface. An attacker could exploit this vulnerability by luring an authenticated user to visit a malicious website. The filename parameter of a configuration file upload is prone to a command injection vulnerability. This vulnerability can only be exploited if a user is authenticated to the web interface. An attacker could invoke commands and gain full control over the device.</p> <p>A stored cross-site scripting can be triggered by placing JavaScript code into the SSID input field of the web interface. An attacker could exploit this vulnerability by luring an authenticated user to visit a malicious website. The filename parameter of a configuration file upload is prone to a command injection vulnerability. This vulnerability can only be exploited if a user is authenticated to the web interface. An attacker could invoke commands and gain full control over the device.</p> https://cve.radiocsirt.org/vuln/icsa-25-044-15