Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:42:29 +0000 bdu:2025-15631 https://cve.radiocsirt.org/vuln/bdu:2025-15631 bdu:2025-15631 https://cve.radiocsirt.org/vuln/bdu:2025-15631 certfr-2025-avi-1088 — De multiples vulnérabilités ont été découvertes dans Ivanti Endpoint Manager (EPM). Certaines d'entre elles permettent… https://cve.radiocsirt.org/vuln/certfr-2025-avi-1088 certfr-2025-avi-1088 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1088 cnvd-2026-02910 https://cve.radiocsirt.org/vuln/cnvd-2026-02910 cnvd-2026-02910 https://cve.radiocsirt.org/vuln/cnvd-2026-02910 EUVD-2026-271404 https://cve.radiocsirt.org/vuln/euvd-2026-271404 EUVD-2026-271404 https://cve.radiocsirt.org/vuln/euvd-2026-271404 fkie_cve-2025-10573 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10573 <p>Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the context of an administrator session. User interaction is required.</p> <p>Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the context of an administrator session. User interaction is required.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-10573 GHSA-vc8q-w37r-fmjc https://cve.radiocsirt.org/vuln/ghsa-vc8q-w37r-fmjc <p>Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the context of an administrator session. User interaction is required.</p> <p>Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the context of an administrator session. User interaction is required.</p> https://cve.radiocsirt.org/vuln/ghsa-vc8q-w37r-fmjc WID-SEC-W-2025-2796 — Ivanti Endpoint Manager: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2796 <p>Ein Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um Cross-Site-Scripting-Angriffe zu starten, beliebigen Code auszuführen und Daten zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um Cross-Site-Scripting-Angriffe zu starten, beliebigen Code auszuführen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2796