https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 08:56:13 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-05340 bdu:2025-05340 https://cve.radiocsirt.org/vuln/bdu:2025-05340 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0099 certfr-2025-avi-0099 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0099 https://cve.radiocsirt.org/vuln/cnvd-2025-07327 cnvd-2025-07327 https://cve.radiocsirt.org/vuln/cnvd-2025-07327 https://cve.radiocsirt.org/vuln/euvd-2026-273398 EUVD-2026-273398 https://cve.radiocsirt.org/vuln/euvd-2026-273398 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24320 <p>A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. This vulnerability is due to an incomplete fix for CVE-2024-31156 https://my.f5.com/manage/s/article/K000138636 .</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. This vulnerability is due to an incomplete fix for CVE-2024-31156 https://my.f5.com/manage/s/article/K000138636 .</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-24320 https://cve.radiocsirt.org/vuln/ghsa-6p7p-wm27-fv53 <p>A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. This vulnerability is due to an incomplete fix for CVE-2024-31156 https://my.f5.com/manage/s/article/K000138636 .</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. This vulnerability is due to an incomplete fix for CVE-2024-31156 https://my.f5.com/manage/s/article/K000138636 .</p> <p>Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/ghsa-6p7p-wm27-fv53 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0287 <p>Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebige Systembefehle auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen und einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebige Systembefehle auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen und einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0287