https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:31:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-253849 EUVD-2026-253849 https://cve.radiocsirt.org/vuln/euvd-2026-253849 https://cve.radiocsirt.org/vuln/fkie_cve-2025-35034 <p>Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the &#39;portlet_user_id&#39; URL parameter. A remote, unauthenticated attacker can craft a URL that can execute arbitrary JavaScript in the victim&#39;s browser. This issue is fixed as of 2025-03-14.</p> <p>Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the &#39;portlet_user_id&#39; URL parameter. A remote, unauthenticated attacker can craft a URL that can execute arbitrary JavaScript in the victim&#39;s browser. This issue is fixed as of 2025-03-14.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-35034 https://cve.radiocsirt.org/vuln/ghsa-jfjr-7g29-6mpr <p>Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the &#39;portlet_user_id&#39; URL parameter. A remote, unauthenticated attacker can craft a URL that can execute arbitrary JavaScript in the victim&#39;s browser. This issue is fixed as of 2025-03-14.</p> <p>Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the &#39;portlet_user_id&#39; URL parameter. A remote, unauthenticated attacker can craft a URL that can execute arbitrary JavaScript in the victim&#39;s browser. This issue is fixed as of 2025-03-14.</p> https://cve.radiocsirt.org/vuln/ghsa-jfjr-7g29-6mpr https://cve.radiocsirt.org/vuln/va-25-272-01 <p>Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the &#39;Demographic Information&#39; page. This content will be rendered and executed when a victim accesses it. This issue is fixed as of 2025-03-14. Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on behalf of that administrative user. This issue is fixed as of 2025-04-08. Medical Informatics Engineering Enterprise Health includes the user&#39;s current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08. Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08. Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14. Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the &#39;portlet_user_id&#39; URL parameter. A remote, unauthenticated attacker can craft a URL that can execute arb…</p> <p>Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the &#39;Demographic Information&#39; page. This content will be rendered and executed when a victim accesses it. This issue is fixed as of 2025-03-14. Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on behalf of that administrative user. This issue is fixed as of 2025-04-08. Medical Informatics Engineering Enterprise Health includes the user&#39;s current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08. Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08. Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14. Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the &#39;portlet_user_id&#39; URL parameter. A remote, unauthenticated attacker can craft a URL that can execute arb…</p> https://cve.radiocsirt.org/vuln/va-25-272-01