https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 01:15:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-277426 EUVD-2026-277426 https://cve.radiocsirt.org/vuln/euvd-2026-277426 https://cve.radiocsirt.org/vuln/fkie_cve-2025-60946 <p>Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.</p> <p>Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-60946 https://cve.radiocsirt.org/vuln/ghsa-q4rc-c232-4f3v <p>Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.</p> <p>Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.</p> https://cve.radiocsirt.org/vuln/ghsa-q4rc-c232-4f3v https://cve.radiocsirt.org/vuln/va-26-082-01 <p>Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha. Census CSWeb 8.0.1 allows arbitrary file upload. A remote, authenticated attacker could upload a malicious file, possibly leading to remote code execution. Fixed in 8.1.0 alpha. Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields. A remote, authenticated attacker could store malicious javascript that executes in a victim&#39;s browser. Fixed in 8.1.0 alpha. Census CSWeb 8.0.1 allows &#34;app/config&#34; to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests to configuration files and obtain leaked secrets. Fixed in 8.1.0 alpha.</p> <p>Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha. Census CSWeb 8.0.1 allows arbitrary file upload. A remote, authenticated attacker could upload a malicious file, possibly leading to remote code execution. Fixed in 8.1.0 alpha. Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields. A remote, authenticated attacker could store malicious javascript that executes in a victim&#39;s browser. Fixed in 8.1.0 alpha. Census CSWeb 8.0.1 allows &#34;app/config&#34; to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests to configuration files and obtain leaked secrets. Fixed in 8.1.0 alpha.</p> https://cve.radiocsirt.org/vuln/va-26-082-01