Most recent entries from all

Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:12:45 +0000 EUVD-2026-265196 https://cve.radiocsirt.org/vuln/euvd-2026-265196 EUVD-2026-265196 https://cve.radiocsirt.org/vuln/euvd-2026-265196 fkie_cve-2025-67634 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67634 <p>The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file into the page. The JavaScript would execute in the context of the user's browser when the user submits the page (clicks 'Next').</p> <p>The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file into the page. The JavaScript would execute in the context of the user's browser when the user submits the page (clicks 'Next').</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-67634 GHSA-5m87-3r8p-jp6j https://cve.radiocsirt.org/vuln/ghsa-5m87-3r8p-jp6j <p>The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file into the page. The JavaScript would execute in the context of the user's browser when the user submits the page (clicks 'Next').</p> <p>The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file into the page. The JavaScript would execute in the context of the user's browser when the user submits the page (clicks 'Next').</p> https://cve.radiocsirt.org/vuln/ghsa-5m87-3r8p-jp6j VA-25-345-01 — CISA Software Acquisition Guide Supplier Response Web Tool XSS https://cve.radiocsirt.org/vuln/va-25-345-01 <p>The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file into the page. The JavaScript would execute in the context of the user's browser when the user submits the page (clicks 'Next').</p> <p>The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file into the page. The JavaScript would execute in the context of the user's browser when the user submits the page (clicks 'Next').</p> https://cve.radiocsirt.org/vuln/va-25-345-01