Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:39:49 +0000 EUVD-2026-121227 https://cve.radiocsirt.org/vuln/euvd-2026-121227 EUVD-2026-121227 https://cve.radiocsirt.org/vuln/euvd-2026-121227 fkie_cve-2009-0038 https://cve.radiocsirt.org/vuln/fkie_cve-2009-0038 <p>Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) description parameter to console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) description parameter to console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-0038 GHSA-c372-x57p-6x7v — Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities https://cve.radiocsirt.org/vuln/ghsa-c372-x57p-6x7v <p><strong>Affected:</strong> Maven: org.apache.geronimo.plugins:console</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) description parameter to console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/.</p> <p><strong>Affected:</strong> Maven: org.apache.geronimo.plugins:console</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) description parameter to console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/.</p> https://cve.radiocsirt.org/vuln/ghsa-c372-x57p-6x7v gsd-2009-0038 https://cve.radiocsirt.org/vuln/gsd-2009-0038 gsd-2009-0038 https://cve.radiocsirt.org/vuln/gsd-2009-0038