Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 15:03:07 +0000 certa-2010-avi-586 — De multiples vulnérabilités dans RealPlayer permettent à une personne malveillante distante d'exécuter du code arbitrai… https://cve.radiocsirt.org/vuln/certa-2010-avi-586 certa-2010-avi-586 https://cve.radiocsirt.org/vuln/certa-2010-avi-586 EUVD-2026-120604 https://cve.radiocsirt.org/vuln/euvd-2026-120604 EUVD-2026-120604 https://cve.radiocsirt.org/vuln/euvd-2026-120604 fkie_cve-2010-4396 https://cve.radiocsirt.org/vuln/fkie_cve-2010-4396 <p>Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 allows remote attackers to inject arbitrary web script or HTML in the Local Zone by specifying a local file in a NavigateToURL action, as demonstrated by a local skin file.</p> <p>Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 allows remote attackers to inject arbitrary web script or HTML in the Local Zone by specifying a local file in a NavigateToURL action, as demonstrated by a local skin file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-4396 GHSA-7jg7-4vvp-f8cv https://cve.radiocsirt.org/vuln/ghsa-7jg7-4vvp-f8cv <p>Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 allows remote attackers to inject arbitrary web script or HTML in the Local Zone by specifying a local file in a NavigateToURL action, as demonstrated by a local skin file.</p> <p>Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 allows remote attackers to inject arbitrary web script or HTML in the Local Zone by specifying a local file in a NavigateToURL action, as demonstrated by a local skin file.</p> https://cve.radiocsirt.org/vuln/ghsa-7jg7-4vvp-f8cv gsd-2010-4396 https://cve.radiocsirt.org/vuln/gsd-2010-4396 gsd-2010-4396 https://cve.radiocsirt.org/vuln/gsd-2010-4396