Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 03:49:35 +0000 cnvd-2015-03619 https://cve.radiocsirt.org/vuln/cnvd-2015-03619 cnvd-2015-03619 https://cve.radiocsirt.org/vuln/cnvd-2015-03619 EUVD-2026-91485 https://cve.radiocsirt.org/vuln/euvd-2026-91485 EUVD-2026-91485 https://cve.radiocsirt.org/vuln/euvd-2026-91485 fkie_cve-2015-2944 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2944 <p>Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web script or HTML via the URI, related to (1) org/apache/sling/api/servlets/HtmlResponse and (2) org/apache/sling/servlets/post/HtmlResponse.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web script or HTML via the URI, related to (1) org/apache/sling/api/servlets/HtmlResponse and (2) org/apache/sling/servlets/post/HtmlResponse.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-2944 GHSA-rxvx-44w5-44r7 — Improper Neutralization of Input During Web Page Generation in Apache Sling https://cve.radiocsirt.org/vuln/ghsa-rxvx-44w5-44r7 <p><strong>Affected:</strong> Maven: org.apache.sling:org.apache.sling.api, Maven: org.apache.sling:org.apache.sling.servlets.post</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web script or HTML via the URI, related to (1) org/apache/sling/api/servlets/HtmlResponse and (2) org/apache/sling/servlets/post/HtmlResponse.</p> <p><strong>Affected:</strong> Maven: org.apache.sling:org.apache.sling.api, Maven: org.apache.sling:org.apache.sling.servlets.post</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web script or HTML via the URI, related to (1) org/apache/sling/api/servlets/HtmlResponse and (2) org/apache/sling/servlets/post/HtmlResponse.</p> https://cve.radiocsirt.org/vuln/ghsa-rxvx-44w5-44r7 gsd-2015-2944 https://cve.radiocsirt.org/vuln/gsd-2015-2944 gsd-2015-2944 https://cve.radiocsirt.org/vuln/gsd-2015-2944 jvndb-2015-000069 https://cve.radiocsirt.org/vuln/jvndb-2015-000069 <p>Apache Sling is an open source web application framework provided by The Apache Software Foundation. Sling API and Servlet Post components included in Apache Sling contain a cross-site scripting vulnerability (CWE-79) in the error page and the generation of the job completion. MORI Shingo and Toshiharu Sugiyama of DeNA Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Apache Sling is an open source web application framework provided by The Apache Software Foundation. Sling API and Servlet Post components included in Apache Sling contain a cross-site scripting vulnerability (CWE-79) in the error page and the generation of the job completion. MORI Shingo and Toshiharu Sugiyama of DeNA Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2015-000069