https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 21:31:02 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-18749 cnvd-2019-18749 https://cve.radiocsirt.org/vuln/cnvd-2019-18749 https://cve.radiocsirt.org/vuln/euvd-2026-75282 EUVD-2026-75282 https://cve.radiocsirt.org/vuln/euvd-2026-75282 https://cve.radiocsirt.org/vuln/fkie_cve-2017-8334 <p>An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection mechanism which allows an attacker to trick a user who is logged in to the web management interface into executing a cross-site scripting payload on the user&#39;s browser and execute any action on the device provided by the web management interface.</p> <p>An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection mechanism which allows an attacker to trick a user who is logged in to the web management interface into executing a cross-site scripting payload on the user&#39;s browser and execute any action on the device provided by the web management interface.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-8334 https://cve.radiocsirt.org/vuln/ghsa-j53j-qm84-j458 <p>An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection mechanism which allows an attacker to trick a user who is logged in to the web management interface into executing a cross-site scripting payload on the user&#39;s browser and execute any action on the device provided by the web management interface.</p> <p>An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection mechanism which allows an attacker to trick a user who is logged in to the web management interface into executing a cross-site scripting payload on the user&#39;s browser and execute any action on the device provided by the web management interface.</p> https://cve.radiocsirt.org/vuln/ghsa-j53j-qm84-j458 https://cve.radiocsirt.org/vuln/gsd-2017-8334 gsd-2017-8334 https://cve.radiocsirt.org/vuln/gsd-2017-8334