Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:14:02 +0000 cnvd-2020-53540 https://cve.radiocsirt.org/vuln/cnvd-2020-53540 cnvd-2020-53540 https://cve.radiocsirt.org/vuln/cnvd-2020-53540 EUVD-2026-57720 https://cve.radiocsirt.org/vuln/euvd-2026-57720 EUVD-2026-57720 https://cve.radiocsirt.org/vuln/euvd-2026-57720 fkie_cve-2019-16385 https://cve.radiocsirt.org/vuln/fkie_cve-2019-16385 <p>Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer request, as demonstrated by an example.pdf?mimetype= substring. The victim user must load an application request to view a PDF, containing the malicious payload. This results in a reflected XSS payload being executed.</p> <p>Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer request, as demonstrated by an example.pdf?mimetype= substring. The victim user must load an application request to view a PDF, containing the malicious payload. This results in a reflected XSS payload being executed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-16385 GHSA-8w44-q763-8j6h https://cve.radiocsirt.org/vuln/ghsa-8w44-q763-8j6h <p>Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer request, as demonstrated by an example.pdf?mimetype= substring. The victim user must load an application request to view a PDF, containing the malicious payload. This results in a reflected XSS payload being executed.</p> <p>Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer request, as demonstrated by an example.pdf?mimetype= substring. The victim user must load an application request to view a PDF, containing the malicious payload. This results in a reflected XSS payload being executed.</p> https://cve.radiocsirt.org/vuln/ghsa-8w44-q763-8j6h gsd-2019-16385 https://cve.radiocsirt.org/vuln/gsd-2019-16385 gsd-2019-16385 https://cve.radiocsirt.org/vuln/gsd-2019-16385