https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 05:20:22 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-41533 cnvd-2020-41533 https://cve.radiocsirt.org/vuln/cnvd-2020-41533 https://cve.radiocsirt.org/vuln/euvd-2026-60239 EUVD-2026-60239 https://cve.radiocsirt.org/vuln/euvd-2026-60239 https://cve.radiocsirt.org/vuln/fkie_cve-2019-20802 <p>An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application&#39;s file-transfer web server improperly displays directory names, leading to Stored XSS, which may be used to steal a user&#39;s data. This requires user interaction because there is no known direct way for an attacker to create a crafted directory name on a victim&#39;s device. However, a crafted directory name can occur if a victim extracts a ZIP archive that was provided by an attacker.</p> <p>An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application&#39;s file-transfer web server improperly displays directory names, leading to Stored XSS, which may be used to steal a user&#39;s data. This requires user interaction because there is no known direct way for an attacker to create a crafted directory name on a victim&#39;s device. However, a crafted directory name can occur if a victim extracts a ZIP archive that was provided by an attacker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-20802 https://cve.radiocsirt.org/vuln/ghsa-75m5-c552-3jp8 <p>An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application&#39;s file-transfer web server improperly displays directory names, leading to Stored XSS, which may be used to steal a user&#39;s data. This requires user interaction because there is no known direct way for an attacker to create a crafted directory name on a victim&#39;s device. However, a crafted directory name can occur if a victim extracts a ZIP archive that was provided by an attacker.</p> <p>An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application&#39;s file-transfer web server improperly displays directory names, leading to Stored XSS, which may be used to steal a user&#39;s data. This requires user interaction because there is no known direct way for an attacker to create a crafted directory name on a victim&#39;s device. However, a crafted directory name can occur if a victim extracts a ZIP archive that was provided by an attacker.</p> https://cve.radiocsirt.org/vuln/ghsa-75m5-c552-3jp8 https://cve.radiocsirt.org/vuln/gsd-2019-20802 gsd-2019-20802 https://cve.radiocsirt.org/vuln/gsd-2019-20802