Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:18:37 +0000 cnvd-2026-14374 https://cve.radiocsirt.org/vuln/cnvd-2026-14374 cnvd-2026-14374 https://cve.radiocsirt.org/vuln/cnvd-2026-14374 EUVD-2026-274350 https://cve.radiocsirt.org/vuln/euvd-2026-274350 EUVD-2026-274350 https://cve.radiocsirt.org/vuln/euvd-2026-274350 fkie_cve-2019-25395 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25395 <p>Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attackers to inject malicious scripts through the HOSTNAME, KEYMAP, and OPENNESS parameters. Attackers can submit POST requests with script payloads to preferences.cgi to store malicious code that executes in the browsers of users accessing the preferences page.</p> <p>Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attackers to inject malicious scripts through the HOSTNAME, KEYMAP, and OPENNESS parameters. Attackers can submit POST requests with script payloads to preferences.cgi to store malicious code that executes in the browsers of users accessing the preferences page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-25395 GHSA-g4hv-3pw6-5x66 https://cve.radiocsirt.org/vuln/ghsa-g4hv-3pw6-5x66 <p>Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attackers to inject malicious scripts through the HOSTNAME, KEYMAP, and OPENNESS parameters. Attackers can submit POST requests with script payloads to preferences.cgi to store malicious code that executes in the browsers of users accessing the preferences page.</p> <p>Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attackers to inject malicious scripts through the HOSTNAME, KEYMAP, and OPENNESS parameters. Attackers can submit POST requests with script payloads to preferences.cgi to store malicious code that executes in the browsers of users accessing the preferences page.</p> https://cve.radiocsirt.org/vuln/ghsa-g4hv-3pw6-5x66