https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 03:10:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-01884 bdu:2025-01884 https://cve.radiocsirt.org/vuln/bdu:2025-01884 https://cve.radiocsirt.org/vuln/certfr-2021-avi-032 certfr-2021-avi-032 https://cve.radiocsirt.org/vuln/certfr-2021-avi-032 https://cve.radiocsirt.org/vuln/cnvd-2021-11074 cnvd-2021-11074 https://cve.radiocsirt.org/vuln/cnvd-2021-11074 https://cve.radiocsirt.org/vuln/euvd-2026-334236 EUVD-2026-334236 https://cve.radiocsirt.org/vuln/euvd-2026-334236 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25299 <p>Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his/her session cookies or it can be chained with the previous bugs to get one-click remote command execution (RCE) on the Nagios XI server.</p> <p>Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his/her session cookies or it can be chained with the previous bugs to get one-click remote command execution (RCE) on the Nagios XI server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-25299 https://cve.radiocsirt.org/vuln/ghsa-wc62-jg96-f7jf <p>Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his/her session cookies or it can be chained with the previous bugs to get one-click remote command execution (RCE) on the Nagios XI server.</p> <p>Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his/her session cookies or it can be chained with the previous bugs to get one-click remote command execution (RCE) on the Nagios XI server.</p> https://cve.radiocsirt.org/vuln/ghsa-wc62-jg96-f7jf https://cve.radiocsirt.org/vuln/gsd-2021-25299 gsd-2021-25299 https://cve.radiocsirt.org/vuln/gsd-2021-25299