Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 14:40:35 +0000 certfr-2022-avi-063 — De multiples vulnérabilités ont été découvertes dans F5 NGINX. Certaines d'entre elles permettent à un attaquant de pro… https://cve.radiocsirt.org/vuln/certfr-2022-avi-063 certfr-2022-avi-063 https://cve.radiocsirt.org/vuln/certfr-2022-avi-063 cnvd-2022-26843 https://cve.radiocsirt.org/vuln/cnvd-2022-26843 cnvd-2022-26843 https://cve.radiocsirt.org/vuln/cnvd-2022-26843 EUVD-2026-13650 https://cve.radiocsirt.org/vuln/euvd-2026-13650 EUVD-2026-13650 https://cve.radiocsirt.org/vuln/euvd-2026-13650 fkie_cve-2022-23008 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23008 <p>On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the &#34;user&#34; or &#34;admin&#34; role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the &#34;user&#34; or &#34;admin&#34; role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-23008 GHSA-jgrp-9rqg-rqhp https://cve.radiocsirt.org/vuln/ghsa-jgrp-9rqg-rqhp <p>On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the &#34;user&#34; or &#34;admin&#34; role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> <p>On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the &#34;user&#34; or &#34;admin&#34; role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.</p> https://cve.radiocsirt.org/vuln/ghsa-jgrp-9rqg-rqhp gsd-2022-23008 https://cve.radiocsirt.org/vuln/gsd-2022-23008 gsd-2022-23008 https://cve.radiocsirt.org/vuln/gsd-2022-23008