Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:07:10 +0000 EUVD-2026-15688 https://cve.radiocsirt.org/vuln/euvd-2026-15688 EUVD-2026-15688 https://cve.radiocsirt.org/vuln/euvd-2026-15688 fkie_cve-2022-28367 https://cve.radiocsirt.org/vuln/fkie_cve-2022-28367 <p>OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content.</p> <p>OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-28367 GHSA-3pqg-4rqg-pg9g — Cross-site Scripting in OWASP AntiSamy https://cve.radiocsirt.org/vuln/ghsa-3pqg-4rqg-pg9g <p><strong>Affected:</strong> Maven: org.owasp.antisamy:antisamy</p> <p>OWASP AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content.</p> <p><strong>Affected:</strong> Maven: org.owasp.antisamy:antisamy</p> <p>OWASP AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content.</p> https://cve.radiocsirt.org/vuln/ghsa-3pqg-4rqg-pg9g gsd-2022-28367 https://cve.radiocsirt.org/vuln/gsd-2022-28367 gsd-2022-28367 https://cve.radiocsirt.org/vuln/gsd-2022-28367 UBUNTU-CVE-2022-28367 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-28367 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libowasp-antisamy-java, Ubuntu:18.04:LTS: libowasp-antisamy-java, Ubuntu:20.04:LTS: libowasp-antisamy-java, Ubuntu:22.04:LTS: libowasp-antisamy-java, Ubuntu:24.04:LTS: libowasp-antisamy-java, Ubuntu:25.10: libowasp-antisamy-java, Ubuntu:26.04:LTS: libowasp-antisamy-java</p> <p>OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libowasp-antisamy-java, Ubuntu:18.04:LTS: libowasp-antisamy-java, Ubuntu:20.04:LTS: libowasp-antisamy-java, Ubuntu:22.04:LTS: libowasp-antisamy-java, Ubuntu:24.04:LTS: libowasp-antisamy-java, Ubuntu:25.10: libowasp-antisamy-java, Ubuntu:26.04:LTS: libowasp-antisamy-java</p> <p>OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-28367 WID-SEC-W-2023-0757 — IBM Maximo Asset Management: Mehrere Schwachstellen ermöglichen Cross-Site Scripting https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0757 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Maximo Asset Management ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Maximo Asset Management ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0757