https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 16:24:55 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-261067 EUVD-2026-261067 https://cve.radiocsirt.org/vuln/euvd-2026-261067 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13992 <p>Nagios XI versions prior to &lt; 2024R1.1 is vulnerable to a cross-site scripting (XSS) when a user visits the &#34;missing page&#34; (404) page after following a link from another website. The vulnerable component, page-missing.php, fails to properly validate or escape user-supplied input, allowing an attacker to craft a malicious link that, when visited by a victim, executes arbitrary JavaScript in the victim’s browser within the Nagios XI domain.</p> <p>Nagios XI versions prior to &lt; 2024R1.1 is vulnerable to a cross-site scripting (XSS) when a user visits the &#34;missing page&#34; (404) page after following a link from another website. The vulnerable component, page-missing.php, fails to properly validate or escape user-supplied input, allowing an attacker to craft a malicious link that, when visited by a victim, executes arbitrary JavaScript in the victim’s browser within the Nagios XI domain.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-13992 https://cve.radiocsirt.org/vuln/ghsa-4fg8-97vg-f94j <p>Nagios XI versions prior to &lt; 2024R1.1 is vulnerable to a cross-site scripting (XSS) when a user visits the &#34;missing page&#34; (404) page after following a link from another website. The vulnerable component, page-missing.php, fails to properly validate or escape user-supplied input, allowing an attacker to craft a malicious link that, when visited by a victim, executes arbitrary JavaScript in the victim’s browser within the Nagios XI domain.</p> <p>Nagios XI versions prior to &lt; 2024R1.1 is vulnerable to a cross-site scripting (XSS) when a user visits the &#34;missing page&#34; (404) page after following a link from another website. The vulnerable component, page-missing.php, fails to properly validate or escape user-supplied input, allowing an attacker to craft a malicious link that, when visited by a victim, executes arbitrary JavaScript in the victim’s browser within the Nagios XI domain.</p> https://cve.radiocsirt.org/vuln/ghsa-4fg8-97vg-f94j