Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:22:36 +0000 fkie_cve-2024-25704 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25704 <p>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because this item is scheduled to be patched at a future time.</p> <p>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because this item is scheduled to be patched at a future time.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-25704 GHSA-ffgg-5wp9-rrp5 https://cve.radiocsirt.org/vuln/ghsa-ffgg-5wp9-rrp5 <p>There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Experience Builder versions &lt;= 11.1 that may allow a remote, authenticated attacker to create a crafted link that is stored in the Experience Builder Embed widget which when loaded could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high.</p> <p>There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Experience Builder versions &lt;= 11.1 that may allow a remote, authenticated attacker to create a crafted link that is stored in the Experience Builder Embed widget which when loaded could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high.</p> https://cve.radiocsirt.org/vuln/ghsa-ffgg-5wp9-rrp5 gsd-2024-25704 https://cve.radiocsirt.org/vuln/gsd-2024-25704 gsd-2024-25704 https://cve.radiocsirt.org/vuln/gsd-2024-25704 WID-SEC-W-2024-0800 — ESRI Portal for ArcGIS: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0800 <p>Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in ESRI ArcGIS ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.</p> <p>Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in ESRI ArcGIS ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0800