https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 08:17:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-4441 EUVD-2026-4441 https://cve.radiocsirt.org/vuln/euvd-2026-4441 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28039 <p>Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated attacker to obtain sensitive information, alter data, or cause a denial-of-service (DoS) condition.</p> <p>Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated attacker to obtain sensitive information, alter data, or cause a denial-of-service (DoS) condition.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-28039 https://cve.radiocsirt.org/vuln/ghsa-rcfj-pc73-hqv6 <p>Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated attacker to obtain sensitive information, alter data, or cause a denial-of-service (DoS) condition.</p> <p>Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated attacker to obtain sensitive information, alter data, or cause a denial-of-service (DoS) condition.</p> https://cve.radiocsirt.org/vuln/ghsa-rcfj-pc73-hqv6 https://cve.radiocsirt.org/vuln/gsd-2024-28039 gsd-2024-28039 https://cve.radiocsirt.org/vuln/gsd-2024-28039 https://cve.radiocsirt.org/vuln/jvndb-2024-000032 <p>FitNesse contains multiple vulnerabilities listed below.&lt;ul&gt;&lt;li&gt;Multiple cross-site scripting (CWE-79) - CVE-2024-23604, CVE-2024-28128&lt;/li&gt;&lt;li&gt;Improper restriction of XML external entity references (CWE-611) -CVE-2024-28039&lt;/li&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2024-28125&lt;/li&gt;&lt;/ul&gt;CVE-2024-23604, CVE-2024-28039, CVE-2024-28125 Kanta Nishitani of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-28128 Yutaka WATANABE of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>FitNesse contains multiple vulnerabilities listed below.&lt;ul&gt;&lt;li&gt;Multiple cross-site scripting (CWE-79) - CVE-2024-23604, CVE-2024-28128&lt;/li&gt;&lt;li&gt;Improper restriction of XML external entity references (CWE-611) -CVE-2024-28039&lt;/li&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2024-28125&lt;/li&gt;&lt;/ul&gt;CVE-2024-23604, CVE-2024-28039, CVE-2024-28125 Kanta Nishitani of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-28128 Yutaka WATANABE of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2024-000032