Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 12:10:09 +0000 certfr-2024-avi-0742 — De multiples vulnérabilités ont été découvertes dans Synacor Zimbra Collaboration. Elles permettent à un attaquant de p… https://cve.radiocsirt.org/vuln/certfr-2024-avi-0742 certfr-2024-avi-0742 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0742 EUVD-2026-203366 https://cve.radiocsirt.org/vuln/euvd-2026-203366 EUVD-2026-203366 https://cve.radiocsirt.org/vuln/euvd-2026-203366 fkie_cve-2024-45513 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45513 <p>An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting (XSS) vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim&#39;s browser when a crafted vCard (VCF) file is processed and printed. This could lead to unauthorized actions within the victim&#39;s session.</p> <p>An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting (XSS) vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim&#39;s browser when a crafted vCard (VCF) file is processed and printed. This could lead to unauthorized actions within the victim&#39;s session.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45513 GHSA-4mch-p64h-q4jf https://cve.radiocsirt.org/vuln/ghsa-4mch-p64h-q4jf <p>An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting (XSS) vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim&#39;s browser when a crafted vCard (VCF) file is processed and printed. This could lead to unauthorized actions within the victim&#39;s session.</p> <p>An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A stored Cross-Site Scripting (XSS) vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim&#39;s browser when a crafted vCard (VCF) file is processed and printed. This could lead to unauthorized actions within the victim&#39;s session.</p> https://cve.radiocsirt.org/vuln/ghsa-4mch-p64h-q4jf