Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 16:26:01 +0000 bdu:2025-05727 https://cve.radiocsirt.org/vuln/bdu:2025-05727 bdu:2025-05727 https://cve.radiocsirt.org/vuln/bdu:2025-05727 certfr-2025-avi-0390 — Une vulnérabilité a été découverte dans les produits VMware. Elle permet à un attaquant de provoquer une injection de c… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0390 certfr-2025-avi-0390 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0390 EUVD-2026-239041 https://cve.radiocsirt.org/vuln/euvd-2026-239041 EUVD-2026-239041 https://cve.radiocsirt.org/vuln/euvd-2026-239041 fkie_cve-2025-22249 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22249 <p>VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious crafted payload URL.</p> <p>VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious crafted payload URL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-22249 GHSA-2r69-79fj-p7wm https://cve.radiocsirt.org/vuln/ghsa-2r69-79fj-p7wm <p>VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious crafted payload URL.</p> <p>VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious crafted payload URL.</p> https://cve.radiocsirt.org/vuln/ghsa-2r69-79fj-p7wm WID-SEC-W-2025-1004 — VMware Cloud Foundation: Schwachstelle ermöglicht Cross-Site Scripting https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1004 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Cloud Foundation ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Cloud Foundation ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1004