https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:08:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-03379 bdu:2026-03379 https://cve.radiocsirt.org/vuln/bdu:2026-03379 https://cve.radiocsirt.org/vuln/euvd-2026-262837 EUVD-2026-262837 https://cve.radiocsirt.org/vuln/euvd-2026-262837 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66554 <p>Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5.5.4, 6.0.6, and 7.2.5, a malicious user was able to modify their organisation and title field to load additional CSS files. Javascript and other options were correctly blocked by the content security policy of the Nextcloud Server code. This vulnerability is fixed in 5.5.4, 6.0.6, and 7.2.5.</p> <p>Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5.5.4, 6.0.6, and 7.2.5, a malicious user was able to modify their organisation and title field to load additional CSS files. Javascript and other options were correctly blocked by the content security policy of the Nextcloud Server code. This vulnerability is fixed in 5.5.4, 6.0.6, and 7.2.5.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-66554 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2757 <p>Ein Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2757