Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 00:17:01 +0000 cnvd-2026-12895 https://cve.radiocsirt.org/vuln/cnvd-2026-12895 cnvd-2026-12895 https://cve.radiocsirt.org/vuln/cnvd-2026-12895 EUVD-2026-267156 https://cve.radiocsirt.org/vuln/euvd-2026-267156 EUVD-2026-267156 https://cve.radiocsirt.org/vuln/euvd-2026-267156 fkie_cve-2026-23794 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23794 <p>Reflected XSS in Apache Syncope&#39;s Enduser Login page. An attacker that tricks a legitimate user into clicking a malicious link and logging in to Syncope Enduser could steal that user&#39;s credentials.</p> <p>This issue affects Apache Syncope: from 3.0 through 3.0.15, from 4.0 through 4.0.3.</p> <p>Users are recommended to upgrade to version 3.0.16 / 4.0.4, which fix this issue.</p> <p>Reflected XSS in Apache Syncope&#39;s Enduser Login page. An attacker that tricks a legitimate user into clicking a malicious link and logging in to Syncope Enduser could steal that user&#39;s credentials.</p> <p>This issue affects Apache Syncope: from 3.0 through 3.0.15, from 4.0 through 4.0.3.</p> <p>Users are recommended to upgrade to version 3.0.16 / 4.0.4, which fix this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-23794 GHSA-v84m-gfw5-hm2w — Apache Syncope: Reflected XSS on Enduser Login https://cve.radiocsirt.org/vuln/ghsa-v84m-gfw5-hm2w <p><strong>Affected:</strong> Maven: org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui</p> <p>Reflected XSS in Apache Syncope&#39;s Enduser Login page.</p> <p>An attacker that tricks a legitimate user into clicking a malicious link and logging in to Syncope Enduser could steal that user&#39;s credentials.</p> <p>This issue affects Apache Syncope: from 3.0 through 3.0.15, from 4.0 through 4.0.3.</p> <p>Users are recommended to upgrade to version 3.0.16 / 4.0.4, which fix this issue.</p> <p><strong>Affected:</strong> Maven: org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui</p> <p>Reflected XSS in Apache Syncope&#39;s Enduser Login page.</p> <p>An attacker that tricks a legitimate user into clicking a malicious link and logging in to Syncope Enduser could steal that user&#39;s credentials.</p> <p>This issue affects Apache Syncope: from 3.0 through 3.0.15, from 4.0 through 4.0.3.</p> <p>Users are recommended to upgrade to version 3.0.16 / 4.0.4, which fix this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-v84m-gfw5-hm2w