Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 01:34:05 +0000 CVE-2019-25367 — ArangoDB Community Edition 3.4.2-1 XSS via aardvark admin interface https://cve.radiocsirt.org/vuln/cve-2019-25367 <p><strong>Affected:</strong> ArangoDB Community Edition</p> <p>ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface (index.html) through search, user management, and API parameters. Attackers can inject scripts via parameters in /_db/_system/_admin/aardvark/index.html to execute JavaScript in authenticated users&#39; browsers.</p> <p><strong>Affected:</strong> ArangoDB Community Edition</p> <p>ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface (index.html) through search, user management, and API parameters. Attackers can inject scripts via parameters in /_db/_system/_admin/aardvark/index.html to execute JavaScript in authenticated users&#39; browsers.</p> https://cve.radiocsirt.org/vuln/cve-2019-25367