https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 11:36:42 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84224 <p>The Kirki WordPress plugin before 6.3.2 does not validate the host of a URL it is given before fetching it, allowing users with editor-level access and above to make the site issue requests to internal services that are not otherwise reachable, and to tell which of those are live from the response.</p> <p>The Kirki WordPress plugin before 6.3.2 does not validate the host of a URL it is given before fetching it, allowing users with editor-level access and above to make the site issue requests to internal services that are not otherwise reachable, and to tell which of those are live from the response.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-84224 Fri, 09 Oct 2026 09:17:10 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84220 <p>The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes held in comments from being executed when it renders them, and displays comments regardless of their moderation status, allowing unauthenticated visitors to run shortcodes registered on the site and to read private custom fields of the page being viewed.</p> <p>The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes held in comments from being executed when it renders them, and displays comments regardless of their moderation status, allowing unauthenticated visitors to run shortcodes registered on the site and to read private custom fields of the page being viewed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-84220 Fri, 09 Oct 2026 09:17:09 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78022 <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely (&#39;Failing Open&#39;) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.</p> <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely (&#39;Failing Open&#39;) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-78022 Fri, 09 Oct 2026 09:17:09 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78021 <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information exposure.</p> <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information exposure.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-78021 Fri, 09 Oct 2026 09:17:09 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78020 <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution.</p> <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-78020 Fri, 09 Oct 2026 09:17:09 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78019 <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesystem access for attacker, and Remote execution.</p> <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesystem access for attacker, and Remote execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-78019 Fri, 09 Oct 2026 09:17:09 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78018 <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.</p> <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-78018 Fri, 09 Oct 2026 09:17:09 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78017 <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Protection mechanism bypass.</p> <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Protection mechanism bypass.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-78017 Fri, 09 Oct 2026 09:17:08 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78016 <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure and Information tampering.</p> <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure and Information tampering.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-78016 Fri, 09 Oct 2026 09:17:08 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78015 <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.</p> <p>Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-78015 Fri, 09 Oct 2026 09:17:08 +0000