https://vulnerability.circl.lu Latest vulnerabilities published by the CNAs operating under the THA-PSIRT root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Tue, 18 Aug 2026 17:18:56 +0000 https://vulnerability.circl.lu/vuln/cve-2026-9007 Reflected XSS in HCL Notes Reflected XSS in HCL Notes https://vulnerability.circl.lu/vuln/cve-2026-9007 Wed, 15 Jul 2026 15:41:34 +0000 https://vulnerability.circl.lu/vuln/cve-2026-13014 Remote Code Execution vulnerability in "Suspicious" application Remote Code Execution vulnerability in "Suspicious" application https://vulnerability.circl.lu/vuln/cve-2026-13014 Mon, 13 Jul 2026 09:42:45 +0000 https://vulnerability.circl.lu/vuln/cve-2026-6805 Vulnerability on Cryptobox external sharing feature Vulnerability on Cryptobox external sharing feature https://vulnerability.circl.lu/vuln/cve-2026-6805 Thu, 07 May 2026 09:45:42 +0000 https://vulnerability.circl.lu/vuln/cve-2026-6501 Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This issue affects jOpenDocument: 1.5. Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This issue affects jOpenDocument: 1.5. https://vulnerability.circl.lu/vuln/cve-2026-6501 Mon, 04 May 2026 14:26:50 +0000 https://vulnerability.circl.lu/vuln/cve-2026-6500 Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data. This issue affects OpenConcerto: 1.7.5. Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data. This issue affects OpenConcerto: 1.7.5. https://vulnerability.circl.lu/vuln/cve-2026-6500 Mon, 04 May 2026 14:16:41 +0000 https://vulnerability.circl.lu/vuln/cve-2026-6499 Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5. Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5. https://vulnerability.circl.lu/vuln/cve-2026-6499 Mon, 04 May 2026 14:08:03 +0000 https://vulnerability.circl.lu/vuln/cve-2026-5794 Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout https://vulnerability.circl.lu/vuln/cve-2026-5794 Tue, 28 Apr 2026 17:09:55 +0000 https://vulnerability.circl.lu/vuln/cve-2026-3457 Stored XSS vulnerability in Sentinel ACC Stored XSS vulnerability in Sentinel ACC https://vulnerability.circl.lu/vuln/cve-2026-3457 Fri, 27 Mar 2026 09:05:48 +0000 https://vulnerability.circl.lu/vuln/cve-2026-0872 Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon https://vulnerability.circl.lu/vuln/cve-2026-0872 Fri, 13 Feb 2026 08:53:05 +0000 https://vulnerability.circl.lu/vuln/cve-2026-2344 Stored XSS on Plunet BusinessManager Stored XSS on Plunet BusinessManager https://vulnerability.circl.lu/vuln/cve-2026-2344 Wed, 11 Feb 2026 14:53:20 +0000