https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-21T16:31:55.626177+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2018-05183 cnvd-2018-05183 2026-10-21T16:31:56.134890+00:00 cnvd-2018-05183 https://vulnerability.circl.lu/vuln/fkie_cve-2018-5307 fkie_cve-2018-5307 2026-10-21T16:31:56.134940+00:00

Multiple cross-site scripting (XSS) vulnerabilities in Sonatype Nexus Repository Manager (aka NXRM) 2.x before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via (1) the repoId or (2) format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; (3) the filename in the "File Upload" functionality of the Staging Upload; (4) the username when creating a new user; or (5) the IQ Server URL field in the IQ Server Connection functionality.

 https://vulnerability.circl.lu/vuln/ghsa-m5jh-j7h5-94w3 GHSA-m5jh-j7h5-94w3 2026-10-21T16:31:56.134997+00:00

Multiple cross-site scripting (XSS) vulnerabilities in Sonatype Nexus Repository Manager (aka NXRM) 2.x before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via (1) the repoId or (2) format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; (3) the filename in the "File Upload" functionality of the Staging Upload; (4) the username when creating a new user; or (5) the IQ Server URL field in the IQ Server Connection functionality.

 https://vulnerability.circl.lu/vuln/gsd-2018-5307 gsd-2018-5307 2026-10-21T16:31:56.135021+00:00 gsd-2018-5307