https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 01:38:34 +0000 https://vulnerability.circl.lu/vuln/bdu:2025-15430 bdu:2025-15430 https://vulnerability.circl.lu/vuln/bdu:2025-15430 https://vulnerability.circl.lu/vuln/fkie_cve-2016-15049 <p>Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting (XSS) in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in the victim’s browser within the application origin.</p> <p>Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting (XSS) in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in the victim’s browser within the application origin.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2016-15049 https://vulnerability.circl.lu/vuln/ghsa-fjxm-h5hx-rv42 <p>Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting (XSS) in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in the victim’s browser within the application origin.</p> <p>Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting (XSS) in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in the victim’s browser within the application origin.</p> https://vulnerability.circl.lu/vuln/ghsa-fjxm-h5hx-rv42