<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from cvelistv5</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 30 Jun 2026 04:18:31 +0000</lastBuildDate>
    <item>
      <title>cve-2024-45779</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-45779</link>
      <description>Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser</description>
      <content:encoded>Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-45779</guid>
      <pubDate>Mon, 03 Mar 2025 14:25:22 +0000</pubDate>
    </item>
    <item>
      <title>cve-2025-23368</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-23368</link>
      <description>Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli</description>
      <content:encoded>Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-23368</guid>
      <pubDate>Tue, 04 Mar 2025 15:14:47 +0000</pubDate>
    </item>
    <item>
      <title>cve-2025-12543</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-12543</link>
      <description>Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf</description>
      <content:encoded>Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-12543</guid>
      <pubDate>Wed, 07 Jan 2026 16:04:22 +0000</pubDate>
    </item>
    <item>
      <title>cve-2021-47839</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2021-47839</link>
      <description>Marky 0.0.1 - Persistent Cross-Site Scripting</description>
      <content:encoded>Marky 0.0.1 - Persistent Cross-Site Scripting</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2021-47839</guid>
      <pubDate>Fri, 16 Jan 2026 19:09:37 +0000</pubDate>
    </item>
    <item>
      <title>cve-2025-13761</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-13761</link>
      <description>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab</description>
      <content:encoded>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-13761</guid>
      <pubDate>Fri, 09 Jan 2026 10:04:01 +0000</pubDate>
    </item>
    <item>
      <title>cve-2025-13772</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-13772</link>
      <description>Missing Authorization in GitLab</description>
      <content:encoded>Missing Authorization in GitLab</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-13772</guid>
      <pubDate>Fri, 09 Jan 2026 10:04:06 +0000</pubDate>
    </item>
    <item>
      <title>cve-2025-14459</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-14459</link>
      <description>Virt-cdi-controller: unauthorized pvc cloning via dataimportcron</description>
      <content:encoded>Virt-cdi-controller: unauthorized pvc cloning via dataimportcron</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-14459</guid>
      <pubDate>Mon, 26 Jan 2026 19:36:29 +0000</pubDate>
    </item>
    <item>
      <title>cve-2025-15514</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-15514</link>
      <description>Ollama Multi-Modal Model Image Processing NULL Pointer Dereference</description>
      <content:encoded>Ollama Multi-Modal Model Image Processing NULL Pointer Dereference</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-15514</guid>
      <pubDate>Mon, 12 Jan 2026 23:03:52 +0000</pubDate>
    </item>
    <item>
      <title>cve-2025-15059</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-15059</link>
      <description>GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability</description>
      <content:encoded>GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-15059</guid>
      <pubDate>Fri, 23 Jan 2026 02:49:52 +0000</pubDate>
    </item>
    <item>
      <title>cve-2026-29091</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-29091</link>
      <description>Locutus: Remote Code Execution (RCE) in locutus call_user_func_array due to Code Injection</description>
      <content:encoded>Locutus: Remote Code Execution (RCE) in locutus call_user_func_array due to Code Injection</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-29091</guid>
      <pubDate>Fri, 06 Mar 2026 17:48:10 +0000</pubDate>
    </item>
  </channel>
</rss>
