/
attack_type:xss × latest_source_host:cert.ssi.gouv.fr × limpar

Resultados

3 casos · pág. 1/1

cert.ssi.gouv.fr · high

CERT-FR: Multiple Drupal vulnerabilities allow remote code execution and XSS (CVE-2026-108097, -108514, -108515)

CERT-FR advisory CERTFR-2026-AVI-1321, published 15 October 2026, reports multiple vulnerabilities in Drupal core that allow a remote attacker to execute arbitrary code and perform indirect code injection (XSS). The advisory references CVE-2026-108097, CVE-2026-108514 and CVE-2026-108515, based on three Drupal security bulletins dated 14 …

cert.ssi.gouv.fr · medium

CERT-FR: Multiple Moodle vulnerabilities allow XSS and security policy bypass (CVE-2026-47759, -47761, -47762)

CERT-FR advisory CERTFR-2026-AVI-1318, published 15 October 2026, reports multiple vulnerabilities in Moodle that allow a remote attacker to perform cross-site scripting (XSS) and bypass the security policy. The advisory references CVE-2026-47759, CVE-2026-47761 and CVE-2026-47762, based on two Moodle security bulletins dated 15 October 2…

cert.ssi.gouv.fr · critical

CERT-FR: Multiple Palo Alto Networks vulnerabilities, including RCE; CVE-2026-0322 actively exploited

CERT-FR advisory CERTFR-2026-AVI-1317 is not the source here; this record covers CERTFR-2026-AVI-1326, which reports multiple vulnerabilities in Palo Alto Networks products fixed in vendor bulletins of October 14, 2026. Some flaws allow remote arbitrary code execution, privilege escalation and remote denial of service. Other impact classe…