<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-04T19:56:31.245737+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/fkie_cve-2013-3589</id>
    <title>fkie_cve-2013-3589</title>
    <updated>2026-10-04T19:56:31.251730+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter.</p>
      </div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/fkie_cve-2013-3589"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/ghsa-28cc-22jj-c7j2</id>
    <title>GHSA-28cc-22jj-c7j2</title>
    <updated>2026-10-04T19:56:31.251823+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter.</p>
      </div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/ghsa-28cc-22jj-c7j2"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/gsd-2013-3589</id>
    <title>gsd-2013-3589</title>
    <updated>2026-10-04T19:56:31.251861+00:00</updated>
    <content>gsd-2013-3589</content>
    <link href="https://vulnerability.circl.lu/vuln/gsd-2013-3589"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/var-201309-0223</id>
    <title>VAR-201309-0223</title>
    <updated>2026-10-04T19:56:31.251886+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter. DELL Provided by integrated Dell Remote Access Controller (iDRAC) Contains a cross-site scripting vulnerability. 
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. This solution provides functions such as remote management, crash recovery and power control for Dell PowerEdge systems</p>
      </div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/var-201309-0223"/>
  </entry>
</feed>
