A reflected cross-site scripting (XSS) vulnerability in the Forum posting function of O2OA v10...
CVE-2026-52370
A reflected cross-site scripting (XSS) vulnerability in the Forum posting function of O2OA v10 allows attackers to execu
#advisory
共收录 23530 条相关情报。
← 返回所有主题Cross Site Scripting vulnerability in Soliton Systems MailZen Management Protal v.2.62, v.2.63...
CVE-2026-51144
Cross Site Scripting vulnerability in Soliton Systems MailZen Management Protal v.2.62, v.2.63 allows a remote attacker
A vulnerability was identified in Baserow up to 2.3.2. Affected by this vulnerability is the...
CVE-2026-18816
A vulnerability was identified in Baserow up to 2.3.2. Affected by this vulnerability is the function verify of the file
open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow...
CVE-2026-67855
open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UA_ENABLE_GDS_PUSHMA
A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of...
CVE-2026-18814
A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of the file /api/esps. Th
A security flaw has been discovered in Baserow up to 2.3.2. Affected by this issue is the...
CVE-2026-18817
A security flaw has been discovered in Baserow up to 2.3.2. Affected by this issue is the function BaserowImpersonateAut
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
CVE-2026-59817
### Impact A vulnerability in Ghost's public donation checkout flow allowed an unauthenticated attacker to obtain full
Ghost: Member existence leak via magic link sign-in response
CVE-2026-53947
### Impact A discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacke
XSS in Ghost's ActivityPub client
CVE-2026-53950
### Impact The ActivityPub client in Ghost was vulnerable to JavaScript injection on posts shared by a maliciously cust
Ghost: Session Fixation in Ghost Admin
CVE-2026-70594
### Impact Ghost Admin did not invalidate existing sessions on login which could have allowed for session fixation atta
Ghost: Theme Upload Path Traversal
CVE-2026-70593
### Impact A vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This
Ghost: Database Backup Path Traversal
CVE-2026-70592
### Impact An Administrator-level user could remotely overwrite certain files on the filesystem leading to integrity an
Ghost: Server-Side Request Forgery in Image Fetching
CVE-2026-70591
### Impact A Server-Side Request Forgery (SSRF) in Ghost Admin allowed any staff-level user to perform a blind HTTP GET
MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers...
CVE-2026-70554
MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary cod
Google::Auth versions before 0.09 for Perl allow server side request forgery and credential...
CVE-2026-66901
Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated
Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials...
CVE-2026-66902
Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated sy
Incorrect access control in the Executive Services dynamic application start path component of...
CVE-2026-67979
Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows at
MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX...
CVE-2026-70552
MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX dispatcher that allows unauthe
MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers...
CVE-2026-70553
MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers to inject arbitrary PHP
A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of...
CVE-2026-18812
A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of the file /api/esps. Ex