#cwe-79

共收录 5328 条相关情报。

漏洞预警2026-10-29 发布LOW

A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af16b47/f9db0c0a04d79ad931c218140df4fb23809d4fab. This vulnerability affects unk...

CVE-2026-118585

A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af16b47/f9db0c0a04d79ad

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #cwe-94 #severity:low

漏洞预警2026-10-28 发布MEDIUM

AVideo is a video-sharing Platform. Prior to 8.1.0, `view/queue.php` uses `pathinfo` on the caller-controlled `fileURI` and stores its filename through `setTitle` in `encoder_qu...

CVE-2026-61575

AVideo is a video-sharing Platform. Prior to 8.1.0, `view/queue.php` uses `pathinfo` on the caller-controlled `fileURI`

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-28 发布MEDIUM

AVideo is a video-sharing Platform. Prior to 8.1.0, the anonymous login interface reflects request values into HTML and JavaScript without output encoding. In `view/index.php`, ...

CVE-2026-61573

AVideo is a video-sharing Platform. Prior to 8.1.0, the anonymous login interface reflects request values into HTML and

来源摘录 · NVD

#cve #cwe-79

安全公告2026-10-28 发布INFO

Seroval: Code injection through a typed array's own constructor property

CVE-2026-116583

### Summary seroval writes a typed array as a call to its constructor. In affected versions, the constructor name in th

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #cwe-94 #npm #severity:medium

安全公告2026-10-28 发布INFO

Seroval: Script injection through RegExp sources in serialized output

CVE-2026-116582

### Summary seroval writes a `RegExp` as a regular expression literal. In affected versions, the `` element that the se

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-116 #cwe-79 #npm #severity:medium

漏洞预警2026-10-28 发布CRITICAL

FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior to version 0.1.4, five debug/test PHP scripts under `admin/` perform privile...

CVE-2026-63190

FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior to version 0.1.4, f

来源摘录 · NVD

#cve #cwe-200 #cwe-22 #cwe-288 #cwe-306 #cwe-79

漏洞预警2026-10-28 发布MEDIUM

The authentication endpoint generates an error message that includes reflected data directly from the request without sufficient sanitization or encoding. This allows an attacke...

CVE-2026-11854

The authentication endpoint generates an error message that includes reflected data directly from the request without su

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-28 发布MEDIUM

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.JSONP and Context.JSONPBlob concatenate an unvalidated callback value into a JavaScript response. A route that pas...

CVE-2026-118652

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.JSONP and Context.JSONPBlob concatenate an unvalidated ca

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-28 发布HIGH

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-site scripting vulnerability because some webhook response paths, such as error response...

CVE-2026-118648

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-site scripting vulnerability be

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

漏洞预警2026-10-28 发布HIGH

Vue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4.14 and from 12.0.0-alpha.4 until 12.0.0-alpha.5, sanitizeTranslatedHtml() escapes markup and even...

CVE-2026-118257

Vue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4.14 and from 12.0.0-alpha.4 until 12.0.0-

来源摘录 · NVD

#cve #cwe-116 #cwe-79

漏洞预警2026-10-28 发布INFO

Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-alpha.5, enabling escapeParameter, called escapeParameterHtml in the Legacy AP...

CVE-2026-118256

Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-alpha.5, enabling esc

来源摘录 · NVD

#cve #cwe-116 #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid applies credits.href to the credits link without validating the URL scheme. ...

CVE-2026-118255

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid applies credits.hre

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid writes pagination language strings into the DOM as markup instead of text. A...

CVE-2026-118254

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid writes pagination l

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit mode parses fullscreen language labels as HTML rather than insert...

CVE-2026-118253

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit mode par

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit-mode sidebar parses component language strings as HTML rather tha...

CVE-2026-118252

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit-mode sid

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and 13.1.0, Highcharts assigns credits.href to the window location when the credits label i...

CVE-2026-118251

Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and 13.1.0, Highcharts assigns cre

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 11.4.9, 12.6.1, and 13.1.0, Highcharts applies breadcrumbs.style as SVG attributes rather than CSS...

CVE-2026-118246

Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 11.4.9, 12.6.1, and 13.1.0, Highcharts ap

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup in the Highchart...

CVE-2026-118245

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartCon

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back to assigning raw markup to innerHTML when DOMParser canno...

CVE-2026-118244

Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path elements from rendering.icons object definitions and previo...

CVE-2026-118242

Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path el

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79