#cwe-79

共收录 5523 条相关情报。

← 返回所有主题
漏洞预警2026-08-31 发布INFO

A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermaid Rendering Engine. The manipulation of the argument clas...

CVE-2026-82805

A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermai

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Ne...

CVE-2026-82700

A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown func

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.11 - Unsanitized column and item confi...

CVE-2026-78077

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in He

来源摘录 · NVD

漏洞预警2026-08-31 发布INFO

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.AbstractSingleSelectChoice, the base class of DropDownChoice, w...

CVE-2026-76986

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.Abstra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.form.palette.component.AbstractOptions, which renders the...

CVE-2026-76985

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.head.MetaDataHeaderItem generates <meta> and <link> header tags. It escap...

CVE-2026-76984

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.head.MetaDataHea

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Improper neutralization of input during web page generation in Apache Wicket. The <wicket:label> tag is provided by org.apache.wicket.markup.html.form.AutoLabelTextResolver, wh...

CVE-2026-76983

Improper neutralization of input during web page generation in Apache Wicket. The tag is provided by org.apache.wicket

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.Button clears the escape-model-strings flag in its constructor,...

CVE-2026-76982

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.Button

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value obtained from that renderer into the label's markup with...

CVE-2026-75802

AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicio...

CVE-2026-82881

Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored c

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdown

CVE-2026-82881

Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored c

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-31 发布INFO

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-supplied SVG content directly to innerHTML without sanitizat...

CVE-2026-82868

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-sup

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sanitize option values before interpolating them into HTML vi...

CVE-2026-82867

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sani

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that assigns unsanitized i18n label values to innerHTML. Attack...

CVE-2026-82865

pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A security vulnerability has been detected in yaojingang GEOFlow up to 2.1.0. This affects an unknown part of the file app/Http/Controllers/Site/HomeController.php of the compon...

CVE-2026-82664

A security vulnerability has been detected in yaojingang GEOFlow up to 2.1.0. This affects an unknown part of the file a

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

@pdfme/schemas before 5.5.9 Cross-Site Scripting via SVG

CVE-2026-82868

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-sup

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-31 发布INFO

@pdfme/schemas before 5.5.9 Cross-Site Scripting via Select

CVE-2026-82867

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sani

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-31 发布INFO

pdfme schemas before 5.5.10 Cross-Site Scripting via i18n Label

CVE-2026-82865

pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that a

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-31 发布INFO

A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /register.php of the component User Registration. Such mani...

CVE-2026-82625

A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A security vulnerability has been detected in code-projects Employee Leave Managing System 1.0. Affected is an unknown function of the file /EmpManageSys/editaction.php of the c...

CVE-2026-82622

A security vulnerability has been detected in code-projects Employee Leave Managing System 1.0. Affected is an unknown f

历史摘要 · 未重新核验 · NVD