共收录 5770 条相关情报。
← 返回所有主题CVE-2026-82868
@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-sup
CVE-2026-82867
@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sani
CVE-2026-82865
pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that a
CVE-2026-82664
A security vulnerability has been detected in yaojingang GEOFlow up to 2.1.0. This affects an unknown part of the file a
CVE-2026-82868
@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-sup
CVE-2026-82867
@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sani
CVE-2026-82865
pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that a
CVE-2026-82625
A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /r
CVE-2026-82622
A security vulnerability has been detected in code-projects Employee Leave Managing System 1.0. Affected is an unknown f
CVE-2026-40464
NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow appl
CVE-2026-82601
A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a mani
CVE-2026-77850
Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script i
CVE-2026-77850
Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script i
CVE-2026-82601
A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a mani
CVE-2026-82554
A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/add_c
CVE-2026-82554
A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/add_c
CVE-2026-82653
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package nam
CVE-2026-82646
WWBN AVideo contains an unauthenticated reflected cross-site scripting vulnerability in the url2Embed.json.php endpoint
CVE-2026-82654
SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rende
CVE-2026-82642
Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized wit