#cwe-79

共收录 5770 条相关情报。

漏洞预警2026-08-30 发布INFO

SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rendering functions. Attackers can set a block's name to conta...

CVE-2026-82654

SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rende

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-30 发布INFO

SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package names and notebook names are interpolated directly into inne...

CVE-2026-82653

SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package nam

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-30 发布INFO

WWBN AVideo contains an unauthenticated reflected cross-site scripting vulnerability in the url2Embed.json.php endpoint that allows attackers to inject malicious scripts by supp...

CVE-2026-82646

WWBN AVideo contains an unauthenticated reflected cross-site scripting vulnerability in the url2Embed.json.php endpoint

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-08-30 发布INFO

SiYuan before v3.8.1 Stored XSS via block name

CVE-2026-82654

SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rende

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-08-30 发布INFO

SiYuan before v3.8.1 Stored XSS via confirmDialog

CVE-2026-82653

SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package nam

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

漏洞预警2026-08-30 发布INFO

Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the <...

CVE-2026-82642

Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized wit

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-08-30 发布INFO

Readest: unsanitized iframe srcdoc attribute in the EPUB sanitizer can lead to arbitrary code execution

CVE-2026-82642

Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized wit

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-08-30 发布INFO

A vulnerability was identified in Beetel 450TC3 01.00.00_01. This vulnerability affects unknown...

CVE-2026-82488

A vulnerability was identified in Beetel 450TC3 01.00.00_01. This vulnerability affects unknown code of the component Us

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:low

漏洞预警2026-08-30 发布INFO

A vulnerability was identified in Beetel 450TC3 01.00.00_01. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username ...

CVE-2026-82488

A vulnerability was identified in Beetel 450TC3 01.00.00_01. This vulnerability affects unknown code of the component Us

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-08-30 发布INFO

A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1...

CVE-2026-82482

A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:low

安全公告2026-08-30 发布INFO

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This...

CVE-2026-82483

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown functi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:low

漏洞预警2026-08-30 发布INFO

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file db_input.php of the component Hidden Album...

CVE-2026-82483

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown functi

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-08-30 发布INFO

coppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scripting

CVE-2026-82483

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown functi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79 #cwe-94

漏洞预警2026-08-30 发布INFO

A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an unknown function of the file profile.php of the component...

CVE-2026-82482

A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-08-30 发布INFO

coppermine-gallery Coppermine Photo Gallery edit_profile Endpoint profile.php cross site scripting

CVE-2026-82482

A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79 #cwe-94

安全公告2026-08-29 发布INFO

Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking...

CVE-2026-82451

Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

漏洞预警2026-08-29 发布INFO

Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craf...

CVE-2026-82451

Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-08-29 发布INFO

Formwork through 2.3.14 Stored XSS via Referer Header

CVE-2026-82451

Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-08-29 发布INFO

The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its...

CVE-2026-76546

The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, al

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

漏洞预警2026-08-29 发布INFO

The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, allowing users with a role as low as contributor to perform...

CVE-2026-76546

The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, al

历史摘要 · 未重新核验 · NVD

#cve #cwe-79