共收录 5770 条相关情报。
← 返回所有主题CVE-2026-18968
A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue
CVE-2026-20198
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an aut
CVE-2026-53950
### Impact The ActivityPub client in Ghost was vulnerable to JavaScript injection on posts shared by a maliciously cust
CVE-2026-66300
SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality.
CVE-2026-70588
### Impact The Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in
CVE-2026-70492
## Summary Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow inste
CVE-2026-70486
## Summary Any authenticated user with access to a terminal server could get script of their choosing to run in the Open
CVE-2026-18682
A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects unknown code of the file /api
CVE-2026-67617
Microweber CMS through 2.0.20 contains a stored cross-site scripting vulnerability in the content tagging system that al
CVE-2026-67617
Microweber CMS through 2.0.20 contains a stored cross-site scripting vulnerability in the content tagging system that al
CVE-2026-18682
A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects unknown code of the file /api
CVE-2026-49131
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers with fir
CVE-2026-49132
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers to injec
CVE-2026-66296
Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit allows reflected cross-sit
CVE-2026-38446
A stored cross-site scripting (XSS) vulnerability exists in osTicket 1.18.3 due to improper sanitization of the thread e
CVE-2026-38444
osTicket v1.18.3 is vulnerable to Stored Cross-Site Scripting (XSS) via the email From-header display name. The value is
CVE-2026-49132
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers to injec
CVE-2026-49131
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers with fir
CVE-2026-66296
Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit allows reflected cross-sit
CVE-2026-38446
A stored cross-site scripting (XSS) vulnerability exists in osTicket 1.18.3 due to improper sanitization of the thread e