#cwe-79

共收录 5328 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布MEDIUM

DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed when an IN_PLACE hook removes a parent or sibling node. ...

CVE-2026-116803

DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attributeName=href guard when PARSER_MEDIA_TYPE is application/xht...

CVE-2026-116802

DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attribute

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/components/features/annotation/container/fields/text-field/TextFi...

CVE-2026-116556

A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/componen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-frontend/components/features/annotation/container/fields/s...

CVE-2026-116555

A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布LOW

A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla-frontend/components/features/annotation/settings/Setting...

CVE-2026-116554

A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file /book_flight.php. Executing a manipulation of the argumen...

CVE-2026-116514

A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. From 1.6.0 until 1.6.11, the JavaScript-output APIs derive...

CVE-2026-116583

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. F

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.0.0 and from 1.5.5 until 1.6.10, the JavaScript...

CVE-2026-116582

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. P

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Some externally supplied values stored by the device may be rendered in the web interface without sufficient output encoding. An attacker who can influence one of these values c...

CVE-2026-70382

Some externally supplied values stored by the device may be rendered in the web interface without sufficient output enco

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57196

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布LOW

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected is an unknown function of the file patien...

CVE-2026-116482

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a2

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

HtmlSanitizer before 9.2.1039 and 10.0 prereleases before 10.0.1037-beta contains a cross-site scripting vulnerability because SanitizeDom(string) never sanitizes attributes on ...

CVE-2026-116538

HtmlSanitizer before 9.2.1039 and 10.0 prereleases before 10.0.1037-beta contains a cross-site scripting vulnerability b

来源摘录 · NVD

漏洞预警2026-10-26 发布LOW

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scrip...

CVE-2026-116227

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtua

来源摘录 · NVD

安全公告2026-10-26 发布INFO

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the...

CVE-2026-116100

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-26 发布LOW

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the component User Level Handler. The manipu...

CVE-2026-116100

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/

来源摘录 · NVD

安全公告2026-10-26 发布INFO

A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown...

CVE-2026-116097

A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addne

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-26 发布MEDIUM

A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addnewstudent.php. Such manipulation of the argument fname lea...

CVE-2026-116097

A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addne

来源摘录 · NVD

安全公告2026-10-25 发布INFO

YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that allows...

CVE-2026-116206

YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that allows authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags...

CVE-2026-116203

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, which echoes attacke

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-25 发布INFO

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low...

CVE-2026-116202

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege authenticated users

历史摘要 · 未重新核验 · GitHub Advisory