Cyber Security Daily Radar

#cwe-79

共收录 5879 条相关情报。

← 返回所有主题
漏洞预警2026-07-15 发布INFO

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a stored Cross-Site Scripting vulnerability in the YouTubeAPI plugin. The plugin renders the snippe...

CVE-2026-50183

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a stored Cross-Site Scripting vulnerabilit

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-07-15 发布INFO

WWBN AVideo is an open source video platform. Versions prior to 29.0 contain an unauthenticated Reflected XSS vulnerability through AVideo YouTubeAPI Gallery Pagination. The $_G...

CVE-2026-50182

WWBN AVideo is an open source video platform. Versions prior to 29.0 contain an unauthenticated Reflected XSS vulnerabil

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-07-15 发布INFO

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS vulnerability through the autoEvalCodeOnHTML parameter in the MessageSQLite WebSocket ...

CVE-2026-49279

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS vulnerability through the aut

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-07-15 发布INFO

Cross Site Scripting vulnerability in xxl-job-admin v.3.0.0 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request containing a malicious script

CVE-2026-26719

Cross Site Scripting vulnerability in xxl-job-admin v.3.0.0 allows a remote attacker to execute arbitrary code via a cra

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
安全公告2026-07-15 发布INFO

AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket Plugin

CVE-2026-54458

WWBN AVideo is an open source video platform. Versions prior to 29.0 contain a stored DOM Cross-Site Scripting vulnerabi

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-79
安全公告2026-07-15 发布INFO

WWBN AVideo: Stored XSS via Hostile YouTube Video Title in AVideo YouTubeAPI Gallery Section

CVE-2026-50183

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a stored Cross-Site Scripting vulnerabilit

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-79
安全公告2026-07-15 发布INFO

AVideo Has Unauthenticated Reflected XSS via $_GET['search'] in YouTubeAPI Gallery Pagination

CVE-2026-50182

WWBN AVideo is an open source video platform. Versions prior to 29.0 contain an unauthenticated Reflected XSS vulnerabil

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-79
安全公告2026-07-15 发布INFO

WWBN AVideo: Stored XSS via autoEvalCodeOnHTML Bypass in MessageSQLite WebSocket Handler (CVE-2026-43874 Bypass)

CVE-2026-49279

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS vulnerability through the aut

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-79
漏洞预警2026-07-15 发布INFO

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase template static resources let authenticated users submit TemplateManageRequest.static...

CVE-2026-49867

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase template static resources le

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-07-15 发布INFO

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to 3.2.12, 3.3.10, and 3.4.2, Argo CD users with application write access can set link.argocd.arg...

CVE-2026-45738

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to 3.2.12, 3.3.10, and 3.4.2, Argo CD us

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
安全公告2026-07-15 发布INFO

Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation

CVE-2026-45738

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to 3.2.12, 3.3.10, and 3.4.2, Argo CD us

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-79
安全公告2026-07-15 发布INFO

MantisBT: Stored XSS in print_all_bug_page_word.php

CVE-2026-62944

A missing output encoding call in print_all_bug_page_word.php allows any authenticated user to inject arbitrary HTML int

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-79#severity:high
安全公告2026-07-15 发布INFO

MantisBT: Reflected XSS in admin/install.php via unescaped printf

CVE-2026-52881

MantisBT 2.28.3 and earlier contains six reflected XSS injection points in `/admin/install.php`. User-supplied parameter

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-79#severity:critical
安全公告2026-07-15 发布INFO

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting ...

CVE-2026-1563

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a u

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-79#severity:medium
安全公告2026-07-15 发布INFO

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS)...

CVE-2026-1562

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-79#severity:medium
安全公告2026-07-15 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting')...

CVE-2026-9007

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in HCL Notes from HCL

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-79#severity:medium
安全公告2026-07-15 发布INFO

MantisBT: Reflected XSS in admin/install.php

CVE-2026-52847

MantisBT 2.28.3 and earlier contains six reflected XSS injection points in `/admin/install.php`. User-supplied parameter

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-79#severity:critical
漏洞预警2026-07-15 发布INFO

OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhcpd.leases through src/state...

CVE-2026-62948

OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN opt

历史摘要 · 未重新核验 · NVD

#cve#cwe-79#cwe-117#cwe-150
安全公告2026-07-15 发布INFO

OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI

CVE-2026-62948

OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN opt

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-117#cwe-150#cwe-79
漏洞预警2026-07-15 发布INFO

RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS Console components/object/preview-modal.tsx and components...

CVE-2026-62378

RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS C

历史摘要 · 未重新核验 · NVD

#cve#cwe-79