The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies (user groups). User properties,...

CVE-2026-4950

The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the emplo

来源摘录 · NVD

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.3, Part-DB-server sanitizes SVG files based solely on the user-controlled ...

CVE-2026-59188

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.3, Part-DB-server

来源摘录 · NVD

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.2, Part-DB renders BOM validation information messages using Twig's |raw f...

CVE-2026-55600

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.2, Part-DB render

来源摘录 · NVD

A vulnerability was identified in gedelumbung HospitalManagement up to...

CVE-2026-115535

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The aff

历史摘要 · 未重新核验 · GitHub Advisory

A security flaw has been discovered in gedelumbung HospitalManagement up to...

CVE-2026-115536

A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Th

历史摘要 · 未重新核验 · GitHub Advisory

A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The impacted element is the function simpan of the file app...

CVE-2026-115536

A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Th

来源摘录 · NVD

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function sistem.php::simpan of the f...

CVE-2026-115535

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The aff

来源摘录 · NVD

A vulnerability was determined in gedelumbung HospitalManagement up to...

CVE-2026-115534

A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacte

历史摘要 · 未重新核验 · GitHub Advisory

Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader...

CVE-2026-115507

Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/m

历史摘要 · 未重新核验 · GitHub Advisory

Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emits included .html, .xhtml, or .htm file content as raw block_html tokens. Att...

CVE-2026-115350

Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emits included .html, .

来源摘录 · NVD

An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the t...

CVE-2025-65200

An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a

来源摘录 · NVD

Nuxt server islands render `useHeadSafe` input without sanitisation

CVE-2026-114133

## Impact `useHeadSafe` restricts head input to an allowlist of safe tags and attributes. For example, `bodyAttrs` is l

历史摘要 · 未重新核验 · GitHub Advisory

Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled

CVE-2026-114130

## Impact An application that renders `` with a value it does not control can be made to render an anchor whose `href`

历史摘要 · 未重新核验 · GitHub Advisory

Astro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX rendering

CVE-2026-114128

## Summary Astro's JSX and MDX rendering pipeline treated string children of `` and `` elements as trusted HTML. When a

历史摘要 · 未重新核验 · GitHub Advisory

Astro: Arbitrary CSS injection in Astro View Transitions

CVE-2026-114127

### Summary Astro's server-side View Transition CSS generator did not keep string animation properties within their gen

历史摘要 · 未重新核验 · GitHub Advisory

DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes

## Summary When DOMPurify is configured with `SAFE_FOR_TEMPLATES: true` together with a DOM-returning mode (`RETURN_DOM

历史摘要 · 未重新核验 · GitHub Advisory

DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)

### Summary The 3.4.16 fix for GHSA-p98j-92pf-mc4p only covers a hook that removes the node it was called for. If an `I

历史摘要 · 未重新核验 · GitHub Advisory

A weakness has been identified in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown part of the file patdocmsg...

CVE-2026-115246

A weakness has been identified in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a2

来源摘录 · NVD

Retool before 3.88.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to execute scripts by proxying malicious SVG files through /api/imagePro...

CVE-2024-58394

Retool before 3.88.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to execute scri

来源摘录 · NVD

Sickbeard through build-507 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the pattern parameter of /con...

CVE-2020-37284

Sickbeard through build-507 contains a reflected cross-site scripting vulnerability that allows unauthenticated attacker

来源摘录 · NVD