共收录 5879 条相关情报。
← 返回所有主题CVE-2025-68709
SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker to trigger arbitrary JavaScript exe
CVE-2026-26028
### Summary CryptPad’s HTML sanitizer in Diffmarked.js can be bypassed due to incomplete filtering of restricted tags. B
CVE-2026-9566
A vulnerability was identified in teableio teable up to 1.9.x. This impacts an unknown function of the file apps/nextjs-
CVE-2026-9566
A vulnerability was identified in teableio teable up to 1.9.x. This impacts an unknown function of the file apps/nextjs-
CVE-2026-44669
FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored c
CVE-2026-44667
FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored c
CVE-2026-39964
### Summary The Typebot viewer (`packages/embeds/js`) renders anchor tags from rich text bubble content without filteri
CVE-2026-9564
A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted elem
CVE-2026-48905
Lack of input filtering leads to an XSS vector in the HTML filter code.
CVE-2026-48903
Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in various components.
CVE-2026-44729
Twenty is an open source CRM. In 1.18.0 and earlier, the file serving endpoints in Twenty CRM at /files/* and /file/:fil
CVE-2026-30895
Lack of output escaping leads to a XSS vector in the readmore links for com_content.
CVE-2026-30894
Lack of output escaping leads to a XSS vector in the content history component.
CVE-2026-25901
Lack of output escaping leads to a XSS vector in the multilingual associations component.
CVE-2026-25900
Lack of output escaping leads to a XSS vector in the feed modules.
CVE-2025-36148
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transacti
CVE-2025-36126
IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to store
CVE-2026-27427
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mas
CVE-2026-9527
A vulnerability was determined in itsourcecode Electronic Judging System 1.0. This issue affects some unknown processing
CVE-2026-9520
A weakness has been identified in blitz-js blitz up to 3.0.2 on GitHub. This impacts an unknown function of the file pac