#cwe-79

共收录 5879 条相关情报。

← 返回所有主题
漏洞预警2026-05-20 发布INFO

Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a stored cross-site scripting vulnerability in the embedded web configuration interface that allows authenticated a...

CVE-2026-9144

Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a stored cross-site scripting vulnerability in the embedde

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

TeleJSON prior to 6.0.0 contains a DOM-based cross-site scripting vulnerability in the parse() function that allows attackers to execute arbitrary JavaScript by delivering a cra...

CVE-2026-47099

TeleJSON prior to 6.0.0 contains a DOM-based cross-site scripting vulnerability in the parse() function that allows atta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Versions 0.102.1 and prior contain a critical securit...

CVE-2026-39311

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bas

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authenticated attackers to inject arbitrary JavaScript by passi...

CVE-2026-35016

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in do_unit_mail.php that allows authenticated attackers to inject arbitrary JavaScript by...

CVE-2026-35015

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in do_unit_mail.php that allows

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows authenticated attackers to inject arbitrary JavaScript by pa...

CVE-2026-35014

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows aut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in street_view.php that allows authenticated attackers to inject arbitrary JavaScript by ...

CVE-2026-35013

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in street_view.php that allows a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_facnote.php that allows authenticated attackers to inject arbitrary JavaScript by ...

CVE-2026-35012

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_facnote.php that allows a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in opena.php that allows authenticated attackers to inject arbitrary JavaScript by passin...

CVE-2026-35011

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in opena.php that allows authent

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_JF.php that allows authenticated attackers to inject arbitrary JavaScript by p...

CVE-2026-35010

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_JF.php that allows au

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_note.php that allows authenticated attackers to inject arbitrary JavaScript by pas...

CVE-2026-35009

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_note.php that allows auth

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single.php that allows authenticated attackers to inject arbitrary JavaScript by passi...

CVE-2026-35008

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single.php that allows authen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single_unit.php that allows authenticated attackers to inject arbitrary JavaScript by ...

CVE-2026-35007

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single_unit.php that allows a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

CryptPad is an end-to-end encrypted collaborative office suite. In versions prior to 2026.2.0, the HTML sanitizer in Diffmarked.js can be bypassed due to incomplete attribute fi...

CVE-2026-26028

CryptPad is an end-to-end encrypted collaborative office suite. In versions prior to 2026.2.0, the HTML sanitizer in Dif

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-7613

The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csvdata[0]

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

InfoScale VIOM 9.1.3 allows XSS.

CVE-2026-44924

InfoScale VIOM 9.1.3 allows XSS.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote...

CVE-2026-30691

Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitra

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting,...

CVE-2026-4293

The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting')...

CVE-2026-5783

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Beyaz Computer Sof

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The TXTRenderer co...

CVE-2026-30691

Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitra

历史摘要 · 未重新核验 · NVD