#cwe-79

共收录 5343 条相关情报。

← 返回所有主题
漏洞预警2026-10-21 发布INFO

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation of t...

CVE-2026-113741

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncateTitle() function re-inserts a substring of user-supplied ...

CVE-2026-94402

IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph ...

CVE-2016-20102

JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布MEDIUM

Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' pa...

CVE-2014-125132

Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unaut

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input to the adminDir...

CVE-2014-125131

DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inj

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized ...

CVE-2012-20005

SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized ...

CVE-2012-20004

K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthentic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsan...

CVE-2012-20003

Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unau

历史摘要 · 未重新核验 · NVD

安全公告2026-10-20 发布INFO

Cachet has Stored XSS in Incident Component

CVE-2026-113712

### Summary A stored Cross-Site Scripting (XSS) vulnerability exists in the incident creation form, allowing an authenti

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-20 发布INFO

A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting certificate creation...

CVE-2026-113810

A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting user creation. The s...

CVE-2026-113808

A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnerability in the incident creation form, allowing an authent...

CVE-2026-113712

Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnera

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布MEDIUM

A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen.

CVE-2026-111088

A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen.

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to sanitize-html 2.18.0, a non-defa...

CVE-2026-113661

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer wi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticated attacker can send a crafted link whose query string is automatically parse...

CVE-2026-113659

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticated attacker can send

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious conten...

CVE-2026-28330

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From sanitize-html 2.17.7 until 2.18.0, a...

CVE-2026-113657

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer wi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to sanitize-html 2.18.0, a non-defa...

CVE-2026-113654

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer wi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a project-defined free-form widget style field can carry an editor-controlled quote into an i...

CVE-2026-112958

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a project-defined free-form widget s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filenam...

CVE-2026-113683

VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allow

历史摘要 · 未重新核验 · NVD