#cwe-79

共收录 5345 条相关情报。

← 返回所有主题
安全公告2026-10-15 发布INFO

Vitess vttablet /twopcz reflected XSS

CVE-2026-104252

From: xylove21 To: security@vitess.io Subject: [Security Report] Vitess vttablet /twopcz reflected XSS Date: Tue, 24 Jun

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

unstructured: Stored XSS via unescaped HTML generation

CVE-2026-104250

### Summary When `unstructured` parses an untrusted document and outputs the result as HTML, malicious markup contained

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site...

CVE-2026-110847

n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site scripting vulnerability in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in...

CVE-2026-110849

n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables...

CVE-2026-0316

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email'...

CVE-2026-103422

The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id...

CVE-2026-103425

The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all vers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability

CVE-2026-96230

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布HIGH

VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/extra/web/js/markdownit.js to insert YAML frontmatter met...

CVE-2026-86016

VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-83960

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-83958

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web...

CVE-2026-83662

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-48398

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencin...

CVE-2026-110082

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attack

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vuln...

CVE-2026-110081

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-110080

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-110079

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-110078

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-110077

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-110076

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD