#cwe-79

共收录 5345 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-110075

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-110074

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vuln...

CVE-2026-110073

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vuln...

CVE-2026-110037

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vuln...

CVE-2026-109415

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-107682

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vuln...

CVE-2026-107305

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vuln...

CVE-2026-106633

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-106632

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed item links from configured feeds without verifying their ...

CVE-2026-104816

Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a netw...

CVE-2026-102864

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a netw...

CVE-2026-102859

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Mali...

CVE-2026-100133

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concat...

CVE-2026-55562

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

bbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML or SVG files by spoofing the multipart Content-Type in P...

CVE-2026-110103

bbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML files as Datum file attachments lacking MIME restri...

CVE-2026-110101

Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to 0.24....

CVE-2026-104250

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, suc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.1...

CVE-2026-102989

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.1

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

bbs-go through 4.4.6 Stored XSS via Image Upload Content-Type

CVE-2026-110103

bbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

Koillection through 1.8.4 Stored XSS via Datum File Attachment Uploads

CVE-2026-110101

Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload

历史摘要 · 未重新核验 · OSV.dev