#cwe-79

共收录 5345 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This is...

CVE-2026-54868

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Sim

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Griden Responsive Slider responsive-slider allows Stored XSS.This issue aff...

CVE-2026-54867

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Griden Responsive

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19...

CVE-2026-92883

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 1

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts...

CVE-2026-89117

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not...

CVE-2026-76976

Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-suppli

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could...

CVE-2026-76975

Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and...

CVE-2026-76972

Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

A security flaw has been discovered in philz1337x clarity-upscaler up to...

CVE-2026-108942

A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could ...

CVE-2026-92883

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and execute...

CVE-2026-89117

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-supplied content in certain functionality, allowing an authenti...

CVE-2026-76976

Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-suppli

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated use...

CVE-2026-76975

Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the appl...

CVE-2026-76972

Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function create_html_for_item of the file mod...

CVE-2026-108942

A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary...

CVE-2026-93886

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to imprope

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布INFO

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input.

CVE-2026-93886

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to imprope

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding.

CVE-2026-75063

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web U...

CVE-2026-18541

IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authentic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Frappe ERPNext before 15.103.0 and 16.x before 16.12.0 contains a stored cross-site scripting vulnerability because the names of certain records are not properly neutralized whe...

CVE-2026-109673

Frappe ERPNext before 15.103.0 and 16.x before 16.12.0 contains a stored cross-site scripting vulnerability because the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a stored cross-site scripting vulnerability in a profile field that is rendered without escaping into portal page...

CVE-2026-109671

Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a stored cross-site scripting vulnerability in a profile

历史摘要 · 未重新核验 · NVD