#cwe-79

共收录 5376 条相关情报。

← 返回所有主题
安全公告2026-09-30 发布INFO

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for...

CVE-2026-96649

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to Stor

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-30 发布INFO

A flaw has been found in gedelumbung HospitalManagement up to...

CVE-2026-102847

A flaw has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected ele

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-30 发布HIGH

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via post_content Parame...

CVE-2026-96649

CVE-2026-96649 是一个影响 WordPress 插件 “Frontend Post Submission Manager Lite – Frontend Posting” 的存储型 DOM 跨站脚本 (XSS) 漏洞,存在于所

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

A flaw has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function kirim of the file application/module...

CVE-2026-102847

A flaw has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected ele

历史摘要 · 未重新核验 · NVD

安全公告2026-09-30 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting')...

CVE-2026-103049

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-30 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting')...

CVE-2026-103051

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-30 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting')...

CVE-2026-103050

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-30 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting')...

CVE-2026-103047

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-30 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting')...

CVE-2026-103046

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundati

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-30 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting')...

CVE-2026-103045

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-30 发布INFO

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP...

CVE-2026-84409

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores por

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-30 发布INFO

An attacker can construct a request that, if issued by another application user, will cause...

CVE-2026-71189

An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-30 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralNotice extension allows Stored ...

CVE-2026-103051

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - MassMessage extension allows Stored XS...

CVE-2026-103050

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo extension allows Reflected XSS. ...

CVE-2026-103049

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth extension allows Stored XS...

CVE-2026-103047

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki - WikiLambda extension allows Stored XSS. T...

CVE-2026-103046

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Refreshed skin allows Stored XSS. Thi...

CVE-2026-103045

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

Ammonia: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-102342

The following SVG will produce a link with a `javascript` scheme. If the user clicks this link, they will run it. ```sv

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-29 发布INFO

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interf...

CVE-2026-84409

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores por

历史摘要 · 未重新核验 · NVD