#cwe-79

共收录 5376 条相关情报。

← 返回所有主题
漏洞预警2026-09-28 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting ag...

CVE-2026-82382

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a rem

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a user with authoring rights on a weblog to store crafted cont...

CVE-2026-82381

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a use

历史摘要 · 未重新核验 · NVD

安全公告2026-09-28 发布INFO

Apache Roller: Stored cross-site scripting in the authoring UI

CVE-2026-82381

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a use

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-28 发布INFO

Apache Roller: Reflected cross-site scripting in the frontpage directory parameter

CVE-2026-82382

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a rem

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-28 发布INFO

Apache Roller: Stored cross-site scripting via uploaded media content type

CVE-2026-82387

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a use

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-28 发布INFO

Apache Roller: Stored cross-site scripting through incoming Trackback links

CVE-2026-82546

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an un

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-28 发布INFO

Apache Roller: Stored javascript: URI in HTML comments

CVE-2026-91204

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an an

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-28 发布INFO

Apache Roller: Reflected XSS in the optional LDAP comment authenticator

CVE-2026-91206

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a rem

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-28 发布INFO

Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0 - 3.1.0 - Tabs & Accordions Pro accepts a url option for...

CVE-2026-100751

Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown functio...

CVE-2026-100904

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3

历史摘要 · 未重新核验 · NVD

安全公告2026-09-28 发布INFO

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function...

CVE-2026-100882

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Web

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue...

CVE-2026-100881

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown proce

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-27 发布INFO

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.bl...

CVE-2026-100882

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Web

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-27 发布INFO

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of t...

CVE-2026-100881

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown proce

历史摘要 · 未重新核验 · NVD

安全公告2026-09-27 发布INFO

Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting

CVE-2026-100882

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Web

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-27 发布INFO

A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to...

CVE-2026-100877

A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects...

CVE-2026-100880

A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the fi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-27 发布INFO

A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the file du-common/src/main/java/com/edu/common/utils/file/Mime...

CVE-2026-100880

A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-27 发布INFO

A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functional...

CVE-2026-100877

A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be

历史摘要 · 未重新核验 · NVD

安全公告2026-09-27 发布INFO

Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6...

CVE-2026-97165

Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “return” par

历史摘要 · 未重新核验 · GitHub Advisory