#cwe-79

共收录 5376 条相关情报。

← 返回所有主题
漏洞预警2026-09-22 发布INFO

Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when the web interface attempts to route the program base...

CVE-2026-88020

Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rend...

CVE-2026-77912

A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that allowed an authenticat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Unleash is an open-source feature management platform. Prior to 8.0.3, the change-request approval email template at src/mailtemplates/requested-cr-approval/requested-cr-approva...

CVE-2026-76909

Unleash is an open-source feature management platform. Prior to 8.0.3, the change-request approval email template at src

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

CVE-2026-86062

### Summary The LightRAG WebUI renders assistant/answer chat content as **raw HTML** — `react-markdown` is configured wi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-22 发布INFO

Nautobot: Stored cross-site scripting (XSS) in object create/edit form help text

CVE-2026-83801

### Impact _What kind of vulnerability is it? Who is impacted?_ It has two related instances that share the same root c

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-22 发布INFO

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and 3.1.8, a user with extras.add_relationship or extras.change_relationship permission ca...

CVE-2026-83801

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and 3.1.8, a user with extras.add

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

MCMS 6.1.1 through 6.2.1 is vulnerable to stored Cross-Site Scripting (XSS). The article content field `contentDetails` is excluded from the global XSS filter.

CVE-2026-88415

MCMS 6.1.1 through 6.2.1 is vulnerable to stored Cross-Site Scripting (XSS). The article content field `contentDetails`

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAuth error query parameter is passed to CallbackHandle...

CVE-2026-77272

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious script...

CVE-2026-75744

Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Adobe Connect is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, pote...

CVE-2026-75698

Adobe Connect is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulner

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malic...

CVE-2026-75697

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malic...

CVE-2026-75689

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malic...

CVE-2026-75684

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malic...

CVE-2026-48361

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to in

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler

CVE-2026-77272

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布INFO

A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual...

CVE-2026-95657

A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSe

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

dgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scripting

CVE-2026-95657

A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSe

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布INFO

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightrag_webui/src/components/retrieval/ChatMessage.tsx renders answer and thinking content wit...

CVE-2026-86062

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightrag_webui/src/components/retrieva

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

LightRAG: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

CVE-2026-86062

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightrag_webui/src/components/retrieva

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布INFO

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu's @novu/js In-App Inbox and the @novu/react Inbox component accept a notification...

CVE-2026-75510

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu's @novu/js In-App Inbox

历史摘要 · 未重新核验 · NVD