#cwe-79

共收录 5376 条相关情报。

← 返回所有主题
漏洞预警2026-09-22 发布INFO

The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'other_attributes' Block Parameter in all versions up to, and including, 4.4.1...

CVE-2026-85653

The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'other_attributes' Bl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

A vulnerability was determined in xuxueli xxl-job up to 3.5.0. The impacted element is an unknown function of the file /jobgroup/insert. This manipulation of the argument Name c...

CVE-2026-94426

A vulnerability was determined in xuxueli xxl-job up to 3.5.0. The impacted element is an unknown function of the file /

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

Discourse is an open-source discussion platform. Prior to 2026.7.0, the post action component failed to escape user-controlled display names before interpolating them into an HT...

CVE-2026-59830

Discourse is an open-source discussion platform. Prior to 2026.7.0, the post action component failed to escape user-cont

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, Joplin Server's GET /shares/:id?resource_id= route serv...

CVE-2026-59814

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

idccms V1.70 is vulnerable to Cross Site Scripting (XSS) in /admin/makeDiy_deal.php.

CVE-2026-88746

idccms V1.70 is vulnerable to Cross Site Scripting (XSS) in /admin/makeDiy_deal.php.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell.

CVE-2026-88745

EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the newsletter cron field stored in the newsletters table is inserted by data/int...

CVE-2026-49995

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the newsletter cron fiel

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoint stores an attacker-controlled next...

CVE-2026-58491

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/provider

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is 7.0.1.) This occurs in button.text.toUtf8 in export_output_html.cpp. Exploitati...

CVE-2026-94488

Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is 7.0.1.) This occurs in

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown...

CVE-2026-94045

A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown function of the file c

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-20 发布INFO

A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown function of the file controller/common/UploadController.java of the component G...

CVE-2026-94045

A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown function of the file c

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an...

CVE-2026-94035

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-20 发布INFO

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drug_recommender/index.php. Executing a manipulatio...

CVE-2026-94035

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This...

CVE-2026-94033

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This...

CVE-2026-94016

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects...

CVE-2026-94034

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing o

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-20 发布INFO

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drug_recommender/Admin/change_password of the...

CVE-2026-94034

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drug_recommender/Admin/add_user of the comp...

CVE-2026-94033

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drug_recommender/Admin/add_symptom. Performin...

CVE-2026-94016

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function o

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this...

CVE-2026-93977

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown

历史摘要 · 未重新核验 · GitHub Advisory