A flaw was found in the Quarkus Qute template engine. When the {#eval} section helper processes a sub-template, it fails to pass the parent template's content type information. ...

CVE-2026-93432

A flaw was found in the Quarkus Qute template engine. When the {#eval} section helper processes a sub-template, it fails

历史摘要 · 未重新核验 · NVD

File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applications. Prior to @file-viewer/doc 2.3.1 and msdoc-viewer ...

CVE-2026-91127

File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applic

历史摘要 · 未重新核验 · NVD

md-editor-v3 is a Markdown editor for Vue 3 developed in JSX and TypeScript. Prior to 6.5.4, MdPreview's useMarkdownIt() highlight callback in packages/MdEditor/layouts/Content/...

CVE-2026-84992

md-editor-v3 is a Markdown editor for Vue 3 developed in JSX and TypeScript. Prior to 6.5.4, MdPreview's useMarkdownIt()

历史摘要 · 未重新核验 · NVD

File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer

CVE-2026-91127

### Summary Before 2.3.1, the legacy `.doc` renderer emitted document hyperlink targets after HTML escaping but without

历史摘要 · 未重新核验 · GitHub Advisory

File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer

CVE-2026-91127

File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applic

历史摘要 · 未重新核验 · OSV.dev

md-editor-v3: XSS via fenced-code language rendering bypass

CVE-2026-84992

### Summary `MdPreview` interpolates a fenced-code language into HTML attributes without escaping it. A crafted info str

历史摘要 · 未重新核验 · GitHub Advisory

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. In versions 7.0.0 through 7.1.0, `Special:Ask` acc...

CVE-2026-77616

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · NVD

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, query debug output (`forma...

CVE-2026-77610

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · NVD

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when the `value` parameter...

CVE-2026-77608

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · NVD

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `sep` was inserted verbati...

CVE-2026-77607

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · NVD

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when `headers=plain`, tabl...

CVE-2026-77606

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · NVD

md-editor-v3: XSS via fenced-code language rendering bypass

CVE-2026-84992

md-editor-v3 is a Markdown editor for Vue 3 developed in JSX and TypeScript. Prior to 6.5.4, MdPreview's useMarkdownIt()

历史摘要 · 未重新核验 · OSV.dev

Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-10354)

### Summary Special:FacetedSearch `cstate` hidden inputs enable reflected XSS (residual of CVE-2025-10354) ### Details

历史摘要 · 未重新核验 · GitHub Advisory

Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token

CVE-2026-77616

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · OSV.dev

Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)

CVE-2026-77610

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · OSV.dev

Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS

CVE-2026-77607

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · OSV.dev

Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters)

CVE-2026-77608

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · OSV.dev

Semantic MediaWiki has reflected XSS in Special:Ask plain table headers

CVE-2026-77606

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · OSV.dev

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthent...

CVE-2026-1037

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cro

历史摘要 · 未重新核验 · NVD

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthent...

CVE-2026-1031

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cro

历史摘要 · 未重新核验 · NVD