#cwe-84

共收录 7 条相关情报。

漏洞预警2026-09-23 发布INFO

CVE-2026-96654

Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an atta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

CVE-2026-88859

A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted HTML emai

历史摘要 · 未重新核验 · NVD

安全公告2026-08-01 发布INFO

CVE-2026-67338

JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to vali

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-01 发布MEDIUM

CVE-2026-67338

JupyterLab 在 4.5.9 之前的版本中，扩展管理器存在一个存储型跨站脚本（XSS）漏洞。该漏洞源于扩展管理器在解析包元数据 URL 时未能验证 URI 协议。攻击者可以在 PyPI 上发布恶意的 Python 包，在项目元数据中

历史摘要 · 未重新核验 · NVD

安全公告2026-08-01 发布INFO

CVE-2026-67338

JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to vali

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-15 发布INFO

CVE-2026-54443

Dashy is a self-hostable personal dashboard. From 1.9.4 until 3.2.0, the Dashy RSS Widget in src/components/Widgets/RssF

历史摘要 · 未重新核验 · NVD

安全公告2026-07-15 发布INFO

CVE-2026-54443

Dashy is a self-hostable personal dashboard. From 1.9.4 until 3.2.0, the Dashy RSS Widget in src/components/Widgets/RssF

历史摘要 · 未重新核验 · OSV.dev