Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in...
CVE-2026-35013
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in street_view.php that allows a
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in...
CVE-2026-35009
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_note.php that allows auth
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in...
CVE-2026-35010
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_JF.php that allows au
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in...
CVE-2026-35007
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single_unit.php that allows a
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single...
CVE-2026-35008
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single.php that allows authen
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in opena...
CVE-2026-35011
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in opena.php that allows authent
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in...
CVE-2026-35014
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows aut
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in...
CVE-2026-35012
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_facnote.php that allows a
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in...
CVE-2026-35015
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in do_unit_mail.php that allows
ArcGIS Server contains an input validation weakness in the login redirection workflow. An...
CVE-2026-2813
ArcGIS Server contains an input validation weakness in the login redirection workflow. An Authenticated attacker could e
ArcGIS Server contains an improper authentication vulnerability in an undocumented administrative...
CVE-2026-2812
ArcGIS Server contains an improper authentication vulnerability in an undocumented administrative endpoint. An unauthent
A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have...
CVE-2026-20206
A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have allowed an authenticated,
A flaw was found in Keycloak. The cross-session verification proof is keyed only by (local userId...
CVE-2026-9087
A flaw was found in Keycloak. The cross-session verification proof is keyed only by (local userId, idpAlias) and is not
In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform...
CVE-2026-20240
In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.26
InfoScale VIOM 9.1.3 allows XSS.
CVE-2026-44924
InfoScale VIOM 9.1.3 allows XSS.
Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not...
CVE-2026-9101
Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not arguments) entering she
Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote...
CVE-2026-30691
Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitra
The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database...
CVE-2026-9100
The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation.
In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin'...
CVE-2026-20238
In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could a
SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.
CVE-2026-44923
SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.