Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in...
CVE-2026-108925
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Admini
#severity:medium
共收录 5534 条相关情报。
← 返回所有主题Improper neutralization of special elements used in an SQL command ('SQL injection')...
CVE-2026-59508
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. T
Several Postiz endpoints return the complete database row of the record they operate on instead...
CVE-2026-107761
Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the c
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108888
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108887
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler tha
pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that...
CVE-2026-108903
pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated att
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController...
CVE-2026-108891
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId ha
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController...
CVE-2026-108878
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController...
CVE-2026-108886
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenByUsername
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108885
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that a
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108882
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController removeUserPosition h
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in AiragPromptsController...
CVE-2026-108877
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in AiragPromptsController that allows any authent
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108884
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handle
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo...
CVE-2026-108881
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo handler that allows any
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in...
CVE-2026-108879
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict...
CVE-2026-108880
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId endpoint
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule...
CVE-2026-108871
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartRoleContr
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...
CVE-2026-108868
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish tem
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...
CVE-2026-108874
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or r
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers...
CVE-2026-108872
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUserControlle