2501 matches found
CVE-2026-82771: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82767: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82763: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
Linux Distros Unpatched Vulnerability : CVE-2025-56536
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stored cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payloa...
CVE-2026-82769: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82792: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
EUVD-2026-76750
A web interface reflects a portion of the request URL into a script context and a hyperlink attribute without adequate encoding, and does not require authentication to reach. This allows an unauthenticated network attacker to craft a link that, when visited by a user, executes arbitrary script in...
CVE-2026-81635
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...
CVE-2026-81635
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...
CVE-2026-81635
SHIRASAGI by Security Science is affected by a cross-site scripting (XSS) vulnerability that may allow an attacker to execute arbitrary script in the web browser of a user who accesses a website using the product. The CNA (JPCERT) assigns a MEDIUM severity (CVSS 3.0 base score 5.4; CVSS 4.0 base ...
EUVD-2026-75271
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...
CVE-2026-81635
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...
PT-2026-89295
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...
CVE-2026-81635: Improper Neutralization of Input During Web Page Generation
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the removeScripts plugin due to incomplete filtering of executable links in plugins/removeScripts.js and lib/svgo/tools.js. An attacker can execute arbitrary scripts in the context of the SVG's origin, expose...
EUVD-2026-69652
Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contacts module that allows remote attackers to execute arbitrary script content by embedding malicious payloads within angle brackets in the FROM email header. The sanitization logic removes only the first occurrence of eac...
CVE-2026-73703
CVE-2026-73703 is a stored cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer . An unauthenticated adjacent attacker can inject malicious script that executes in a victim's browser within the context of the interface, requiring user in...
CVE-2026-78238
SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...