Lucene search
+L

30 matches found

NVD
NVD
•added 2026/10/05 7:17 p.m.•17 views

CVE-2026-95166

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...

5.4CVSS0.00169EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/05 7:17 p.m.•19 views

CVE-2026-95165

Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...

6.1CVSS0.00189EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•13 views

CVE-2026-95165: Improper Neutralization of Input During Web Page Generation

Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...

6.1CVSS5.8AI score0.00189EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/05 12:00 a.m.•8 views

CVE-2026-95165

Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...

5.8AI score0.00189EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/05 12:00 a.m.•9 views

CVE-2026-95165

Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...

6.1CVSS5.8AI score0.00189EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/05 12:00 a.m.•36 views

CVE-2026-95165

Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...

0.00189EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/05 12:00 a.m.•32 views

CVE-2026-95166

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...

0.00169EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/05 12:00 a.m.•22 views

CVE-2026-95166

Bacularis versions v1.0.0 - 6.5.1 are vulnerable to a Cross Site Scripting (XSS) vulnerability. This occurs when a user adds a new pool, as the LabelFormat field fails to properly neutralize input, allowing for the execution of an XSS payload . Exploitation details and specific remediation steps ...

5.4CVSS5.8AI score0.00169EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/05 12:00 a.m.•7 views

EUVD-2026-92702

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...

5.8AI score0.00169EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/05 12:00 a.m.•13 views

EUVD-2026-92703

Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...

5.8AI score0.00189EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•11 views

PT-2026-106166

Name of the Vulnerable Software and Affected Versions Bacularis versions 5.4.0 through 6.5.1 Description Cross Site Scripting XSS occurs in the Organization name field. XSS is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users. Recommendations Update...

6.1CVSS5.7AI score0.00189EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•10 views

PT-2026-106194

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...

5.8AI score0.00169EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/05 12:00 a.m.•19 views

CVE-2026-95165

Bacularis versions 5.4.0 through 6.5.1 are vulnerable to a Cross Site Scripting (XSS) flaw located in the Organization name field. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by other users. To remediate this issue, it is recommended to update Bacularis...

6.1CVSS5.8AI score0.00189EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/05 12:00 a.m.•9 views

CVE-2026-95166

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...

5.4CVSS5.8AI score0.00169EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•13 views

CVE-2026-95166: Improper Neutralization of Input During Web Page Generation

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...

5.4CVSS5.8AI score0.00169EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/05 12:00 a.m.•10 views

CVE-2026-95166

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...

5.8AI score0.00169EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 8:19 p.m.•18 views

CVE-2026-88742

Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...

5.4CVSS0.00235EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 8:19 p.m.•22 views

CVE-2026-88743

Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...

6.1CVSS0.00263EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/15 12:00 a.m.•20 views

EUVD-2026-79298

Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...

5.5AI score0.00235EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•13 views

CVE-2026-88742: Improper Neutralization of Input During Web Page Generation

Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...

5.4CVSS5.6AI score0.00235EPSS
SaveExploits0References2
Rows per page
Query Builder