1144516 matches found
CVE-2026-47877 Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)
Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6...
PT-2026-82460
Unauthenticated Cross Site Scripting XSS in Music Player for WooCommerce = 1.8.9 versions...
CVE-2026-78289: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...
PT-2026-82464
Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...
PT-2026-82459
Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...
AlmaLinux 8 : go-toolset:rhel8 (ALSA-2026:60305)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:60305 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial of...
SUSE SLES15 Security Update : go1.26-openssl (SUSE-SU-2026:3799-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3799-1 advisory. Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: -...
RockyLinux 10 : golang (RLSA-2026:60306)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:60306 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial ...
PT-2026-82845
A Cross-Site Scripting XSS vulnerability in the WatchGuard Dimension Backup Historical Data feature allows an authenticated administrator user to execute arbitrary JavaScript in another user's browser...
PT-2026-82453
Name of the Vulnerable Software and Affected Versions Realtyna Organic IDX plugin versions prior to 5.4.2 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication...
PT-2026-82446
Name of the Vulnerable Software and Affected Versions Spring Security OAuth2 Authorization Server versions 7.0.0 through 7.0.4 Description When Dynamic Client Registration is enabled, the registration endpoint does not sufficiently validate certain client metadata fields provided by the registeri...
PT-2026-82542
Name of the Vulnerable Software and Affected Versions DoXBASE versions prior to 27082026 Description Improper neutralization of input during web page generation leads to a cross-site scripting XSS flaw, which allows Cross Zone Scripting. Cross-site scripting is a type of security flaw where...
RockyLinux 9 : golang (RLSA-2026:60304)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:60304 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial o...
SUSE SLES15 Security Update : go1.25-openssl (SUSE-SU-2026:3800-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3800-1 advisory. Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues...
CVE-2026-5218: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...
PT-2026-82466
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
PT-2026-82455
Name of the Vulnerable Software and Affected Versions Fluent Boards Pro versions prior to 2.0.12 Description Cross Site Scripting XSS exists in the software, allowing users with Subscriber privileges to execute malicious scripts in the browser of other users. Recommendations Update to version...
AlmaLinux 9 : golang (ALSA-2026:60304)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:60304 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial of...
