Lucene search
+L

26175 matches found

Positive Technologies
Positive Technologies
added 2026/03/24 12:00 a.m.11 views

PT-2026-27376

Name of the Vulnerable Software and Affected Versions Bootstrapy CMS affected versions not specified Description Multiple SQL injection flaws allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. This can lead to the extraction of...

8.8CVSS6.1AI score0.00267EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/03/24 12:00 a.m.18 views

PT-2026-27322

Name of the Vulnerable Software and Affected Versions Undertow affected versions not specified Description A remote attacker could exploit this issue by sending an HTTP GET request containing multipart/form-data content. If the underlying application processes parameters using methods like...

7.5CVSS5.3AI score0.0064EPSS
SaveExploits1References75
CVE
CVE
added 2026/03/23 11:41 p.m.29 views

CVE-2026-33241

Summary (facts, no speculation) : CVE-2026-33241 affects Salvo, a Rust web framework. Prior to version 0.89.3, Salvo’s form data parsing (form_data() and the Extractible macro) does not enforce payload size limits before reading request bodies, enabling unbounded memory allocation and potential O...

8.7CVSS5.8AI score0.00437EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/23 11:41 p.m.8 views

CVE-2026-33241 Salvo Affected by Denial of Service via Unbounded Memory Allocation in Form Data Parsing

Salvo is a Rust web framework. Prior to version 0.89.3, Salvo's form data parsing implementations formdata method and Extractible macro do not enforce payload size limits before reading request bodies into memory. This allows attackers to cause Out-of-Memory OOM conditions by sending extremely...

8.7CVSS5.8AI score0.00437EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/03/23 11:41 p.m.37 views

CVE-2026-33241 Salvo Affected by Denial of Service via Unbounded Memory Allocation in Form Data Parsing

Salvo is a Rust web framework. Prior to version 0.89.3, Salvo's form data parsing implementations formdata method and Extractible macro do not enforce payload size limits before reading request bodies into memory. This allows attackers to cause Out-of-Memory OOM conditions by sending extremely...

8.7CVSS0.00437EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/23 11:41 p.m.13 views

CVE-2026-33241

Salvo is a Rust web framework. Prior to version 0.89.3, Salvo's form data parsing implementations formdata method and Extractible macro do not enforce payload size limits before reading request bodies into memory. This allows attackers to cause Out-of-Memory OOM conditions by sending extremely...

8.7CVSS5.8AI score0.00437EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/03/23 11:41 p.m.8 views

CVE-2026-33241 Salvo Affected by Denial of Service via Unbounded Memory Allocation in Form Data Parsing

Salvo is a Rust web framework. Prior to version 0.89.3, Salvo's form data parsing implementations formdata method and Extractible macro do not enforce payload size limits before reading request bodies into memory. This allows attackers to cause Out-of-Memory OOM conditions by sending extremely...

8.7CVSS5.9AI score
SaveExploits0References4
NVD
NVD
added 2026/03/23 10:16 p.m.8 views

CVE-2026-32278

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, a Stored Cross-site Scripting XSS issue exists in the file field of the Form Plugin. Versions 1.41.1 and 2.41.1 contain a patch...

8.2CVSS0.00197EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/03/23 9:30 p.m.9 views

EUVD-2026-14520

MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a victim's browser by crafting a malicious URL. Attackers can inject malicious code through the Attendees parameter in...

5.1CVSS6AI score0.00307EPSS
SaveExploits1References6
OSV
OSV
added 2026/03/23 9:28 p.m.11 views

CVE-2026-32278 Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, a Stored Cross-site Scripting XSS issue exists in the file field of the Form Plugin. Versions 1.41.1 and 2.41.1 contain a patch...

8.2CVSS5.8AI score
SaveExploits0References6
CVE
CVE
added 2026/03/23 9:28 p.m.22 views

CVE-2026-32278

Connect CMS has a Stored XSS vulnerability in the Form Plugin file field. Affected versions are 1.x up to 1.41.0 and 2.x up to 2.41.0. The issue can allow arbitrary script execution in an administrator’s browser if exploited. Patched versions are 1.41.1 and 2.41.1. Remediation is to upgrade the F...

8.2CVSS5.7AI score0.00197EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/03/23 9:28 p.m.34 views

CVE-2026-32278 Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, a Stored Cross-site Scripting XSS issue exists in the file field of the Form Plugin. Versions 1.41.1 and 2.41.1 contain a patch...

8.2CVSS0.00197EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/03/23 9:28 p.m.5 views

CVE-2026-32278 Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, a Stored Cross-site Scripting XSS issue exists in the file field of the Form Plugin. Versions 1.41.1 and 2.41.1 contain a patch...

8.2CVSS5.7AI score0.00197EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/23 9:28 p.m.6 views

CVE-2026-32278

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, a Stored Cross-site Scripting XSS issue exists in the file field of the Form Plugin. Versions 1.41.1 and 2.41.1 contain a patch...

8.2CVSS5.7AI score0.00197EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/03/23 8:36 p.m.11 views

GHSA-MV3P-7P89-WQ9P Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin

Security Advisory — Form Plugin Stored XSS Summary A Stored Cross-site Scripting XSS issue exists in the file field of the Form Plugin. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1 Description In the file field of the Form Plugin, Stored...

8.2CVSS5.9AI score0.00197EPSS
SaveExploits0References6
Snyk
Snyk
added 2026/03/23 8:36 p.m.4 views

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload in the file field of the Form Plugin. An attacker can execute arbitrary scripts in an administrator's browser by uploading specially crafted files, potentially leading to unauthorized actions or information theft...

8.6CVSS6.1AI score0.00197EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/23 8:36 p.m.18 views

EUVD-2026-14570

Connect CMS has Stored Cross-site Scripting XSS in the File Field of its Form Plugin...

8.2CVSS5.8AI score0.00197EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/03/23 8:36 p.m.11 views

Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin

Security Advisory — Form Plugin Stored XSS Summary A Stored Cross-site Scripting XSS issue exists in the file field of the Form Plugin. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1 Description In the file field of the Form Plugin, Stored...

8.2CVSS5.9AI score0.00197EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2026/03/23 8:16 p.m.8 views

CVE-2026-32852

MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a victim's browser by crafting a malicious URL. Attackers can inject malicious code through the StartDate parameter in...

6.1CVSS0.00296EPSS
SaveExploits1References5
NVD
NVD
added 2026/03/23 7:16 p.m.11 views

CVE-2026-4595

A vulnerability was determined in code-projects Exam Form Submission 1.0. This vulnerability affects unknown code of the file /admin/updates6.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly...

4.8CVSS0.00206EPSS
SaveExploits0References5
Rows per page
Query Builder