Lucene search
+L

596 matches found

Cvelist
Cvelist
•added 2026/01/16 5:00 a.m.•71 views

CVE-2026-0858

Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams. As a result, a crafted PlantUML diagram can inject malicious JavaScript into generated SVG output, leading to...

6.1CVSS0.00343EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/01/16 5:00 a.m.•23 views

CVE-2026-0858

Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams. As a result, a crafted PlantUML diagram can inject malicious JavaScript into generated SVG output, leading to...

6.1CVSS6.2AI score0.00343EPSS
SaveExploits0References3
OSV
OSV
•added 2026/01/16 5:00 a.m.•13 views

CVE-2026-0858

Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams. As a result, a crafted PlantUML diagram can inject malicious JavaScript into generated SVG output, leading to...

5.1CVSS6.2AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/01/16 12:00 a.m.•11 views

CVE-2026-0858

Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams. As a result, a crafted PlantUML diagram can inject malicious JavaScript into generated SVG output, leading to...

6.1CVSS6.2AI score0.00343EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/16 12:00 a.m.•5 views

CVE-2026-0858: Improper Neutralization of Input During Web Page Generation

Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams. As a result, a crafted PlantUML diagram can inject malicious JavaScript into generated SVG output, leading to...

6.1CVSS6AI score0.00343EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/16 12:00 a.m.•11 views

PT-2026-3219

Name of the Vulnerable Software and Affected Versions net.sourceforge.plantuml:plantuml versions prior to 1.2026.0 Description The software is susceptible to a Stored Cross-Site Scripting XSS issue because of inadequate sanitization of interactive attributes within GraphViz diagrams. A specially...

6.1CVSS5.8AI score0.00343EPSS
SaveExploits0References16
CNNVD
CNNVD
•added 2026/01/16 12:00 a.m.•22 views

PlantUML security vulnerabilities

PlantUML is an open-source component that allows for rapid creation of diagrams from textual descriptions. Versions of PlantUML prior to 1.2026.0 contained security vulnerabilities, which stemmed from insufficient cleanup of interactive properties in GraphViz diagrams, potentially leading to...

6.1CVSS5.6AI score0.00343EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-0858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attribute...

6.1CVSS6.2AI score0.00343EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/11/20 12:00 a.m.•6 views

TencentOS Server 3: graphviz (TSSA-2023:0148)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0148 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

7.8CVSS6.9AI score0.02614EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•38 views

EUVD-2021-0621

Malware in sbrugna...

9.8CVSS9.3AI score0.02057EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2005-4796

Malware in sbrugna...

3.6CVSS6.1AI score0.00367EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2008-4536

Malware in sbrugna...

8.5CVSS6.1AI score0.05061EPSS
SaveExploits1References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2014-8982

Malware in sbrugna...

7.5CVSS6.9AI score0.05569EPSS
SaveExploits1References16
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•8 views

EUVD-2014-1314

Malware in sbrugna...

10CVSS6.7AI score0.06082EPSS
SaveExploits1References17
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•8 views

EUVD-2014-1313

Malware in sbrugna...

7.8CVSS7.5AI score0.02929EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•7 views

EUVD-2014-1008

Malware in sbrugna...

9.3CVSS6.7AI score0.04886EPSS
SaveExploits1References17
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2015-1141

Malware in sbrugna...

4CVSS4.6AI score0.00491EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2018-2272

Malware in sbrugna...

5.5CVSS5.7AI score0.01663EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2019-2732

Malware in sbrugna...

8.8CVSS6.7AI score0.04894EPSS
SaveExploits1References13
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2019-19259

Malware in sbrugna...

6.5CVSS5.7AI score0.027EPSS
SaveExploits1References5
Rows per page
Query Builder