Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1163299 matches found

osv_rlsa
osv_rlsa•added 2026/09/03 6:05 a.m.•26 views

RLSA-2026:62406 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inpu...

8.1CVSS6.1AI score0.00798EPSS
SaveExploits0References10
Rockylinux
Rockylinux•added 2026/09/03 6:01 a.m.•16 views

grafana security update

An update is available for grafana. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Grafana is an open source, feature rich metrics dashboard and graph editor fo...

7.5CVSS7AI score0.00798EPSS
SaveExploits0
Patchstack
Patchstack•added 2026/09/03 5:36 a.m.•20 views

WordPress Enfold theme <= 8.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Theme Enfold versions = 8.0...

5.8CVSS5.1AI score0.00201EPSS
SaveExploits0Affected Software1
CVE
CVE•added 2026/09/03 12:45 a.m.•55 views

CVE-2026-85022

A cross-site scripting (XSS) vulnerability affects the WebApp Sign-In component of langgenius dify 1.13.0 , specifically in the router.replace function within web/app/(shareLayout)/webapp-signin/components/mail-and-password-auth.tsx. Manipulating the redirect_url argument enables remote attackers...

5.1CVSS3.5AI score0.00365EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment•added 2026/09/03 12:45 a.m.•24 views

CVE-2026-85022 langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirecturl leads to cross...

5.1CVSS3.5AI score0.00365EPSS
SaveExploits0References8
EUVD
EUVD•added 2026/09/03 12:45 a.m.•21 views

EUVD-2026-70298

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirecturl leads to cross...

5.1CVSS3.5AI score0.00365EPSS
SaveExploits0References8
Cvelist
Cvelist•added 2026/09/03 12:45 a.m.•50 views

CVE-2026-85022 langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirecturl leads to cross...

5.1CVSS0.00365EPSS
SaveExploits0References8
osv_cve
osv_cve•added 2026/09/03 12:45 a.m.•15 views

CVE-2026-85022 langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirecturl leads to cross...

5.1CVSS4AI score
SaveExploits0References10
Vulnrichment
Vulnrichment•added 2026/09/03 12:30 a.m.•26 views

CVE-2026-85021 langgenius dify Splash Layout splash.tsx router.replace cross site scripting

A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/shareLayout/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirecturl causes cross site scripting. The attack is possible to be carried o...

5.3CVSS3.5AI score0.00497EPSS
SaveExploits0References8
EUVD
EUVD•added 2026/09/03 12:30 a.m.•20 views

EUVD-2026-70297

A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/shareLayout/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirecturl causes cross site scripting. The attack is possible to be carried o...

5.3CVSS3.5AI score0.00497EPSS
SaveExploits0References8
CVE
CVE•added 2026/09/03 12:30 a.m.•27 views

CVE-2026-85021

langgenius/dify version 1.13.0 is affected by a cross-site scripting (XSS) vulnerability in the Splash Layout component, specifically in the router.replace function within web/app/(shareLayout)/components/splash.tsx. The root cause is improper handling of the redirect_url argument, allowing remot...

5.3CVSS3.5AI score0.00497EPSS
SaveExploits0References8
osv_cve
osv_cve•added 2026/09/03 12:30 a.m.•17 views

CVE-2026-85021 langgenius dify Splash Layout splash.tsx router.replace cross site scripting

A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/shareLayout/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirecturl causes cross site scripting. The attack is possible to be carried o...

5.3CVSS3.5AI score0.00497EPSS
SaveExploits0References10
Cvelist
Cvelist•added 2026/09/03 12:30 a.m.•45 views

CVE-2026-85021 langgenius dify Splash Layout splash.tsx router.replace cross site scripting

A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/shareLayout/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirecturl causes cross site scripting. The attack is possible to be carried o...

5.3CVSS0.00497EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies•added 2026/09/03 12:00 a.m.•25 views

PT-2026-85090

Unauthenticated Cross Site Scripting XSS in Calculation For Contact Form 7 = 1.0 versions...

7.1CVSS5AI score0.00251EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/09/03 12:00 a.m.•24 views

PT-2026-85137

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magepeople inc. Booking and Rental Manager allows Stored XSS. This issue affects Booking and Rental Manager: from n/a through 2.7.7...

6.5CVSS5.2AI score0.00224EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/09/03 12:00 a.m.•22 views

PT-2026-85245

Name of the Vulnerable Software and Affected Versions MapLibre GL JS versions prior to 6.4.1 Description The DOM.sanitize function in src/util/dom.ts incorrectly iterates through elem.attributes as a live NamedNodeMap. Because removeAttributes modifies the same collection during iteration, indexe...

10CVSS5.9AI score0.00522EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies•added 2026/09/03 12:00 a.m.•31 views

PT-2026-84900

A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/shareLayout/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirect url causes cross site scripting. The attack is possible to be carried...

5.3CVSS3.5AI score0.00497EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/03 12:00 a.m.•8 views

CVE-2026-85021: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/shareLayout/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirecturl causes cross site scripting. The attack is possible to be carried o...

5.3CVSS3.5AI score0.00497EPSS
SaveExploits0References3
osv_alsa
osv_alsa•added 2026/09/03 12:00 a.m.•12 views

ALSA-2026:63119 Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME head...

7.5CVSS6.1AI score0.00568EPSS
SaveExploits0References14
osv_alsa
osv_alsa•added 2026/09/03 12:00 a.m.•33 views

ALSA-2026:63136 Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive...

7.5CVSS6.1AI score0.00568EPSS
SaveExploits0References10
Rows per page
Query Builder