1163602 matches found
CVE-2026-60976: Improper Access Control
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Scripting. Successful...
PT-2026-78013
Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Workbench component allows a low-privileged attacker with network access via HTTP to compromise the system. The exploitation requires...
PT-2026-77061
Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...
PT-2026-77803
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Scripting versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Scripting allows a low privileged attacker with network access via HTTP to compromise the system. This c...
CVE-2026-30250
Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...
CVE-2026-32333: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Mayosis Core = 5.4.7 versions...
CVE-2026-70810: Improper Access Control
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successfu...
CVE-2025-9211: Improper Neutralization of Input During Web Page Generation
Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting...
CVE-2026-66645: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...
CVE-2026-66641: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...
CVE-2026-66640: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Login With Ajax = 4.5.1 versions...
CVE-2026-66637: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...
CVE-2026-74902: Improper Neutralization of Input During Web Page Generation
SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file upload validation flow that fails to escape filenames before inserting them into HTML via insertAdjacentHTML. Attackers can craft a malicious filename containing script payloads that execute with full OS command access...
CVE-2026-73426: Improper Neutralization of Input During Web Page Generation
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes...
CVE-2026-73393: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Subscribe2 = 10.46 versions...
CVE-2026-73362: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in URL Shortify = 2.5.0 versions...
CVE-2026-73351: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...
CVE-2026-30250: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...