1163601 matches found
PT-2026-77804
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Scripting versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle Scripting product allows a low privileged attacker with network access via HTTP to compromise the...
PT-2026-77786
Name of the Vulnerable Software and Affected Versions Oracle Transportation Execution versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation requires...
PT-2026-77072
Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...
CVE-2026-66667: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Templately = 3.7.1 versions...
PT-2026-77087
Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...
PT-2026-77196
Name of the Vulnerable Software and Affected Versions Joomla! Core versions 5.1.0 through 5.4.7 Joomla! Core versions 6.0.0 through 6.1.2 Description Improper escaping flags in schema.org markup outputs create a Cross-Site Scripting XSS vector. XSS is a security flaw that allows an attacker to...
PT-2026-76948
Name of the Vulnerable Software and Affected Versions ArcadeDB server versions prior to 26.8.1 Description The server fails to propagate the authenticated principal to asynchronous command worker threads. When an HTTP command is submitted with the awaitResponse parameter set to false, it executes...
PT-2026-77492
Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle WebCenter Portal allows a low privileged attacker with network access via HTTP to compromise the...
CVE-2026-30250
Beta Systems Software AG ANOW! Automate v.3.3.1.90 is vulnerable to a Cross-site scripting (XSS) vulnerability within the user documentation field . This flaw allows a remote attacker to execute arbitrary code. While the vulnerability is documented as XSS, the description explicitly notes the pot...
PT-2026-77097
Subscriber Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.3.9 versions...
PT-2026-77805
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Scripting versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Scripting product. An unauthenticated attacker with network access via HTTP can compromise...
PT-2026-77064
Name of the Vulnerable Software and Affected Versions Wise Chat versions prior to 3.5 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access and above can inject arbitrary web scripts into...
PT-2026-77773
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Customer Care versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Customer Care allows a low privileged attacker with network access via HTTP to compromise the system...
CVE-2026-75626: Improper Neutralization of Input During Web Page Generation
SpiderFoot fails to HTML-escape correlation titles built from external scan data sources including server banners and metadata. Attackers can inject malicious HTML elements with event handlers into correlation results that execute scripts in the operator's browser when the correlations view is...
PT-2026-77070
Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...
CVE-2026-73382: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Site Reviews: from n/a through 8.2.0...
CVE-2026-28568: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Quill Forms = 5.7.1 versions...
PT-2026-77596
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An unauthenticated attacker with network access via HTTP can compromise the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. This...
PT-2026-77850
Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM component: Helpdesk/Training. Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Self Service...
