1163609 matches found
PT-2026-77773
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Customer Care versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Customer Care allows a low privileged attacker with network access via HTTP to compromise the system...
CVE-2026-75626: Improper Neutralization of Input During Web Page Generation
SpiderFoot fails to HTML-escape correlation titles built from external scan data sources including server banners and metadata. Attackers can inject malicious HTML elements with event handlers into correlation results that execute scripts in the operator's browser when the correlations view is...
PT-2026-77070
Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...
CVE-2026-73382: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Site Reviews: from n/a through 8.2.0...
CVE-2026-28568: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Quill Forms = 5.7.1 versions...
PT-2026-77596
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An unauthenticated attacker with network access via HTTP can compromise the Installation and Configuration component of Oracle Hyperion Infrastructure Technology. This...
PT-2026-77850
Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM component: Helpdesk/Training. Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Self Service...
EUVD-2026-61094
Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...
PT-2026-77114
Name of the Vulnerable Software and Affected Versions Subscribe2 versions prior to 10.47 Description An unauthenticated Cross Site Scripting XSS issue exists in the Subscribe2 WordPress plugin. This flaw allows a remote attacker to execute malicious scripts in the browser of a user without...
CVE-2026-66644: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Typing Effect = 1.3.7 versions...
PT-2026-77078
Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...
CVE-2026-73360: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...
PT-2026-77098
Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...
CVE-2026-70808: Improper Access Control
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Scripting. Successful...
PT-2026-77222
Name of the Vulnerable Software and Affected Versions reportico-web versions prior to 8.1.1 Description A reflected cross-site scripting XSS issue allows remote attackers to execute arbitrary JavaScript in a user's web browser. This occurs when a malicious payload is included in the loadTemplate...
PT-2026-79905
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed cross-site scripting due to improper neutralization of user-controlled data rendered in pagination controls by...
PT-2026-79906
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed cross-site scripting due to improper neutralization of user-controlled values rendered in table cell content b...
CVE-2026-30250
Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...