Lucene search
+L

2220 matches found

CNNVD
CNNVD
added 2026/05/16 12:0 a.m.13 views

CouchCMS 跨站脚本漏洞

CouchCMS is an open-source content management system designed for designers. Version 2.2.1 of CouchCMS has a cross-site scripting vulnerability. This vulnerability stems from cross-site scripting issues, allowing authenticated attackers to upload malicious SVG files through the file upload featur...

5.4CVSS5.7AI score0.00172EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/15 9:15 p.m.7 views

CVE-2026-45346

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in Open WebUI SVG renderer implementation. This vulnerability is fixed in 0.6.31...

5.1CVSS5.8AI score0.00165EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/05/15 9:15 p.m.10 views

CVE-2026-45346 Open WebUI: Stored Cross-Site Scripting in SVG Renderer

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in Open WebUI SVG renderer implementation. This vulnerability is fixed in 0.6.31...

5.1CVSS6.1AI score
SaveExploits0References3
NVD
NVD
added 2026/05/15 7:17 p.m.19 views

CVE-2026-4054

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 Fail to validate the response body of proxied images, which allows a remote attacker to enact client-side DoS via an SVG file served from an attacker-controlled origin under a non-SVG Content-Type header e.g. image/png...

6.5CVSS0.00242EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/15 6:36 p.m.41 views

CVE-2026-46360 phpMyFAQ - Stored XSS via Entity Decoding Depth Limit Bypass in SVG Sanitizer

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer::decodeAllEntities that limits recursive entity decoding to 5 iterations, allowing attackers to bypass sanitization. Authenticated users with FAQEDIT permission can upload malicious SVG files with deeply...

5.4CVSS0.00153EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/15 6:36 p.m.8 views

CVE-2026-46360 phpMyFAQ - Stored XSS via Entity Decoding Depth Limit Bypass in SVG Sanitizer

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer::decodeAllEntities that limits recursive entity decoding to 5 iterations, allowing attackers to bypass sanitization. Authenticated users with FAQEDIT permission can upload malicious SVG files with deeply...

5.1CVSS6AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/15 6:36 p.m.9 views

CVE-2026-46360 phpMyFAQ - Stored XSS via Entity Decoding Depth Limit Bypass in SVG Sanitizer

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer::decodeAllEntities that limits recursive entity decoding to 5 iterations, allowing attackers to bypass sanitization. Authenticated users with FAQEDIT permission can upload malicious SVG files with deeply...

5.4CVSS5.9AI score0.00153EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/15 6:32 p.m.28 views

CVE-2026-4054

Mattermost disclosure CVE-2026-4054 affects Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, and 11.4.x

6.5CVSS5.8AI score0.00242EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/05/15 6:32 p.m.47 views

CVE-2026-4054 SVG content served through Mattermost image proxy despite Content-Type restrictions causes client-side denial of service

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 Fail to validate the response body of proxied images, which allows a remote attacker to enact client-side DoS via an SVG file served from an attacker-controlled origin under a non-SVG Content-Type header e.g. image/png...

4.3CVSS0.00242EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/15 6:32 p.m.7 views

CVE-2026-4054 SVG content served through Mattermost image proxy despite Content-Type restrictions causes client-side denial of service

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 Fail to validate the response body of proxied images, which allows a remote attacker to enact client-side DoS via an SVG file served from an attacker-controlled origin under a non-SVG Content-Type header e.g. image/png...

4.3CVSS6AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/05/15 2:12 p.m.12 views

CVE-2026-6210

A flaw was found in Qt SVG. A remote attacker could exploit a vulnerability by providing a specially crafted SVG image. This issue arises from incorrect handling of SVG marker references, where the software misinterprets data types, leading to memory access errors and an infinite loop. This can...

8.7CVSS5.7AI score0.00279EPSS
SaveExploits0References5
Veracode
Veracode
added 2026/05/15 11:11 a.m.21 views

Cross-Site Scripting (XSS)

github.com/siyuan-note/siyuan is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to incomplete SVG sanitization and improper handling of user-controlled input in the /api/icon/getDynamicIcon endpoint, which allows an attacker to inject malicious SVG content and execute JavaScript...

9.3CVSS6.4AI score0.00302EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/15 12:0 a.m.14 views

PT-2026-41339

CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files. Attackers can upload SVG files containing external entity references through the browse.php endpoint to access internal service...

5.3CVSS5.9AI score0.00238EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/15 12:0 a.m.16 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multilingual, database-driven FAQ system developed by Thorsten Rinne. Versions of phpMyFAQ prior to 4.1.2 had a cross-site scripting vulnerability. This vulnerability stemmed from a recursive entity decoding limit of 5 times in SvgSanitizer::decodeAllEntities, allowing users with...

5.4CVSS5.9AI score0.00153EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/15 12:0 a.m.17 views

Open WebUI 安全漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.6.31 contained security vulnerabilities, which were caused by cross-site scripting vulnerabilities in the SVG renderer implementation...

5.4CVSS5.7AI score0.00165EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2026/05/14 8:21 p.m.15 views

NPM: Open WebUI Has Stored Cross-Site Scripting in SVG Renderer

NPM: Open WebUI Has Stored Cross-Site Scripting in SVG Renderer vulnerability discovered by ? in WordPress Npm open-webui versions 0.6.31...

5.4CVSS5.8AI score0.00165EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/05/14 8:21 p.m.20 views

GHSA-R29H-37FJ-X2W6 Open WebUI Has Stored Cross-Site Scripting in SVG Renderer

Summary There is a Cross-Site Scripting vulnerability in Open WebUI SVG renderer implementation. Details It is possible permanently save any HTML/JavaScript code in the application, which can be then executed in the context of the application domain. This behaviour can be used to extract and stea...

5.1CVSS5.9AI score0.00165EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/05/13 9:32 p.m.31 views

EUVD-2026-30134

A cross-site scripting XSS vulnerability exists in Alinto SOGo, version 5.12.7. A maliciously crafted ICS calendar invitation files allows arbitrary JavaScript execution within the authenticated SOGo webmail session. The issue occurs because SVG content embedded in the description field of an ICS...

6.1CVSS6AI score0.00408EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/13 6:2 p.m.8 views

CVE-2026-8496 A cross-site scripting (XSS) vulnerability in Alinto SOGo, version 5.12.7

A cross-site scripting XSS vulnerability exists in Alinto SOGo, version 5.12.7. A maliciously crafted ICS calendar invitation files allows arbitrary JavaScript execution within the authenticated SOGo webmail session. The issue occurs because SVG content embedded in the description field of an ICS...

6AI score0.00408EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/12 9:8 p.m.10 views

CVE-2026-44259

efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the previewServlet serves files with their detected MIME type based on file extension, without any content sanitization or security headers. Files with .html, .htm, or .svg extensions are served as text/html or image/svg+xml...

4.6CVSS5.9AI score0.00141EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder