283194 matches found
EUVD-2026-75447
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosu...
casc-analys
💜 Что такое CASC-ANAYS? CASC-ANAYS — это модульный аналитиче...
casc-anays
💜 Что такое CASC-ANAYS? CASC-ANAYS — это модульный аналитиче...
RamziRange3
🕶️ RamziRange9 A deliberately vulnerable web application bui...
Security Bulletin: SQL injection vulnerability in IBM Cloud Pak for Business Automation Operational Decision Manager component - CVE-2026-18658
Summary IBM Operational Decision Manager in IBM Cloud Pak for Business Automation is vulnerable to a SQL injection attack. Vulnerability Details CVEID:CVE-2026-18658 DESCRIPTION: IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to...
Exploit for Improper Privilege Management in Openwebanalytics Open_Web_Analytics
CVE-2022-24637 — Open Web Analytics prior to 1.7.4 Defensiv...
CVE-2026-88288
GeoVision GV-LPC2211 (also listed as GV-LPC2011) version V1.13 is affected by an arbitrary file read vulnerability in the BKDownloadLink.cgi endpoint. The root cause is a failure to restrict the filename parameter supplied to the CGI script, which allows a remote user with valid web credentials t...
CVE-2026-81635
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...
CVE-2026-0308
A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama...
CVE-2026-81635
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...
CVE-2026-81635
SHIRASAGI by Security Science is affected by a cross-site scripting (XSS) vulnerability that may allow an attacker to execute arbitrary script in the web browser of a user who accesses a website using the product. The CNA (JPCERT) assigns a MEDIUM severity (CVSS 3.0 base score 5.4; CVSS 4.0 base ...
CVE-2026-81635
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...
EUVD-2026-75271
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...
CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama...
CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama...
EUVD-2026-75256
A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama...
CVE-2026-0308
This CVE entry is reserved with no public technical details yet. The affected product, root cause, and impact are not specified in the provided documents. Monitor for updates as details are expected once the vulnerability is publicly announced.
CVE-2026-87586
creationtimestamp| type| source ---|---|--- 2026-09-10 04:52:04+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 05:15:25+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...
CVE-2026-87544
creationtimestamp| type| source ---|---|--- 2026-09-10 04:50:32+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 13:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv65vmonis2w 2026-09-16 04:50:28+00:00| seen|...
CVE-2026-87508
creationtimestamp| type| source ---|---|--- 2026-09-10 04:49:04+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:49:30+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...