Lucene search
+L

169 matches found

Cvelist
Cvelist
added 2026/02/26 2:08 a.m.39 views

CVE-2026-27963 Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata

Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting XSS vulnerability exists in versions prior to 2.32.0 of the Audiobookshelf web application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modification...

4.8CVSS0.00226EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/02/26 2:08 a.m.6 views

CVE-2026-27963 Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata

Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting XSS vulnerability exists in versions prior to 2.32.0 of the Audiobookshelf web application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modification...

4.8CVSS5.7AI score0.00226EPSS
SaveExploits1References2
OSV
OSV
added 2026/02/26 2:08 a.m.14 views

CVE-2026-27963 Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata

Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting XSS vulnerability exists in versions prior to 2.32.0 of the Audiobookshelf web application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modification...

4.8CVSS6.2AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/02/26 2:06 a.m.7 views

CVE-2026-27973 Audiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App)

Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting XSS vulnerability exists in versions prior to 0.12.0-beta of the Audiobookshelf mobile application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library...

4CVSS5.7AI score0.00164EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/02/26 2:06 a.m.40 views

CVE-2026-27973 Audiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App)

Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting XSS vulnerability exists in versions prior to 0.12.0-beta of the Audiobookshelf mobile application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library...

4CVSS0.00164EPSS
SaveExploits0References2
OSV
OSV
added 2026/02/26 2:06 a.m.14 views

CVE-2026-27973 Audiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App)

Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting XSS vulnerability exists in versions prior to 0.12.0-beta of the Audiobookshelf mobile application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library...

4CVSS6.2AI score
SaveExploits0References4
EUVD
EUVD
added 2026/02/26 2:06 a.m.15 views

EUVD-2026-8823

Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting XSS vulnerability exists in versions prior to 0.12.0-beta of the Audiobookshelf mobile application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library...

4CVSS5.7AI score0.00164EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/26 2:06 a.m.10 views

CVE-2026-27973

Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting XSS vulnerability exists in versions prior to 0.12.0-beta of the Audiobookshelf mobile application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library...

4.8CVSS5.7AI score0.00164EPSS
SaveExploits0References3Affected Software2
CVE
CVE
added 2026/02/26 2:06 a.m.42 views

CVE-2026-27973

Audiobookshelf (mobile app) prior to 0.12.0-beta is affected by a stored cross-site scripting (XSS) vulnerability via malicious library metadata that allows arbitrary JavaScript execution in victim users’ browsers/WebViews. According to the advisory, attackers with library modification privileges...

4.8CVSS5.7AI score0.00164EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2026/02/26 12:00 a.m.47 views

PT-2026-22119

Name of the Vulnerable Software and Affected Versions Audiobookshelf versions prior to 0.12.0-beta Description Audiobookshelf is a self-hosted audiobook and podcast server. A cross-site scripting XSS issue exists in versions of the Audiobookshelf mobile application prior to version 0.12.0-beta...

4.8CVSS6AI score0.00189EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/02/26 12:00 a.m.19 views

PT-2026-22118

Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting XSS vulnerability exists in versions prior to 2.32.0 of the Audiobookshelf web application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modification...

4.8CVSS5.7AI score0.00226EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/02/26 12:00 a.m.21 views

Audiobookshelf 安全漏洞

Audiobookshelf is an open-source, self-hosted server for audio books and podcasts. Versions of Audiobookshelf prior to 0.12.0-beta contained security vulnerabilities. These vulnerabilities were caused by malicious library metadata, leading to storage-side cross-site scripting attacks. Such attack...

4.8CVSS5.7AI score0.00164EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/26 12:00 a.m.16 views

Audiobookshelf 跨站脚本漏洞

Audiobookshelf is an open-source, self-hosted server for audio books and podcasts. Versions of Audiobookshelf prior to 0.12.0-beta contained a cross-site scripting vulnerability. This vulnerability was caused by malicious library metadata, which led to cross-site scripting attacks. Such attacks...

4.8CVSS5.6AI score0.00189EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/26 12:00 a.m.21 views

PT-2026-22111

Name of the Vulnerable Software and Affected Versions Audiobookshelf versions prior to 0.12.0-beta Description Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting XSS issue exists in versions prior to 0.12.0-beta of the Audiobookshelf mobile application. Th...

4.8CVSS5.5AI score0.00164EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2026/02/26 12:00 a.m.22 views

Audiobookshelf 跨站脚本漏洞

Audiobookshelf is an open-source, self-hosted server for audio books and podcasts. Versions of Audiobookshelf prior to 2.32.0 contained a cross-site scripting vulnerability. This vulnerability was caused by malicious library metadata, leading to storage-based cross-site scripting, which could...

4.8CVSS5.7AI score0.00226EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.17 views

EUVD-2024-40454

Malicious code in bioql PyPI...

6.3CVSS6.6AI score0.00546EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2025-28630

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.0046EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-56365

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00349EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.15 views

EUVD-2023-56397

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00349EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2025-12610

Malicious code in bioql PyPI...

6.9CVSS6.5AI score0.00339EPSS
SaveExploits1References2
Rows per page
Query Builder