CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

10 matches found

EUVD•added 2026/06/19 12:31 a.m.•8 views

EUVD-2026-37952

Hashgraph Guardian through 3.5.0, fixed in commit ba8c566, contains a stored cross-site scripting vulnerability that allows authenticated users with the STANDARDREGISTRY role to inject malicious scripts by submitting a crafted companyName value via the branding configuration API endpoint. Attacke...

4.8CVSS5.4AI score0.00177EPSS

Exploits0References4

ATTACKERKB•added 2026/06/18 9:8 p.m.•7 views

CVE-2026-22674

Hashgraph Guardian through 3.6.0, fixed in commit ba8c566, contains a stored cross-site scripting vulnerability that allows authenticated users with the STANDARDREGISTRY role to inject malicious scripts by submitting a crafted companyName value via the branding configuration API endpoint. Attacke...

4.8CVSS6AI score0.00177EPSS

Exploits0References4

CVE•added 2026/06/18 9:8 p.m.•19 views

CVE-2026-22674

Hashgraph Guardian prior to 3.5.0 is affected by a stored XSS vulnerability in the branding configuration API endpoint. The issue arises from unsanitized innerHTML in the branding service, allowing an authenticated user with the STANDARD_REGISTRY role to inject malicious scripts by submitting a c...

4.8CVSS6AI score0.00177EPSS

Exploits0References3

Positive Technologies•added 2026/06/18 12:0 a.m.•12 views

PT-2026-50797

Name of the Vulnerable Software and Affected Versions Hashgraph Guardian versions prior to 3.5.0 commit ba8c566 Description A stored cross-site scripting issue exists where authenticated users with the STANDARD REGISTRY role can inject malicious scripts. This occurs by submitting a crafted...

4.8CVSS5.9AI score0.00177EPSS

Exploits0References9

EUVD•added 2025/10/07 12:30 a.m.•4 views

EUVD-2020-2581

Malware in sbrugna...

9.1CVSS9AI score0.01042EPSS

Exploits0References2

RedhatCVE•added 2025/05/22 4:4 p.m.•9 views

CVE-2020-10118

cPanel before 84.0.20 allows a demo account to modify files via Branding API calls SEC-543...

9.1CVSS6.9AI score0.01042EPSS

Exploits0References1

NVD•added 2020/03/17 3:15 p.m.•11 views

CVE-2020-10118

cPanel before 84.0.20 allows a demo account to modify files via Branding API calls SEC-543...

9.1CVSS9.2AI score0.01042EPSS

Exploits0References1

Prion•added 2020/03/17 3:15 p.m.•19 views

Design/Logic Flaw

cPanel before 84.0.20 allows a demo account to modify files via Branding API calls SEC-543...

6.4CVSS9AI score0.01042EPSS

Exploits0References1Affected Software1

CVE•added 2020/03/17 2:38 p.m.•71 views

CVE-2020-10118

CVE-2020-10118 affects cPanel before 84.0.20 via the Branding API, where a demo account can modify files. The Red Hat/CNVD entries corroborate the same issue (file modification via Branding API). The vulnerability is tied to cPanel’s Branding API handling, enabling unauthorized file changes with ...

9.1CVSS9AI score0.01042EPSS

Exploits0References1Affected Software1