Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1149189 matches found

EUVD
EUVD•added 2026/09/22 6:56 p.m.•17 views

EUVD-2026-84790

Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page...

8.1CVSS5.8AI score0.01175EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/22 6:53 p.m.•13 views

EUVD-2026-84780

Adobe Connect is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...

9.3CVSS8AI score0.00304EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/22 6:53 p.m.•13 views

EUVD-2026-84779

Adobe Connect is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...

9.3CVSS5.8AI score0.00304EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/22 6:17 p.m.•24 views

CVE-2026-95657

A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual-selector.js of the component Visual Selector. Executing a manipulation of the argument s can lead to cross site...

5.1CVSS0.00416EPSS
SaveExploits0References9
Rockylinux
Rockylinux•added 2026/09/22 6:04 p.m.•18 views

osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images an...

7.5CVSS6.6AI score0.00431EPSS
SaveExploits0
Vulnrichment
Vulnrichment•added 2026/09/22 5:45 p.m.•15 views

CVE-2026-95657 dgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scripting

A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual-selector.js of the component Visual Selector. Executing a manipulation of the argument s can lead to cross site...

5.1CVSS3.4AI score0.00416EPSS
SaveExploits0References9
EUVD
EUVD•added 2026/09/22 5:45 p.m.•19 views

EUVD-2026-84604

A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual-selector.js of the component Visual Selector. Executing a manipulation of the argument s can lead to cross site...

5.1CVSS3.4AI score0.00416EPSS
SaveExploits0References9
Cvelist
Cvelist•added 2026/09/22 5:45 p.m.•45 views

CVE-2026-95657 dgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scripting

A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual-selector.js of the component Visual Selector. Executing a manipulation of the argument s can lead to cross site...

5.1CVSS0.00416EPSS
SaveExploits0References9
CVE
CVE•added 2026/09/22 5:45 p.m.•27 views

CVE-2026-95657

The dgtlmoon Changedetection.io application is vulnerable to cross-site scripting (XSS) in versions up to 0.55.8 . The flaw exists in the setCurrentSelectedText function of the changedetectionio/static/js/visual-selector.js file within the Visual Selector component. A remote attacker can trigger ...

5.1CVSS3.4AI score0.00416EPSS
SaveExploits0References9
osv_cve
osv_cve•added 2026/09/22 5:45 p.m.•18 views

CVE-2026-95657 dgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scripting

A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual-selector.js of the component Visual Selector. Executing a manipulation of the argument s can lead to cross site...

5.1CVSS3.8AI score
SaveExploits0References11
osv_debian
osv_debian•added 2026/09/22 4:17 p.m.•14 views

DEBIAN-CVE-2026-79311

webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...

6.1CVSS5.8AI score0.00188EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu•added 2026/09/22 4:17 p.m.•17 views

UBUNTU-CVE-2026-79311

webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...

6.1CVSS5.8AI score0.00188EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve•added 2026/09/22 4:17 p.m.•13 views

CVE-2026-79311

webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...

5.8AI score0.00188EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2026/09/22 1:00 p.m.•15 views

CVE-2026-95396 sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file HospitalController.java of the component Public Search Handlers. The manipulation of the argument Search leads to cross site scripting. The attack can b...

5.3CVSS3.3AI score0.0047EPSS
SaveExploits0References6
osv_cve
osv_cve•added 2026/09/22 1:00 p.m.•19 views

CVE-2026-95396 sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file HospitalController.java of the component Public Search Handlers. The manipulation of the argument Search leads to cross site scripting. The attack can b...

5.3CVSS3.8AI score
SaveExploits0References8
Positive Technologies
Positive Technologies•added 2026/09/22 12:00 a.m.•12 views

PT-2026-96828

Name of the Vulnerable Software and Affected Versions LightRAG versions prior to 1.5.5 Description LightRAG WebUI is subject to stored cross-site scripting XSS because it renders assistant answer and thinking content as raw HTML without an HTML sanitizer. The application uses react-markdown...

6.1CVSS6.2AI score0.00246EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies•added 2026/09/22 12:00 a.m.•11 views

PT-2026-96986

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description A stored Cross-Site Scripting XSS issue exists where an attacker can inject malicious scripts into vulnerable form fields. When a victim visits the page containing the affected field, t...

9.4CVSS7.9AI score0.00304EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies•added 2026/09/22 12:00 a.m.•14 views

PT-2026-96984

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description A stored Cross-Site Scripting XSS issue exists where an attacker can inject malicious scripts into vulnerable form fields. When a user visits the page containing the affected field, the...

9.4CVSS7.9AI score0.00304EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus•added 2026/09/22 12:00 a.m.•14 views

RockyLinux 9 : osbuild-composer (RLSA-2026:69293)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69293 advisory. golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass CVE-2026-27136 golang.org/x/net/html:...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References11
osv_alsa
osv_alsa•added 2026/09/22 12:00 a.m.•23 views

ALSA-2026:70201 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: podman: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint...

8.8CVSS6.1AI score0.00798EPSS
SaveExploits2References23
Rows per page
Query Builder