CVE-2026-95657 dgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scripting

A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual-selector.js of the component Visual Selector. Executing a manipulation of the argument s can lead to cross site...

DEBIAN-CVE-2026-79311

webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...

UBUNTU-CVE-2026-79311

webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...

CVE-2026-79311

webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...

CVE-2026-95396 sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file HospitalController.java of the component Public Search Handlers. The manipulation of the argument Search leads to cross site scripting. The attack can b...

CVE-2026-95396 sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file HospitalController.java of the component Public Search Handlers. The manipulation of the argument Search leads to cross site scripting. The attack can b...

PT-2026-96828

Name of the Vulnerable Software and Affected Versions LightRAG versions prior to 1.5.5 Description LightRAG WebUI is subject to stored cross-site scripting XSS because it renders assistant answer and thinking content as raw HTML without an HTML sanitizer. The application uses react-markdown...

PT-2026-96986

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description A stored Cross-Site Scripting XSS issue exists where an attacker can inject malicious scripts into vulnerable form fields. When a victim visits the page containing the affected field, t...

PT-2026-96984

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description A stored Cross-Site Scripting XSS issue exists where an attacker can inject malicious scripts into vulnerable form fields. When a user visits the page containing the affected field, the...

CVE-2026-95657: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual-selector.js of the component Visual Selector. Executing a manipulation of the argument s can lead to cross site...

CVE-2026-77272: Improper Neutralization of Input During Web Page Generation

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the OAuth error query parameter is passed to CallbackHandler.sendresponse in oauthsetup.py and interpolated into an HTML page without escaping. A crafted authorization callback can...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090055)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090055 advisory. In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the erro...

EUVD-2026-84551

webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...

PT-2026-96797

Name of the Vulnerable Software and Affected Versions web.py version 0.76 Description Cross Site Scripting XSS occurs via the render jinja. init function. Cross Site Scripting is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users. Recommendations As a...

PT-2026-96970

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description A stored Cross-Site Scripting XSS issue exists where an attacker can inject malicious scripts into vulnerable form fields. This allows malicious JavaScript to be executed in the browser...

CVE-2026-79311: Improper Neutralization of Input During Web Page Generation

webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...

CVE-2026-95396: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file HospitalController.java of the component Public Search Handlers. The manipulation of the argument Search leads to cross site scripting. The attack can b...

CVE-2026-75510: Improper Neutralization of Input During Web Page Generation

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu's @novu/js In-App Inbox and the @novu/react Inbox component accept a notification call-to-action redirect.url from the v1 cta.data object and pass it through...

ALSA-2026:70201 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: podman: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint...

Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal...