Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
added 2026/07/17 1:19 p.m.12 views

CVE-2026-41846

A flaw was found in Spring MVC applications, part of the Spring Framework. This vulnerability allows a remote attacker to inject arbitrary HTML or JavaScript code due to improper handling of user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP form tags. Successful...

6.8CVSS5.2AI score0.0014EPSS
SaveExploits0References4
NVD
NVD
added 2026/06/09 5:16 a.m.18 views

CVE-2026-41846

Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP form tags allow arbitrary HTML/JavaScript code injection, potentially resulting in a cross-site scripting XSS vulnerability. Affected versions: Spring Framework 7.0.0 through...

6.1CVSS0.0014EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/06/09 12:0 a.m.6 views

CVE-2026-41846

Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP form tags allow arbitrary HTML/JavaScript code injection, potentially resulting in a cross-site scripting XSS vulnerability. Affected versions: Spring Framework 7.0.0 through...

6.1CVSS6.1AI score0.0014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.28 views

PT-2026-47657

Name of the Vulnerable Software and Affected Versions Spring Framework versions 7.0.0 through 7.0.7 Spring Framework versions 6.2.0 through 6.2.18 Spring Framework versions 6.1.0 through 6.1.27 Spring Framework versions 5.3.0 through 5.3.48 Description Spring MVC applications that accept...

6.1CVSS5AI score0.0014EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.26 views

Spring Framework 跨站脚本漏洞

The Spring Framework is an application development framework developed by Spring in open source. Versions 7.0.0 to 7.0.7, 6.2.0 to 6.2.18, 6.1.0 to 6.1.27, and 5.3.0 to 5.3.48 have cross-site scripting vulnerabilities. These vulnerabilities stem from the cssClass, cssErrorClass, or cssStyle...

6.1CVSS5.2AI score0.0014EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:50 a.m.7 views

SUSE CVE-2011-3966

Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to error handling for Cascading Style Sheets CSS token-sequence data...

7.5CVSS9.6AI score0.02005EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2012/04/19 12:0 a.m.29 views

Opera Browser Multiple Vulnerabilities-02 July-11 (Mac OS X)

The host is installed with Opera browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvuln2macosxjuly11.nasl 5950 2017-04-13 09:02:06Z teissa $ Opera Browser Multiple Vulnerabilities-02 July-11 Mac OS X Authors: Madhuri D Copyright: Copyright c 2012 Greenbo...

5CVSS0.7AI score0.02258EPSS
SaveExploits0References2
Rows per page
Query Builder