Lucene search
K

6 matches found

Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.4 views

PT-2026-5134

Name of the Vulnerable Software and Affected Versions PodcastGenerator version 3.2.9 Description A stored cross-site scripting XSS issue exists in the 'Create New Live Item' functionality. This allows remote attackers to inject arbitrary script or HTML through the 'TITLE', 'SHORT DESCRIPTION', an...

4.8CVSS5.3AI score0.00066EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.3 views

TrueConf Server 安全漏洞

TrueConf Server is a self-hosted and secure video collaboration platform from the Russian company TrueConf. A security vulnerability exists in TrueConf server version 5.5.2.10813, which stems from the presence of HTML injection in the meeting description field, which could lead to the injection o...

5.4CVSS5.9AI score0.00026EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2025/09/22 3:36 p.m.3 views

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.9 Security Update

New Red Hat build of Keycloak 26.2.9 packages are available from the Customer Portal Red Hat build of Keycloak 26.2.9 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security fixes...

4.9CVSS5.8AI score0.00167EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/05 7:59 p.m.5 views

CVE-2025-10044 Keycloak: keycloak error_description injection on error pages

A flaw was found in Keycloak. Keycloak’s account console and other pages accept arbitrary text in the errordescription query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading...

4.3CVSS0.00065EPSS
Exploits0References7
CVE
CVE
added 2025/09/05 7:59 p.m.18 views

CVE-2025-10044

CVE-2025-10044 affects Keycloak: error_description injection on error pages allows arbitrary text to be rendered in the UI, enabling phishing-like messages (e.g., fake support numbers/URLs) without XSS. The issue is mitigated by HTML encoding but still enables deceptive content within the trusted...

4.3CVSS6.1AI score0.00065EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/04/22 12:0 a.m.1 views

Personal Management System 安全漏洞

Personal Management System is a web application for managing personal data by Dariusz Personal Developer. A security vulnerability exists in Personal Management System v1.4.65, which stems from the injection of a specially crafted payload into the description parameter in the New Goal Creation...

5.4CVSS6.2AI score0.00214EPSS
Exploits0References2
Rows per page
Query Builder