Lucene search
+L

15955 matches found

Positive Technologies
Positive Technologies
added 2026/08/28 12:00 a.m.18 views

PT-2026-83375

Name of the Vulnerable Software and Affected Versions MariaDB Connector/R2DBC versions prior to 1.4.1 Description The driver encodes and decodes all character data assuming the connection character set is UTF-8. A server can announce a mid-session change to the character set client variable throu...

5.9CVSS5.9AI score0.00297EPSS
SaveExploits0References10
OSV
OSV
added 2026/08/28 12:00 a.m.5 views

UBUNTU-CVE-2026-40018

None None None No publicly available exploits are known...

7.4CVSS7.1AI score0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/28 12:00 a.m.24 views

PT-2026-83374

Name of the Vulnerable Software and Affected Versions MariaDB Connector/J versions prior to 2.7.14 MariaDB Connector/J versions prior to 3.3.5 MariaDB Connector/J versions prior to 3.4.3 MariaDB Connector/J versions prior to 3.5.9 Description The connector encodes and decodes protocol text and...

5.9CVSS5.9AI score0.00344EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2026/08/28 12:00 a.m.26 views

PT-2026-83349

Name of the Vulnerable Software and Affected Versions MariaDB Connector/Node.js versions prior to 3.2.4 MariaDB Connector/Node.js versions prior to 3.3.3 MariaDB Connector/Node.js versions prior to 3.4.6 MariaDB Connector/Node.js versions prior to 3.5.3 Description SQL injection is possible when...

6.5CVSS6.1AI score0.00311EPSS
SaveExploits0References21
UbuntuCve
UbuntuCve
added 2026/08/28 12:00 a.m.10 views

CVE-2026-40018

None None None No publicly available exploits are known...

7.4CVSS7.1AI score0.0027EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/27 8:17 p.m.11 views

CVE-2026-59281

Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors or Errors.getFieldError accessors are vulnerable to arbitrary HTML/JavaScript code injection, potentially resulting in...

6.1CVSS0.00181EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/27 8:17 p.m.11 views

CVE-2026-59281

Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors or Errors.getFieldError accessors are vulnerable to arbitrary HTML/JavaScript code injection, potentially resulting in...

6.1CVSS5.9AI score0.00181EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/27 5:57 p.m.42 views

CVE-2026-59281 Spring Framework Cross-site Scripting via EscapedErrors

Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors or Errors.getFieldError accessors are vulnerable to arbitrary HTML/JavaScript code injection, potentially resulting in...

0.00181EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/27 5:57 p.m.132 views

CVE-2026-59281

Spring Framework versions 5.2.25.RELEASE and earlier through 7.0.8 are affected by a reflected cross-site scripting (XSS) vulnerability in Spring MVC and WebFlux. The root cause is that the no-argument Errors.getFieldErrors() and Errors.getFieldError() accessors return unescaped field error conte...

6.1CVSS5.2AI score0.00181EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2026/08/27 5:57 p.m.7 views

CVE-2026-59281

Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors or Errors.getFieldError accessors are vulnerable to arbitrary HTML/JavaScript code injection, potentially resulting in...

6.1CVSS5.9AI score0.00181EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/08/27 11:52 a.m.7 views

CVE-2026-59894

A flaw was found in sqlparse, a non-validating SQL parser module for Python. When generating Python or PHP code snippets, the sqlparse.format function fails to properly escape backslashes before quotes in SQL strings. This vulnerability allows a local attacker, by providing crafted SQL, to break...

6.2CVSS6.2AI score0.00129EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/27 7:44 a.m.8 views

BIT-NEO4J-ENTERPRISE-2026-1337 Insufficient escaping of unicode characters in query log

Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisory is released as a precaution to treat...

5.4CVSS5.3AI score0.00232EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2026/08/27 12:00 a.m.15 views

TencentOS Server 3: php:8.2 (TSSA-2026:0930)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0930 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

9.8CVSS6AI score0.00323EPSS
SaveExploits2References3
NVD
NVD
added 2026/08/26 8:16 a.m.9 views

CVE-2026-6178

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's 'iconbox2' shortcode in all versions up to, and including, 28.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,...

6.4CVSS0.00349EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/08/26 7:42 a.m.10 views

EUVD-2026-66334

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's 'iconbox2' shortcode in all versions up to, and including, 28.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,...

6.4CVSS5.5AI score0.00349EPSS
SaveExploits0References8
NVD
NVD
added 2026/08/26 7:16 a.m.10 views

CVE-2026-3002

The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the multiple blocks in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/26 6:08 a.m.32 views

CVE-2026-18331

Formidable Forms for WordPress (all versions ≤ 6.33.1) is vulnerable to unauthenticated stored XSS via the frm_user_id parameter. The root cause is insufficient input sanitization and output escaping: when an attacker forges frm_user_id to match an administrator's user ID (discoverable through th...

7.2CVSS5.6AI score0.00372EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/08/26 6:08 a.m.8 views

EUVD-2026-66294

The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'frmuserid' parameter in all versions up to, and including, 6.33.1 due to insufficient input sanitization and output escaping. Thi...

7.2CVSS5.6AI score0.00372EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/08/26 6:08 a.m.11 views

EUVD-2026-66292

The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the multiple blocks in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.5AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/26 6:08 a.m.38 views

CVE-2026-3002 Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Blocks

The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the multiple blocks in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00263EPSS
SaveExploits0References6
Rows per page
Query Builder