PT-2026-4267

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Slider b-slider allows DOM-Based XSS.This issue affects B Slider: from n/a through = 2.0.6...

PT-2026-4214

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Imran Emu Owl Carousel WP owl-carousel-wp allows Stored XSS.This issue affects Owl Carousel WP: from n/a through = 2.2.2...

PT-2026-4235

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Micro.company Form to Chat App form-to-chat allows Stored XSS.This issue affects Form to Chat App: from n/a through = 1.2.5...

PT-2026-4306

Name of the Vulnerable Software and Affected Versions Microsoft Account affected versions not specified Description The issue involves improper neutralization of input during web page generation, specifically a 'cross-site scripting' condition within Microsoft Account. This allows an unauthorized...

USN-7971-1: GLib vulnerability

It was discovered that GLib incorrectly handled the buffered input stream API. An attacker could use this issue to cause GLib to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-7970-1: iperf3 vulnerabilities

Jorge Sancho Larraz discovered that iperf3 did not properly manage certain inputs, which could cause the server process to stop responding, waiting for input on the control connection. A remote attacker could possibly use this issue to cause a denial of service. This issue was only addressed in...

USN-7970-1 iperf3 vulnerabilities

Jorge Sancho Larraz discovered that iperf3 did not properly manage certain inputs, which could cause the server process to stop responding, waiting for input on the control connection. A remote attacker could possibly use this issue to cause a denial of service. This issue was only addressed in...

CVE-2026-1183 HTML injection in multiple Botble products

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter...

EEF-CVE-2026-21618 Cross-site scripting (XSS) in OAuth Device Authorization screen

Summary Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in hexpm hexpm/hexpm 'Elixir.HexpmWeb.SharedAuthorizationView' modules allows Cross-Site Scripting XSS. This vulnerability is associated with program files...

Hexpm security vulnerability

Hexpm is a web page and interface developed by Hex. Hexpm has a security vulnerability, which stems from improper input handling and may lead to cross-site scripting attacks...

PT-2026-3443

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in hexpm hexpm/hexpm 'Elixir.HexpmWeb.SharedAuthorizationView' modules allows Cross-Site Scripting XSS. This vulnerability is associated with program files lib/hexpm web/views/shared...

Dell PowerProtect Data Domain OS Command Injection Vulnerability (CNVD-2026-18590)

Dell PowerProtect Data Domain Dell PowerProtect DD is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell, USA. The Dell PowerProtect Data Domain suffers from an operating system command injection vulnerability that originates from improper...

CVE-2026-22917

Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...

Hanwha Vision Camera Improper Neutralization of Input During Web Page Generation (CVE-2025-8075)

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems ICS and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability could allow an attacker to XSS on the user's browser. The...

CVE-2026-22917

Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...

CVE-2026-22917

Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...

CVE-2026-22917

Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...

CVE-2026-22917

Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...

CVE-2026-22917

Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...

CVE-2026-22917

CVE-2026-22917 describes improper input handling in a system endpoint that may lead to resource exhaustion and a denial of service. The CVE is reflected in multiple feeds: NVD/Red Hat entries reiterate the same description and note a high availability impact (CVSS v3.1 base score 7.5) with networ...