Lucene search
+L

1837 matches found

Vulnrichment
Vulnrichment
•added 2026/07/01 9:02 p.m.•17 views

CVE-2026-54720 Silverstripe Framework: Possible XSS attack through media embed

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/...

5.4CVSS5.7AI score0.00263EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/01 9:02 p.m.•60 views

CVE-2026-54720 Silverstripe Framework: Possible XSS attack through media embed

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/...

5.4CVSS0.00263EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/01 9:02 p.m.•12 views

CVE-2026-54720

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/...

5.4CVSS5.8AI score0.00263EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/07/01 9:02 p.m.•44 views

CVE-2026-54720

Silverstripe Framework (PHP) contains an XSS vulnerability in the CMS “Insert media from web” feature, exploitable via a specially crafted embed. The issue affects versions prior to 6.2.2 and is mitigated by upgrading to 6.2.2 or later. The vulnerability stems from the media embed handling and co...

5.4CVSS5.7AI score0.00263EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/01 9:02 p.m.•17 views

CVE-2026-54720 Silverstripe Framework: Possible XSS attack through media embed

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/...

5.4CVSS5.9AI score
SaveExploits0References4
Patchstack
Patchstack
•added 2026/07/01 5:21 p.m.•19 views

WordPress Insert Pages plugin <= 3.11.4 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Insert Pages versions = 3.11.4...

6.4CVSS5.8AI score0.00357EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
•added 2026/07/01 3:35 a.m.•17 views

SUSE CVE-2026-13573

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The...

4.8CVSS6AI score0.00173EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/01 12:00 a.m.•28 views

PT-2026-54846

Name of the Vulnerable Software and Affected Versions Silverstripe Framework versions prior to 6.2.2 Description The "Insert media from web" functionality in the CMS is susceptible to Cross-Site Scripting XSS, a technique where malicious scripts are injected into trusted websites, when processing...

5.4CVSS6AI score0.00263EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/01 12:00 a.m.•2 views

CVE-2026-54720: Improper Neutralization of Input During Web Page Generation

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/...

5.4CVSS5.7AI score0.00263EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/30 8:00 p.m.•24 views

CVE-2026-13573

A flaw was found in llvm. A local attacker could exploit a stack-based buffer overflow vulnerability in the llvm::StringMap::insert function. This manipulation could lead to a denial of service, making the affected system or application unavailable. Mitigation Mitigation for this issue is either...

4.8CVSS5.7AI score0.00173EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2026/06/30 12:00 a.m.•29 views

Linux Distros Unpatched Vulnerability : CVE-2026-13573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of th...

4.8CVSS5.5AI score0.00173EPSS
SaveExploits0References4
OSV
OSV
•added 2026/06/29 3:16 p.m.•26 views

DEBIAN-CVE-2026-13573

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The...

4.8CVSS5.5AI score0.00173EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/29 3:16 p.m.•30 views

CVE-2026-13573

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The...

4.8CVSS0.00173EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/06/29 2:00 p.m.•58 views

CVE-2026-13573 llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The...

4.8CVSS0.00173EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/06/29 2:00 p.m.•20 views

CVE-2026-13573 llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The...

4.8CVSS5.5AI score0.00173EPSS
SaveExploits0References7
OSV
OSV
•added 2026/06/29 2:00 p.m.•20 views

CVE-2026-13573 llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The...

4.8CVSS6AI score
SaveExploits0References9
attackerkb
attackerkb
•added 2026/06/29 2:00 p.m.•14 views

CVE-2026-13573

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The...

4.8CVSS6AI score0.00173EPSS
SaveExploits0References7Affected Software1
CVE
CVE
•added 2026/06/29 2:00 p.m.•61 views

CVE-2026-13573

CVE-2026-13573 affects the LLVM project (up to 22.1.6), specifically the ValueSymbolTable module’s file lib/IR/ValueSymbolTable.cpp and its function StringMap::insert. The issue is a stack-based buffer overflow introduced in that function, enabling a local attacker to exploit it. The exploit has ...

4.8CVSS5.5AI score0.00173EPSS
SaveExploits0References7
OSV
OSV
•added 2026/06/29 11:50 a.m.•21 views

PYSEC-2026-262 NASA AIT-Core vulnerable to SQL Injection

NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...

9.8CVSS5.8AI score0.00608EPSS
SaveExploits1References6
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•23 views

NASA AIT-Core vulnerable to SQL Injection

NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...

9.8CVSS6AI score0.00608EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder