Lucene search
+L

60678 matches found

EUVD
EUVD
added 2026/06/03 5:44 p.m.23 views

EUVD-2026-34158

An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the itemname, description, or image fields of an Item and trigger unescaped rendering in the Point of Sale POS cart interface for every operator who adds that item to a transaction.This issue...

4.8CVSS5.9AI score0.00261EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/03 5:35 p.m.22 views

EUVD-2026-34157

An authenticated user can persist arbitrary HTML/JavaScript in the emailid or mobileno fields of a Customer record and trigger unescaped rendering in the Point of Sale POS interface for every operator who selects that customer. This issue affects ERPNext: 16.16.0...

5.1CVSS5.9AI score0.00243EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/06/03 5:35 p.m.9 views

CVE-2026-42840

An authenticated user can persist arbitrary HTML/JavaScript in the emailid or mobileno fields of a Customer record and trigger unescaped rendering in the Point of Sale POS interface for every operator who selects that customer. This issue affects ERPNext: 16.16.0...

5.1CVSS5.9AI score0.00243EPSS
SaveExploits0References3Affected Software1
GithubExploit
GithubExploit
added 2026/06/03 3:17 p.m.149 views

ParamStriker

ParamStriker Offline JSON & Query Parameter Exploit Frame...

6AI score
SaveExploits0
OSV
OSV
added 2026/06/03 1:24 p.m.14 views

USN-8377-1 libtemplate-perl vulnerability

It was discovered that Template-Toolkit did not properly escape single quotes in the htmlfilter function of Template::Plugin::HTML. An attacker could possibly use this issue to inject arbitrary HTML and JavaScript into generated output...

6.1CVSS5.9AI score0.00282EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2026/06/03 1:24 p.m.14 views

USN-8377-1: Template-Toolkit vulnerability

It was discovered that Template-Toolkit did not properly escape single quotes in the htmlfilter function of Template::Plugin::HTML. An attacker could possibly use this issue to inject arbitrary HTML and JavaScript into generated output...

6.1CVSS5.6AI score0.00282EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/06/03 1:1 a.m.26 views

firefox: thunderbird: Incorrect boundary conditions in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript Engine: JIT component...

7.5CVSS5.7AI score0.00244EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/06/03 1:1 a.m.20 views

firefox: thunderbird: Other issue in the JavaScript Engine component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Other issue in the JavaScript Engine component...

7.5CVSS5.7AI score0.00298EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/06/03 12:0 a.m.21 views

PT-2026-46043

Name of the Vulnerable Software and Affected Versions ERPNext version 16.16.0 Description An authenticated user with permissions to edit Item records can inject arbitrary HTML or JavaScript into the item name, description, or image fields of an Item. This leads to unescaped rendering in the Point...

4.8CVSS5.9AI score0.00261EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/06/03 12:0 a.m.17 views

PT-2026-46108

It was discovered that Template-Toolkit did not properly escape single quotes in the html filter function of Template::Plugin::HTML. An attacker could possibly use this issue to inject arbitrary HTML and JavaScript into generated output...

6.1CVSS5.9AI score0.00282EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/06/03 12:0 a.m.32 views

Moonshot AI Kimi AI 跨站脚本漏洞

Moonshot AI Kimi AI is an artificial intelligence assistant developed by the company Moonshot AI. It features long-text comprehension, multi-modal interaction, intelligent search capabilities, and agent functions. Version 1.0 of Moonshot AI Kimi AI contains a security vulnerability. This...

6.3CVSS6.1AI score0.0027EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/03 12:0 a.m.15 views

ERPNext 安全漏洞

ERPNext is a set of open-source enterprise resource planning solutions developed by the Indian company ERPNext. Version 16.16.0 of ERPNext contains a security vulnerability. This vulnerability allows authenticated users to persist arbitrary HTML/JavaScript in customer records’ email or mobile...

5.1CVSS5.5AI score0.00243EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/03 12:0 a.m.30 views

PT-2026-46117

Name of the Vulnerable Software and Affected Versions Malla affected versions not specified Description Node names received via MQTT are stored in SQLite without sanitization and rendered into the Document Object Model DOM without escaping. This allows unauthenticated remote attackers to set...

6.3CVSS6.3AI score0.00174EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/06/03 12:0 a.m.27 views

PT-2026-46103

Impact In versions = 2.82.0, 2.91.0, if the HTML backend was explicitly configured for rendering rendering option by default deactivated, then the Playwright-based rendering feature could allow JavaScript execution and unrestricted network access when processing untrusted HTML documents. An...

8.2CVSS6.5AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/06/03 12:0 a.m.14 views

AlmaLinux 9 : firefox (ALSA-2026:21378)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:21378 advisory. firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component CVE-2026-8388 firefox: Other issue in the JavaScript Engine component...

9.8CVSS6AI score0.00605EPSS
SaveExploits0References20
CVE
CVE
added 2026/06/03 12:0 a.m.41 views

CVE-2026-39107

CVE-2026-39107 affects the Kimi AI v1.0 web interface, specifically the Preview feature. The issue is a Cross Site Scripting vulnerability where HTML/JavaScript payloads generated by the AI model are not properly sanitized or encoded, causing the payload to be rendered into the DOM when users vie...

6.3CVSS6AI score0.0027EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/03 12:0 a.m.15 views

ERPNext 跨站脚本漏洞

ERPNext is a set of open-source enterprise resource planning solutions developed by the Indian company ERPNext. Version 16.16.0 of ERPNext contains a cross-site scripting vulnerability. This vulnerability arises from users with project record editing privileges being able to persist arbitrary...

4.8CVSS5.1AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/03 12:0 a.m.31 views

PT-2026-46118

Name of the Vulnerable Software and Affected Versions Docling versions 2.82.0 through 2.90.x Description When the HTML backend is explicitly configured for rendering, the Playwright-based rendering feature allows JavaScript execution and unrestricted network access during the processing of...

8.2CVSS6.7AI score0.00384EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/06/03 12:0 a.m.60 views

CVE-2026-39107

A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature. The application fails to properly sanitize or encode HTML/JavaScript payloads generated by the AI model. When a user switches to the 'Preview' tab to view AI-generated code, the malicious payload is...

0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/03 12:0 a.m.44 views

PT-2026-46005

Name of the Vulnerable Software and Affected Versions Kimi AI version 1.0 Description A Cross Site Scripting issue exists in the 'Preview' feature of the web interface. The application does not properly sanitize or encode HTML or JavaScript payloads produced by the AI model. When a user accesses...

6.3CVSS6.1AI score0.0027EPSS
SaveExploits0References5
Rows per page
Query Builder