CVE-2026-20087

CVE-2026-20087 covers a stored XSS vulnerability in Cisco IMC’s web-based management interface. An authenticated user with administrative privileges could be persuaded to click a crafted link, triggering script execution in the target user’s browser or exposure of browser-based information due to...

CVE-2026-20085 Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by...

CVE-2026-20085 Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by...

CVE-2026-20085

CVE-2026-20085 affects the web-based management interface of Cisco IMC. The issue is a reflected XSS caused by insufficient input validation that can be triggered when a user clicks a crafted link, enabling an unauthenticated remote attacker to execute arbitrary script code in the user’s browser ...

CVE-2026-20041 Cisco Nexus Dashboard Server Side Request Forgery Vulnerability

A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attack...

CVE-2026-20041 Cisco Nexus Dashboard Server Side Request Forgery Vulnerability

A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attack...

Cisco Nexus Dashboard and Nexus Dashboard Insights Server-Side Request Forgery Vulnerability

A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attack...

CVE-2026-25601

creationtimestamp| type| source ---|---|--- 2026-04-01 15:43:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migzt6t6dh2d...

EUVD-2026-17871

Dell AppSync, versions 4.6.0, contains an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

EUVD-2026-17883

A reflected cross-site scripting XSS vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that if visited by an authenticated victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered...

CVE-2026-22768

creationtimestamp| type| source ---|---|--- 2026-04-01 15:26:09+00:00| seen| Telegram/LPiyqtmOsuMBSJ4TiscGzigzJ0idlnzzivv75bN9d93RTXE 2026-04-01 15:38:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migzkafryn27 2026-04-01 16:10:13+00:00| seen|...

CVE-2026-29014

creationtimestamp| type| source ---|---|--- 2026-04-01 15:26:09+00:00| seen| Telegram/LPiyqtmOsuMBSJ4TiscGzigzJ0idlnzzivv75bN9d93RTXE 2026-04-01 15:28:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migyydiyl327 2026-04-01 16:29:53+00:00| seen|...

CVE-2026-22767

creationtimestamp| type| source ---|---|--- 2026-04-01 15:23:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migypf3ceh2n 2026-04-01 15:25:59+00:00| seen| Telegram/4u6pNJfi3nLv5HBYbkAVRO5hA7CasKnKFj2guWNAP2iZfQ 2026-04-01 16:09:03+00:00| seen|...

CVE-2026-30526

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Zoo Management System v1.0. The vulnerability is located in the login page, specifically within the msg parameter. The application reflects the content of the msg parameter back to the user without proper HTML encoding or...

CVE-2026-28805

creationtimestamp| type| source ---|---|--- 2026-04-01 15:13:27+00:00| published-proof-of-concept| https://github.com/devcode-it/openstamanager/security/advisories/GHSA-3gw8-3mg3-jmpc 2026-04-02 15:21:07+00:00| published-proof-of-concept| Telegram/613aY007LGHyW6rIrja4BsrlzuBvUbPzSCrjge10VR5WoE...

CVE-2026-2948

creationtimestamp| type| source ---|---|--- 2026-04-01 15:03:43+00:00| seen| https://bsky.app/profile/eta.kyte.wtf/post/3migxlxa2ls2g 2026-05-05 06:21:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3kbmoild2o...

CVE-2026-30332

creationtimestamp| type| source ---|---|--- 2026-04-01 15:00:14+00:00| published-proof-of-concept| Telegram/Qn5Ivb0hYRRFbz3smbJhwPSq3L1UkRwhbZcM0sFXYUsHw 2026-04-01 21:00:05+00:00| published-proof-of-concept| Telegram/j2onnxQ1Fqx2dtpkdZpGp58tMloA5XzqGptfLdZNpVfehhw 2026-04-02 18:49:58+00:00| seen...

CVE-2026-3877

A reflected cross-site scripting XSS vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that if visited by an authenticated victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered...

CVE-2026-22767

Dell AppSync, versions 4.6.0, contains an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-3877 Reflected Cross-Site Scripting in Dashboard Search

A reflected cross-site scripting XSS vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that if visited by an authenticated victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered...