Lucene search
+L

58395 matches found

Snyk
Snyk
added 2026/04/06 5:14 p.m.11 views

Cross-site Scripting (XSS)

Overview feehi/cms is a Feehi CMS project template. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Group, Category, or Description parameters in the Permissions module. An attacker can execute arbitrary web scripts or HTML by injecting crafted payloads into...

6.9CVSS6AI score0.00211EPSS
SaveExploits1References2
NVD
NVD
added 2026/04/06 4:16 p.m.11 views

CVE-2026-31353

An authenticated stored cross-site scripting XSS vulnerability in the Category module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

5.4CVSS0.00169EPSS
SaveExploits1References2
NVD
NVD
added 2026/04/06 4:16 p.m.11 views

CVE-2026-31354

Multiple authenticated stored cross-site scripting XSS vulnerabilities in the Permissions module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Group, Category or Description parameters...

5.4CVSS0.00211EPSS
SaveExploits1References2
NVD
NVD
added 2026/04/06 4:16 p.m.12 views

CVE-2026-31352

An authenticated stored cross-site scripting XSS vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Role Name parameter...

5.4CVSS0.00211EPSS
SaveExploits1References2
CVE
CVE
added 2026/04/06 4:15 p.m.35 views

CVE-2026-5668

CVE-2026-5668 affects Cyber-III Student-Management-System (up to 1a938fa61e9f735078e9b291d2e6215b4942af3f). The flaw is in an unknown part of /admin/Add%20notice/add%20notice.php where manipulation of $_SERVER['PHP_SELF'] enables cross-site scripting. It can be triggered remotely; the exploit has...

4.8CVSS4.5AI score0.00206EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/04/06 10:57 a.m.10 views

CVE-2026-34229

Emlog is an open source website building system. Prior to version 2.6.8, there is a stored cross-site scripting XSS vulnerability in emlog comment module via URI scheme validation bypass. This issue has been patched in version 2.6.8...

6.1CVSS5.7AI score0.0023EPSS
SaveExploits1References1
NVD
NVD
added 2026/04/06 9:16 a.m.19 views

CVE-2026-5639

A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The...

6.5CVSS0.00246EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/04/06 8:09 a.m.13 views

kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution

A flaw was found in the Linux kernel's bonding module. This use-after-free vulnerability occurs when a new slave device is added to the bonding array but fails during the enslave process. A local attacker can exploit this by triggering the enslave failure, which may lead to a system crash,...

7.8CVSS6.2AI score0.00117EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/04/06 8:09 a.m.16 views

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

8.8CVSS6.4AI score0.0024EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/04/06 6:30 a.m.10 views

EUVD-2026-19162

A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to...

7.5CVSS6.6AI score0.00409EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2026/04/06 5:24 a.m.10 views

CVE-2026-5542

A vulnerability was determined in code-projects Simple Laundry System 1.0. Impacted is an unknown function of the file /modstaffinfo.php of the component Parameter Handler. Executing a manipulation of the argument userid can lead to cross site scripting. The attack may be launched remotely. The...

5.3CVSS4.2AI score0.00337EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/06 5:16 a.m.13 views

CVE-2026-5619

A flaw has been found in Braffolk mcp-summarization-functions up to 0.1.5. This impacts an unknown function of the file src/server/mcp-server.ts of the component summarizecommand. Executing a manipulation of the argument command can lead to os command injection. The attack requires local access...

5.3CVSS0.01033EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/06 4:16 a.m.9 views

CVE-2026-5616

A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to...

7.5CVSS0.00409EPSS
SaveExploits0References7
OSV
OSV
added 2026/04/06 3:15 a.m.23 views

CVE-2026-5616 JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication

A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to...

6.9CVSS6.5AI score
SaveExploits0References9
OSV
OSV
added 2026/04/06 12:30 a.m.21 views

GHSA-XQV9-QR76-HFQ2 @elgentos/magento2-dev-mcp vulnerable to command injection

A vulnerability was identified in elgentos magento2-dev-mcp up to 1.0.2. The affected element is the function executeMagerun2Command of the file src/index.ts. Such manipulation leads to os command injection. An attack has to be approached locally. The exploit is publicly available and might be...

5.3CVSS5.6AI score0.00894EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/04/06 12:30 a.m.10 views

EUVD-2026-19136

A vulnerability was identified in elgentos magento2-dev-mcp up to 1.0.2. The affected element is the function executeMagerun2Command of the file src/index.ts. Such manipulation leads to os command injection. An attack has to be approached locally. The exploit is publicly available and might be...

5.3CVSS5.6AI score0.00894EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/04/06 12:00 a.m.16 views

PT-2026-30560

A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to...

7.5CVSS5.5AI score0.00409EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/04/06 12:00 a.m.9 views

PT-2026-30590

A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of the argument filename results in sql injection. The attack may be performed from...

6.5CVSS5.6AI score0.00196EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/04/06 12:00 a.m.8 views

CVE-2026-31351

An authenticated stored cross-site scripting XSS vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter...

6AI score0.00181EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/04/06 12:00 a.m.26 views

PT-2026-30723

SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height = 32 which include...

6.1CVSS6.1AI score0.00281EPSS
SaveExploits0References2
Rows per page
Query Builder