Lucene search
K

12 matches found

NVD
NVD
added 2 days ago6 views

CVE-2026-50699

A Stored Cross-Site Scripting XSS vulnerability exists in Frappe Framework version 17.0.0-dev. An authenticated attacker with write access to Auto Repeat can persist HTML/JavaScript in referencedocument using a whitelisted write path and trigger script execution when users open the affected Auto...

4.6CVSS0.00313EPSS
Exploits0References2
EUVD
EUVD
added 2 days ago10 views

EUVD-2026-38795

A Stored Cross-Site Scripting XSS vulnerability exists in Frappe Framework version 17.0.0-dev. An authenticated attacker with write access to Auto Repeat can persist HTML/JavaScript in referencedocument using a whitelisted write path and trigger script execution when users open the affected Auto...

4.6CVSS6AI score0.00313EPSS
Exploits0References2
Cvelist
Cvelist
added 2 days ago32 views

CVE-2026-50699 Frappe Framework 17.0.0-dev - Stored XSS in Auto Repeat dashboard schedule rendering

A Stored Cross-Site Scripting XSS vulnerability exists in Frappe Framework version 17.0.0-dev. An authenticated attacker with write access to Auto Repeat can persist HTML/JavaScript in referencedocument using a whitelisted write path and trigger script execution when users open the affected Auto...

4.6CVSS0.00313EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/15 6:31 a.m.4 views

EUVD-2026-2834

Not used...

6.4AI score
Exploits0References1
EUVD
EUVD
added 2026/01/14 12:31 a.m.4 views

EUVD-2026-2604

EUVD-2026-2604...

8.5CVSS6.4AI score0.00176EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/13 8:4 p.m.4 views

EUVD-2026-2053

An improper input handling vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems. Successful exploitation could allow an authenticated malicious actor with valid credentials to trigger unintended behavior on the affected...

7.2CVSS6.1AI score0.00367EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/02 6:30 p.m.3 views

EUVD-2026-0406

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
Exploits0References1
EUVD
EUVD
added 2026/01/02 6:30 p.m.2 views

EUVD-2026-0512

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
Exploits0References1
EUVD
EUVD
added 2026/01/02 6:30 p.m.2 views

EUVD-2026-0521

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
Exploits0References1
EUVD
EUVD
added 2025/12/03 7:38 p.m.2 views

EUVD-2025-201103

Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick...

8.7CVSS6.3AI score0.00263EPSS
Exploits0References3
NVD
NVD
added 2025/06/09 1:15 p.m.12 views

CVE-2025-5877

A vulnerability, which was classified as problematic, has been found in Fengoffice Feng Office 3.2.2.1. Affected by this issue is some unknown functionality of the file /application/models/ApplicationDataObject.class.php of the component Document Upload Handler. The manipulation leads to xml...

8.1CVSS0.00342EPSS
Exploits1References5
OSV
OSV
added 2021/07/07 2:15 p.m.2 views

CVE-2021-32521

Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

9.8CVSS5.8AI score0.00715EPSS
Exploits0References1
Rows per page
Query Builder