Lucene search
+L

1135836 matches found

EUVD
EUVD
added 1 hour ago3 views

EUVD-2026-57438

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed cross-site scripting due to improper neutralization of user-controlled values rendered in table cell content b...

8.7CVSS5AI score
SaveExploits0References4
EUVD
EUVD
added 1 hour ago3 views

EUVD-2026-57437

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed cross-site scripting due to improper neutralization of user-controlled data rendered in pagination controls by...

8.7CVSS5AI score
SaveExploits0References4
EUVD
EUVD
added 1 hour ago2 views

EUVD-2026-57528

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input...

8.9CVSS5.7AI score
SaveExploits0References2
NVD
NVD
added 2 hours ago2 views

CVE-2026-18099

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input...

8.9CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2 hours ago3 views

CVE-2026-73415

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.10 and 4.6.2, in packages/imageviewer/src/widget.ts, JupyterLab's ImageViewer uses URL.createObjectURL for a specially crafted SVG image and revokes the blo...

7.5CVSS5.5AI score
SaveExploits0References11Affected Software1
Cvelist
Cvelist
added 2 hours ago5 views

CVE-2026-73415 jupyterlab: Image viewer in JupyterLab allows XSS when opening malicious image in new browser tab

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.10 and 4.6.2, in packages/imageviewer/src/widget.ts, JupyterLab's ImageViewer uses URL.createObjectURL for a specially crafted SVG image and revokes the blo...

7.5CVSS
SaveExploits0References10
EUVD
EUVD
added 2 hours ago5 views

EUVD-2026-57535

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.10 and 4.6.2, in packages/imageviewer/src/widget.ts, JupyterLab's ImageViewer uses URL.createObjectURL for a specially crafted SVG image and revokes the blo...

7.5CVSS5.5AI score
SaveExploits0References10
Cvelist
Cvelist
added 3 hours ago8 views

CVE-2026-18099 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input...

8.9CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 3 hours ago2 views

CVE-2026-18099

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input...

8.9CVSS5.7AI score
SaveExploits0References2Affected Software1
CVE
CVE
added 3 hours ago5 views

CVE-2026-15217

GitLab CVE-2026-15217 describes a cross-site scripting vulnerability in GitLab CE/EE due to improper neutralization of user-controlled values rendered in table cells within an analytics dashboard component. Affected versions are all releases from GitLab 18.2 up to but not including 19.0.6, 19.1 u...

8.7CVSS5AI score
SaveExploits0References3
CVE
CVE
added 3 hours ago5 views

CVE-2026-15216

GitLab CVE-2026-15216 affects GitLab CE/EE prior to patched versions: 19.0.6 (for 18.2 line), 19.1.4 (for 19.1 line), and 19.2.2 (for 19.2 line). The issue arises from improper neutralization of user-controlled data rendered in pagination controls within an analytics dashboard component, enabling...

8.7CVSS5AI score
SaveExploits0References3
Cvelist
Cvelist
added 5 hours ago6 views

CVE-2026-16694 IBM i is Affected By Stored Cross-site Scripting for i

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.4CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 6 hours ago2 views

CVE-2026-73237

XSS vulnerability in Markdown handling in Apache Allura. This issue affects Apache Allura: from 1.10.0 before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

5.1AI score
SaveExploits0References3Affected Software1
CVE
CVE
added 6 hours ago11 views

CVE-2026-73237

CVE-2026-73237 concerns an XSS vulnerability in the Markdown handling pipeline of Apache Allura. Affected versions include 1.10.0 up to but not including 1.19.1. The issue is mitigated by upgrading to version 1.19.1, which contains the fix. The available documents do not specify the exact vulnera...

6.1CVSS5.1AI score
SaveExploits0References3
Cvelist
Cvelist
added 6 hours ago13 views

CVE-2026-73238 Apache Allura: XSS in code display

XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

SaveExploits0References2
CVE
CVE
added 6 hours ago14 views

CVE-2026-73238

Apache Allura contains an XSS in code display vulnerability (CVE-2026-73238) affecting versions before 1.19.1. The issue is addressed by upgrading to Allura 1.19.1. The provided metrics indicate a CVSSv3.1 base score of 6.1 (Medium) with network attack vector, low confidentiality/integrity impact...

6.1CVSS5.2AI score
SaveExploits0References3
EUVD
EUVD
added 6 hours ago4 views

EUVD-2026-57343

XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

6.1CVSS5.2AI score
SaveExploits0References2
CVE
CVE
added 6 hours ago12 views

CVE-2026-48552

Affected software : Nagios Core prior to 4.5.14 and Nagios XI prior to 2026R1.7. Component : jsonquery.js. Root cause : unencoded JSON string values reflected from stored fields are injected into the DOM without sanitization. Impact : DOM-based cross-site scripting allowing arbitrary JavaScript e...

5.4CVSS5AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 15 hours ago6 views

firefox: thunderbird: Site isolation issue in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...

5.4CVSS6AI score0.00339EPSS
SaveExploits0References6
NVD
NVD
added 16 hours ago6 views

CVE-2026-17013

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it into an inline script block, which could allow unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone who is tricked into opening a crafted...

6.1CVSS
SaveExploits0References1
Rows per page
Query Builder