Lucene search
+L

1134140 matches found

CVE
CVE
added 2026/07/20 12:0 a.m.9 views

CVE-2026-51025

The CVE-2026-51025 entry relates to a Cross Site Scripting (XSS) flaw in the fuint Member Marketing System <= v1.0, enabling a remote attacker to execute arbitrary code via the ClientMessageController.java file. Connected sources (EUVD-2026-46139, NVD, CVE records, and third-party trackers) co...

6.1CVSS6AI score0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/20 12:0 a.m.12 views

PT-2026-61665

Name of the Vulnerable Software and Affected Versions RT versions 6.0.0 through 6.0.2 Description An authenticated user with specific permissions can inject JavaScript into user-controlled data that is rendered without proper HTML escaping. This leads to a stored Cross-Site Scripting XSS issue,...

5.4CVSS5.2AI score0.00147EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.6 views

RockyLinux 8 : nodejs:22 (RLSA-2026:41947)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41947 advisory. ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input CVE-2026-42338 undici: undici: Denial of Service due to...

9.8CVSS6.1AI score0.03711EPSS
SaveExploits1References27
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.7 views

RHEL 8 : nodejs:22 (RHSA-2026:41947)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41947 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

9.8CVSS6.2AI score0.03711EPSS
SaveExploits1References29
Positive Technologies
Positive Technologies
added 2026/07/20 12:0 a.m.7 views

PT-2026-61807

Name of the Vulnerable Software and Affected Versions Astro versions 3.10.0 through 7.0.3 Description Astro fails to HTML-escape values for specific transition directives when applied to client-hydrated components. This occurs within the generateHydrateScript function, where the transition:persis...

2.1CVSS5.8AI score0.0031EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.4 views

RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2026:42079)

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42079 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

9.6CVSS6.6AI score0.00813EPSS
SaveExploits0References26
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.7 views

RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update (Important) (RHSA-2026:42080)

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42080 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

9.6CVSS6.1AI score0.00655EPSS
SaveExploits0References12
Amazon
Amazon
added 2026/07/20 12:0 a.m.6 views

Important: containerd

Issue Overview: Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt ...

9.6CVSS5AI score0.00655EPSS
SaveExploits0
OSV
OSV
added 2026/07/19 11:53 p.m.8 views

MAL-2026-10782 Malicious code in zoom-widget-xss-poc-paresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12586eeb5b7eb0c053d90b49fd966fe32f05fe1f551cfd36120de1ce25b34fea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.5AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/19 11:18 p.m.9 views

CVE-2026-45138

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the custom htmlpurify validation rule used to sanitize blog post bodies relies on by-reference mutation ?string &$str, but CodeIgniter 4's validator passes a local copy of the value, so the sanitized tex...

5.4CVSS5.2AI score0.00146EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/07/19 11:18 p.m.12 views

EUVD-2026-45875

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the custom htmlpurify validation rule used to sanitize blog post bodies relies on by-reference mutation ?string &$str, but CodeIgniter 4's validator passes a local copy of the value, so the sanitized tex...

5.4CVSS5.3AI score0.00146EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/19 11:18 p.m.18 views

CVE-2026-45138

CVE-2026-45138 affects CI4MS (CodeIgniter 4-based CMS skeleton). Before 0.31.9.0, html_purify sanitization mutates the value by reference, but CodeIgniter’s validator uses a copy, causing sanitized text to be discarded. The Blog controller writes raw content to blog_langs and the public post temp...

5.4CVSS5.3AI score0.00146EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/19 10:16 a.m.10 views

CVE-2026-16229

A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit h...

5.3CVSS0.00273EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/19 9:45 a.m.11 views

CVE-2026-16229

The CVE reports a cross-site scripting (XSS) flaw in itsourcecode Courier Management System up to version 1.0. The vulnerability affects an unknown functionality of the file /index.php, where manipulating the argument page can trigger XSS. It is exploitable remotely, and an exploit has been publi...

5.3CVSS3.6AI score0.00273EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/19 9:45 a.m.36 views

CVE-2026-16229 itsourcecode Courier Management System index.php cross site scripting

A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit h...

5.3CVSS0.00273EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/19 9:45 a.m.8 views

CVE-2026-16229

A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit h...

5.3CVSS3.6AI score0.00273EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2026/07/19 7:16 a.m.7 views

CVE-2026-16220

A vulnerability has been found in code-projects Online Examination System 1.0. This vulnerability affects unknown code of the file /account.php?q=quiz. Such manipulation of the argument eid/n/t leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to t...

5.3CVSS0.00273EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/19 6:15 a.m.10 views

CVE-2026-16220

A vulnerability has been found in code-projects Online Examination System 1.0. This vulnerability affects unknown code of the file /account.php?q=quiz. Such manipulation of the argument eid/n/t leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to t...

5.3CVSS3.6AI score0.00273EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/07/19 6:15 a.m.11 views

EUVD-2026-45431

A vulnerability has been found in code-projects Online Examination System 1.0. This vulnerability affects unknown code of the file /account.php?q=quiz. Such manipulation of the argument eid/n/t leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to t...

5.3CVSS3.6AI score0.00273EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/19 6:15 a.m.15 views

CVE-2026-16220

CVE-2026-16220 affects code-projects Online Examination System 1.0. The vulnerability resides in unknown code handling the parameter eid/n/t in /account.php?q=quiz, enabling cross-site scripting through manipulation of that argument. Impact details stated include remote feasibility with low to mo...

5.3CVSS3.7AI score0.00273EPSS
SaveExploits0References6
Rows per page
Query Builder