Lucene search
+L

1134364 matches found

Cvelist
Cvelist
added 2026/07/14 12:20 a.m.34 views

CVE-2026-44759 Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal...

6.1CVSS0.00172EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/14 12:20 a.m.24 views

CVE-2026-44759

CVE-2026-44759 affects SAP NetWeaver Enterprise Portal. An unauthenticated attacker can inject malicious scripts into a URL parameter, with scripts reflected in server responses and executed in the user’s browser when the crafted URL is visited. This leads to theft of session information, manipul...

6.1CVSS6.1AI score0.00172EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/14 12:19 a.m.31 views

CVE-2026-44752 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java(Configuration Wizard)

SAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicious JavaScript through crafted URLs. When a victim accesses such a URL, the script executes in the user's browser, allowing the attacker to access sensitive session information and modify non-sensitive data...

8.2CVSS0.00264EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/14 12:0 a.m.7 views

CVE-2026-36214

CVE-2026-36214 — osTicket Stored XSS affects osTicket versions 1.10–1.17.7 and 1.18.0–1.18.3 due to a vulnerable Bootstrap Tooltip (3.3.4) and insufficient HTML sanitization. The attack stores a malicious JS payload in a ticket attachment and executes it when an Agent/Admin views the ticket, enab...

5.4CVSS6.3AI score0.0033EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.20 views

PT-2026-58504

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network...

4.8CVSS6AI score0.00372EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.17 views

PT-2026-58251

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

9.6CVSS6.1AI score0.0085EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/14 12:0 a.m.31 views

CVE-2026-36214

osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing remote attackers to execute arbitrary JavaScript in Agent or Admin sessions...

0.0033EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.19 views

PT-2026-58285

Name of the Vulnerable Software and Affected Versions Power BI Report Server versions prior to 15.0.1121.120 Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a technique where malicious scripts are injected into trusted websites. This allo...

8CVSS6AI score0.00348EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.4 views

PT-2026-58066

Name of the Vulnerable Software and Affected Versions Easy!Appointments versions prior to 1.6.0 Description An authenticated administrator can execute a stored Cross-Site Scripting XSS attack—a vulnerability where malicious scripts are permanently stored on the target server—by injecting HTML or...

2.6CVSS6AI score0.00184EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.16 views

PT-2026-58526

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

8.7CVSS4.6AI score0.00651EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.31 views

PT-2026-58525

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network...

5.4CVSS6AI score0.00412EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.9 views

PT-2026-60599

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server 2016 Description An issue exists due to improper neutralization...

5.5CVSS5.8AI score0.00331EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.11 views

PT-2026-58569

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

7.3CVSS6AI score0.00532EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.15 views

PT-2026-58539

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

8.7CVSS4.6AI score0.00867EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.22 views

PT-2026-58524

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue. This allows an authorized attacker to perform spoofing over a network,...

5.4CVSS6AI score0.00549EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.7 views

EulerOS 2.0 SP10 : golang (EulerOS-SA-2026-2691)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust...

9CVSS6.3AI score0.00658EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.12 views

Security Updates for Microsoft Exchange Server (July 2026)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the July, 2026 security bulletin. - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft...

9.6CVSS8.5AI score0.01613EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2026/07/14 12:0 a.m.5 views

The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, allows attackers to execute arbitrary JavaScript code (XSS).

The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code XSS using a specially created URL address...

6.4CVSS6.3AI score0.0021EPSS
SaveExploits1References6Affected Software3
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.5 views

RHEL 10 : nodejs22 (RHSA-2026:39246)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39246 advisory. Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an...

8.1CVSS6.8AI score0.03711EPSS
SaveExploits1References12
Zero Science Lab
Zero Science Lab
added 2026/07/14 12:0 a.m.48 views

SIP Sustainable Irrigation Platform 5.x Stored XSS

Summary SIP is a free Raspberry Pi based Python program for controlling irrigation systems sprinkler, drip, hydroponic, etc. It uses web technology to provide an intuitive user interface UI in several languages. The UI can be accessed in your favorite browser on desktop, laptop, and mobile device...

6.1CVSS6.3AI score0.00214EPSS
SaveExploits3
Rows per page
Query Builder