1162805 matches found
PT-2026-82845
A Cross-Site Scripting XSS vulnerability in the WatchGuard Dimension Backup Historical Data feature allows an authenticated administrator user to execute arbitrary JavaScript in another user's browser...
CVE-2026-78289: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...
PT-2026-82464
Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...
CVE-2026-5218: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...
CVE-2026-78283: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Music Player for WooCommerce = 1.8.9 versions...
PT-2026-82446
Name of the Vulnerable Software and Affected Versions Spring Security OAuth2 Authorization Server versions 7.0.0 through 7.0.4 Description When Dynamic Client Registration is enabled, the registration endpoint does not sufficiently validate certain client metadata fields provided by the registeri...
PT-2026-82455
Name of the Vulnerable Software and Affected Versions Fluent Boards Pro versions prior to 2.0.12 Description Cross Site Scripting XSS exists in the software, allowing users with Subscriber privileges to execute malicious scripts in the browser of other users. Recommendations Update to version...
AlmaLinux 9 : golang (ALSA-2026:60304)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:60304 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial of...
RockyLinux 9 : golang (RLSA-2026:60304)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:60304 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial o...
SUSE SLES15 Security Update : go1.25-openssl (SUSE-SU-2026:3800-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3800-1 advisory. Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues...
PT-2026-82453
Name of the Vulnerable Software and Affected Versions Realtyna Organic IDX plugin versions prior to 5.4.2 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication...
CVE-2026-5738: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in BilPark Informatics Technologies Industry and Trade Inc. DoXBASE allows Cross Zone Scripting. This issue affects DoXBASE: through 27082026. NOTE: The vendor was contacted early about this disclosur...
PT-2026-82466
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
RockyLinux 10 : golang (RLSA-2026:60306)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:60306 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial ...
AlmaLinux 8 : go-toolset:rhel8 (ALSA-2026:60305)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:60305 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial of...
PT-2026-82460
Unauthenticated Cross Site Scripting XSS in Music Player for WooCommerce = 1.8.9 versions...
SUSE SLES15 Security Update : go1.26-openssl (SUSE-SU-2026:3799-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3799-1 advisory. Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: -...
CVE-2026-39275
Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components...
UBUNTU-CVE-2026-39275
Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components...
