Lucene search
+L

1135418 matches found

Positive Technologies
Positive Technologies
added 2026/07/30 12:0 a.m.13 views

PT-2026-66477

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 6.1.2.0 through 6.1.2.7 2 IBM Sterling B2B Integrator versions 6.2.0.0 through 6.2.0.5 2 IBM Sterling B2B Integrator versions 6.2.1.0 through 6.2.1.1 2 IBM Sterling B2B Integrator versions 6.2.2.0 through...

5.4CVSS5.3AI score0.00162EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/30 12:0 a.m.12 views

PT-2026-66448

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the custom attributes function...

7.6CVSS5.8AI score0.00268EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/30 12:0 a.m.9 views

PT-2026-66164

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS6AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
added 2026/07/30 12:0 a.m.10 views

PT-2026-66197

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS6AI score0.00442EPSS
SaveExploits0References376
NVD
NVD
added 2026/07/29 9:17 p.m.8 views

CVE-2025-65337

Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...

6.1CVSS0.00155EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/29 8:17 p.m.7 views

CVE-2026-3093

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper...

4.7CVSS0.00238EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/29 7:2 p.m.14 views

EUVD-2026-50486

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper...

4.7CVSS6.2AI score0.00238EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/29 7:2 p.m.70 views

CVE-2026-3093

GitLab CE/EE contains a Cross-site Scripting (XSS) flaw (CVE-2026-3093) caused by improper sanitization of user-controlled input during web page generation. Affected versions are 14.0 up to 19.0.4, 19.1 up to 19.1.2, and 19.2 up to 19.2.0. Under certain conditions, an attacker could trigger arbit...

4.7CVSS6.2AI score0.00238EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/07/29 7:2 p.m.60 views

CVE-2026-3093 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper...

4.7CVSS0.00238EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/29 5:21 p.m.7 views

CVE-2026-54705 mathlive's Lack of Escaping of HTML allows for XSS

MathLive provides web components for math display and input. Prior to 0.110.0, MathLive fails to escape text-mode content in \text and \mbox commands in Box.toMarkup at src/core/box.ts, in xmlEscape, scanText, and text-mode output in src/formats/atom-to-math-ml.ts, and through convertLatexToMarku...

6.3CVSS5.9AI score0.00208EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/29 5:21 p.m.6 views

CVE-2026-54705 mathlive's Lack of Escaping of HTML allows for XSS

MathLive provides web components for math display and input. Prior to 0.110.0, MathLive fails to escape text-mode content in \text and \mbox commands in Box.toMarkup at src/core/box.ts, in xmlEscape, scanText, and text-mode output in src/formats/atom-to-math-ml.ts, and through convertLatexToMarku...

6.3CVSS5.9AI score
SaveExploits0References5
CVE
CVE
added 2026/07/29 5:21 p.m.35 views

CVE-2026-54705

This CVE concerns MathLive web components (pre-0.110.0) where text-mode content in parts of Box.toMarkup (src/core/box.ts), xmlEscape, scanText, and text-mode output in src/formats/atom-to-math-ml.ts, as well as through convertLatexToMarkup, convertLatexToMathMl, , , and the default identity Math...

6.3CVSS5.9AI score0.00208EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/29 5:21 p.m.9 views

EUVD-2026-50421

MathLive provides web components for math display and input. Prior to 0.110.0, MathLive fails to escape text-mode content in \text and \mbox commands in Box.toMarkup at src/core/box.ts, in xmlEscape, scanText, and text-mode output in src/formats/atom-to-math-ml.ts, and through convertLatexToMarku...

6.3CVSS5.9AI score0.00208EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/29 4:30 p.m.11 views

EUVD-2026-43705

Easy!Appointments disablebookingmessage rendered as raw HTML on public booking page — Stored XSS...

2.6CVSS5.8AI score0.00184EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/29 2:16 p.m.6 views

CVE-2026-66490

Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox 2.20.2...

6.1CVSS0.00155EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/29 1:54 p.m.7 views

EUVD-2026-50333

Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox 2.20.2...

6.1CVSS5.7AI score0.00155EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/29 1:54 p.m.19 views

CVE-2026-66490

The vulnerability CVE-2026-66490 affects the Joomla Extension balbooa Gridbox prior to version 2.20.2. The issue is a stored cross-site scripting (XSS) vulnerability that can be triggered via a comment avatar, as described in multiple sources. The root cause is an input/output handling weakness i...

6.1CVSS5.7AI score0.00155EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/07/29 1:54 p.m.33 views

CVE-2026-66490 Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox 2.20.2...

0.00155EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/29 12:38 p.m.5 views

CVE-2026-65946 Joomla Extension - rolandd.com - XSS vectors in AJAX endpoint handlers RO CSVI < 9.11.0

Joomla Extension - rolandd.com - XSS vectors in AJAX endpoint handlers RO CSVI 9.11.0...

5.8AI score0.00149EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/29 12:38 p.m.7 views

EUVD-2026-50307

Joomla Extension - rolandd.com - XSS vectors in AJAX endpoint handlers RO CSVI 9.11.0...

6.1CVSS5.8AI score0.00149EPSS
SaveExploits0References1
Rows per page
Query Builder