8461 matches found
CVE-2026-103388
MISP renders the source field of a Galaxy Cluster as a clickable hyperlink whenever the stored value passes PHP's FILTERVALIDATEURL validation. Because FILTERVALIDATEURL accepts the javascript: URI scheme, a user with galaxy editor privileges on the local instance or on a synced instance could...
EUVD-2026-89964
MISP renders the source field of a Galaxy Cluster as a clickable hyperlink whenever the stored value passes PHP's FILTERVALIDATEURL validation. Because FILTERVALIDATEURL accepts the javascript: URI scheme, a user with galaxy editor privileges on the local instance or on a synced instance could...
CVE-2026-103388 MISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster Source Field
MISP renders the source field of a Galaxy Cluster as a clickable hyperlink whenever the stored value passes PHP's FILTERVALIDATEURL validation. Because FILTERVALIDATEURL accepts the javascript: URI scheme, a user with galaxy editor privileges on the local instance or on a synced instance could...
CVE-2026-103388 MISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster Source Field
MISP renders the source field of a Galaxy Cluster as a clickable hyperlink whenever the stored value passes PHP's FILTERVALIDATEURL validation. Because FILTERVALIDATEURL accepts the javascript: URI scheme, a user with galaxy editor privileges on the local instance or on a synced instance could...
CVE-2026-103388
Versions of MISP prior to 2.5.48 are vulnerable to a Stored Cross-Site Scripting (XSS) flaw in the Galaxy Cluster source field . The vulnerability occurs because the application renders the source field as a clickable hyperlink if it passes PHP's FILTER_VALIDATE_URL validation, which incorrectly ...
CVE-2026-103045
A flaw was found in the MediaWiki Refreshed skin. The application fails to properly sanitize user-supplied input prior to rendering web pages, resulting in a stored cross-site scripting XSS vulnerability. A remote attacker could exploit this flaw by injecting malicious scripts into persistent...
CVE-2026-47096: Improper Neutralization of Input During Web Page Generation
AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers with network access to inject malicious JavaScript by setting an unsanitized eParamIDSystemName value through the /config?action=set web configuration API. Attackers can...
PT-2026-103287
MISP renders the source field of a Galaxy Cluster as a clickable hyperlink whenever the stored value passes PHP's FILTER VALIDATE URL validation. Because FILTER VALIDATE URL accepts the javascript: URI scheme, a user with galaxy editor privileges on the local instance or on a synced instance coul...
CVE-2026-103388: Improper Neutralization of Input During Web Page Generation
MISP renders the source field of a Galaxy Cluster as a clickable hyperlink whenever the stored value passes PHP's FILTERVALIDATEURL validation. Because FILTERVALIDATEURL accepts the javascript: URI scheme, a user with galaxy editor privileges on the local instance or on a synced instance could...
PT-2026-103472
Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.31.3, when the OIDC login flow completes, backend/modules/auth/providers/auth oidc provider.py decodes the id token returned by the identity provider's token endpoint using jose.jwt.get unverified claim...
AlmaLinux 9.2 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc (ALMALINUX9.2:CLSA-2026:1776681849)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776681849 advisory. - A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in...
AlmaLinux 9.6 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc (ALMALINUX9.6:CLSA-2026:1776682775)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776682775 advisory. - A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in...
Rocky Linux 9.6 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc (ALMALINUX9.6:CLSA-2026:1776682775)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776682775 advisory. - A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted i...
CVE-2026-76718
A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions...
CVE-2026-76719
A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...
CVE-2026-76719 HPE OneView - Cross-site scripting vulnerability
A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...
CVE-2026-76719
A security vulnerability exists in HPE OneView and HPE Synergy Composer (prior to v11.40 ) that may be exploited remotely. The vulnerability allows for Cross-Site Scripting (XSS) and URL Redirection , which can lead to session hijacking , data theft , or other unauthorized actions. The CVSS v3.1 ...
CVE-2026-76719 HPE OneView - Cross-site scripting vulnerability
A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...