CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2026/06/05 7:35 p.m.•8 views

CVE-2026-23757

GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports module where the title parameter is passed directly to SWIFTReport::Create without HTML sanitization. Attackers can inject arbitrary JavaScript into the report title field when creating or editing a...

5.4CVSS5.3AI score0.00141EPSS

Exploits0References1

ATTACKERKB•added 2026/04/20 5:27 p.m.•1 views

CVE-2026-23757

5.4CVSS5.7AI score0.00141EPSS

Exploits0References3

NVD•added 2026/03/19 9:17 p.m.•4 views

CVE-2026-27740

Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a cross-site scripting vulnerability that arises because the system trusts the raw output from an AI Large Language Model LLM and renders it using htmlSafe in the Review Queue interfa...

6.1CVSS0.00324EPSS

Exploits0References4