266444 matches found
PT-2026-28485
Name of the Vulnerable Software and Affected Versions Frigate version 0.17.0 Description Frigate is a network video recorder NVR with realtime local object detection for IP cameras. A low-privilege authenticated user restricted to one camera can access snapshots from other cameras. This is possib...
CVE-2026-25447
creationtimestamp| type| source ---|---|--- 2026-03-25 21:16:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvz6j33pn2j 2026-03-25 23:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhw6ymzy5d2s 2026-04-09 04:30:06+00:00| seen|...
MantisBT has Stored HTML Injection/XSS when displaying Tags in Timeline
Improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has been renamed or deleted. Impact Cross-site scripting XSS. Patches...
GHSA-73VX-49MV-V8W5 MantisBT has Stored HTML Injection/XSS when displaying Tags in Timeline
Improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has been renamed or deleted. Impact Cross-site scripting XSS. Patches...
EUVD-2026-14525
MantisBT has Stored HTML Injection/XSS when displaying Tags in Timeline...
MantisBT 2.28.x < 2.28.2 Timeline Tag Name XSS (GHSA-73vx-49mv-v8w5)
The version of MantisBT installed on the remote host is 2.28.x prior to 2.28.2. It is, therefore, affected by a vulnerability: - A cross-site scripting XSS vulnerability exists in the Timeline view myviewpage.php due to improper escaping of tag names retrieved from History. An attacker can inject...
Cross-site Scripting (XSS)
Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper escaping of tag names retrieved from History in the Timeline. An attacker can execute arbitrary HTML or JavaScript code in the context of the affected...
CVE-2026-33548
Mantis Bug Tracker MantisBT is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has...
CVE-2026-33548 MantisBT has Stored HTML Injection / XSS when displaying Tags in Timeline
Mantis Bug Tracker MantisBT is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has...
CVE-2026-33548
Mantis Bug Tracker MantisBT is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has...
CVE-2026-33548
MantisBT 2.28.0 is vulnerable to Stored HTML Injection / XSS when rendering tags in Timeline (Timeline view via my_view_page.php). Root cause: improper escaping of tag names retrieved from History in Timeline. Impact: if CSP permits, attacker could execute arbitrary JavaScript when displaying a r...
CVE-2026-33548 MantisBT has Stored HTML Injection / XSS when displaying Tags in Timeline
Mantis Bug Tracker MantisBT is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has...
CVE-2026-33548 MantisBT has Stored HTML Injection / XSS when displaying Tags in Timeline
Mantis Bug Tracker MantisBT is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has...
CVE-2026-33548: Improper Neutralization of Input During Web Page Generation
Mantis Bug Tracker MantisBT is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has...
Mantis Bug Tracker 跨站脚本漏洞
Mantis Bug Tracker MantisBT is an open-source bug tracker developed by Mantis Bug Tracker. Version 2.28.0 of Mantis Bug Tracker contains a cross-site scripting vulnerability. This vulnerability arises from improper escaping of tag names in the timeline, which may lead to cross-site scripting...
PT-2026-27183
Name of the Vulnerable Software and Affected Versions Mantis Bug Tracker versions prior to 2.28.1 Description Mantis Bug Tracker version 2.28.0 contains a flaw due to improper escaping of tag names retrieved from History in the Timeline feature, specifically within the my view page.php file. This...
CVE-2026-4552
creationtimestamp| type| source ---|---|--- 2026-03-22 16:39:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnybgee2n2n 2026-04-02 22:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mikahaf73t2i...
CVE-2026-4535
creationtimestamp| type| source ---|---|--- 2026-03-21 08:47:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116266293950470223 2026-03-22 04:16:19+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4535 2026-03-22 06:00:31+00:00| seen|...
CVE-2026-4270
creationtimestamp| type| source ---|---|--- 2026-03-20 21:06:27+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mhjgbipipg2i 2026-03-25 16:08:38+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3mhvhxk4vtq2r...
CVE-2026-26933
creationtimestamp| type| source ---|---|--- 2026-03-20 13:10:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhilocfjpg2q 2026-03-20 15:00:39+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-elastic...