288396 matches found
CVE-2026-84106: Improper Neutralization of Input During Web Page Generation
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-84074: Improper Neutralization of Input During Web Page Generation
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-84070: Improper Neutralization of Input During Web Page Generation
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-82890: Improper Neutralization of Input During Web Page Generation
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutralization of input during web page generation...
CVE-2026-82832: Improper Neutralization of Input During Web Page Generation
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-93371: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...
CVE-2026-92991: Improper Neutralization of Input During Web Page Generation
The Biggop Library is vulnerable to Cross-Site Scripting via the ‘displayid’ parameter from the Sigmative API in various versions due to insufficient output escaping. This makes it possible for attackers who can compromise the Sigmative API server to inject arbitrary web scripts in pages that wil...
PT-2026-100944
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-84031: Improper Neutralization of Input During Web Page Generation
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
PT-2026-95225
Name of the Vulnerable Software and Affected Versions marcopiovanello yt-dlp-web-ui versions prior to v5 Description Remote command injection is possible through the manipulation of the params argument within the NewGenericDownload function located in the server/internal/downloaders/generic.go...
PT-2026-95691
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Remote authenticated attackers can execute arbitrary code due to improper neutralization of input during web page generation. Recommendations At the moment, there is no information about a...
REST API web interface AI DoS
The vulnerability of the REST API web interface component based on artificial intelligence is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Tenda AC7 Router XSS
The vulnerability in the web interface for managing Tenda AC7 router micro-programming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML or JavaScript code remotely...
PT-2026-101516
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95671
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Remote authenticated attackers can execute arbitrary code due to improper neutralization of input during the process of web page generation. Recommendations At the moment, there is no...
Oracle Analytics Server (OAS 8.2) (September 2026 CSPU)
The version of Oracle Analytics Server 8.2.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Web...
PT-2026-101835
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95442
Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for SWIFT Services for Multiplatforms versions 3.2.4.0 through 3.2.4.16 Description An unauthenticated attacker can embed arbitrary JavaScript code in the Web UI. This cross-site scripting issue allows the...
CVE-2026-93485: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Automattic WordPress wordpress allows DOM-Based XSS.This issue affects WordPress: from n/a through 7.1...