Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
Filtering: Tag: xss Clear
ID Title
CVE-2026-2924 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2924)
cross-site scripting in wordpress (CVE-2026-2924). Risk of unauthorized operations or information disclosure.
CVE-2026-34780 Vulnerability in electronjs (CVE-2026-34780)
vulnerability in electronjs (CVE-2026-34780). Successful exploitation can lead to full system takeover.
CVE-2026-34229 Cross-Site Scripting (XSS) in emlog (CVE-2026-34229)
cross-site scripting in emlog (CVE-2026-34229). Risk of unauthorized operations or information disclosure.
CVE-2026-5468 Cross-Site Scripting (XSS) in github.com/casdoor/casdoor (CVE-2026-5468)
cross-site scripting in github.com/casdoor/casdoor (CVE-2026-5468). Risk of unauthorized operations or information disclosure.
CVE-2026-27655 Cross-Site Scripting (XSS) in zohocorp (CVE-2026-27655)
cross-site scripting in zohocorp (CVE-2026-27655). Confidential information can be exposed externally.
CVE-2026-4107 Cross-Site Scripting (XSS) in zohocorp (CVE-2026-4107)
cross-site scripting in zohocorp (CVE-2026-4107). Confidential information can be exposed externally.
CVE-2026-4108 Cross-Site Scripting (XSS) in zohocorp (CVE-2026-4108)
cross-site scripting in zohocorp (CVE-2026-4108). Confidential information can be exposed externally.
CVE-2026-3879 Cross-Site Scripting (XSS) in zohocorp (CVE-2026-3879)
cross-site scripting in zohocorp (CVE-2026-3879). Confidential information can be exposed externally.
CVE-2026-3880 Cross-Site Scripting (XSS) in zohocorp (CVE-2026-3880)
cross-site scripting in zohocorp (CVE-2026-3880). Confidential information can be exposed externally.
CVE-2026-28703 Cross-Site Scripting (XSS) in zohocorp (CVE-2026-28703)
cross-site scripting in zohocorp (CVE-2026-28703). Confidential information can be exposed externally.
CVE-2026-28754 Cross-Site Scripting (XSS) in zohocorp (CVE-2026-28754)
cross-site scripting in zohocorp (CVE-2026-28754). Confidential information can be exposed externally.
CVE-2026-28756 Cross-Site Scripting (XSS) in zohocorp (CVE-2026-28756)
cross-site scripting in zohocorp (CVE-2026-28756). Confidential information can be exposed externally.
CVE-2026-35539 Cross-Site Scripting (XSS) in roundcube (CVE-2026-35539)
cross-site scripting in roundcube (CVE-2026-35539). Risk of unauthorized operations or information disclosure.
CVE-2026-65912 Cross-Site Scripting (XSS) in dompurify (CVE-2026-65912)
cross-site scripting in dompurify (CVE-2026-65912). Risk of unauthorized operations or information disclosure. Exploitable via ``ADD_ATTR``. Mitigation: upgrade to `3.3.2` or later.
CVE-2026-65913 Vulnerability in dompurify (CVE-2026-65913)
vulnerability in dompurify (CVE-2026-65913). Risk of unauthorized operations or information disclosure. Exploitable via ``USE_PROFILES``. Mitigation: upgrade to `3.3.2` or later.
CVE-2026-35508 Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,
Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,
CVE-2026-47099 Cross-Site Scripting (XSS) in telejson (CVE-2026-47099)
cross-site scripting in telejson (CVE-2026-47099). Risk of unauthorized operations or information disclosure. Exploitable via ``postMessage``. Mitigation: upgrade to `6.0.0` or later.
CVE-2026-35466 Cross-Site Scripting (XSS) in cmu (CVE-2026-35466)
cross-site scripting in cmu (CVE-2026-35466). Risk of unauthorized operations or information disclosure.
CVE-2026-30251 Cross-Site Scripting (XSS) in interzen (CVE-2026-30251)
cross-site scripting in interzen (CVE-2026-30251). Risk of unauthorized operations or information disclosure.
CVE-2026-30252 Cross-Site Scripting (XSS) in interzen (CVE-2026-30252)
cross-site scripting in interzen (CVE-2026-30252). Risk of unauthorized operations or information disclosure.
CVE-2026-34848 Cross-Site Scripting (XSS) in hoppscotch (CVE-2026-34848)
cross-site scripting in hoppscotch (CVE-2026-34848). Risk of unauthorized operations or information disclosure.
CVE-2026-34932 Cross-Site Scripting (XSS) in csrf (CVE-2026-34932)
cross-site scripting in csrf (CVE-2026-34932). Confidential information can be exposed externally.
CVE-2026-5370 Cross-Site Scripting (XSS) in laravel (CVE-2026-5370)
cross-site scripting in laravel (CVE-2026-5370). Risk of unauthorized operations or information disclosure.
CVE-2026-34725 Cross-Site Scripting (XSS) in CVE-2026-34725 (CVE-2026-34725)
cross-site scripting in CVE-2026-34725 (CVE-2026-34725). Successful exploitation can lead to full system takeover.
CVE-2026-34606 Cross-Site Scripting (XSS) in frappe (CVE-2026-34606)
cross-site scripting in frappe (CVE-2026-34606). Risk of unauthorized operations or information disclosure.
CVE-2026-34715 Vulnerability in vshakitskiy (CVE-2026-34715)
vulnerability in vshakitskiy (CVE-2026-34715). Risk of unauthorized operations or information disclosure.
CVE-2026-34598 Cross-Site Scripting (XSS) in yeswiki (CVE-2026-34598)
cross-site scripting in yeswiki (CVE-2026-34598). Risk of unauthorized operations or information disclosure.
CVE-2026-34821 Cross-Site Scripting (XSS) in endian (CVE-2026-34821)
cross-site scripting in endian (CVE-2026-34821). Risk of unauthorized operations or information disclosure.
CVE-2026-34822 Cross-Site Scripting (XSS) in endian (CVE-2026-34822)
cross-site scripting in endian (CVE-2026-34822). Risk of unauthorized operations or information disclosure.
CVE-2026-34823 Cross-Site Scripting (XSS) in endian (CVE-2026-34823)
cross-site scripting in endian (CVE-2026-34823). Risk of unauthorized operations or information disclosure.
CVE-2026-34816 Cross-Site Scripting (XSS) in endian (CVE-2026-34816)
cross-site scripting in endian (CVE-2026-34816). Risk of unauthorized operations or information disclosure.
CVE-2026-34817 Cross-Site Scripting (XSS) in endian (CVE-2026-34817)
cross-site scripting in endian (CVE-2026-34817). Risk of unauthorized operations or information disclosure.
CVE-2026-34818 Cross-Site Scripting (XSS) in endian (CVE-2026-34818)
cross-site scripting in endian (CVE-2026-34818). Risk of unauthorized operations or information disclosure.
CVE-2026-34819 Cross-Site Scripting (XSS) in endian (CVE-2026-34819)
cross-site scripting in endian (CVE-2026-34819). Risk of unauthorized operations or information disclosure.
CVE-2026-34820 Cross-Site Scripting (XSS) in endian (CVE-2026-34820)
cross-site scripting in endian (CVE-2026-34820). Risk of unauthorized operations or information disclosure.
CVE-2026-34812 Cross-Site Scripting (XSS) in endian (CVE-2026-34812)
cross-site scripting in endian (CVE-2026-34812). Risk of unauthorized operations or information disclosure.
CVE-2026-34813 Cross-Site Scripting (XSS) in endian (CVE-2026-34813)
cross-site scripting in endian (CVE-2026-34813). Risk of unauthorized operations or information disclosure.
CVE-2026-34814 Cross-Site Scripting (XSS) in endian (CVE-2026-34814)
cross-site scripting in endian (CVE-2026-34814). Risk of unauthorized operations or information disclosure.
CVE-2026-34815 Cross-Site Scripting (XSS) in endian (CVE-2026-34815)
cross-site scripting in endian (CVE-2026-34815). Risk of unauthorized operations or information disclosure.
CVE-2026-34807 Cross-Site Scripting (XSS) in endian (CVE-2026-34807)
cross-site scripting in endian (CVE-2026-34807). Risk of unauthorized operations or information disclosure.
CVE-2026-34808 Cross-Site Scripting (XSS) in endian (CVE-2026-34808)
cross-site scripting in endian (CVE-2026-34808). Risk of unauthorized operations or information disclosure.
CVE-2026-34809 Cross-Site Scripting (XSS) in endian (CVE-2026-34809)
cross-site scripting in endian (CVE-2026-34809). Risk of unauthorized operations or information disclosure.
CVE-2026-34810 Cross-Site Scripting (XSS) in endian (CVE-2026-34810)
cross-site scripting in endian (CVE-2026-34810). Risk of unauthorized operations or information disclosure.
CVE-2026-34811 Cross-Site Scripting (XSS) in endian (CVE-2026-34811)
cross-site scripting in endian (CVE-2026-34811). Risk of unauthorized operations or information disclosure.
CVE-2026-34803 Cross-Site Scripting (XSS) in endian (CVE-2026-34803)
cross-site scripting in endian (CVE-2026-34803). Risk of unauthorized operations or information disclosure.
CVE-2026-34804 Cross-Site Scripting (XSS) in endian (CVE-2026-34804)
cross-site scripting in endian (CVE-2026-34804). Risk of unauthorized operations or information disclosure.
CVE-2026-34805 Cross-Site Scripting (XSS) in endian (CVE-2026-34805)
cross-site scripting in endian (CVE-2026-34805). Risk of unauthorized operations or information disclosure.
CVE-2026-34806 Cross-Site Scripting (XSS) in endian (CVE-2026-34806)
cross-site scripting in endian (CVE-2026-34806). Risk of unauthorized operations or information disclosure.
CVE-2026-34799 Cross-Site Scripting (XSS) in endian (CVE-2026-34799)
cross-site scripting in endian (CVE-2026-34799). Risk of unauthorized operations or information disclosure.
CVE-2026-34800 Cross-Site Scripting (XSS) in endian (CVE-2026-34800)
cross-site scripting in endian (CVE-2026-34800). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →