Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:79"
1,799 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-52854 |
high | 8.6 | 0.0058 | 2026-08-18 | Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded | |
CVE-2026-50190 |
high | 8.6 | 0.0044 | 2026-08-20 | Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in | |
CVE-2026-76612 |
high | 8.6 | 0.0044 | 2026-08-21 | Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1 | |
CVE-2026-66917 |
high | 8.6 | 0.0052 | 2026-08-22 | Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, pr | |
CVE-2026-77027 |
high | 8.6 | 0.0044 | 2026-08-22 | Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of use | |
CVE-2026-97635 |
high | 8.6 | 0.0026 | 2026-10-22 | The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages o | |
CVE-2026-102786 |
high | 8.6 | 0.0026 | 2026-10-23 | Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injec | |
CVE-2026-116675 |
high | 8.5 | 0.0035 | 2026-10-27 | TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the m | |
CVE-2026-116797 |
high | 8.5 | 0.0032 | 2026-10-28 | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid | |
CVE-2026-118242 |
high | 8.5 | 0.0031 | 2026-10-28 | Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid | |
CVE-2026-2737 |
high | 8.5 | 0.0020 | 2026-04-02 | A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administr | |
CVE-2026-41200 |
high | 8.5 | 0.0038 | 2026-04-23 | STIG Manager is an API and web client for managing Security Technical Implementation Guides (STIG) | |
CVE-2026-33862 |
high | 8.5 | 0.0019 | 2026-05-12 | A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V240 | |
CVE-2026-7186 |
high | 8.5 | 0.0014 | 2026-06-08 | Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, a | |
CVE-2026-8833 |
high | 8.5 | 0.0014 | 2026-06-08 | Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p | |
CVE-2026-54002 |
high | 8.5 | 0.0055 | 2026-07-09 | Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites and plugins | |
CVE-2026-55665 |
high | 8.5 | 0.0053 | 2026-07-10 | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, Grist contained | |
CVE-2026-44175 |
high | 8.5 | 0.0043 | 2026-07-16 | Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, Kirby did n | |
CVE-2026-65986 |
high | 8.5 | 0.0040 | 2026-08-04 | CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.5 | |
CVE-2026-71274 |
high | 8.5 | 0.0028 | 2026-08-05 | OpenBK7231T's CHANNEL_SetLabel (src/cmnds/cmd_channels.c) stores channel labels received via the MQT | |
CVE-2026-104077 |
high | 8.5 | 0.0026 | 2026-10-08 | Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers | |
CVE-2026-118246 |
high | 8.4 | 0.0034 | 2026-10-28 | Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 11.4.9, 12.6.1, and 1 | |
CVE-2026-118251 |
high | 8.4 | 0.0043 | 2026-10-28 | Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and 13.1.0, Hi | |
CVE-2026-118252 |
high | 8.4 | 0.0042 | 2026-10-28 | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dash | |
CVE-2026-118253 |
high | 8.4 | 0.0042 | 2026-10-28 | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dash | |
CVE-2026-118255 |
high | 8.4 | 0.0035 | 2026-10-28 | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid | |
CVE-2026-118648 |
high | 8.4 | 0.0026 | 2026-10-28 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-site script | |
CVE-2022-43760 |
high | 8.4 | 0.0071 | 2023-06-01 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilit | |
CVE-2026-34561 |
high | 8.4 | 0.0023 | 2026-04-01 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture w | |
CVE-2026-40171 |
high | 8.4 | 0.0048 | 2026-05-06 | In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the cor | |
CVE-2026-45392 |
high | 8.4 | 0.0028 | 2026-05-12 | DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacker to execu | |
CVE-2026-9292 |
high | 8.4 | 0.0053 | 2026-07-14 | A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. T | |
CVE-2026-45368 |
high | 8.4 | 0.0053 | 2026-07-16 | Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, the underly | |
CVE-2026-65592 |
high | 8.4 | 0.0024 | 2026-07-22 | n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in | |
CVE-2026-85613 |
high | 8.4 | 0.0040 | 2026-09-04 | OpenPanel before 2.3.0 contains a cross-site scripting vulnerability in the unauthenticated favicon | |
CVE-2026-104078 |
high | 8.4 | 0.0017 | 2026-10-08 | Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 S | |
CVE-2026-109290 |
high | 8.4 | 0.0031 | 2026-10-12 | Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPre | |
CVE-2026-107588 |
high | 8.4 | 0.0052 | 2026-10-21 | Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in V | |
CVE-2026-117493 |
high | 8.3 | 0.0028 | 2026-10-27 | Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards/<id>/widgets/<id> API accepts | |
CVE-2026-117494 |
high | 8.3 | 0.0028 | 2026-10-27 | Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API | |
CVE-2026-46367 |
high | 8.3 | 0.0025 | 2026-05-15 | phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() that | |
CVE-2026-45733 |
high | 8.3 | 0.0043 | 2026-08-18 | Trilium Notes is a cross-platform, hierarchical note taking application focused on building large pe | |
CVE-2026-87901 |
high | 8.3 | 0.0032 | 2026-10-23 | Improper sanitization in the registration module allows reflected Cross-Site Scripting. | |
CVE-2026-34375 |
high | 8.2 | 0.0030 | 2026-03-27 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the YPTWallet St | |
CVE-2026-33941 |
high | 8.2 | 0.0030 | 2026-03-27 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr | |
CVE-2026-46361 |
high | 8.2 | 0.0029 | 2026-05-15 | phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where resu | |
CVE-2026-45627 |
high | 8.2 | 0.0019 | 2026-05-29 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19. | |
CVE-2026-48788 |
high | 8.2 | 0.0031 | 2026-06-17 | Remark42 is a self-hosted comment engine for blogs, articles, or any other place where readers can a | |
CVE-2026-11878 |
high | 8.2 | 0.0022 | 2026-06-24 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i | |
CVE-2026-58500 |
high | 8.2 | 0.0040 | 2026-07-13 | MCP Appium is an MCP server that provides AI assistants with tools to automate mobile app testing on |