Security News

Cybersecurity news aggregator

← Back to News Browse all tags

xss

197 articles with this tag

CRITICAL
Russian hackers exploited Zimbra zero-day in espionage campaigns
SC Media • Jul 27, 2026
 CRITICAL
Year-long Russian attacks infect users as soon as they look at an email
The Register Security • Jul 23, 2026
 CRITICAL
Critical Zimbra security update fixes 9 vulnerabilities
CSO Online • Jul 22, 2026
 CRITICAL
Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities
The Hacker News • Jul 21, 2026
 MEDIUM
[NEU] [mittel] Microsoft SharePoint und SharePoint Server: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Jul 17, 2026
 MEDIUM
[NEU] [mittel] Microsoft Windows Admin Center: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Jul 17, 2026
 HIGH
Multiples vulnérabilités dans Drupal (16 juillet 2026)
CERT-FR (ANSSI) • Jul 16, 2026
 MEDIUM
CVE-2026-57213 RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering
Microsoft Security Response Center • Jul 15, 2026
 HIGH
NCSC-2026-0234 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Exchange
NCSC Netherlands • Jul 14, 2026
 INFO
CVE-2026-55021 Microsoft SharePoint Server Spoofing Vulnerability
Microsoft Security Response Center • Jul 14, 2026
 INFO
CVE-2026-55030 Microsoft SharePoint Server Spoofing Vulnerability
Microsoft Security Response Center • Jul 14, 2026
 INFO
CVE-2026-55034 Microsoft SharePoint Server Spoofing Vulnerability
Microsoft Security Response Center • Jul 14, 2026
 MEDIUM
Cross-Site Scripting in Domain parameter
Fortinet PSIRT • Jul 14, 2026
 HIGH
[NEU] [mittel] Grafana: Mehrere Schwachstellen
BSI Germany • Jul 13, 2026
 HIGH
[NEU] [hoch] JetBrains TeamCity: Mehrere Schwachstellen
BSI Germany • Jul 13, 2026
 CRITICAL
Zimbra Patches Critical Code Execution Vulnerability
SecurityWeek • Jul 13, 2026
 LOW
CVE-2026-59926 Mistune: XSS via unescaped class option in Admonition directive
Microsoft Security Response Center • Jul 11, 2026
 CRITICAL
Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions
The Hacker News • Jul 11, 2026
 MEDIUM
Multiples vulnérabilités dans Progress MOVEit Transfer (10 juillet 2026)
CERT-FR (ANSSI) • Jul 10, 2026
 HIGH
Zimbra urges customers to patch critical web client XSS flaw
BleepingComputer • Jul 10, 2026
 CRITICAL
[NEU] [hoch] Palo Alto Networks PAN-OS: Mehrere Schwachstellen
BSI Germany • Jul 09, 2026
 MEDIUM
[NEU] [mittel] Red Hat JBoss Enterprise Application Platform (io.undertow.jastow): Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Jul 08, 2026
 MEDIUM
Digi International PortServer TS, Digi One SP IA
CISA ICS Advisories • Jul 07, 2026
 MEDIUM
Vulnérabilité dans Synacor Zimbra Collaboration (07 juillet 2026)
CERT-FR (ANSSI) • Jul 07, 2026
 MEDIUM
Multiples vulnérabilités dans Roundcube (06 juillet 2026)
CERT-FR (ANSSI) • Jul 06, 2026
 MEDIUM
[webapps] KeepInMind 0.8.4.2 - Stored XSS
Exploit-DB • Jul 06, 2026
 MEDIUM
[webapps] WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS)
Exploit-DB • Jul 06, 2026
 MEDIUM
NCSC-2026-0219 [1.00] [M/H] Kwetsbaarheden verholpen in GitHub Enterprise Server
NCSC Netherlands • Jul 03, 2026
 HIGH
NCSC-2026-0217 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe ColdFusion
NCSC Netherlands • Jul 01, 2026
 MEDIUM
Multiples vulnérabilités dans Apache Tomcat (30 juin 2026)
CERT-FR (ANSSI) • Jun 30, 2026
 HIGH
Multiples vulnérabilités dans GitLab (25 juin 2026)
CERT-FR (ANSSI) • Jun 25, 2026
 HIGH
GitLab Patches Code Execution, Information Disclosure Vulnerabilities
SecurityWeek • Jun 25, 2026
 HIGH
CVE-2026-25860 turn XSS to RCE
Reddit r/netsec • Jun 22, 2026
 MEDIUM
Exploiting Auth0 Defaults in XSS Attacks - elttam
Reddit r/netsec • Jun 22, 2026
 HIGH
Multiples vulnérabilités dans Drupal (18 juin 2026)
CERT-FR (ANSSI) • Jun 18, 2026
 MEDIUM
[NEU] [mittel] RabbitMQ: Mehrere Schwachstellen
BSI Germany • Jun 18, 2026
 HIGH
Multiples vulnérabilités dans Redmine (16 juin 2026)
CERT-FR (ANSSI) • Jun 16, 2026
 MEDIUM
Vulnérabilité dans LibreNMS (16 juin 2026)
CERT-FR (ANSSI) • Jun 16, 2026
 CRITICAL
Multiples vulnérabilités dans Microsoft Edge (16 juin 2026)
CERT-FR (ANSSI) • Jun 16, 2026
 CRITICAL
NCSC-2026-0198 [1.00] [M/H] Kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform
NCSC Netherlands • Jun 15, 2026
 MEDIUM
CVE-2026-29170 Apache HTTP Server: mod_proxy_ftp XSS
Microsoft Security Response Center • Jun 11, 2026
 CRITICAL
Microsoft patches Exchange Server zero-day exploited in attacks
BleepingComputer • Jun 10, 2026
 HIGH
Multiples vulnérabilités dans les produits SAP (09 juin 2026)
CERT-FR (ANSSI) • Jun 09, 2026
 MEDIUM
Seven Years on a Public Clipboard: Pasted Secrets, Türkiye's Exposure, and a Stored XSS
Reddit r/netsec • Jun 05, 2026
 HIGH
Multiples vulnérabilités dans Synology Chat Server pour DSM (04 juin 2026)
CERT-FR (ANSSI) • Jun 04, 2026
 HIGH
VU#265691: Appsmiths SQL Query autocomplete renderer contains a cross site scripting vulnerability
CERT/CC • Jun 02, 2026
 CRITICAL
Pretalx vulnerability allows account takeover and admin demotion
SC Media • Jun 01, 2026
 MEDIUM
[webapps] CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
Exploit-DB • May 29, 2026
 CRITICAL
[NEU] [hoch] Webmin: Mehrere Schwachstellen
BSI Germany • May 28, 2026
 MEDIUM
CVE-2026-44844 eml_parser: Recursion DoS via nested message/rfc822 attachments
Microsoft Security Response Center • May 28, 2026
 INFO
CVE-2026-44896 Mistune: XSS via unescaped figclass/figwidth in Figure directive
Microsoft Security Response Center • May 28, 2026
 HIGH
[NEU] [mittel] ONLYOFFICE Docs: Mehrere Schwachstellen
BSI Germany • May 26, 2026
 CRITICAL
Microsoft Exchange Zero-Day Under Attack, No Patch Available
Dark Reading • May 18, 2026
 CRITICAL
Microsoft warns of active exploitation of new Exchange Server zero-day vulnerability
SC Media • May 15, 2026
 CRITICAL
Exchange Server zero-day vulnerability can be triggered by opening a malicious email
CSO Online • May 15, 2026
 HIGH
[NEU] [hoch] HCL BigFix: Schwachstelle ermöglicht Manipulation von Daten und Cross-Site Scripting
BSI Germany • May 15, 2026
 MEDIUM
NCSC-2026-0159 [1.00] [M/H] Kwetsbaarheid verholpen in Microsoft Exchange Server
NCSC Netherlands • May 15, 2026
 HIGH
On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email
The Hacker News • May 15, 2026
 HIGH
Google Chrome Multiple Vulnerabilities
HKCERT • May 15, 2026
 MEDIUM
Multiples vulnérabilités dans LibreNMS (12 mai 2026)
CERT-FR (ANSSI) • May 12, 2026
 HIGH
Multiples vulnérabilités dans les produits SAP (12 mai 2026)
CERT-FR (ANSSI) • May 12, 2026
 MEDIUM
Multiples vulnérabilités dans les produits Centreon (12 mai 2026)
CERT-FR (ANSSI) • May 12, 2026
 HIGH
Instructure confirms hackers used Canvas flaw to deface portals
BleepingComputer • May 11, 2026
 MEDIUM
CVE-2026-6735 XSS within PHP-FPM status endpoint
Microsoft Security Response Center • May 11, 2026
 MEDIUM
CVE-2026-39823 Bypass of meta content URL escaping causes XSS in html/template
Microsoft Security Response Center • May 10, 2026
 MEDIUM
[UPDATE] [mittel] Grafana: Mehrere Schwachstellen
BSI Germany • May 04, 2026
 HIGH
[UPDATE] [hoch] Grafana: Mehrere Schwachstellen
BSI Germany • May 04, 2026
 HIGH
DotNetNuke CMS vulnerability allows server compromise via malicious SVG uploads
SC Media • Apr 30, 2026
 MEDIUM
Vulnérabilité dans les produits Netgate (30 avril 2026)
CERT-FR (ANSSI) • Apr 30, 2026
 HIGH
[NEU] [mittel] Netgate pfSense: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Apr 30, 2026
 HIGH
[UPDATE] [mittel] Roundcube: Mehrere Schwachstellen
BSI Germany • Apr 30, 2026
 INFO
CVE-2026-41305 PostCSS has XSS via Unescaped </style> in its CSS Stringify Output
Microsoft Security Response Center • Apr 30, 2026
 HIGH
USN-8223-1: Roundcube Webmail vulnerabilities
Ubuntu Security • Apr 29, 2026
 MEDIUM
[webapps] HAX CMS 24.x - Stored Cross-Site Scripting (XSS)
Exploit-DB • Apr 29, 2026
 HIGH
[NEU] [mittel] Prometheus: Mehrere Schwachstellen
BSI Germany • Apr 28, 2026
 HIGH
[UPDATE] [hoch] Angular: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Apr 27, 2026
 HIGH
[UPDATE] [hoch] Angular: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Apr 27, 2026
 CRITICAL
Over 10,000 Zimbra servers vulnerable to ongoing XSS attacks
BleepingComputer • Apr 24, 2026
 HIGH
[UPDATE] [mittel] Cacti: Mehrere Schwachstellen
BSI Germany • Apr 24, 2026
 MEDIUM
VU#890999: Radware Alteon has a reflected XSS vulnerability that can execute JavaScript in the host browser
CERT/CC • Apr 21, 2026
 MEDIUM
CVE-2026-40179 Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer
Microsoft Security Response Center • Apr 17, 2026
 MEDIUM
Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities
Cisco Security • Apr 15, 2026
 MEDIUM
Cisco Webex Contact Center Cross-Site Scripting Vulnerability
Cisco Security • Apr 15, 2026
 HIGH
Cisco Products Multiple Vulnerabilities
HKCERT • Apr 17, 2026
 MEDIUM
Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities
Cisco Security • Apr 15, 2026
 MEDIUM
Cisco Webex Contact Center Cross-Site Scripting Vulnerability
Cisco Security • Apr 15, 2026
 MEDIUM
Two Vulnerabilities Patched in Ivanti Neurons for ITSM
SecurityWeek • Apr 15, 2026
 MEDIUM
Multiple Stored XSS
Fortinet PSIRT • Apr 14, 2026
 MEDIUM
Reflected XSS in Operation Center
Fortinet PSIRT • Apr 14, 2026
 MEDIUM
Stored Cross Site Scripting (XSS) in Reports View page
Fortinet PSIRT • Apr 14, 2026
 HIGH
[webapps] RomM 4.4.0 - XSS_CSRF Chain
Exploit-DB • Apr 09, 2026
 MEDIUM
[NEU] [mittel] Sonatype Nexus Repository Manager: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Apr 09, 2026
 HIGH
[NEU] [hoch] SugarCRM Sugar Enterprise: Mehrere Schwachstellen
BSI Germany • Apr 09, 2026
 CRITICAL
[NEU] [hoch] Checkmk: Mehrere Schwachstellen
BSI Germany • Apr 07, 2026
 MEDIUM
[NEU] [mittel] WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Apr 07, 2026
 HIGH
NCSC-2026-0106 [1.00] [M/H] Kwetsbaarheden verholpen in Cisco Integrated Management Controller
NCSC Netherlands • Apr 03, 2026
 HIGH
Multiples vulnérabilités dans les produits Netgate (02 avril 2026)
CERT-FR (ANSSI) • Apr 02, 2026
 MEDIUM
Multiples vulnérabilités dans Joomla! (01 avril 2026)
CERT-FR (ANSSI) • Apr 01, 2026
 MEDIUM
Multiples vulnérabilités dans Sonicwall Email Security (01 avril 2026)
CERT-FR (ANSSI) • Apr 01, 2026
 LOW
[NEU] [niedrig] SonicWall Email Security Appliance: Mehrere Schwachstellen
BSI Germany • Apr 01, 2026