Security News

Cybersecurity news aggregator

← Back to News Browse all tags

xss

146 articles with this tag

HIGH
[NEU] [mittel] ONLYOFFICE Docs: Mehrere Schwachstellen
BSI Germany • May 26, 2026
 CRITICAL
Microsoft Exchange Zero-Day Under Attack, No Patch Available
Dark Reading • May 18, 2026
 CRITICAL
Microsoft warns of active exploitation of new Exchange Server zero-day vulnerability
SC Media • May 15, 2026
 CRITICAL
Exchange Server zero-day vulnerability can be triggered by opening a malicious email
CSO Online • May 15, 2026
 HIGH
[NEU] [hoch] HCL BigFix: Schwachstelle ermöglicht Manipulation von Daten und Cross-Site Scripting
BSI Germany • May 15, 2026
 MEDIUM
NCSC-2026-0159 [1.00] [M/H] Kwetsbaarheid verholpen in Microsoft Exchange Server
NCSC Netherlands • May 15, 2026
 HIGH
On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email
The Hacker News • May 15, 2026
 HIGH
Google Chrome Multiple Vulnerabilities
HKCERT • May 15, 2026
 MEDIUM
Multiples vulnérabilités dans les produits Centreon (12 mai 2026)
CERT-FR (ANSSI) • May 12, 2026
 HIGH
Multiples vulnérabilités dans les produits SAP (12 mai 2026)
CERT-FR (ANSSI) • May 12, 2026
 MEDIUM
Multiples vulnérabilités dans LibreNMS (12 mai 2026)
CERT-FR (ANSSI) • May 12, 2026
 HIGH
Instructure confirms hackers used Canvas flaw to deface portals
BleepingComputer • May 11, 2026
 MEDIUM
CVE-2026-6735 XSS within PHP-FPM status endpoint
Microsoft Security Response Center • May 11, 2026
 MEDIUM
CVE-2026-39823 Bypass of meta content URL escaping causes XSS in html/template
Microsoft Security Response Center • May 10, 2026
 HIGH
[UPDATE] [hoch] Grafana: Mehrere Schwachstellen
BSI Germany • May 04, 2026
 MEDIUM
[UPDATE] [mittel] Grafana: Mehrere Schwachstellen
BSI Germany • May 04, 2026
 HIGH
DotNetNuke CMS vulnerability allows server compromise via malicious SVG uploads
SC Media • Apr 30, 2026
 MEDIUM
Vulnérabilité dans les produits Netgate (30 avril 2026)
CERT-FR (ANSSI) • Apr 30, 2026
 HIGH
[UPDATE] [mittel] Roundcube: Mehrere Schwachstellen
BSI Germany • Apr 30, 2026
 HIGH
[NEU] [mittel] Netgate pfSense: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Apr 30, 2026
 INFO
CVE-2026-41305 PostCSS has XSS via Unescaped </style> in its CSS Stringify Output
Microsoft Security Response Center • Apr 30, 2026
 HIGH
USN-8223-1: Roundcube Webmail vulnerabilities
Ubuntu Security • Apr 29, 2026
 MEDIUM
[webapps] HAX CMS 24.x - Stored Cross-Site Scripting (XSS)
Exploit-DB • Apr 29, 2026
 HIGH
[NEU] [mittel] Prometheus: Mehrere Schwachstellen
BSI Germany • Apr 28, 2026
 HIGH
[UPDATE] [hoch] Angular: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Apr 27, 2026
 HIGH
[UPDATE] [hoch] Angular: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Apr 27, 2026
 CRITICAL
Over 10,000 Zimbra servers vulnerable to ongoing XSS attacks
BleepingComputer • Apr 24, 2026
 HIGH
[UPDATE] [mittel] Cacti: Mehrere Schwachstellen
BSI Germany • Apr 24, 2026
 MEDIUM
VU#890999: Radware Alteon has a reflected XSS vulnerability that can execute JavaScript in the host browser
CERT/CC • Apr 21, 2026
 MEDIUM
CVE-2026-40179 Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer
Microsoft Security Response Center • Apr 17, 2026
 MEDIUM
Cisco Webex Contact Center Cross-Site Scripting Vulnerability
Cisco Security • Apr 15, 2026
 MEDIUM
Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities
Cisco Security • Apr 15, 2026
 HIGH
Cisco Products Multiple Vulnerabilities
HKCERT • Apr 17, 2026
 MEDIUM
Cisco Webex Contact Center Cross-Site Scripting Vulnerability
Cisco Security • Apr 15, 2026
 MEDIUM
Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities
Cisco Security • Apr 15, 2026
 MEDIUM
Two Vulnerabilities Patched in Ivanti Neurons for ITSM
SecurityWeek • Apr 15, 2026
 MEDIUM
Stored Cross Site Scripting (XSS) in Reports View page
Fortinet PSIRT • Apr 14, 2026
 MEDIUM
Reflected XSS in Operation Center
Fortinet PSIRT • Apr 14, 2026
 MEDIUM
Multiple Stored XSS
Fortinet PSIRT • Apr 14, 2026
 HIGH
[webapps] RomM 4.4.0 - XSS_CSRF Chain
Exploit-DB • Apr 09, 2026
 MEDIUM
[NEU] [mittel] Sonatype Nexus Repository Manager: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Apr 09, 2026
 HIGH
[NEU] [hoch] SugarCRM Sugar Enterprise: Mehrere Schwachstellen
BSI Germany • Apr 09, 2026
 CRITICAL
[NEU] [hoch] Checkmk: Mehrere Schwachstellen
BSI Germany • Apr 07, 2026
 MEDIUM
[NEU] [mittel] WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Apr 07, 2026
 HIGH
NCSC-2026-0106 [1.00] [M/H] Kwetsbaarheden verholpen in Cisco Integrated Management Controller
NCSC Netherlands • Apr 03, 2026
 HIGH
Multiples vulnérabilités dans les produits Netgate (02 avril 2026)
CERT-FR (ANSSI) • Apr 02, 2026
 MEDIUM
Multiples vulnérabilités dans Sonicwall Email Security (01 avril 2026)
CERT-FR (ANSSI) • Apr 01, 2026
 MEDIUM
Multiples vulnérabilités dans Joomla! (01 avril 2026)
CERT-FR (ANSSI) • Apr 01, 2026
 LOW
[NEU] [niedrig] Pega Platform: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Apr 01, 2026
 LOW
[NEU] [niedrig] SonicWall Email Security Appliance: Mehrere Schwachstellen
BSI Germany • Apr 01, 2026
 MEDIUM
Multiples vulnérabilités dans Papercut (31 mars 2026)
CERT-FR (ANSSI) • Mar 31, 2026
 HIGH
[NEU] [UNGEPATCHT] [hoch] Langflow: Mehrere Schwachstellen
BSI Germany • Mar 30, 2026
 HIGH
Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website
The Hacker News • Mar 26, 2026
 HIGH
[NEU] [mittel] IBM License Metric Tool: Mehrere Schwachstellen
BSI Germany • Mar 26, 2026
 MEDIUM
Cisco IOx Application Hosting Environment Stored Cross-Site Scripting Vulnerability
Cisco Security • Mar 25, 2026
 MEDIUM
Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability
Cisco Security • Mar 25, 2026
 HIGH
Multiples vulnérabilités dans GitLab (25 mars 2026)
CERT-FR (ANSSI) • Mar 25, 2026
 HIGH
Multiples vulnérabilités dans les produits Qnap (23 mars 2026)
CERT-FR (ANSSI) • Mar 23, 2026
 MEDIUM
CVE-2026-31381, CVE-2026-31382: Gainsight Assist Information Disclosure and Cross-Site Scripting (FIXED)
Rapid7 Research • Mar 20, 2026
 CRITICAL
Russian APT Exploits Zimbra Vulnerability Against Ukraine
SecurityWeek • Mar 19, 2026
 HIGH
[UPDATE] [hoch] Synacor Zimbra: Mehrere Schwachstellen
BSI Germany • Mar 19, 2026
 CRITICAL
CISA orders feds to patch Zimbra XSS flaw exploited in attacks
BleepingComputer • Mar 18, 2026
 MEDIUM
Multiples vulnérabilités dans Redmine (17 mars 2026)
CERT-FR (ANSSI) • Mar 17, 2026
 CRITICAL
USN-8097-1: Roundcube Webmail vulnerabilities
Ubuntu Security • Mar 16, 2026
 MEDIUM
[UPDATE] [mittel] Ruby on Rails: Mehrere Schwachstellen ermöglichen Cross-Site Scripting
BSI Germany • Mar 16, 2026
 HIGH
Multiples vulnérabilités dans GitLab (12 mars 2026)
CERT-FR (ANSSI) • Mar 12, 2026
 MEDIUM
[NEU] [mittel] Cisco Finesse, Unified Intelligence Center, Unified CCX: Mehrere Schwachstellen ermöglichen Cross-Site Scripting
BSI Germany • Mar 12, 2026
 MEDIUM
Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities
Cisco Security • Mar 11, 2026
 HIGH
Multiples vulnérabilités dans WordPress (11 mars 2026)
CERT-FR (ANSSI) • Mar 11, 2026
 HIGH
Multiples vulnérabilités dans les produits Adobe (11 mars 2026)
CERT-FR (ANSSI) • Mar 11, 2026
 MEDIUM
[NEU] [niedrig] Fortinet FortiSIEM: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Mar 11, 2026
 MEDIUM
[NEU] [mittel] ILIAS: Mehrere Schwachstellen
BSI Germany • Mar 11, 2026
 MEDIUM
[NEU] [mittel] Adobe Experience Manager: Mehrere Schwachstellen ermöglichen Cross-Site Scripting
BSI Germany • Mar 11, 2026
 MEDIUM
XSS in LDAP server option
Fortinet PSIRT • Mar 10, 2026
 MEDIUM
Reflected Cross Site Scripting (XSS) in error page
Fortinet PSIRT • Mar 10, 2026
 HIGH
Multiples vulnérabilités dans les produits Siemens (10 mars 2026)
CERT-FR (ANSSI) • Mar 10, 2026
 HIGH
OAuth vulnerability in n8n automation platform could lead to system compromise
CSO Online • Mar 06, 2026
 MEDIUM
USN-8077-1: Bleach vulnerabilities
Ubuntu Security • Mar 05, 2026
 HIGH
[NEU] [mittel] Red Hat Developer Hub: Mehrere Schwachstellen
BSI Germany • Mar 05, 2026
 MEDIUM
[NEU] [mittel] Cisco WebEx: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Mar 05, 2026
 MEDIUM
Cisco Webex Services Cross-Site Scripting Vulnerability
Cisco Security • Mar 04, 2026
 MEDIUM
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Client-Side Request Smuggling Vulnerability
Cisco Security • Mar 04, 2026
 MEDIUM
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulnerability
Cisco Security • Mar 04, 2026
 MEDIUM
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected Cross-Site Scripting Vulnerability
Cisco Security • Mar 04, 2026
 CRITICAL
XSS in default error page
Fortinet PSIRT • Feb 21, 2026
 MEDIUM
[NEU] [mittel] Cisco FXOS und Unified Computing System (UCS): Mehrere Schwachstellen
BSI Germany • Feb 26, 2026
 CRITICAL
Recent RoundCube Webmail Vulnerability Exploited in Attacks
SecurityWeek • Feb 23, 2026
 CRITICAL
CISA Adds Two Actively Exploited Roundcube Flaws to KEV Catalog
The Hacker News • Feb 21, 2026
 HIGH
[NEU] [hoch] IceWarp EPOS: Mehrere Schwachstellen
BSI Germany • Feb 20, 2026
 MEDIUM
[UPDATE] [mittel] Grafana: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Feb 19, 2026
 MEDIUM
[NEU] [hoch] Jenkins: Mehrere Schwachstellen
BSI Germany • Feb 19, 2026
 HIGH
[NEU] [UNGEPATCHT] [hoch] Graylog: Mehrere Schwachstellen
BSI Germany • Feb 19, 2026
 MEDIUM
Multiples vulnérabilités dans SPIP (18 février 2026)
CERT-FR (ANSSI) • Feb 18, 2026
 MEDIUM
[NEU] [mittel] Pega Platform: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Feb 17, 2026
 MEDIUM
[UPDATE] [niedrig] Red Hat OpenShift Service Mesh Containers: Schwachstelle ermöglicht Cross-Site Scripting
BSI Germany • Feb 17, 2026
 MEDIUM
[UPDATE] [mittel] Red Hat Enterprise Linux Ceph Storage: Mehrere Schwachstellen
BSI Germany • Feb 17, 2026
 MEDIUM
Roundcube Webmail 1.6.6 - Stored Cross Site Scripting (XSS)
Web Discovery • Feb 09, 2026
 CRITICAL
Government Emails at Risk: Critical Cross-Site Scripting Vulnerability in Roundcube Webmail
Web Discovery • Feb 09, 2026
 HIGH
CVE-2023-5631: Roundcube Webmail XSS Vulnerability
Web Discovery • Feb 09, 2026
 MEDIUM
Roundcube Webmail Vulnerability Let Attackers Track Email Opens
Web Discovery • Feb 11, 2026