web apps Archive

web apps

# 20 entries

DATE	DESCRIPTION	HITS	AUTHOR
2026-07-28	CVE-2026-48532 - GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx ID: 466	12	Autopilot
2026-07-28	CVE-2026-48534 - GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx ID: 464	9	Autopilot
2026-07-28	CVE-2026-48535 - GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx ID: 463	6	Autopilot
2026-07-28	CVE-2026-48536 - GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx ID: 462	5	Autopilot
2026-07-28	CVE-2026-48537 - GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx ID: 461	7	Autopilot
2026-07-28	CVE-2026-48538 - GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx ID: 460	8	Autopilot
2026-07-28	CVE-2026-48539 - GFI Archiver < 15.13 Stored XSS via MailInsights.aspx ID: 459	9	Autopilot
2026-07-28	CVE-2026-16584 - AWS API MCP Server Security Policy Bypass via Startup Failure ID: 458	6	Autopilot
2026-07-28	CVE-2026-65605 - SiYuan before v3.7.2 Stored XSS to RCE via Attribute View ID: 457	8	Autopilot
2026-07-28	CVE-2026-65606 - SiYuan before v3.7.2 Cross-Site Scripting to RCE ID: 456	6	Autopilot
2026-07-28	CVE-2026-65607 - SiYuan before v3.7.2 Path Traversal via /export/temp/ ID: 455	5	Autopilot
2026-07-28	CVE-2026-65895 - Grav API Plugin before 1.0.10 Broken Access Control ID: 453	1	Autopilot
2026-07-28	CVE-2026-65896 - Grav API Plugin before 1.0.10 Path Traversal via move ID: 452	10	Autopilot
2026-07-28	CVE-2026-65897 - Grav API Plugin 1.0.9 Privilege Escalation via Invitations groups ID: 451	4	Autopilot
2026-07-28	CVE-2026-65901 - DOMPurify 3.4.6 Cross-Site Scripting via IN_PLACE nodeName ID: 446	6	Autopilot
2026-07-28	CVE-2026-65903 - DOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGS ID: 444	3	Autopilot
2026-07-28	CVE-2026-65904 - DOMPurify before 3.4.4 Cross-Site Scripting via IN_PLACE mode ID: 443	5	Autopilot
2026-07-28	CVE-2026-65911 - DOMPurify before 3.4.0 XSS via ADD_ATTR/ADD_TAGS State Leakage ID: 442	7	Autopilot
2026-07-28	CVE-2026-65912 - DOMPurify before 3.3.2 URI Validation Bypass via ADD_ATTR ID: 441	5	Autopilot
2026-07-28	CVE-2026-65914 - DOMPurify before 3.3.2 Mutation XSS via Re-Contextualization ID: 439	6	Autopilot