Skip to content
OpenAdvisories

Archive

17 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /17 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30639
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-54645 Public exploit

    CubeCart: Stored XSS in Product Description Editor via Global Sanitizer Bypass

    CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/products.index.inc.php reads the description, description_short, and spec_copy rich-text fields from $GLOBALS['RAW']['POST'] and removes only script elements before the values are store…

    cubecart v6
  • Medium 6.1
    CVE-2026-54644 Public exploit

    CubeCart: XSS via Anchor Tag Attribute Injection in gui.class.php Message System

    CubeCart is an ecommerce software solution. Prior to 6.7.5, the _errorMessage method in classes/gui.class.php uses strip_tags to permit anchor elements in error, information, and warning messages while retaining unsafe href values and onclick event handlers. …

    cubecart v6
  • Medium 6.1
    CVE-2021-3030 Public exploit

    Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme …