Advisories · Weakness
CWE-81.
Every Advisory and CVE whose sources give the weakness CWE-81, newest first.
- CVSS 6.1 Medium
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
- Race condition
- CWE-61
<=28.5.2 · no fixed version yet
GHSA-vp62-88p7-qqf5 · CVE-2026-41568 - CVSS 6.3 Medium
A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags and, possibly, execute arbitrary client-si…
- Bosch Rexroth AG ctrlX OS - Solutions
- CWE-81
- CVSS 2.1 Low
vulnerability has been discovered in OpenText™ Service Manager.
- OpenText™ Service Manager
- CWE-81
- CVSS 5.9 Medium
OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project
- Cross-site scripting (XSS)
- CWE-81
<3.8.3 · fixed in 3.8.3
GHSA-j8hp-f2mj-586g · CVE-2024-47882 - CVSS 6.3 Medium
Computer Vision Annotation Tool (CVAT) contains a reflected XSS via request endpoints
- cvat
- Cross-site scripting (XSS)
- CWE-81
- CVSS 6.1 Medium
Journyx Reflected Cross Site Scripting
- Journyx (jtime)
- CWE-81
- CVSS 10.0 CriticalCritical · CVSS 9+
Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC
- Cross-site scripting (XSS)
- CWE-81
<21.1.2 · fixed in 21.1.2
GHSA-3p62-6fjh-3p5h · CVE-2022-4361 - CVSS 8.1 High
Keycloak Cross-site Scripting on OpenID connect login service
- Cross-site scripting (XSS)
- CWE-81
<20.0.5 · fixed in 20.0.5
GHSA-9hhc-pj4w-w5rv · CVE-2022-4137 - CVSS 6.1 Medium
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
- Cross-site scripting (XSS)
- CWE-81
>=1.0.0, <1.0.11 || >=1.1.0, <1.4.3 · fixed in 1.0.11, 1.4.3
GHSA-rp4x-wxqv-cf9m · CVE-2019-25027 - CVSS 6.1 Medium
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
- CWE-81
>=10.0.0, <10.0.14 || >=11.0.0, <13.0.6 · fixed in 10.0.14, 13.0.6
GHSA-jqj4-r483-4gvr