Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83619 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.7.0 until 0.8.15, the relea... | 2026-09-08 |
| CVE-2026-83618 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.10 until 0.9.12, the requ... | 2026-09-08 |
| CVE-2026-83617 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.11 until 0.9.12, the requ... | 2026-09-08 |
| CVE-2026-83616 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83615 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83614 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83613 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83612 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-beta.1 until 0.9.12, HT... | 2026-09-08 |
| CVE-2026-83611 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83610 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83609 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0 until 0.9.12, the share... | 2026-09-08 |
| CVE-2026-83608 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83607 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-83606 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-beta.9 until 0.9.11, th... | 2026-09-08 |
| CVE-2026-83605 | not reported | — | No | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0... | 2026-09-08 |
| CVE-2026-52777 | not reported | — | No | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImport... | 2026-09-08 |
| CVE-2026-52775 | high | 8.8 | No | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the latest development branch contains a SQL injection vuln... | 2026-09-08 |
| CVE-2026-52774 | medium | 6.1 | No | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler reflects the id GET parameter into HTML attr... | 2026-09-08 |
| CVE-2026-52773 | medium | 6.1 | No | YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archived-revision view reflects the time GET... | 2026-09-08 |
| CVE-2026-52771 | high | 8.3 | No | YesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiController::deletePage() interpolates a page tag ret... | 2026-09-08 |