Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-94166UpSolution Core · Cross-site Scripting High7.1EPSS 0.2%2026-10-09CVE Database V5CVE-2026-94166 CVE-2026-94166 is a reflected cross-site scripting (XSS) vulnerability in UpSolution UpSolution Core affecting versions from 0 up to and including 8.44. This vulnerability arises from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that can be executed in the context of a user's browser session. EPSS 0.2%Vulnerability UpSolution	CVE Database V5	2026-10-09
High	8.5	EPSS 0.2%	CVE-2026-95610UpSolution Core · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in UpSolution… High8.5EPSS 0.2%2026-10-09CVE Database V5CVE-2026-95610 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3. EPSS 0.2%Vulnerability UpSolution	CVE Database V5	2026-10-09
High	7.1	EPSS 0.2%	CVE-2026-24983UpSolution Core · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in UpSolution… High7.1EPSS 0.2%2026-03-25CVE Database V5CVE-2026-24983 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpSolution Core: from n/a through <= 8.41. EPSS 0.2%Vulnerability UpSolution	CVE Database V5	2026-03-25

Showing 1–3 of 3 results