Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-77643

xapian-core: Xapian xapian-core: Arbitrary code execution via incomplete HTML escaping

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet(). NOTE: this issue exists because of a missed corner case of CVE-2018-0499.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Xapian
Products
Xapian-core
CVE-2018-0499

xapian-core: Cross-site-scripting in queryparser/termgenerator_internal.cc

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Canonical Xapian
Products
Ubuntu Linux Xapian-core