CVE-2026-50190 - Chi tiết CVSS, EPSS & CISA Kev

` closes the document title early and the injected script executes in the Shaarli origin for any visitor of `/shaare/{hash}`. Shaarli's metadata fetcher copies a remote page's `` text verbatim into the local bookmark title, so an attacker who hosts an attacker-controlled URL and convinces an administrator to bookmark it plants the payload with no further interaction \u2014 and the resulting permalink fires for every visitor including the administrator on first save, providing a one-shot administrator account takeover. Version 0.16.3 fixes the issue.", "isPartOf": { "@id": "https://www.cvefind.com/vi/cve/CVE-2026-50190.html#webpage" }, "publisher": { "@id": "https://www.cvefind.com/#organization" }, "@id": "https://www.cvefind.com/vi/cve/CVE-2026-50190.html#techarticle" } ] } </script> <meta name="viewport" content="width=device-width, initial-scale=1" />  <link rel="apple-touch-icon" sizes="57x57" href="/apple-icon-57x57.png"> <link rel="apple-touch-icon" sizes="60x60" href="/apple-icon-60x60.png"> <link rel="apple-touch-icon" sizes="72x72" href="/apple-icon-72x72.png"> <link rel="apple-touch-icon" sizes="76x76" href="/apple-icon-76x76.png"> <link rel="apple-touch-icon" sizes="114x114" href="/apple-icon-114x114.png"> <link rel="apple-touch-icon" sizes="120x120" href="/apple-icon-120x120.png"> <link rel="apple-touch-icon" sizes="144x144" href="/apple-icon-144x144.png"> <link rel="apple-touch-icon" sizes="152x152" href="/apple-icon-152x152.png"> <link rel="apple-touch-icon" sizes="180x180" href="/apple-icon-180x180.png"> <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png"> <link rel="icon" type="image/png" sizes="192x192" href="/android-icon-192x192.png"> <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png"> <link rel="icon" type="image/png" sizes="96x96" href="/favicon-96x96.png"> <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png"> <link rel="manifest" href="/manifest.json"> <meta name="msapplication-TileColor" content="#ffffff"> <meta name="msapplication-TileImage" content="/ms-icon-144x144.png"> <meta name="theme-color" content="#ffffff"> <link rel="canonical" href="https://www.cvefind.com/vi/cve/cve-2026-50190.html"> <link rel="preload" href="/css/dist/custom.min.1793710212.css" as="style"> <link rel="stylesheet" href="/css/dist/custom.min.1793710212.css" media="print" onload="this.media='all'"> <noscript><link rel="stylesheet" href="/css/dist/custom.min.1793710212.css"></noscript> <link rel="stylesheet" href="/plugins/custom/datatables/datatables.bundle.1718974030.css"> <link rel="preload" href="/css/dist/plugins.bundle.min.1793710212.css" as="style"> <link rel="stylesheet" href="/css/dist/plugins.bundle.min.1793710212.css" media="print" onload="this.media='all'"> <noscript><link rel="stylesheet" href="/css/dist/plugins.bundle.min.1793710212.css"></noscript> <link rel="stylesheet" href="/css/dist/style.bundle.min.1793710212.css"> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} // Enregistrer l'initialisation gtag('js', new Date()); // Configuration par défaut (tout refusé jusqu'au consentement) gtag('consent', 'default', { 'ad_storage': 'denied', // Permet le stockage lié à la publicité, comme les cookies (Web) ou les identifiants d'appareil (applications). 'ad_user_data': 'denied', // Définit le consentement pour l'envoi de données utilisateur à Google à des fins de publicité en ligne. 'ad_personalization': 'denied', // Définit le consentement pour la publicité personnalisée. 'analytics_storage': 'denied', // Permet le stockage lié aux données analytiques, comme la durée des visites, comme les cookies (Web) ou les identifiants d'appareil (applications). 'wait_for_update': 500 }); window.gdpr = { debug: false, utils: { isConsentGranted: function(nameCookie) { var cookies = document.cookie.split('; ').reduce((acc, cookie) => { var [name, value] = cookie.split('='); acc[name] = value; return acc; }, {}); if (!cookies[nameCookie]) return false; return cookies[nameCookie] != ''; }, handleServiceActivation: function(cookies_status) { gdpr.utils.debugLog("Gestion des services en fonction du consentement :", cookies_status); // Gestion de chaque service en fonction de son état dans cookies_status if (true) (cookies_status.rgpdGoogleAnalytics ?? false) ? gdpr.analytics.enable() : gdpr.analytics.disable(); else gdpr.utils.debugLog("GA4 ID non défini !",null); if (false) (cookies_status.rgpdGoogleAdsConversion ?? false) ? gdpr.ads.enable() : gdpr.ads.disable(); else gdpr.utils.debugLog("Google Ads ID ou GA4 ID non défini !",null); if (false) (cookies_status.rgpdCrisp ?? false) ? gdpr.crisp.enable() : gdpr.crisp.disable(); else gdpr.utils.debugLog("Crisp ID non défini !",null); if (false) (cookies_status.rgpdClarity ?? false) ? gdpr.clarity.enable() : gdpr.clarity.disable(); else gdpr.utils.debugLog("Microsoft Clarity ID non défini !",null); if (false) (cookies_status.rgpdPosthog ?? false) ? gdpr.posthog.enable() : gdpr.posthog.disable(); else gdpr.utils.debugLog("Posthog ID non défini !",null); }, debugLog: function(message, ...args) { if (gdpr.debug) { console.log(message, ...args); } } }, cookieManager: { first_load: function(cookies_status) { gdpr.utils.debugLog("Première visite, aucun cookie défini"); gdpr.utils.handleServiceActivation(cookies_status); document.dispatchEvent(new CustomEvent('gdpr:consent-updated', { detail: cookies_status })); }, accept: function(cookies_status) { gdpr.utils.debugLog("L'utilisateur a accepté tous les cookies", cookies_status); gdpr.utils.handleServiceActivation(cookies_status); document.dispatchEvent(new CustomEvent('gdpr:consent-updated', { detail: cookies_status })); }, reject: function(cookies_status) { gdpr.utils.debugLog("L'utilisateur a refusé les cookies", cookies_status); gdpr.utils.handleServiceActivation(cookies_status); document.dispatchEvent(new CustomEvent('gdpr:consent-updated', { detail: cookies_status })); }, load: function(cookies_status) { gdpr.utils.debugLog("Chargement de la page, vérification des services...", cookies_status); gdpr.utils.handleServiceActivation(cookies_status); document.dispatchEvent(new CustomEvent('gdpr:consent-updated', { detail: cookies_status })); } } }; // Traductions dynamiques window.gdpr.translations = {"title":"This Website uses cookies!","policy":"Privacy Policy","btnAccept":"Accept all cookies","btnReject":"Reject all cookies","btnSettings":"Configure cookies","btnSelectAll":"Select all","btnUnselectAll":"Unselect all","btnAcceptSelection":"Accept selection","header":"\u003Ch2\u003ECookie Management\u003C\/h2\u003E\u003Cp\u003ECustomize your cookie preferences to control the information collected and enhance your experience on our site. You can accept or reject each cookie according to your needs.\u003C\/p\u003E","footer":"\u003Cp\u003EYour cookie preferences can be changed at any time through this interface.\u003C\/p\u003E","message":"\u003Cp\u003EThis site uses cookies, including third-party cookies, for various purposes, such as statistical analysis and enhancing your user experience. You have the option to configure the use of each category of cookies individually according to your preferences.\u003C\/p\u003E","preferenceTitle":"Preference cookies","preferenceDescription":"\u003Cp\u003ESession and configuration cookies are essential for the proper functioning of this site. They allow, for example, maintaining your login, remembering your preferences, or ensuring the security of interactions. These cookies do not collect personal data for advertising purposes and cannot be disabled, as they are necessary to ensure an optimal user experience and the technical operation of the site.\u003C\/p\u003E"}; window.gdpr.analytics = { enable: function() { gdpr.analytics.gtagLoad(); // Mettre à jour le consentement et configurer gtag('consent', 'update', { 'analytics_storage': 'granted' }); gtag('config', "G-BK1SCP8YYK", { 'anonymize_ip': false, 'debug_mode': gdpr.debug }); gdpr.utils.debugLog("Google Analytics activé :", "G-BK1SCP8YYK"); }, disable: function() { gdpr.analytics.gtagLoad(); // Forcer GA4 en mode anonyme (sans cookies, anonymisation IP) gtag('consent', 'update', { 'analytics_storage': 'granted' }); gtag('config', "G-BK1SCP8YYK", { 'anonymize_ip': true, 'debug_mode': gdpr.debug, 'allow_google_signals': false, // Désactiver signaux Google (remarketing) 'allow_ad_personalization_signals': false // Pas de pub personnalisée }); // Supprimer cookies déjà posés (pour respecter le refus) gdpr.analytics.clearCookie(); gdpr.utils.debugLog("Google Analytics en mode ANONYME"); }, clearCookie: function() { document.cookie = '_ga=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/;'; document.cookie = '_gid=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/;'; document.cookie = '_gat=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/;'; gdpr.utils.debugLog("Cookies Google Analytics supprimés"); }, gtagLoad: function() { if (!!document.getElementById("ga4-script")) return; if (!"G-BK1SCP8YYK") return gdpr.utils.debugLog("ID GA4 requis pour charger gtag.js, mais non défini."); var script = document.createElement("script"); script.id = "ga4-script"; script.async = true; script.src = "https://www.googletagmanager.com/gtag/js?id=G-BK1SCP8YYK"; document.head.appendChild(script); } }; // Matomo JS cookieless : chargé inconditionnellement (hors consentement) window._paq = window._paq || []; (function() { var u = "https://stats.tesweb.com/"; _paq.push(['disableCookies']); _paq.push(['setTrackerUrl', u + 'matomo.php']); _paq.push(['setSiteId', '3']); _paq.push(['trackPageView']); _paq.push(['enableLinkTracking']); var d = document, g = d.createElement('script'), s = d.getElementsByTagName('script')[0]; g.async = true; g.src = u + 'matomo.js'; s.parentNode.insertBefore(g, s); })(); document.addEventListener("DOMContentLoaded", function() { const cc = CookiesConsentJS({ expirationDays: 365, buttons : ["settings","accept"], content : { title : window.gdpr.translations.title, message : window.gdpr.translations.message, policy : window.gdpr.translations.policy, policyLink : "/vi/gdpr.html", btnAccept: window.gdpr.translations.btnAccept, btnReject: window.gdpr.translations.btnReject, btnSettings: window.gdpr.translations.btnSettings, btnDismiss: "Cookies", btnSettingsSelectAll: window.gdpr.translations.btnSelectAll, btnSettingsUnselectAll: window.gdpr.translations.btnUnselectAll, btnSettingsAccept: window.gdpr.translations.btnAcceptSelection, settingsHeader: window.gdpr.translations.header, settingsFooter: window.gdpr.translations.footer }, cookies: { preferences: { name: "rgpdPreferences", title: window.gdpr.translations.preferenceTitle, description: window.gdpr.translations.preferenceDescription, checked: true, disabled: true }, statistics: { name: "rgpdGoogleAnalytics", title: "Statistics - Google Analytics", description: "<p>The cookies used by Google Analytics allow us to measure the traffic and/or audience of our website, analyze the visited pages, and evaluate the interactions performed. If you refuse these cookies, the data will be anonymized and used solely for statistical purposes without allowing individual identification.</p>" }, }, callback: { first_load: "gdpr.cookieManager.first_load", accept: "gdpr.cookieManager.accept", reject: "gdpr.cookieManager.reject", load: "gdpr.cookieManager.load" } }); // Exposer l'instance pour piloter la bannière depuis le site window.gdpr.cc = cc; document.querySelectorAll("#gdpr-manage-cookies").forEach(function(el) { el.addEventListener("click", function(e) { e.preventDefault(); cc.printHtmlMessage(); }); }); }); </script> <link rel="preload" href="/vendor/gdpr/cookiesconsent.min.1738320683.css" as="style"> <link rel="stylesheet" href="/vendor/gdpr/cookiesconsent.min.1738320683.css" media="print" onload="this.media='all'"> <noscript><link rel="stylesheet" href="/vendor/gdpr/cookiesconsent.min.1738320683.css"></noscript> <script src="/vendor/gdpr/cookiesconsent.min.1744282164.js" defer></script> <script>// Frame-busting to prevent site from being loaded within a frame without permission (click-jacking) if (window.top != window.self) { window.top.location.replace(window.self.location.href); }</script> </head> <body id="kt_body" class="header-fixed header-tablet-and-mobile-fixed toolbar-enabled"> <script>var defaultThemeMode = "light"; var themeMode; if ( document.documentElement ) { if ( document.documentElement.hasAttribute("data-bs-theme-mode")) { themeMode = document.documentElement.getAttribute("data-bs-theme-mode"); } else { if ( localStorage.getItem("data-bs-theme") !== null ) { themeMode = localStorage.getItem("data-bs-theme"); } else { themeMode = defaultThemeMode; } } if (themeMode === "system") { themeMode = window.matchMedia("(prefers-color-scheme: dark)").matches ? "dark" : "light"; } document.documentElement.setAttribute("data-bs-theme", themeMode); }</script>   <div class="d-flex flex-column flex-root"> <div class="page d-flex flex-row flex-column-fluid"> <div class="wrapper d-flex flex-column flex-row-fluid" id="kt_wrapper"> <div id="kt_header" class="header align-items-stretch mb-5 mb-lg-10" data-kt-sticky="true" data-kt-sticky-name="header" data-kt-sticky-offset="{default: '200px', lg: '300px'}"> <div class="container-xxl d-flex align-items-center"> <div class="header-logo me-5 me-md-10 flex-grow-1 flex-lg-grow-0"> <a href="/vi/"> <img src="/media/logos/logo.png" class="logo-default h-50px" alt="CVE Find - Vulnerabilities" width="44" height="50"/> </a> </div> <div class="d-flex topbar align-items-center d-lg-none ms-n2 me-3" title="Show aside menu"> <div class="btn btn-icon btn-active-light-primary btn-custom w-30px h-30px w-md-40px h-md-40px" id="kt_header_menu_mobile_toggle"> <i class="ki-duotone ki-abstract-14 fs-1"> <span class="path1"></span> <span class="path2"></span> </i> </div> </div> <div class="d-flex align-items-stretch justify-content-between flex-lg-grow-1"> <div class="d-flex align-items-stretch" id="kt_header_nav"> <div class="header-menu align-items-stretch" data-kt-drawer="true" data-kt-drawer-name="header-menu" data-kt-drawer-activate="{default: true, lg: false}" data-kt-drawer-overlay="true" data-kt-drawer-width="{default:'200px', '300px': '250px'}" data-kt-drawer-direction="start" data-kt-drawer-toggle="#kt_header_menu_mobile_toggle" data-kt-swapper="true" data-kt-swapper-mode="prepend" data-kt-swapper-parent="{default: '#kt_body', lg: '#kt_header_nav'}"> <div class="menu menu-rounded menu-column menu-lg-row menu-active-bg menu-title-gray-700 menu-state-primary menu-arrow-gray-500 fw-semibold my-5 my-lg-0 align-items-stretch px-2 px-lg-0" id="#kt_header_menu" data-kt-menu="true">  <div data-kt-menu-trigger="{default: 'click', lg: 'hover'}" data-kt-menu-placement="bottom-start" class="menu-item menu-lg-down-accordion me-0 me-lg-2"> <span class="menu-link py-3"> <span class="menu-title">Lỗ hổng (CVE)</span> <span class="menu-arrow d-lg-none"></span> </span> <div class="menu-sub menu-sub-lg-down-accordion menu-sub-lg-dropdown p-0"> <div class="menu-active-bg px-4 px-lg-0"> <div class="d-flex w-100 overflow-auto"> <ul class="nav nav-stretch nav-line-tabs fw-bold fs-6 p-0 p-lg-10 flex-nowrap flex-grow-1"> <li class="nav-item mx-lg-1"> <a class="nav-link py-3 py-lg-6 active text-active-primary" href="#" data-bs-toggle="tab" data-bs-target="#menuCve">Lỗ hổng và rủi ro phổ biến</a> </li> </ul> </div> <div class="tab-content py-4 py-lg-8 px-lg-7"> <div class="tab-pane active w-lg-1000px" id="menuCve"> <div class="row"> <div class="col-lg-8"> <div class="row"> <div class="col-lg-4 mb-6 mb-lg-0"> <nav> <div class="fs-6 fs-lg-4 fw-bold mb-3 ms-4">Danh sách lỗ hổng</div> <ul> <li class="menu-item p-0 m-0"> <a href="/vi/cve.html" class="menu-link menu-title"> Tất cả CVE </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve-find-cisa-kev.html" class="menu-link menu-title"> CISA - Lỗ hổng bị khai thác </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve-find-owasp.html" class="menu-link menu-title"> OWASP - Lỗ hổng </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve-find-category.html" class="menu-link menu-title"> CVE theo danh mục </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/vendor.html" class="menu-link menu-title"> Tìm kiếm theo nhà cung cấp </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/vendor-product.html" class="menu-link menu-title"> Tìm kiếm theo sản phẩm </a> </li> </ul> </nav> <nav> <div class="fs-6 fs-lg-4 fw-bold mb-3 ms-4">Sắp xếp theo năm</div> <ul> <li class="menu-item p-0 m-0"> <a href="/vi/cve.html?sid=CVE-2026*" class="menu-link menu-title"> CVE 2026 </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve.html?sid=CVE-2025*" class="menu-link menu-title"> CVE 2025 </a> </li> </ul> </nav> </div> <div class="col-lg-4 mb-6 mb-lg-0"> <nav> <div class="fs-6 fs-lg-4 fw-bold mb-3 ms-4">Thống kê CVE</div> <ul> <li class="menu-item p-0 m-0"> <a href="/vi/cve-statistic-date.html" class="menu-link menu-title"> CVE theo năm / tháng </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve-statistic-category.html" class="menu-link menu-title"> CVE theo danh mục </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve-statistic-owasp.html" class="menu-link menu-title"> CVE theo OWASP </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve-statistic-cvss-score.html" class="menu-link menu-title"> CVE theo điểm CVSS </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve-statistic-vendor.html" class="menu-link menu-title"> TOP 100 nhà cung cấp có CVE </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve-statistic-product.html" class="menu-link menu-title"> TOP 100 sản phẩm có CVE </a> </li> </ul> </nav> </div> <div class="col-lg-4 mb-6 mb-lg-0"> <nav> <div class="fs-6 fs-lg-4 fw-bold mb-3 ms-4">Chế độ xem cụ thể</div> <ul> <li class="menu-item p-0 m-0"> <a href="/vi/cve.html?sseverity=critical" class="menu-link menu-title"> CVE điểm nghiêm trọng </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve.html?sepss=0.7" class="menu-link menu-title"> CVE EPSS > 70% </a> </li> <li class="menu-item p-0 m-0 mt-4"> <a href="/vi/cve.html?sseverity=high" class="menu-link menu-title"> CVE điểm cao </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve.html?svector=network" class="menu-link menu-title"> CVE mạng (vector) </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve.html?svector=local" class="menu-link menu-title"> CVE cục bộ (vector) </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve.html?svector=physical" class="menu-link menu-title"> CVE vật lý (vector) </a> </li> </ul> </nav> </div> </div> </div> <div class="col-lg-4 d-none d-lg-block"> <span> <div class="tw-h6">CVE</div> <div class="fw-light"> CVE, viết tắt của Lỗ hổng và rủi ro phổ biến, là danh sách các lỗ hổng bảo mật máy tính được công bố công khai. </div> </span> <span> <div class="tw-h6" style="padding-top:25px">OWASP</div> <div class="fw-light"> OWASP Top 10 là một sáng kiến xác định và ghi lại 10 lỗ hổng bảo mật hàng đầu trong các ứng dụng web. </div> </span> <span> <div class="tw-h6" style="padding-top:25px">CISA KEV</div> <div class="fw-light"> Lỗ hổng đã bị khai thác đã biết của CISA (KEV) là một sáng kiến xác định và xuất bản danh sách các lỗ hổng đã bị khai thác đã biết. </div> </span> </div> </div> </div> </div> </div> </div> </div> <div data-kt-menu-trigger="{default: 'click', lg: 'hover'}" data-kt-menu-placement="bottom-start" class="menu-item menu-lg-down-accordion me-0 me-lg-2"> <span class="menu-link py-3"> <span class="menu-title">Nhà sản xuất và sản phẩm (CPE)</span> <span class="menu-arrow d-lg-none"></span> </span> <div class="menu-sub menu-sub-lg-down-accordion menu-sub-lg-dropdown p-0"> <div class="menu-active-bg px-4 px-lg-0"> <div class="d-flex w-100 overflow-auto"> <ul class="nav nav-stretch nav-line-tabs fw-bold fs-6 p-0 p-lg-10 flex-nowrap flex-grow-1"> <li class="nav-item mx-lg-1"> <a class="nav-link py-3 py-lg-6 active text-active-primary" href="#" data-bs-toggle="tab" data-bs-target="#menuVendorProduct">Nhà cung cấp và sản phẩm</a> </li> </ul> </div> <div class="tab-content py-4 py-lg-8 px-lg-7"> <div class="tab-pane active w-lg-1000px" id="menuVendorProduct"> <div class="row"> <div class="col-lg-8"> <div class="row"> <div class="col-lg-4 mb-6 mb-lg-0"> <nav> <div class="fs-6 fs-lg-4 fw-bold mb-3 ms-4">Danh sách nhà cung cấp</div> <ul> <li class="menu-item p-0 m-0"> <a href="/vi/vendor.html" class="menu-link menu-title"> Tất cả nhà cung cấp </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve-statistic-vendor.html" class="menu-link menu-title"> TOP 100 nhà cung cấp có CVE </a> </li> </ul> </nav> </div> <div class="col-lg-4 mb-6 mb-lg-0"> <nav> <div class="fs-6 fs-lg-4 fw-bold mb-3 ms-4">Danh sách sản phẩm</div> <ul> <li class="menu-item p-0 m-0"> <a href="/vi/vendor-product.html" class="menu-link menu-title"> Tất cả sản phẩm </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cve-statistic-product.html" class="menu-link menu-title"> TOP 100 sản phẩm có CVE </a> </li> </ul> </nav> </div> </div> </div> <div class="col-lg-4 d-none d-lg-block"> <div class="fw-light"> CPE, viết tắt của Liệt kê nền tảng phổ biến, là một lược đồ đặt tên chuẩn hóa cho phần cứng, phần mềm và hệ điều hành. CPE cung cấp lược đồ đặt tên có cấu trúc để xác định và phân loại duy nhất các hệ thống công nghệ thông tin, nền tảng và gói phần mềm dựa trên các thuộc tính nhất định như nhà cung cấp, tên sản phẩm, phiên bản, cập nhật, phiên bản và ngôn ngữ. </div> </div> </div> </div> </div> </div> </div> </div> <div data-kt-menu-trigger="{default: 'click', lg: 'hover'}" data-kt-menu-placement="bottom-start" class="menu-item menu-lg-down-accordion me-0 me-lg-2"> <span class="menu-link py-3"> <span class="menu-title">Điểm yếu (CWE)</span> <span class="menu-arrow d-lg-none"></span> </span> <div class="menu-sub menu-sub-lg-down-accordion menu-sub-lg-dropdown p-0"> <div class="menu-active-bg px-4 px-lg-0"> <div class="d-flex w-100 overflow-auto"> <ul class="nav nav-stretch nav-line-tabs fw-bold fs-6 p-0 p-lg-10 flex-nowrap flex-grow-1"> <li class="nav-item mx-lg-1"> <a class="nav-link py-3 py-lg-6 active text-active-primary" href="#" data-bs-toggle="tab" data-bs-target="#menuCwe">Liệt kê điểm yếu phổ biến</a> </li> </ul> </div> <div class="tab-content py-4 py-lg-8 px-lg-7"> <div class="tab-pane active w-lg-1000px" id="menuCwe"> <div class="row"> <div class="col-lg-8"> <div class="row"> <div class="col-lg-4 mb-6 mb-lg-0"> <nav> <div class="fs-6 fs-lg-4 fw-bold mb-3 ms-4">Danh sách CWE</div> <ul> <li class="menu-item p-0 m-0"> <a href="/vi/cwe.html" class="menu-link menu-title"> Tất cả CWE </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cwe-view.html" class="menu-link menu-title"> Chế độ xem CWE </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cwe-category.html" class="menu-link menu-title"> Danh mục CWE </a> </li> </ul> </nav> </div> <div class="col-lg-4 mb-6 mb-lg-0"> <nav> <div class="fs-6 fs-lg-4 fw-bold mb-3 ms-4">Chế độ xem cụ thể</div> <ul> <li class="menu-item p-0 m-0"> <a href="/vi/cwe/cwe-1425.html" class="menu-link menu-title"> CWE Top 25 (2023) </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cwe/cwe-1387.html" class="menu-link menu-title"> CWE Top 25 (2022) </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cwe/cwe-1337.html" class="menu-link menu-title"> CWE Top 25 (2021) </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cwe/cwe-699.html" class="menu-link menu-title"> Phát triển phần mềm </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cwe/cwe-1194.html" class="menu-link menu-title"> Thiết kế phần cứng </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cwe/cwe-1000.html" class="menu-link menu-title"> Khái niệm nghiên cứu </a> </li> </ul> </nav> </div> <div class="col-lg-4 mb-6 mb-lg-0"> <nav> <div class="fs-6 fs-lg-4 fw-bold mb-3 ms-4">5 CWE mới nhất</div> <ul> <li class="menu-item p-0 m-0"> <a href="/vi/cwe/cwe-1463.html" class="menu-link menu-title" style="display: block;"> CWE-1463 <div><span class='text-muted fs-8'>(2026-10-28 00:00 +00:00)</span></div> </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cwe/cwe-1462.html" class="menu-link menu-title" style="display: block;"> CWE-1462 <div><span class='text-muted fs-8'>(2026-10-28 00:00 +00:00)</span></div> </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cwe/cwe-1466.html" class="menu-link menu-title" style="display: block;"> CWE-1466 <div><span class='text-muted fs-8'>(2026-10-28 00:00 +00:00)</span></div> </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cwe/cwe-1465.html" class="menu-link menu-title" style="display: block;"> CWE-1465 <div><span class='text-muted fs-8'>(2026-10-28 00:00 +00:00)</span></div> </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/cwe/cwe-1464.html" class="menu-link menu-title" style="display: block;"> CWE-1464 <div><span class='text-muted fs-8'>(2026-10-28 00:00 +00:00)</span></div> </a> </li> </ul> </nav> </div> </div> </div> <div class="col-lg-4 d-none d-lg-block"> <div class="fw-light"> CWE, hay Liệt kê điểm yếu phổ biến, là danh sách và phân loại toàn diện các điểm yếu và lỗ hổng phần mềm. Nó phục vụ như ngôn ngữ chung để mô tả các điểm yếu bảo mật phần mềm trong kiến trúc, thiết kế, mã hoặc triển khai có thể dẫn đến lỗ hổng. </div> </div> </div> </div> </div> </div> </div> </div> <div data-kt-menu-trigger="{default: 'click', lg: 'hover'}" data-kt-menu-placement="bottom-start" class="menu-item menu-lg-down-accordion me-0 me-lg-2"> <span class="menu-link py-3"> <span class="menu-title">Mẫu tấn công (CAPEC)</span> <span class="menu-arrow d-lg-none"></span> </span> <div class="menu-sub menu-sub-lg-down-accordion menu-sub-lg-dropdown p-0"> <div class="menu-active-bg px-4 px-lg-0"> <div class="d-flex w-100 overflow-auto"> <ul class="nav nav-stretch nav-line-tabs fw-bold fs-6 p-0 p-lg-10 flex-nowrap flex-grow-1"> <li class="nav-item mx-lg-1"> <a class="nav-link py-3 py-lg-6 active text-active-primary" href="#" data-bs-toggle="tab" data-bs-target="#menuCapec">Liệt kê và phân loại mẫu tấn công phổ biến</a> </li> </ul> </div> <div class="tab-content py-4 py-lg-8 px-lg-7"> <div class="tab-pane active w-lg-1000px" id="menuCapec"> <div class="row"> <div class="col-lg-8"> <div class="row"> <div class="col-lg-4 mb-6 mb-lg-0"> <nav> <div class="fs-6 fs-lg-4 fw-bold mb-3 ms-4">Danh sách CAPEC</div> <ul> <li class="menu-item p-0 m-0"> <a href="/vi/capec.html" class="menu-link menu-title"> Tất cả CAPEC </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/capec-view.html" class="menu-link menu-title"> Chế độ xem CAPEC </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/capec-category.html" class="menu-link menu-title"> Danh mục CAPEC </a> </li> </ul> </nav> </div> <div class="col-lg-4 mb-6 mb-lg-0"> <nav> <div class="fs-6 fs-lg-4 fw-bold mb-3 ms-4">Chế độ xem cụ thể</div> <ul> <li class="menu-item p-0 m-0"> <a href="/vi/capec/capec-1000.html" class="menu-link menu-title"> Cơ chế tấn công </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/capec/capec-3000.html" class="menu-link menu-title"> Lĩnh vực tấn công </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/capec/capec-333.html" class="menu-link menu-title"> Phân loại mối đe dọa WASC 2.0 </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/capec/capec-658.html" class="menu-link menu-title"> Mẫu liên quan ATT&CK </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/capec/capec-659.html" class="menu-link menu-title"> Mẫu liên quan OWASP </a> </li> </ul> </nav> </div> <div class="col-lg-4 mb-6 mb-lg-0"> <nav> <div class="fs-6 fs-lg-4 fw-bold mb-3 ms-4">5 CAPEC mới nhất</div> <ul> <li class="menu-item p-0 m-0"> <a href="/vi/capec/capec-701.html" class="menu-link menu-title" style="display: block;"> CAPEC-701 <div><span class='text-muted fs-8'>(2023-01-24 00:00 +00:00)</span></div> </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/capec/capec-700.html" class="menu-link menu-title" style="display: block;"> CAPEC-700 <div><span class='text-muted fs-8'>(2023-01-24 00:00 +00:00)</span></div> </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/capec/capec-702.html" class="menu-link menu-title" style="display: block;"> CAPEC-702 <div><span class='text-muted fs-8'>(2023-01-24 00:00 +00:00)</span></div> </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/capec/capec-699.html" class="menu-link menu-title" style="display: block;"> CAPEC-699 <div><span class='text-muted fs-8'>(2023-01-24 00:00 +00:00)</span></div> </a> </li> <li class="menu-item p-0 m-0"> <a href="/vi/capec/capec-691.html" class="menu-link menu-title" style="display: block;"> CAPEC-691 <div><span class='text-muted fs-8'>(2022-09-29 00:00 +00:00)</span></div> </a> </li> </ul> </nav> </div> </div> </div> <div class="col-lg-4 d-none d-lg-block"> <div class="fw-light"> CAPEC, viết tắt của Liệt kê và phân loại mẫu tấn công phổ biến, là tài nguyên toàn diện, có sẵn công khai ghi lại các mẫu tấn công phổ biến được đối thủ sử dụng trong các cuộc tấn công mạng. Cơ sở kiến thức này nhằm mục đích hiểu và diễn đạt các lỗ hổng phổ biến và các phương pháp kẻ tấn công sử dụng để khai thác chúng. </div> </div> </div> </div> </div> </div> </div> </div> <div data-kt-menu-trigger="{default: 'click', lg: 'hover'}" data-kt-menu-placement="bottom-start" class="menu-item menu-lg-down-accordion me-0 me-lg-2"> <span class="menu-link py-3"> <span class="menu-title">Dịch vụ và giá cả</span> <span class="menu-arrow d-lg-none"></span> </span> <div class="menu-sub menu-sub-lg-down-accordion menu-sub-lg-dropdown px-lg-2 py-lg-4 w-lg-200px"> <nav> <ul> <li class="menu-item"> <a class="menu-link py-3" href="/vi/plan-price.html" data-bs-toggle="tooltip" data-bs-trigger="hover" data-bs-dismiss="click" data-bs-placement="right" data-bs-original-title="" data-kt-initialized="1"> <span class="menu-icon"> <i class="ki-duotone ki-rocket fs-2"> <span class="path1"></span> <span class="path2"></span> </i> </span> <span class="menu-title">Giá cả và giấy phép</span> </a> </li> <li class="menu-item"> <a class="menu-link py-3" href="/vi/sign-up.html" data-bs-toggle="tooltip" data-bs-trigger="hover" data-bs-dismiss="click" data-bs-placement="right" data-bs-original-title="" data-kt-initialized="1" target="_blank"> <span class="menu-icon"> <i class="ki-duotone ki-abstract-10 fs-2"> <span class="path1"></span> <span class="path2"></span> </i> </span> <span class="menu-title">Tạo tài khoản</span> </a> </li> </ul> </nav> </div> </div> <div data-kt-menu-trigger="{default: 'click', lg: 'hover'}" data-kt-menu-placement="bottom-start" class="menu-item menu-lg-down-accordion me-0 me-lg-2"> <span class="menu-link py-3"> <span class="menu-title">Trợ giúp và thông tin</span> <span class="menu-arrow d-lg-none"></span> </span> <div class="menu-sub menu-sub-lg-down-accordion menu-sub-lg-dropdown px-lg-2 py-lg-4 w-lg-200px"> <nav> <ul> <li class="menu-item"> <a class="menu-link py-3" href="/vi/faq.html" data-bs-toggle="tooltip" data-bs-trigger="hover" data-bs-dismiss="click" data-bs-placement="right" data-bs-original-title="" data-kt-initialized="1"> <span class="menu-icon"> <i class="ki-duotone ki-abstract-33 fs-2"> <span class="path1"></span> <span class="path2"></span> </i> </span> <span class="menu-title">FAQ và trợ giúp</span> </a> </li> <li class="menu-item"> <a class="menu-link py-3" href="/vi/blog.html" data-bs-toggle="tooltip" data-bs-trigger="hover" data-bs-dismiss="click" data-bs-placement="right" data-bs-original-title="" data-kt-initialized="1"> <span class="menu-icon"> <i class="ki-duotone ki-like-shapes fs-2"> <span class="path1"></span> <span class="path2"></span> </i> </span> <span class="menu-title">Blog và bài viết</span> </a> </li> <li class="menu-item"> <a class="menu-link py-3" href="/vi/official.html" data-bs-toggle="tooltip" data-bs-trigger="hover" data-bs-dismiss="click" data-bs-placement="right" data-bs-original-title="" data-kt-initialized="1"> <span class="menu-icon"> <i class="ki-duotone ki-simcard-2 fs-2"> <span class="path1"></span> <span class="path2"></span> </i> </span> <span class="menu-title">Đối tác cơ sở dữ liệu</span> </a> </li> <li class="menu-item"> <a class="menu-link py-3" href="/vi/contact.html" data-bs-toggle="tooltip" data-bs-trigger="hover" data-bs-dismiss="click" data-bs-placement="right" data-bs-original-title="" data-kt-initialized="1"> <span class="menu-icon"> <i class="ki-duotone ki-messages fs-2"> <span class="path1"></span> <span class="path2"></span> <span class="path3"></span> <span class="path4"></span> <span class="path5"></span> </i> </span> <span class="menu-title">Liên hệ chúng tôi</span> </a> </li> </ul> </nav> </div> </div> </div> </div> </div> <div class="topbar d-flex align-items-stretch flex-shrink-0"> <div class="d-flex align-items-stretch ms-1 ms-lg-3"> <div id="ktSearch" class="header-search d-flex align-items-stretch" data-kt-search-keypress="true" data-kt-search-min-length="3" data-kt-search-enter="enter" data-kt-search-layout="menu" data-kt-menu-trigger="auto" data-kt-menu-overflow="false" data-kt-menu-permanent="true" data-kt-menu-placement="bottom-end"> <div class="d-flex align-items-center" data-kt-search-element="toggle" id="kt_header_search_toggle"> <div class="btn btn-icon btn-active-light-primary btn-custom w-30px h-30px w-md-40px h-md-40px"> <i class="ki-duotone ki-magnifier fs-1"> <span class="path1"></span> <span class="path2"></span> </i> </div> </div> <div data-kt-search-element="content" class="menu menu-sub menu-sub-dropdown p-7 w-325px w-md-375px"> <div data-kt-search-element="wrapper"> <form data-kt-search-element="form" class="w-100 position-relative mb-3" autocomplete="off"> <i class="ki-duotone ki-magnifier fs-2 text-gray-500 position-absolute top-50 translate-middle-y ms-0"> <span class="path1"></span> <span class="path2"></span> </i> <input type="text" class="search-input form-control form-control-solid ps-10" name="search" value="" placeholder="Tìm kiếm..." data-kt-search-element="input" /> <span class="search-spinner position-absolute top-50 end-0 translate-middle-y lh-0 d-none me-1" data-kt-search-element="spinner"> <span class="spinner-border h-15px w-15px align-middle text-gray-500"></span> </span> <span class="search-reset btn btn-flush btn-active-color-primary position-absolute top-50 end-0 translate-middle-y lh-0 d-none" data-kt-search-element="clear"> <i class="ki-duotone ki-cross fs-2 fs-lg-1 me-0"> <span class="path1"></span> <span class="path2"></span> </i> </span> </form> <div data-kt-search-element="suggestions"> <span class="text-muted fw-semibold"> Tìm kiếm: ID CVE, ID CWE, ID CAPEC, nhà cung cấp hoặc từ khóa trong CVE </span> </div> <div class="separator border-gray-200 mb-6"></div> <div data-kt-search-element="results" class="d-none"> <div class="scroll-y mh-250px mh-lg-350px" data-kt-search-element="items"> </div> </div> <div data-kt-search-element="main" class="mb-5"> <div class="d-flex flex-stack fw-semibold mb-4"> <span class="text-muted fs-6 me-2">Đã tìm kiếm gần đây:</span> </div> <div class="scroll-y mh-250px mh-lg-325px" data-kt-search-element="itemsRecently"> </div> </div> <div data-kt-search-element="empty" class="text-center d-none"> <div class="pt-10 pb-10"> <i class="ki-duotone ki-search-list fs-4x opacity-50"> <span class="path1"></span> <span class="path2"></span> <span class="path3"></span> </i> </div> <div class="pb-15 fw-semibold"> <div class="text-gray-600 fs-5 mb-2">Không tìm thấy kết quả</div> <div class="text-muted fs-7">Vui lòng thử lại với truy vấn khác</div> </div> </div> </div> </div> </div> </div> <div class="d-flex align-items-center ms-1 ms-lg-3"> <a href="#" class="btn btn-icon btn-active-light-primary btn-custom w-30px h-30px w-md-40px h-md-40px" data-kt-menu-trigger="{default:'click', lg: 'hover'}" data-kt-menu-attach="parent" data-kt-menu-placement="bottom-end"> <img class="rounded-1 fs-1" src="/media/flags/vietnam.svg" style="width:1em;height:1em;" alt="" /> </a> <div class="menu menu-sub menu-sub-dropdown menu-column menu-rounded menu-title-gray-700 menu-icon-gray-500 menu-active-bg menu-state-color fw-semibold py-4 fs-base w-175px" data-kt-menu="true"> <nav> <ul> <li class="menu-item px-3 my-0"> <a href="/en/" class="menu-link d-flex px-5 "> <span class="symbol symbol-20px me-4"> <img class="rounded-1" src="/media/flags/united-states.svg" alt="" /> </span>English </a> </li> <li class="menu-item px-3 my-0"> <a href="/fr/" class="menu-link d-flex px-5 "> <span class="symbol symbol-20px me-4"> <img class="rounded-1" src="/media/flags/france.svg" alt="" /> </span>Français </a> </li> <li class="menu-item px-3 my-0"> <a href="/de/" class="menu-link d-flex px-5 "> <span class="symbol symbol-20px me-4"> <img class="rounded-1" src="/media/flags/germany.svg" alt="" /> </span>Deutsch </a> </li> <li class="menu-item px-3 my-0"> <a href="/es/" class="menu-link d-flex px-5 "> <span class="symbol symbol-20px me-4"> <img class="rounded-1" src="/media/flags/spain.svg" alt="" /> </span>Español </a> </li> <li class="menu-item px-3 my-0"> <a href="/it/" class="menu-link d-flex px-5 "> <span class="symbol symbol-20px me-4"> <img class="rounded-1" src="/media/flags/italy.svg" alt="" /> </span>Italiano </a> </li> <li class="menu-item px-3 my-0"> <a href="/pt/" class="menu-link d-flex px-5 "> <span class="symbol symbol-20px me-4"> <img class="rounded-1" src="/media/flags/brazil.svg" alt="" /> </span>Português </a> </li> <li class="menu-item px-3 my-0"> <a href="/nl/" class="menu-link d-flex px-5 "> <span class="symbol symbol-20px me-4"> <img class="rounded-1" src="/media/flags/netherlands.svg" alt="" /> </span>Nederlands </a> </li> <li class="menu-item px-3 my-0"> <a href="/pl/" class="menu-link d-flex px-5 "> <span class="symbol symbol-20px me-4"> <img class="rounded-1" src="/media/flags/poland.svg" alt="" /> </span>Polski </a> </li> <li class="menu-item px-3 my-0"> <a href="/ja/" class="menu-link d-flex px-5 "> 日本語 </a> </li> <li class="menu-item px-3 my-0"> <a href="/zh-hans/" class="menu-link d-flex px-5 "> 简体中文 </a> </li> <li class="menu-item px-3 my-0"> <a href="/zh-hant/" class="menu-link d-flex px-5 "> 繁體中文 </a> </li> <li class="menu-item px-3 my-0"> <a href="/ko/" class="menu-link d-flex px-5 "> <span class="symbol symbol-20px me-4"> <img class="rounded-1" src="/media/flags/south-korea.svg" alt="" /> </span>한국어 </a> </li> <li class="menu-item px-3 my-0"> <a href="/id/" class="menu-link d-flex px-5 "> <span class="symbol symbol-20px me-4"> <img class="rounded-1" src="/media/flags/indonesia.svg" alt="" /> </span>Bahasa Indonesia </a> </li> <li class="menu-item px-3 my-0"> <a href="/vi/" class="menu-link d-flex px-5 active"> <span class="symbol symbol-20px me-4"> <img class="rounded-1" src="/media/flags/vietnam.svg" alt="" /> </span>Tiếng Việt </a> </li> </ul> </nav> </div> </div> <div class="d-flex align-items-center ms-1 ms-lg-3"> <a href="#" class="btn btn-icon btn-active-light-primary btn-custom w-30px h-30px w-md-40px h-md-40px" data-kt-menu-trigger="{default:'click', lg: 'hover'}" data-kt-menu-attach="parent" data-kt-menu-placement="bottom-end"> <i class="ki-duotone ki-night-day theme-light-show fs-1"> <span class="path1"></span> <span class="path2"></span> <span class="path3"></span> <span class="path4"></span> <span class="path5"></span> <span class="path6"></span> <span class="path7"></span> <span class="path8"></span> <span class="path9"></span> <span class="path10"></span> </i> <i class="ki-duotone ki-moon theme-dark-show fs-1"> <span class="path1"></span> <span class="path2"></span> </i> </a> <div class="menu menu-sub menu-sub-dropdown menu-column menu-rounded menu-title-gray-700 menu-icon-gray-500 menu-active-bg menu-state-color fw-semibold py-4 fs-base w-150px" data-kt-menu="true" data-kt-element="theme-mode-menu"> <nav> <ul> <li class="menu-item px-3 my-0"> <a href="#" class="menu-link px-3 py-2" data-kt-element="mode" data-kt-value="light"> <span class="menu-icon" data-kt-element="icon"> <i class="ki-duotone ki-night-day fs-2"> <span class="path1"></span> <span class="path2"></span> <span class="path3"></span> <span class="path4"></span> <span class="path5"></span> <span class="path6"></span> <span class="path7"></span> <span class="path8"></span> <span class="path9"></span> <span class="path10"></span> </i> </span> <span class="menu-title">Sáng</span> </a> </li> <li class="menu-item px-3 my-0"> <a href="#" class="menu-link px-3 py-2" data-kt-element="mode" data-kt-value="dark"> <span class="menu-icon" data-kt-element="icon"> <i class="ki-duotone ki-moon fs-2"> <span class="path1"></span> <span class="path2"></span> </i> </span> <span class="menu-title">Tối</span> </a> </li> <li class="menu-item px-3 my-0"> <a href="#" class="menu-link px-3 py-2" data-kt-element="mode" data-kt-value="system"> <span class="menu-icon" data-kt-element="icon"> <i class="ki-duotone ki-screen fs-2"> <span class="path1"></span> <span class="path2"></span> <span class="path3"></span> <span class="path4"></span> </i> </span> <span class="menu-title">Hệ thống</span> </a> </li> </ul> </nav> </div> </div> <div class="d-flex align-items-center ms-1 ms-lg-3"> <div class="btn btn-icon btn-active-light-primary btn-custom w-30px h-30px w-md-40px h-md-40px" data-kt-menu-trigger="{default:'click', lg: 'hover'}" data-kt-menu-attach="parent" data-kt-menu-placement="bottom-end"> <i class="ki-duotone ki-user-square fs-1"> <span class="path1"></span> <span class="path2"></span> <span class="path3"></span> </i> </div> <div class="menu menu-sub menu-sub-dropdown menu-column w-250px w-lg-325px" data-kt-menu="true" data-popper-placement="bottom-end" style="z-index: 107; position: fixed; inset: 0px 0px auto auto; margin: 0px; transform: translate(-123px, 61px);"> <nav> <div class="d-flex flex-column flex-center bgi-no-repeat rounded-top px-9 py-10" style="background-image:url('/media/misc/menu-header-bg.jpg')"> <div class="text-white fw-semibold mb-3">CVE Find - Hệ thống cảnh báo</div> <span class="badge bg-primary text-inverse-primary py-2 px-3">Luôn được thông báo mọi lúc</span> </div> <ul> <li> <a href="/vi/sign-up.html" class="d-flex flex-column flex-center h-100 p-6 bg-hover-light border-end border-bottom" target="_blank"> <i class="ki-duotone ki-abstract-10 fs-3x text-primary mb-2"> <span class="path1"></span> <span class="path2"></span> </i> <span class="fs-5 fw-semibold text-gray-800 mb-0">Tạo tài khoản miễn phí</span> <span class="fs-7 text-gray-500">Mở tài khoản miễn phí</span> </a> </li> <li> <a href="/vi/sign-in.html" class="d-flex flex-column flex-center h-100 p-6 bg-hover-light border-end border-bottom" target="_blank"> <i class="ki-duotone ki-security-user fs-3x text-primary mb-2"> <span class="path1"></span> <span class="path2"></span> </i> <span class="fs-5 fw-semibold text-gray-800 mb-0">Đăng nhập vào tài khoản của bạn</span> <span class="fs-7 text-gray-500">Quản lý cảnh báo của bạn</span> </a> </li> </ul> </nav> </div> </div> </div> </div> </div> </div> <div class="toolbar py-5 pb-lg-15" id="kt_toolbar"> <div id="kt_toolbar_container" class="container-xxl d-flex flex-stack flex-wrap"> <div class="page-title d-flex flex-column me-3"> <h1 class="d-flex text-white fw-bold my-1 fs-3">CVE-2026-50190 : Chi tiết</h1> <ul class="breadcrumb breadcrumb-separatorless fw-semibold fs-7 my-1"> <li class="breadcrumb-item text-white opacity-75"> <a href="/vi/" class="text-white text-hover-primary">Trang chủ</a> </li> <li class="breadcrumb-item"> <span class="bullet bg-white opacity-75 w-5px h-2px"></span> </li> <li class="breadcrumb-item text-white opacity-75"> <a href="/vi/cve.html" class="text-white text-hover-primary">Lỗ hổng và rủi ro phổ biến (CVE)</a> </li> <li class="breadcrumb-item"> <span class="bullet bg-white opacity-75 w-5px h-2px"></span> </li> <li class="breadcrumb-item text-white opacity-75"> CVE-2026-50190 : Chi tiết </li> </ul> </div> </div> </div>  <div id="kt_content_container" class="d-flex flex-column-fluid align-items-start container-xxl"> <div class="content flex-row-fluid" id="kt_content"> <div class="d-flex flex-column flex-lg-row"> <div class="w-100 flex-lg-row-auto w-lg-300px mb-7 me-7 me-lg-10"> <div class="card card-flush py-4"> <div class="card-header"> <div class="card-title"> <h2>CVE-2026-50190</h2> </div> </div> <div class="card-body pt-0"> <div class="d-flex flex-column gap-10"> <div class="row"> <div class="fv-row col-12 col-sm-6 col-lg-12 infoDetail"> <label class="form-label">Đã xuất bản</label> <div class="fw-bold fs-3">2026-08-20<br><span class='fs-7'> 19h16</span><span class='fs-9'> +00:00</span></div> </div> </div> </div> </div> </div> <div class="ea-slot my-7 d-none d-lg-block" data-ea-anchor="desktop" data-ea-pub="cvefindcom" data-ea-type="image" data-ea-format="horizontal" data-ea-kw="security|cybersecurity|vulnerability|cve"></div> <div class="card card-flush py-4"> <div class="card-body pt-0"> <div class="d-flex flex-column gap-10"> <div class="row"> <div class="fv-row col-12 col-sm-6 col-lg-12 infoDetail"> <label class="form-label">Danh mục</label> <div class="fw-bold fs-3"> <span class="badge badge-light badge-lg">Cross-site Scripting</span> </div> </div> <div class="fv-row col-12 col-sm-6 col-lg-12 infoDetail"> <label class="form-label">OWASP</label> <div class="fw-bold fs-3"> <span class="badge badge-light badge-lg">A03-Injection</span> </div> </div> <div class="fv-row col-12 col-sm-6 col-lg-12 infoDetail"> <label class="form-label">Đã sửa đổi</label> <div class="fw-bold fs-3">2026-10-26<br><span class='fs-7'> 10h10</span><span class='fs-9'> +00:00</span></div> </div> <div class="fv-row col-12 col-sm-6 col-lg-12 infoDetail"> <label class="form-label">Liên kết chính thức</label> <div class="fw-bold fs-3"><a href='https://www.cve.org/CVERecord?id=CVE-2026-50190' target='_blank'>CVE.org <i class="ki-duotone ki-exit-right-corner" style="font-size: 10px;vertical-align:8px"><span class="path1"></span><span class="path2"></span></i></a></div> <div class="fw-bold fs-3"><a href='https://nvd.nist.gov/vuln/detail/CVE-2026-50190' target='_blank'>NVD <i class="ki-duotone ki-exit-right-corner" style="font-size: 10px;vertical-align:8px"><span class="path1"></span><span class="path2"></span></i></a></div> </div> </div> </div> </div> </div> <div class="mt-4"> <div class="card card-body d-flex align-items-center justify-content-between flex-wrap p-4" style="background-color: #071437;"> <div class="me-2"> <div class="fw-bold text-gray-800 mb-0 tw-h3" style="color: #ffffff !important;">Thông báo cho một CVE</div> <div class="text-muted fw-semibold fs-6" style="color: #d3d3d3 !important;">Luôn được thông báo về mọi thay đổi đối với một CVE cụ thể.</div> </div> <a href="#" class="btn btn-primary fw-semibold p-2 mt-4" name="linkModalManageAlert" data-twmodal="kt_modal_alert_cveSpecAlert"> Quản lý thông báo </a> </div> <div class="modal fade" id="kt_modal_alert_cveSpecAlert" tabindex="-1" aria-hidden="true" data-twtype="cveSpecAlert" data-twidonly="CVE-2026-50190" style="text-align: left;"> <div class="modal-dialog modal-dialog-centered" style="max-width:1200px!important" temp="mw-1000px"> <div class="modal-content rounded"> <div class="modal-header pb-0 border-0 justify-content-end"> <div class="btn btn-sm btn-icon btn-active-color-primary" data-bs-dismiss="modal"> <i class="ki-duotone ki-cross fs-1"> <span class="path1"></span> <span class="path2"></span> </i> </div> </div> <div class="modal-body scroll-y px-10 px-lg-15 pt-0 pb-15"> <div class="row"> <div class="col-lg-3 card"> <div class="mt-4 mb-8"> <div class="text-center"> <div class="mb-3 tw-h2">Cảnh báo tùy chỉnh</div> </div> <div class=""> <div class="alert alert-dismissible bg-light-primary d-flex flex-column flex-sm-row w-100 p-5 mb-10"> <i class="ki-duotone ki-search-list fs-2hx text-primary me-4 mb-5 mb-sm-0"><span class="path1"></span><span class="path2"></span><span class="path3"></span></i>  <div class="d-flex flex-column pe-0 pe-sm-10"> <div class="fw-semibold tw-h4">Kích hoạt cảnh báo cá nhân hóa của bạn!</div> <span>Để kích hoạt cảnh báo, bạn chỉ cần đăng nhập vào <strong>tài khoản miễn phí</strong> của mình. Nếu bạn chưa đăng nhập, hãy chọn một trong các tùy chọn bên dưới.</span> </div> </div> <div class="text-center"> <a href="/vi/sign-in.html" class="btn btn-primary fw-semibold p-2 mt-4">Đăng nhập vào tài khoản của bạn</a> <a href="/vi/sign-up.html" class="btn btn-primary fw-semibold p-2 mt-4">Tạo tài khoản miễn phí</a> </div> </div> </div> </div> <div class="col-lg-9 ps-8"> <form class="form" > <div class="mb-8 text-center"> <div class="tw-h3" class="mb-3 tw-h2">Thông báo cho một CVE</div> <div class="text-muted fw-semibold fs-5">Luôn được thông báo về mọi thay đổi đối với một CVE cụ thể.</div> <div class="text-muted fs-7">Tiêu chí áp dụng khi gửi cảnh báo: so sánh với cảnh báo cuối cùng đã gửi và sự khác biệt trong CISA, EPSS, CVSS, CWE, Giải pháp, CPE.</div> </div> <div class="tw-h3">Thông số</div> <div class="d-flex flex-column fv-row mb-4"> <label class="d-flex align-items-center fs-6 fw-semibold mb-2"> <span class=""></span> Bạn có thể chỉ định tiêu đề sẽ được hiển thị trong các cảnh báo được gửi đi. <span class="ms-1" data-bs-toggle="tooltip" title="Tiêu đề cảnh báo"> <i class="ki-duotone ki-information-5 text-gray-500 fs-6"> <span class="path1"></span> <span class="path2"></span> <span class="path3"></span> </i> </span> </label> <input type="text" class="form-control form-control-solid" placeholder="" name="globalTitle" /> </div> <div class="d-flex flex-column fv-row mb-4"> <label class="d-flex align-items-center fs-6 fw-semibold mb-2 required"> <span class=""></span> Chỉ định ID CVE ở đây, ví dụ CVE-2025-1234 </label> <input type="text" class="form-control form-control-solid" placeholder="CVE-2026-1234" name="paramId" data-twdefault="CVE-2026-50190" /> </div> <div class="separator my-5"></div> <div class="tw-h3">Lên lịch</div> <div name="twCronRoot" data-twdefault="month"> <label class="required fs-6 fw-semibold mb-4 d-block">Tần suất?</label> <div class="row g-5 mb-4"> <div class="col-12 col-md-6 col-xl-3"> <div class="btn btn-outline btn-outline-dashed btn-active-light-primary d-flex flex-column text-start p-5 h-100 opacity-75" data-twfreqcard="hour" data-twlocked="1"> <div class="d-flex justify-content-between w-100 mb-2"> <i class="ki-duotone ki-timer fs-2x text-primary"><span class="path1"></span><span class="path2"></span><span class="path3"></span></i> <span class="badge badge-warning"> <i class="ki-duotone ki-lock-2 fs-8 me-1"><span class="path1"></span><span class="path2"></span><span class="path3"></span><span class="path4"></span><span class="path5"></span></i>yêu cầu gói cao hơn </span> </div> <span class="fw-bold fs-6 text-gray-900">Mỗi giờ</span> <span class="text-muted fs-7">Phản ứng ngay lập tức với các xuất bản</span> </div> </div> <div class="col-12 col-md-6 col-xl-3"> <div class="btn btn-outline btn-outline-dashed btn-active-light-primary d-flex flex-column text-start p-5 h-100 opacity-75" data-twfreqcard="day" data-twlocked="1"> <div class="d-flex justify-content-between w-100 mb-2"> <i class="ki-duotone ki-sun fs-2x text-primary"><span class="path1"></span><span class="path2"></span><span class="path3"></span><span class="path4"></span><span class="path5"></span><span class="path6"></span><span class="path7"></span><span class="path8"></span><span class="path9"></span></i> <span class="badge badge-warning"> <i class="ki-duotone ki-lock-2 fs-8 me-1"><span class="path1"></span><span class="path2"></span><span class="path3"></span><span class="path4"></span><span class="path5"></span></i>yêu cầu gói cao hơn </span> </div> <span class="fw-bold fs-6 text-gray-900">Mỗi ngày</span> <span class="text-muted fs-7">Một email vào các ngày đã chọn</span> </div> </div> <div class="col-12 col-md-6 col-xl-3"> <div class="btn btn-outline btn-outline-dashed btn-active-light-primary d-flex flex-column text-start p-5 h-100 opacity-75" data-twfreqcard="week" data-twlocked="1"> <div class="d-flex justify-content-between w-100 mb-2"> <i class="ki-duotone ki-calendar fs-2x text-primary"><span class="path1"></span><span class="path2"></span></i> <span class="badge badge-warning"> <i class="ki-duotone ki-lock-2 fs-8 me-1"><span class="path1"></span><span class="path2"></span><span class="path3"></span><span class="path4"></span><span class="path5"></span></i>yêu cầu gói cao hơn </span> </div> <span class="fw-bold fs-6 text-gray-900">Mỗi tuần</span> <span class="text-muted fs-7">Tóm tắt vào ngày đã chọn</span> </div> </div> <div class="col-12 col-md-6 col-xl-3"> <div class="btn btn-outline btn-outline-dashed btn-active-light-primary d-flex flex-column text-start p-5 h-100 active" data-twfreqcard="month"> <div class="d-flex justify-content-between w-100 mb-2"> <i class="ki-duotone ki-calendar fs-2x text-primary"><span class="path1"></span><span class="path2"></span></i> </div> <span class="fw-bold fs-6 text-gray-900">Mỗi tháng</span> <span class="text-muted fs-7">Tóm tắt hàng tháng</span> </div> </div> </div> <div class="card bg-light mb-4"> <div class="card-body py-6"> <div class="row g-6 d-none" data-twpanel="hour"> <div class="col-12 fv-row"> <label class="required fs-6 fw-semibold mb-2">Giờ</label> <div class="w-300px"> <select twrole="hourMode" data-twnotchg="true" class="form-select form-select-solid" data-control="select2" data-hide-search="true"> <option value="every" selected>Mỗi giờ</option> <option disabled value="every15">Mỗi 15 phút (yêu cầu gói cao hơn)</option> <option disabled value="every30">Mỗi 30 phút (yêu cầu gói cao hơn)</option> </select> </div> </div> <div class="col-12 fv-row" data-twcol="hourMinute"> <label class="required fs-6 fw-semibold mb-2">Phút</label> <div class="w-150px"> <select twrole="hourMinute" data-twnotchg="true" class="form-select form-select-solid" data-control="select2" data-hide-search="true"> <option value="0" selected>00</option><option value="5">05</option><option value="10">10</option><option value="15">15</option><option value="20">20</option><option value="25">25</option><option value="30">30</option><option value="35">35</option><option value="40">40</option><option value="45">45</option><option value="50">50</option><option value="55">55</option> </select> </div> </div> </div> <div class="row g-6 d-none" data-twpanel="day"> <div class="col-12 fv-row"> <label class="required fs-6 fw-semibold mb-2">Các ngày áp dụng</label> <div class="d-flex flex-wrap gap-5 pt-1"> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="dayWeekday" data-twnotchg="true" value="1" checked/> <span class="form-check-label text-gray-800">Thứ Hai</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="dayWeekday" data-twnotchg="true" value="2" checked/> <span class="form-check-label text-gray-800">Thứ Ba</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="dayWeekday" data-twnotchg="true" value="3" checked/> <span class="form-check-label text-gray-800">Thứ Tư</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="dayWeekday" data-twnotchg="true" value="4" checked/> <span class="form-check-label text-gray-800">Thứ Năm</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="dayWeekday" data-twnotchg="true" value="5" checked/> <span class="form-check-label text-gray-800">Thứ Sáu</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="dayWeekday" data-twnotchg="true" value="6" checked/> <span class="form-check-label text-gray-800">Thứ Bảy</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="dayWeekday" data-twnotchg="true" value="7" checked/> <span class="form-check-label text-gray-800">Chủ Nhật</span> </label> </div> </div> <div class="col-12 fv-row"> <label class="required fs-6 fw-semibold mb-2">Thời gian thực thi (UTC)</label> <input type="time" twrole="dayTime" data-twnotchg="true" class="form-control form-control-solid w-150px" value="06:00" step="300"/> </div> </div> <div class="row g-6 d-none" data-twpanel="week"> <div class="col-12 fv-row"> <label class="required fs-6 fw-semibold mb-2">Các ngày áp dụng</label> <div class="w-250px"> <select twrole="weekWeekday" data-twnotchg="true" class="form-select form-select-solid" data-control="select2" data-hide-search="true"> <option value="1" selected>Thứ Hai</option> <option value="2">Thứ Ba</option> <option value="3">Thứ Tư</option> <option value="4">Thứ Năm</option> <option value="5">Thứ Sáu</option> <option value="6">Thứ Bảy</option> <option value="7">Chủ Nhật</option> </select> </div> </div> <div class="col-12 fv-row"> <label class="required fs-6 fw-semibold mb-2">Thời gian thực thi (UTC)</label> <input type="time" twrole="weekTime" data-twnotchg="true" class="form-control form-control-solid w-150px" value="06:00" step="300"/> </div> </div> <div class="row g-6 " data-twpanel="month"> <div class="col-12 fv-row"> <label class="required fs-6 fw-semibold mb-2">Tháng</label> <div class="d-flex flex-wrap gap-6 pt-1"> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="radio" twrole="monthMode" data-twnotchg="true" value="every" checked/> <span class="form-check-label text-gray-800">Mỗi tháng</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="radio" twrole="monthMode" data-twnotchg="true" value="select"/> <span class="form-check-label text-gray-800">Các tháng đã chọn</span> </label> </div> <div class="d-flex flex-wrap gap-5 mt-4 d-none" data-twcol="monthChks"> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="monthChk" data-twnotchg="true" value="1"/> <span class="form-check-label text-gray-800">Tháng 1</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="monthChk" data-twnotchg="true" value="2"/> <span class="form-check-label text-gray-800">Tháng 2</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="monthChk" data-twnotchg="true" value="3"/> <span class="form-check-label text-gray-800">Tháng 3</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="monthChk" data-twnotchg="true" value="4"/> <span class="form-check-label text-gray-800">Tháng 4</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="monthChk" data-twnotchg="true" value="5"/> <span class="form-check-label text-gray-800">Tháng 5</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="monthChk" data-twnotchg="true" value="6"/> <span class="form-check-label text-gray-800">Tháng 6</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="monthChk" data-twnotchg="true" value="7"/> <span class="form-check-label text-gray-800">Tháng 7</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="monthChk" data-twnotchg="true" value="8"/> <span class="form-check-label text-gray-800">Tháng 8</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="monthChk" data-twnotchg="true" value="9"/> <span class="form-check-label text-gray-800">Tháng 9</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="monthChk" data-twnotchg="true" value="10"/> <span class="form-check-label text-gray-800">Tháng 10</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="monthChk" data-twnotchg="true" value="11"/> <span class="form-check-label text-gray-800">Tháng 11</span> </label> <label class="form-check form-check-custom form-check-solid"> <input class="form-check-input" type="checkbox" twrole="monthChk" data-twnotchg="true" value="12"/> <span class="form-check-label text-gray-800">Tháng 12</span> </label> </div> </div> <div class="col-12 fv-row"> <label class="required fs-6 fw-semibold mb-2">Ngày</label> <div class="w-150px"> <select twrole="monthDay" data-twnotchg="true" class="form-select form-select-solid" data-control="select2" data-hide-search="true"> <option value="1" selected>1</option> <option value="2">2</option> <option value="3">3</option> <option value="4">4</option> <option value="5">5</option> <option value="6">6</option> <option value="7">7</option> <option value="8">8</option> <option value="9">9</option> <option value="10">10</option> <option value="11">11</option> <option value="12">12</option> <option value="13">13</option> <option value="14">14</option> <option value="15">15</option> <option value="16">16</option> <option value="17">17</option> <option value="18">18</option> <option value="19">19</option> <option value="20">20</option> <option value="21">21</option> <option value="22">22</option> <option value="23">23</option> <option value="24">24</option> <option value="25">25</option> <option value="26">26</option> <option value="27">27</option> <option value="28">28</option> </select> </div> </div> <div class="col-12 fv-row"> <label class="required fs-6 fw-semibold mb-2">Thời gian thực thi (UTC)</label> <input type="time" twrole="monthTime" data-twnotchg="true" class="form-control form-control-solid w-150px" value="06:00" step="300"/> </div> </div> </div> </div> <div class="card bg-light-primary border-0 mb-4"> <div class="card-body py-5 d-flex align-items-center"> <i class="ki-duotone ki-notification-on fs-2hx text-primary me-5"><span class="path1"></span><span class="path2"></span><span class="path3"></span><span class="path4"></span><span class="path5"></span></i> <div class="fs-6 fw-semibold text-gray-900" name="twCronPhrase"></div> </div> </div> <div class="d-none" name="cronCalc"></div> <div class="text-muted fs-8 mb-4"><span class="text-danger">*</span> Các trường bắt buộc</div> <div class="d-none"> <select name="cronMonth[]" multiple="multiple" twcron="true"> <option value="every">every</option> <option value="1">1</option><option value="2">2</option><option value="3">3</option><option value="4">4</option><option value="5">5</option><option value="6">6</option><option value="7">7</option><option value="8">8</option><option value="9">9</option><option value="10">10</option><option value="11">11</option><option value="12">12</option> </select> <select name="cronDay[]" multiple="multiple" twcron="true"> <option value="every">every</option> <option value="lastday">lastday</option> <option value="1">1</option><option value="2">2</option><option value="3">3</option><option value="4">4</option><option value="5">5</option><option value="6">6</option><option value="7">7</option><option value="8">8</option><option value="9">9</option><option value="10">10</option><option value="11">11</option><option value="12">12</option><option value="13">13</option><option value="14">14</option><option value="15">15</option><option value="16">16</option><option value="17">17</option><option value="18">18</option><option value="19">19</option><option value="20">20</option><option value="21">21</option><option value="22">22</option><option value="23">23</option><option value="24">24</option><option value="25">25</option><option value="26">26</option><option value="27">27</option><option value="28">28</option><option value="29">29</option><option value="30">30</option><option value="31">31</option> </select> <select name="cronWeekday[]" multiple="multiple" twcron="true"> <option value="every">every</option> <option value="1">1</option><option value="2">2</option><option value="3">3</option><option value="4">4</option><option value="5">5</option><option value="6">6</option><option value="7">7</option> </select> <select name="cronHour[]" multiple="multiple" twcron="true"> <option value="every">every</option> <option value="every4">every4</option> <option value="every12">every12</option> <option value="0">0</option><option value="1">1</option><option value="2">2</option><option value="3">3</option><option value="4">4</option><option value="5">5</option><option value="6">6</option><option value="7">7</option><option value="8">8</option><option value="9">9</option><option value="10">10</option><option value="11">11</option><option value="12">12</option><option value="13">13</option><option value="14">14</option><option value="15">15</option><option value="16">16</option><option value="17">17</option><option value="18">18</option><option value="19">19</option><option value="20">20</option><option value="21">21</option><option value="22">22</option><option value="23">23</option> </select> <select name="cronMinute[]" twcron="true"> <option value="every15">every15</option> <option value="every30">every30</option> <option value="0">0</option><option value="5">5</option><option value="10">10</option><option value="15">15</option><option value="20">20</option><option value="25">25</option><option value="30">30</option><option value="35">35</option><option value="40">40</option><option value="45">45</option><option value="50">50</option><option value="55">55</option> </select> </div> </div> <script> if (!window.twCronUi) { window.twCronUi = true; document.addEventListener("DOMContentLoaded", function () { (function ($) { var TR = {"phraseHour":"Mỗi giờ vào phút %s","phraseDayAll":"Mỗi ngày lúc %s","phraseDays":"Vào %s lúc %s","phraseWeek":"Mỗi %s lúc %s","phraseMonthAll":"Vào ngày %s của mỗi tháng lúc %s","phraseMonths":"Vào ngày %s của %s lúc %s","every15":"Mỗi 15 phút","every30":"Mỗi 30 phút","weekdays":{"1":"Thứ Hai","2":"Thứ Ba","3":"Thứ Tư","4":"Thứ Năm","5":"Thứ Sáu","6":"Thứ Bảy","7":"Chủ Nhật"},"months":{"1":"Tháng 1","2":"Tháng 2","3":"Tháng 3","4":"Tháng 4","5":"Tháng 5","6":"Tháng 6","7":"Tháng 7","8":"Tháng 8","9":"Tháng 9","10":"Tháng 10","11":"Tháng 11","12":"Tháng 12"},"needUpgradeDesc":"Tần suất gửi này không có sẵn với gói hiện tại của bạn. Nâng cấp lên gói cao hơn để mở khóa.","btSeePlans":"Xem các gói","btClose":"Đóng","urlPlans":"\/vi\/plan-price.html"}; function fmt(tpl, args) { var i = 0; return String(tpl).replace(/%s/g, function () { return args[i++]; }); } function role($r, n) { return $r.find("[twrole='" + n + "']"); } function vals($r, name) { var v = $r.find("select[name='" + name + "']").val(); if (v == null || v === "") return []; return Array.isArray(v) ? v : [v]; } function sameVals(a, b) { return a.slice().sort().join(",") === b.slice().sort().join(","); } function isSpec(v) { return v !== "every" && v !== ""; } function isNum(v) { return v != null && /^[0-9]+$/.test(v); } var writing = false; // Écrit la configuration de l'interface dans les selects cron* soumis. // silent : ne déclenche pas "change" (pas de recalcul AJAX). function setHidden($r, name, values, silent) { if (sameVals(vals($r, name), values)) return; var $s = $r.find("select[name='" + name + "']"); $s.find("option").prop("selected", false); values.forEach(function (v) { $s.find("option[value='" + v + "']").prop("selected", true); }); if (!silent) $s.trigger("change"); } function currentCard($r) { var $a = $r.find("[data-twfreqcard].active"); return $a.length ? $a.attr("data-twfreqcard") : $r.attr("data-twdefault"); } function writeCron($r, silent) { writing = true; var card = currentCard($r); if (card === "hour") { var mode = role($r, "hourMode").val() || "every"; setHidden($r, "cronMonth[]", ["every"], silent); setHidden($r, "cronDay[]", ["every"], silent); setHidden($r, "cronWeekday[]", ["every"], silent); if (mode === "every15" || mode === "every30") { setHidden($r, "cronHour[]", ["every"], silent); setHidden($r, "cronMinute[]", [mode], silent); } else { setHidden($r, "cronHour[]", [mode], silent); setHidden($r, "cronMinute[]", [role($r, "hourMinute").val() || "0"], silent); } } else if (card === "day") { var days = role($r, "dayWeekday").filter(":checked").map(function () { return this.value; }).get(); if (days.length === 0 || days.length === 7) days = ["every"]; var td = timeParts($r, "dayTime"); setHidden($r, "cronMonth[]", ["every"], silent); setHidden($r, "cronDay[]", ["every"], silent); setHidden($r, "cronWeekday[]", days, silent); setHidden($r, "cronHour[]", [td.h], silent); setHidden($r, "cronMinute[]", [td.m], silent); } else if (card === "week") { var tw = timeParts($r, "weekTime"); setHidden($r, "cronMonth[]", ["every"], silent); setHidden($r, "cronDay[]", ["every"], silent); setHidden($r, "cronWeekday[]", [role($r, "weekWeekday").val() || "1"], silent); setHidden($r, "cronHour[]", [tw.h], silent); setHidden($r, "cronMinute[]", [tw.m], silent); } else { var months = ["every"]; if (monthMode($r) === "select") { var sel = role($r, "monthChk").filter(":checked").map(function () { return this.value; }).get(); if (sel.length) months = sel; } var tm = timeParts($r, "monthTime"); setHidden($r, "cronMonth[]", months, silent); setHidden($r, "cronDay[]", [role($r, "monthDay").val() || "1"], silent); setHidden($r, "cronWeekday[]", ["every"], silent); setHidden($r, "cronHour[]", [tm.h], silent); setHidden($r, "cronMinute[]", [tm.m], silent); } writing = false; updatePhrase($r); } function selectCard($r, f) { $r.find("[data-twfreqcard]").removeClass("active"); $r.find("[data-twfreqcard='" + f + "']").addClass("active"); $r.find("[data-twpanel]").each(function () { $(this).toggleClass("d-none", $(this).attr("data-twpanel") !== f); }); toggleHourMinute($r); toggleMonthChks($r); } function toggleHourMinute($r) { var m = role($r, "hourMode").val(); $r.find("[data-twcol='hourMinute']").toggleClass("d-none", m === "every15" || m === "every30"); } function monthMode($r) { return role($r, "monthMode").filter(":checked").val() || "every"; } function setMonthMode($r, v) { role($r, "monthMode").each(function () { this.checked = (this.value === v); }); } function toggleMonthChks($r) { $r.find("[data-twcol='monthChks']").toggleClass("d-none", monthMode($r) !== "select"); } function setSel($r, n, v) { role($r, n).val(v).trigger("change.select2"); } // Champ unique "Heure d'exécution" (input time) <-> cronHour[]/cronMinute[] function timeParts($r, n) { var p = (role($r, n).val() || "06:00").split(":"); var h = parseInt(p[0], 10); if (isNaN(h) || h < 0 || h > 23) h = 6; var m = parseInt(p[1], 10); if (isNaN(m) || m < 0) m = 0; m = Math.round(m / 5) * 5; if (m >= 60) m = 55; return { h: String(h), m: String(m) }; } function setTime($r, n, h, m) { role($r, n).val(("0" + h).slice(-2) + ":" + ("0" + m).slice(-2)); } // Phrase de résumé affichée dans le bandeau function updatePhrase($r) { var card = currentCard($r); var txt = ""; if (card === "hour") { var hm = role($r, "hourMode").val() || "every"; if (hm === "every15") txt = TR.every15; else if (hm === "every30") txt = TR.every30; else txt = fmt(TR.phraseHour, [String(parseInt(role($r, "hourMinute").val() || "0", 10))]); } else if (card === "day") { var t = role($r, "dayTime").val() || "06:00"; var names = role($r, "dayWeekday").filter(":checked").map(function () { return TR.weekdays[this.value]; }).get(); if (!names.length || names.length === 7) txt = fmt(TR.phraseDayAll, [t]); else txt = fmt(TR.phraseDays, [names.join(", "), t]); } else if (card === "week") { txt = fmt(TR.phraseWeek, [TR.weekdays[role($r, "weekWeekday").val() || "1"], role($r, "weekTime").val() || "06:00"]); } else { var d = role($r, "monthDay").val() || "1"; var t2 = role($r, "monthTime").val() || "06:00"; if (monthMode($r) === "select") { var ms = role($r, "monthChk").filter(":checked").map(function () { return TR.months[this.value]; }).get(); if (ms.length) txt = fmt(TR.phraseMonths, [d, ms.join(", "), t2]); } if (!txt) txt = fmt(TR.phraseMonthAll, [d, t2]); } $r.find("[name='twCronPhrase']").text(txt); } function resetDefaults($r) { selectCard($r, $r.attr("data-twdefault")); setSel($r, "hourMode", "every"); setSel($r, "hourMinute", "0"); role($r, "dayWeekday").prop("checked", true); setTime($r, "dayTime", 6, 0); setSel($r, "weekWeekday", "1"); setTime($r, "weekTime", 6, 0); setMonthMode($r, "every"); role($r, "monthChk").prop("checked", false); setSel($r, "monthDay", "1"); setTime($r, "monthTime", 6, 0); toggleHourMinute($r); toggleMonthChks($r); updatePhrase($r); } // Reflète les selects cron* dans l'interface (initForm / chargement d'une alerte). // Ne réécrit pas les selects : une alerte existante sauvegardée sans // modification repart avec ses valeurs d'origine. function syncFromCron($r) { var month = vals($r, "cronMonth[]"), day = vals($r, "cronDay[]"), wd = vals($r, "cronWeekday[]"), hour = vals($r, "cronHour[]"), min = vals($r, "cronMinute[]"); if (!month.length && !day.length && !wd.length && !hour.length && !min.length) { resetDefaults($r); return; } var card; if (hour.indexOf("every") !== -1 || hour.indexOf("every4") !== -1 || hour.indexOf("every12") !== -1) card = "hour"; else if (month.filter(isSpec).length || day.filter(isSpec).length) card = "month"; else if (wd.filter(isSpec).length === 1) card = "week"; else card = "day"; selectCard($r, card); if (card === "hour") { if (min[0] === "every15" || min[0] === "every30") setSel($r, "hourMode", min[0]); else { // every4/every12 (anciennes alertes) sont mappés sur "chaque heure" setSel($r, "hourMode", "every"); if (isNum(min[0])) setSel($r, "hourMinute", min[0]); } } else if (card === "day") { var set = wd.filter(isSpec); if (!set.length) set = ["1", "2", "3", "4", "5", "6", "7"]; role($r, "dayWeekday").each(function () { this.checked = set.indexOf(this.value) !== -1; }); setTime($r, "dayTime", isNum(hour[0]) ? hour[0] : 6, isNum(min[0]) ? min[0] : 0); } else if (card === "week") { setSel($r, "weekWeekday", wd.filter(isSpec)[0] || "1"); setTime($r, "weekTime", isNum(hour[0]) ? hour[0] : 6, isNum(min[0]) ? min[0] : 0); } else { var months = month.filter(isSpec); setMonthMode($r, months.length ? "select" : "every"); role($r, "monthChk").each(function () { this.checked = months.indexOf(this.value) !== -1; }); // jour limité à 1-28 : les anciennes valeurs 29-31 / lastday s'affichent 28 var d0 = day.filter(isSpec)[0]; if (d0) setSel($r, "monthDay", (isNum(d0) && parseInt(d0, 10) <= 28) ? d0 : "28"); setTime($r, "monthTime", isNum(hour[0]) ? hour[0] : 6, isNum(min[0]) ? min[0] : 0); } toggleHourMinute($r); toggleMonthChks($r); updatePhrase($r); } // Interactions utilisateur $(document).on("click", "[name='twCronRoot'] [data-twfreqcard]", function () { var $card = $(this); if ($card.attr("data-twlocked")) { Swal.fire({ text: TR.needUpgradeDesc, icon: "info", buttonsStyling: false, showCancelButton: true, confirmButtonText: TR.btSeePlans, cancelButtonText: TR.btClose, customClass: { confirmButton: "btn btn-primary", cancelButton: "btn btn-light" } }).then(function (res) { if (res.isConfirmed) window.location.href = TR.urlPlans; }); return; } var $r = $card.closest("[name='twCronRoot']"); selectCard($r, $card.attr("data-twfreqcard")); writeCron($r, false); }); $(document).on("change", "[name='twCronRoot'] [twrole]", function () { var $r = $(this).closest("[name='twCronRoot']"); if ($(this).attr("twrole") === "monthMode" && this.checked) role($r, "monthMode").not(this).prop("checked", false); toggleHourMinute($r); toggleMonthChks($r); writeCron($r, false); }); // Synchro depuis les champs réels (initForm vide tout, setSelect charge une alerte) $(document).on("change", "[name='twCronRoot'] select[twcron='true']", function () { if (writing) return; var r = $(this).closest("[name='twCronRoot']")[0]; clearTimeout(r.twCronSync); r.twCronSync = setTimeout(function () { syncFromCron($(r)); }, 0); }); // Garantie avant sauvegarde : si l'utilisateur n'a touché à rien, // les champs cron* reçoivent la configuration affichée par défaut. document.addEventListener("click", function (ev) { if (!ev.target.closest) return; var bt = ev.target.closest("button[name='btModalManageAlertSubmitUser'],button[name='btModalManageAlertSubmitAcc'],button[name='btModalManageAlertSubmitUpd']"); if (!bt) return; var modal = bt.closest(".modal"); var form = modal ? modal.querySelector("form") : bt.closest("form"); if (!form) return; $(form).find("[name='twCronRoot']").each(function () { var $r = $(this); var empty = !vals($r, "cronMonth[]").length && !vals($r, "cronDay[]").length && !vals($r, "cronWeekday[]").length && !vals($r, "cronHour[]").length && !vals($r, "cronMinute[]").length; if (empty) writeCron($r, true); }); }, true); // État initial de chaque instance $("[name='twCronRoot']").each(function () { resetDefaults($(this)); }); })(jQuery); }); } </script> <div class="separator my-5"></div> <span name="globalDivDate"> <div class="row g-9 mb-4" > <div class="col-md-4 fv-row"> <label class="fs-6 fw-semibold mb-2">Ngày tạo</label> <div name="globalDateCreation">-</div> </div> <div class="col-md-4 fv-row"> <label class="fs-6 fw-semibold mb-2">Lần thực thi cuối</label> <div name="globalLastExecution">-</div> </div> <div class="col-md-4 fv-row"> <label class="fs-6 fw-semibold mb-2">Lần thực thi tiếp theo</label> <div name="globalNextExecution">-</div> </div> </div> <div class="separator my-5"></div> </span> </form> </div> </div> </div> </div> </div> </div> </div> </div> <div class="d-flex flex-column flex-lg-row-fluid gap-7 gap-lg-10"> <div class="card card-flush py-4"> <div class="card-header"> <div class="card-title"> <h2>Mô tả CVE</h2> </div> </div> <div class="card-body pt-0"> Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in `application/front/controller/visitor/BookmarkListController.php`. The `permalink` handler concatenates the raw `$bookmark->getTitle()` into the `pagetitle` template variable and the RainTPL template emits it into the document `<title>` element without HTML escaping. A bookmark title containing `` closes the document title early and the injected script executes in the Shaarli origin for any visitor of `/shaare/{hash}`. Shaarli's metadata fetcher copies a remote page's `` text verbatim into the local bookmark title, so an attacker who hosts an attacker-controlled URL and convinces an administrator to bookmark it plants the payload with no further interaction — and the resulting permalink fires for every visitor including the administrator on first save, providing a one-shot administrator account takeover. Version 0.16.3 fixes the issue. </div> </div> <div class="card card-flush py-4"> <div class="card-header"> <div class="card-title"> <h2>Thông tin CVE</h2> </div> </div> <div class="card-body pt-0"> <h2 class="tw-h3">Điểm yếu liên quan</h2> <div class="table-responsive"> <table class="table table-striped gy-7 gs-7"> <thead> <tr class="fw-semibold fs-6 text-gray-800 border-bottom border-gray-200"> <th><nobr>CWE-ID</nobr></th> <th>Tên điểm yếu</th> <th>Nguồn</th> </tr> </thead> <tbody> <tr> <td><nobr><a href="/vi/cwe/cwe-79.html">CWE-79</a></nobr></td> <td><b>Improper Neutralization of Input During Web Page Generation</b><br>The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.</td> <td></td> </tr> </tbody> </table> </div> <div class="separator my-10"></div> <h2 class='tw-h3'>Tài liệu tham khảo</h2><div style='margin-bottom: 10px;'><a href='https://github.com/shaarli/Shaarli/security/advisories/GHSA-xm98-h5jj-64xv' target='_blank'>https://github.com/shaarli/Shaarli/security/advisories/GHSA-xm98-h5jj-64xv <i class="ki-duotone ki-exit-right-corner" style="font-size: 10px;vertical-align:8px"><span class="path1"></span><span class="path2"></span></i></a><br></div><div style='margin-bottom: 10px;'><a href='https://github.com/shaarli/Shaarli/security/advisories/GHSA-xm98-h5jj-64xv' target='_blank'>https://github.com/shaarli/Shaarli/security/advisories/GHSA-xm98-h5jj-64xv <i class="ki-duotone ki-exit-right-corner" style="font-size: 10px;vertical-align:8px"><span class="path1"></span><span class="path2"></span></i></a><br></div><div class="separator my-10"></div> </div> </div> </div> </div> </div> </div>   <div class="footer py-4 d-flex flex-lg-column" id="kt_footer"> <div class="container-xxl d-flex flex-column flex-md-row align-items-center justify-content-between"> <div class="text-gray-900 order-2 order-md-1"> <span class="text-muted fw-semibold me-1">2026©</span> <a href="https://www.tesweb.com" target="_blank" class="text-gray-800 text-hover-primary">tesweb SA</a>, <a href="https://www.bexxo.ch" target="_blank" class="text-gray-800 text-hover-primary">bexxo Cyber Security</a> </div> <ul class="menu menu-gray-600 menu-hover-primary fw-semibold order-1"> <li class="menu-item"> <a href="/vi/official.html" class="menu-link px-2">Đối tác cơ sở dữ liệu</a> </li> <li class="menu-item"> <a href="/vi/gdpr.html" class="menu-link px-2">GDPR</a> </li> <li class="menu-item"> <a href="#" id="gdpr-manage-cookies" class="menu-link px-2">Quản lý cookie</a> </li> <li class="menu-item"> <a href="/vi/contact.html" class="menu-link px-2">Liên hệ</a> </li> <li class="menu-item"> <a href="/vi/plan-price.html" class="menu-link px-2">Mua hàng</a> </li> <li class="menu-item"> <a href="https://www.linkedin.com/company/cve-find/" class="menu-link px-2" target="_blank"><img src="/media/social/linkedin.svg" width="40" height="40" alt="LinkedIn Account"/></a> </li> <li class="menu-item"> <a href="https://www.facebook.com/people/CVE-Find-Alert/61561116452093/" class="menu-link px-2" target="_blank"><img src="/media/social/facebook.svg" width="40" height="40" alt="Facebook Account"/></a> </li> <li class="menu-item"> <a href="https://x.com/cvefindcom" class="menu-link px-2" target="_blank"><img src="/media/social/twitter.svg" width="40" height="40" alt="Twitter Account"/></a> </li> </ul> </div> </div> <div class="footer py-4"> <div class="container-xxl align-items-center justify-content-between"> Thông tin trình bày trên CVE Find đến từ nhiều nguồn tham chiếu được chọn lọc cẩn thận. Dữ liệu CVE được cung cấp bởi <a href="https://cve.mitre.org/" target="_blank">MITRE Corporation</a> và <a href="https://nvd.nist.gov/" target="_blank">Cơ sở dữ liệu lỗ hổng quốc gia (NVD)</a>. Danh mục lỗ hổng đã bị khai thác đã biết (KEV) có nguồn từ <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog" target="_blank">Cơ quan An ninh mạng và Cơ sở hạ tầng (CISA)</a>, trong khi điểm EPSS đến từ <a href="https://www.first.org/epss/" target="_blank">FIRST.org</a>. Ngoài ra, dữ liệu về điểm yếu phần mềm (CWE) và mẫu tấn công phổ biến (CAPEC) được duy trì bởi <a href="https://mitre.org/" target="_blank">MITRE Corporation</a>, và thông tin về cấu hình phần cứng và phần mềm (CPE) được cung cấp bởi <a href="https://nvd.nist.gov/products/cpe" target="_blank">NVD</a>. </div> </div> </div> </div> </div>  <script>var hostUrl = "assets/";</script> <script src="/plugins/global/plugins.bundle.min.1743008562.js"></script> <script src="/js/scripts.bundle.1718974735.js"></script> <script src="/js/app/custom.min.1788264851.js"></script> <script src="/js/app/base.vi.min.1793721674.js" defer></script> <script src="/plugins/custom/datatables/datatables.bundle.1718974031.js"></script> <script src="/js/aceeditor/ace.1715679271.js"></script> <script src="/js/app/bloc/cve/epss.min.1738322185.js"></script> <script src="/js/app/bloc/cve/exploitdb.min.1738322201.js"></script> <script src="/js/app/account/manageAlertNeedAccount.min.1782998772.js" defer></script> <div class="ea-slot d-lg-none" data-ea-anchor="mobile" data-ea-pub="cvefindcom" data-ea-type="text" data-ea-style="fixedfooter" data-ea-kw="security|cybersecurity|vulnerability|cve"></div> <style> /* Encart EthicalAds centré dans son emplacement */ .ea-slot [data-ea-publisher]{margin-left:auto;margin-right:auto;} /* Format horizontal : remplit la largeur de la colonne (variable officielle EthicalAds) */ .ea-slot [data-ea-publisher].horizontal{--ea-image-placement-width-horizontal:100%;} </style> <script async src="https://media.ethicalads.io/media/client/ethicalads.min.js"></script> <script src="/js/app/ads/ethicalads.min.1792667231.js" defer></script> </body> </html> <script> var cookieTimezoneBrowser = function () { let timeZone = Intl.DateTimeFormat().resolvedOptions().timeZone; var offset = -new Date().getTimezoneOffset(); var prefix = offset >= 0 ? '+' : '-'; var timezoneOffset = prefix + Math.floor(Math.abs(offset) / 60).toString().padStart(2, '0') + ':' + (Math.abs(offset) % 60).toString().padStart(2, '0'); document.cookie = "tw-browser=" + timeZone+"|"+ timezoneOffset+ "; path=/"; } cookieTimezoneBrowser(); </script>