Lucene search
+L

2501 matches found

CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•26 views

Coohom SaaS Platform 安全漏洞

Coohom SaaS Platform is a cloud-based integration platform from Coohom Inc. in the United States. A security vulnerability exists in Coohom SaaS Platform that originates from stored cross-site scripting and could lead to session hijacking or arbitrary script execution...

5.4CVSS6.2AI score0.00199EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•16 views

Selea Targa IP OCR-ANPR Camera 跨站脚本漏洞

Selea Targa IP OCR-ANPR Camera is an IP camera from Selea. A cross-site scripting vulnerability exists in the Selea Targa IP OCR-ANPR Camera that stems from a stored cross-site scripting issue with the fileslist parameter, which could lead to the execution of arbitrary script...

5.4CVSS6.1AI score0.00297EPSS
SaveExploits1References6
CNVD
CNVD
•added 2025/12/03 12:00 a.m.•24 views

Grav Cross-Site Scripting Vulnerability (CNVD-2025-30348)

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted...

6.2CVSS6.1AI score0.00214EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/12/03 12:00 a.m.•27 views

Grav Cross-Site Scripting Vulnerability (CNVD-2025-30346)

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted...

6.8CVSS6.1AI score0.00214EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/12/03 12:00 a.m.•23 views

Grav Cross-Site Scripting Vulnerability

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted...

6.2CVSS6.1AI score0.00231EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/12/03 12:00 a.m.•32 views

Grav Cross-Site Scripting Vulnerability (CNVD-2025-30347)

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted...

6.2CVSS6.1AI score0.00214EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/12/03 12:00 a.m.•24 views

Grav Cross-Site Scripting Vulnerability (CNVD-2025-30345)

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted...

6.2CVSS6.1AI score0.00214EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/02 12:00 a.m.•3 views

CVE-2025-58486: Undefined Security Weakness

Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script...

5.5CVSS7.1AI score0.00193EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/01 12:00 a.m.•20 views

Grav 跨站脚本漏洞

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted...

6.8CVSS6AI score0.00214EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/12/01 12:00 a.m.•18 views

Grav 跨站脚本漏洞

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted...

6.2CVSS6AI score0.00214EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/12/01 12:00 a.m.•22 views

Grav 跨站脚本漏洞

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted...

6.2CVSS6AI score0.00214EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/11/26 12:00 a.m.•23 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal that stems from a cross-site scripting vulnerability in the filename renderer that could lead to the execution of arbitrary script...

7CVSS6.1AI score0.00333EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/25 4:37 a.m.•8 views

CVE-2025-64730

Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the product...

5.2CVSS6AI score0.00188EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/25 4:37 a.m.•30 views

CVE-2025-64730

Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the product...

5.2CVSS0.00188EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/25 12:00 a.m.•2 views

CVE-2025-64730: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the product...

6.1CVSS5.9AI score0.00188EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/25 12:00 a.m.•16 views

Sony SNC-CX600W 跨站脚本漏洞

The Sony SNC-CX600W is a wireless network HD camcorder from Sony Japan. A cross-site scripting vulnerability exists in all versions of the Sony SNC-CX600W, which stems from susceptibility to cross-site scripting attacks that could lead to the execution of arbitrary scripts...

6.1CVSS5.2AI score0.00188EPSS
SaveExploits0References3
CNVD
CNVD
•added 2025/11/25 12:00 a.m.•24 views

WordPress HT Mega plugin cross-site scripting vulnerability

WordPress HT Mega plugin is an Elementor page builder plugin designed for WordPress websites. The WordPress HT Mega plugin suffers from a cross-site scripting vulnerability that stems from insufficient validation of user-supplied HTML tag name input, which can be exploited by an attacker to execu...

6.4CVSS5.9AI score0.00213EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/24 6:31 p.m.•25 views

EUVD-2025-198889

A stored Cross-site Scripting XSS vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...

8.7CVSS6AI score0.00243EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•27 views

Dassault Systèmes ENOVIA Product Manager 安全漏洞

Dassault Systèmes ENOVIA Product Manager is a product lifecycle management software from Dassault Systèmes France. A security vulnerability exists in Dassault Systèmes ENOVIA Product Manager Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x, which stems from a stored cross-site...

8.7CVSS6.1AI score0.00188EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/24 12:00 a.m.•7 views

CVE-2025-10555: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...

8.7CVSS6.2AI score0.00243EPSS
SaveExploits0References1
Rows per page
Query Builder