Lucene search
+L

988 matches found

CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•15 views

WordPress plugin WPLMS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

6.5CVSS6AI score0.00196EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•19 views

WordPress plugin The7 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00196EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/12/04 9:47 p.m.•6 views

CVE-2025-13939

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS Gateway Wireless Controller module allows Stored XSS...

6.1CVSS5.3AI score0.00198EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2025/12/04 9:45 p.m.•8 views

CVE-2025-13936

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS Tigerpaw Technology Integration module allows Stored XSS...

6.1CVSS5.2AI score0.00198EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2025/12/02 3:15 p.m.•14 views

CVE-2025-13505

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Datateam Information Technologies Inc. Datactive allows Stored XSS.This issue affects Datactive: from 2.13.34...

6.1CVSS5.8AI score0.00201EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/02 12:00 a.m.•12 views

Open Solution QuickCMS SQL注入漏洞

Open Solution QuickCMS is an Open Solution open source content management system. Open Solution QuickCMS suffers from a SQL injection vulnerability that stems from improper neutralization of elevated user input, which could lead to a blind SQL injection attack...

8.6CVSS7.8AI score0.00275EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/21 1:15 p.m.•12 views

CVE-2025-66057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Page Builder bold-page-builder allows DOM-Based XSS.This issue affects Bold Page Builder: from n/a through = 5.5.2...

6.5CVSS0.0019EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/21 12:00 a.m.•20 views

WordPress plugin Head Meta Data 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

5.9CVSS5.9AI score0.00204EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/11/20 12:00 a.m.•19 views

Dell SmartFabric OS10 Software Command Injection Vulnerability (CNVD-2025-29162)

Dell SmartFabric OS10 Software is a Debian Linux-based operating system from Dell, USA. Dell SmartFabric OS10 Software suffers from a command injection vulnerability that originates from improper neutralization of special elements in commands, which can be exploited by an attacker to cause comman...

8.8CVSS7.8AI score0.01243EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/18 6:02 p.m.•14 views

CVE-2025-55059

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

6.1CVSS6.5AI score0.00175EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/17 6:30 p.m.•14 views

EUVD-2025-197846

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.1AI score0.00175EPSS
SaveExploits0References2
OSV
OSV
•added 2025/11/17 6:15 p.m.•13 views

CVE-2025-55059

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

6.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/17 6:15 p.m.•29 views

CVE-2025-55059

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

6.1CVSS0.00175EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/17 5:36 p.m.•29 views

CVE-2025-55059

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS0.00175EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/17 5:28 p.m.•15 views

EUVD-2025-197851

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.1AI score0.00175EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/17 5:28 p.m.•7 views

CVE-2025-55056

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.3AI score0.00175EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•16 views

Maxum Rumpus FTP Server 操作系统命令注入漏洞

Maxum Rumpus FTP Server is an FTP server software from Maxum. An operating system command injection vulnerability exists in Maxum Rumpus FTP Server version 9.0.12, which stems from improper neutralization of a special element and can lead to OS command injection...

9.8CVSS7.5AI score0.0084EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/11/16 12:00 a.m.•12 views

The vulnerability of the NRDP-server plugin of the Nagios XI monitoring tool allows a attacker to execute arbitrary code.

The vulnerability of the NRDP-server plugin of the Nagios XI monitoring tool is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.9CVSS6.1AI score0.02297EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2025/11/13 12:00 a.m.•15 views

WordPress plugin Booster for WooCommerce 安全漏洞

WordPress Booster for WooCommerce Plugin is a multi-functional plugin designed specifically for the WooCommerce e-commerce platform, offering more than 100 features including PDF invoices, product variants, wish lists, and other tools designed to streamline e-commerce operations and enhance user...

6.5CVSS5.9AI score0.00159EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/11/13 12:00 a.m.•6 views

Siemens SIMATIC S7-1500 Improper Neutralization of Input During Web Page Generation (CVE-2016-3709)

Possible cross-site scripting vulnerability in libxml after commit 960f0e2. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504354;...

6.1CVSS6.4AI score0.00956EPSS
SaveExploits1References4
Rows per page
Query Builder