Lucene search
+L

11350 matches found

CNNVD
CNNVD
added 2026/01/05 12:00 a.m.11 views

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions prior to 25.10.1, 24.10.4, and 24.04.8, which ste...

6.8CVSS5.7AI score0.00166EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/05 12:00 a.m.11 views

PT-2026-1281

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in INTINITUM FORM Geo Controller allows DOM-Based XSS.This issue affects Geo Controller: from n/a through 8.5.2...

6.5CVSS6.4AI score0.00138EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/04 9:17 a.m.3 views

CVE-2025-14830 JFrog Artifactory Cross-Site Scripting

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in JFrog Artifactory Workers allows Cross-Site Scripting XSS.This issue affects Artifactory Workers: from =7.94.0 through 7.117.10...

4.9CVSS5.9AI score0.0024EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/04 12:00 a.m.15 views

PT-2026-1305

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor and Wearable Processor Exynos 980 Samsung Mobile Processor and Wearable Processor 990 Samsung Mobile Processor and Wearable Processor 850 Samsung Mobile Processor and Wearable Processor 1080 Samsung Mobile Processor an...

7.1CVSS6.2AI score0.00115EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/01/04 12:00 a.m.12 views

JFrog Artifactory Workers 跨站脚本漏洞

JFrog Artifactory Workers is an extension service from JFrog USA. A cross-site scripting vulnerability exists in JFrog Artifactory Workers versions 7.94.0 through prior to 7.117.10, which stems from improper input neutralization during web page generation and could lead to cross-site scripting...

4.9CVSS6AI score0.0024EPSS
SaveExploits0References2
Veracode
Veracode
added 2026/01/02 1:36 p.m.12 views

Improper Input Validation

qs is vulnerable to Improper Input Validation. The vulnerability is due to the arrayLimit option not being enforced for bracket notation parameters during query parsing, which allows an attacker to supply a large number of array elements and cause memory exhaustion via crafted HTTP requests...

6.3CVSS6.5AI score0.00427EPSS
SaveExploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/01 2:18 p.m.8 views

CVE-2025-62119

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ViitorCloud Technologies Pvt Ltd Add Featured Image Custom Link custom-url-to-featured-image allows DOM-Based XSS.This issue affects Add Featured Image Custom Link: from n/a through = 2.0.0...

5.9CVSS5.9AI score0.00187EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 1:34 p.m.12 views

CVE-2025-62743

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zookatron MyBookTable Bookstore mybooktable allows Stored XSS.This issue affects MyBookTable Bookstore: from n/a through = 3.6.0...

6.5CVSS5.9AI score0.00138EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 1:34 p.m.8 views

CVE-2025-49357

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in audiomack Audiomack audiomack allows Stored XSS.This issue affects Audiomack: from n/a through = 1.4.8...

6.5CVSS5.9AI score0.00134EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 1:34 p.m.10 views

CVE-2025-62118

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kcseopro AdWords Conversion Tracking Code adwords-conversion-tracking-code allows Stored XSS.This issue affects AdWords Conversion Tracking Code: from n/a through = 1.0...

6.5CVSS5.9AI score0.00134EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 12:17 p.m.18 views

CVE-2025-62757

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebMan Design | Oliver Juhas WebMan Amplifier webman-amplifier allows DOM-Based XSS.This issue affects WebMan Amplifier: from n/a through = 1.5.12...

6.5CVSS5.9AI score0.0018EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 12:17 p.m.16 views

CVE-2025-62752

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kalender.digital Kalender.digital kalender-digital allows DOM-Based XSS.This issue affects Kalender.digital: from n/a through = 1.0.13...

6.5CVSS5.9AI score0.00175EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 9:12 a.m.15 views

CVE-2025-62759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Tadlock Series series allows Stored XSS.This issue affects Series: from n/a through = 2.0.1...

6.5CVSS5.9AI score0.00147EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 9:30 p.m.7 views

EUVD-2025-206070

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Proloy Chakroborty ZD Scribd iPaper allows Reflected XSS.This issue affects ZD Scribd iPaper: from n/a through 1.0...

7.1CVSS5.9AI score0.00155EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/31 8:15 p.m.11 views

CVE-2025-23667

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christopher Churchill custom-post-edit front-end-post-edit allows Reflected XSS.This issue affects custom-post-edit: from n/a through = 1.0.4...

7.1CVSS0.00155EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/12/31 8:10 p.m.8 views

CVE-2025-52739

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in uxper Sala allows Reflected XSS.This issue affects Sala: from n/a through 1.1.3...

7.1CVSS5.2AI score0.00155EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/12/31 5:21 p.m.4 views

CVE-2025-49355 WordPress Accessibility Press plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ikaes Accessibility Press allows Stored XSS.This issue affects Accessibility Press: from n/a through 1.0.2...

5.9CVSS5.6AI score0.00155EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 5:21 p.m.10 views

EUVD-2025-205976

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ikaes Accessibility Press allows Stored XSS.This issue affects Accessibility Press: from n/a through 1.0.2...

5.9CVSS5.5AI score0.00155EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/31 5:20 p.m.17 views

CVE-2025-59135

Technical details for CVE-2025-59135 are not provided in the supplied documents; no affected products, vectors, or remediation are disclosed here. Monitor for updates from official advisories.

5.9CVSS5.9AI score0.00148EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/31 5:15 p.m.10 views

CVE-2025-63021

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codetipi Valenti Engine valenti-engine allows DOM-Based XSS.This issue affects Valenti Engine: from n/a through = 1.0.3...

6.5CVSS0.0018EPSS
SaveExploits0References1
Rows per page
Query Builder