Lucene search
+L

6510 matches found

CNNVD
CNNVD
•added 2025/11/20 12:00 a.m.•22 views

Revive Adserver security vulnerability

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from a...

5.4CVSS5AI score0.00488EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/19 2:15 p.m.•19 views

CVE-2025-11963

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities allows Reflected XSS. This issue affects StarCities: before 1.1.61...

5.4CVSS0.00182EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/11/19 2:03 p.m.•19 views

CVE-2025-11963

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities allows Reflected XSS. This issue affects StarCities: before 1.1.61...

5.4CVSS5.8AI score0.00182EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/19 12:00 a.m.•20 views

OpenText UCMDB cross-site scripting vulnerability

OpenText UCMDB is a software from OpenText Canada Inc. It is used to generate and maintain a configuration management database for information technology projects. A cross-site scripting vulnerability exists in OpenText UCMDB version 24.4, which stems from improper input neutralization during web...

2.3CVSS5.5AI score0.00232EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/18 6:02 p.m.•18 views

CVE-2025-55059

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

6.1CVSS6.3AI score0.00188EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/18 6:02 p.m.•20 views

CVE-2025-55056

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

6.1CVSS6.3AI score0.00188EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/11/18 12:00 a.m.•24 views

WordPress Booking Manager plugin cross-site scripting vulnerability

WordPress Booking Manager plugin is a tool for managing appointments and schedules, supporting features such as synchronization with external ICS calendars, importing events and exporting booking data. A cross-site scripting vulnerability exists in the WordPress Booking Manager plugin, which stem...

6.5CVSS6.3AI score0.00165EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/17 6:30 p.m.•21 views

EUVD-2025-197846

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.3AI score0.00188EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/11/17 6:15 p.m.•18 views

CVE-2025-55056

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

6.1CVSS6.3AI score0.00188EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/17 6:15 p.m.•34 views

CVE-2025-55059

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

6.1CVSS0.00188EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/11/17 6:15 p.m.•18 views

CVE-2025-55059

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

6.1CVSS6.3AI score0.00188EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/17 5:36 p.m.•34 views

CVE-2025-55059

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS0.00188EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/17 5:28 p.m.•20 views

EUVD-2025-197851

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.3AI score0.00188EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/17 5:28 p.m.•10 views

CVE-2025-55056

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.3AI score0.00188EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/17 5:28 p.m.•48 views

CVE-2025-55056

CNNVD-202511-1880 reports CVE-2025-55056 as affecting Maxum Rumpus FTP Server, specifically version 9.0.12, with a cross-site scripting flaw caused by improper input neutralization during web page generation. The description notes XSS as the impact, but does not provide exploit details or a confi...

6.1CVSS6.3AI score0.00188EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/11/17 12:15 p.m.•26 views

CVE-2025-40834

A vulnerability has been identified in Mendix RichText All versions = V4.0.0 V4.6.1. Affected widget does not properly neutralize the input. This could allow an attacker to execute cross-site scripting attacks...

6.8CVSS0.00253EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/17 11:39 a.m.•31 views

CVE-2025-40834

A vulnerability has been identified in Mendix RichText All versions = V4.0.0 V4.6.1. Affected widget does not properly neutralize the input. This could allow an attacker to execute cross-site scripting attacks...

6.8CVSS0.00253EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•21 views

Maxum Rumpus FTP Server: Operating System Command Injection Vulnerability

Maxum Rumpus FTP Server is an FTP server software from Maxum. An operating system command injection vulnerability exists in Maxum Rumpus FTP Server version 9.0.12, which stems from improper neutralization of a special element and can lead to OS command injection...

9.8CVSS8.6AI score0.00819EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•23 views

Maxum Rumpus FTP Server Cross-site Scripting Vulnerability

Maxum Rumpus FTP Server is an FTP server software from Maxum. A cross-site scripting vulnerability exists in Maxum Rumpus FTP Server version 9.0.12, which stems from improper input neutralization and could lead to cross-site scripting attacks...

6.1CVSS6AI score0.00188EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/16 12:00 a.m.•27 views

PT-2025-47180

Name of the Vulnerable Software and Affected Versions affected versions not specified Description The software is susceptible to a cross-site scripting issue due to improper input neutralization during web page generation. This allows for the injection of malicious scripts into web pages...

6.4CVSS5.9AI score0.00188EPSS
SaveExploits0References7
Rows per page
Query Builder