CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

21572 matches found

Positive Technologies•added 2025/10/05 12:00 a.m.•10 views

PT-2025-40824

Name of the Vulnerable Software and Affected Versions Vanderlande Baggage 360 version 7.0.0 Description An issue exists in the processing of files within Vanderlande Baggage 360. Manipulation of the Message argument in the /api-addons/v1/messages API endpoint can lead to cross site scripting. Thi...

5.1CVSS3.5AI score0.00233EPSS

SaveExploits0References9

CVE•added 2025/10/04 3:16 p.m.•13 views

CVE-2022-50487

CVE-2022-50487 is rejected/not used and does not represent an active vulnerability entry.

6.4AI score

SaveExploits0

CVE•added 2025/10/04 3:16 p.m.•32 views

CVE-2022-50476

The CVE-2022-50476 issue concerns ntb_netdev in the Linux kernel where TX/RX callback handlers can run in interrupt context via the DMA framework. The root cause was calling the interrupt-unsafe dev_kfree_skb() from ntb_netdev_tx_handler() and ntb_netdev_rx_handler(); the fix uses the interrupt-c...

5.5CVSS6.1AI score0.00149EPSS

SaveExploits0References9Affected Software1

Snyk•added 2025/10/03 9:47 p.m.•5 views

Cross-site Scripting (XSS)

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Cross-site Scripting XSS via the workflow UI View Messages feature in the admin panel. An attacker can execute arbitrary JavaScript in the context of an administrator's browser by injecting a specially...

9.3CVSS5.4AI score

SaveExploits0References2

Github Security Blog•added 2025/10/03 9:47 p.m.•16 views

Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel

Summary A stored Cross-Site Scripting XSS vulnerability in FlowiseAI allows a user to inject arbitrary JavaScript code via message input. When an administrator views messages using the "View Messages" button in the workflow UI, the malicious script executes in the context of the admin’s browser,...

8.2CVSS5.5AI score0.13138EPSS

SaveExploits1References6Affected Software1

OSV•added 2025/10/03 9:47 p.m.•19 views

GHSA-964P-J4GG-MHWC Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel

9.3CVSS5.3AI score0.13138EPSS

SaveExploits1References6