Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

9213 matches found

NVD
NVD•added 2021/12/01 11:15 a.m.•37 views

CVE-2021-3994

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

9.6CVSS0.01354EPSS
SaveExploits1References2
OSV
OSV•added 2021/12/01 11:15 a.m.•13 views

CVE-2021-3985

kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

9CVSS6.7AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB•added 2021/12/01 11:15 a.m.•11 views

CVE-2021-3985

kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

9CVSS7.2AI score0.01216EPSS
SaveExploits1References3
PyPA
PyPA•added 2021/12/01 11:15 a.m.•10 views

PYSEC-2021-438

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

9.6CVSS6.7AI score0.01354EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist•added 2021/12/01 11:05 a.m.•36 views

CVE-2021-3985 Cross-site Scripting (XSS) - Stored in kevinpapst/kimai2

kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8CVSS9.3AI score0.01216EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB•added 2021/12/01 10:15 a.m.•9 views

CVE-2021-4018

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.3CVSS6.2AI score0.00635EPSS
SaveExploits1References3
NVD
NVD•added 2021/11/30 2:15 p.m.•31 views

CVE-2021-25987

Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code...

5CVSS0.00328EPSS
SaveExploits0References2
Prion
Prion•added 2021/11/30 2:15 p.m.•18 views

Cross site scripting

Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code...

1.9CVSS4.8AI score0.00328EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2021/11/30 1:50 p.m.•38 views

CVE-2021-25987 Hexo - Stored XSS

Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code...

5CVSS5.4AI score0.00328EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB•added 2021/11/27 10:15 a.m.•14 views

CVE-2021-4020

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS6.7AI score0.00818EPSS
SaveExploits1References3
OSV
OSV•added 2021/11/27 10:15 a.m.•10 views

CVE-2021-4020

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6.6AI score
SaveExploits0References2
UbuntuCve
UbuntuCve•added 2021/11/27 10:15 a.m.•20 views

CVE-2021-4020

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS6.8AI score0.00818EPSS
SaveExploits1References5
OSV
OSV•added 2021/11/27 10:15 a.m.•11 views

UBUNTU-CVE-2021-4020

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS6.8AI score0.00818EPSS
SaveExploits1References6
OSV
OSV•added 2021/11/23 6:17 p.m.•47 views

GHSA-C65V-P733-9796 Cross-site Scripting in snipe/snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8CVSS5.3AI score0.00755EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog•added 2021/11/23 6:17 p.m.•50 views

Cross-site Scripting in snipe/snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8CVSS5.6AI score0.00755EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog•added 2021/11/23 5:55 p.m.•41 views

Cross-site Scripting in django-helpdesk

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS5.7AI score0.00803EPSS
SaveExploits1References6Affected Software1
NVD
NVD•added 2021/11/19 1:15 p.m.•27 views

CVE-2021-3920

grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS0.01374EPSS
SaveExploits1References2
OSV
OSV•added 2021/11/19 1:15 p.m.•12 views

CVE-2021-3920

grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6.8AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB•added 2021/11/19 12:15 p.m.•8 views

CVE-2021-3961

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8CVSS6.7AI score0.00755EPSS
SaveExploits1References3
OSV
OSV•added 2021/11/19 12:15 p.m.•14 views

CVE-2021-3961

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS5.5AI score
SaveExploits0References2
Rows per page
Query Builder