CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

33637 matches found

Packet Storm•added 2025/12/03 12:00 a.m.•173 views

📄 phpIPAM 1.6 Cross Site Scripting

phpIPAM version 1.6 suffers from multiple cross site scripting vulnerabilities. Exploit Title: phpIPAM 1.6 - Reflected Cross-Site Scripting XSS Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/phpipam/phpipam/ Software Link: https://github.com/phpipam/phpipam/...

7.1CVSS6.7AI score0.01592EPSS

SaveExploits5

RedhatCVE•added 2025/12/02 10:31 p.m.•14 views

CVE-2025-66309

This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Reflected Cross-Site Scripting XSS vulnerability was identified in the /admin/pages/page endpoint of the Grav application. This...

6.2CVSS5.7AI score0.00231EPSS

SaveExploits1References1

NVD•added 2025/12/02 1:15 p.m.•16 views

CVE-2025-40700

Reflected Cross-Site Scripting XSS in IDI Eikon's Governalia. The vulnerability allows an attacker to execute JavaScript code in the victim's browser when a malicious URL with the 'q' parameter in '/search' is sent to them. This vulnerability can be exploited to steal sensitive information such a...

6.1CVSS0.00188EPSS

SaveExploits0References2

CVE•added 2025/12/02 1:08 p.m.•27 views

CVE-2025-40700

CVE-2025-40700 describes a reflected Cross-Site Scripting (XSS) in IDI Eikon’s Governalia. The affected component is the Governalia web application, vulnerable via the malicious URL containing the q parameter to the /search endpoint, enabling an attacker to execute JavaScript in the victim’s brow...

6.1CVSS5.7AI score0.00188EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2025/12/02 1:08 p.m.•23 views

CVE-2025-40700 Reflected Cross-Site Scripting (XSS) in Governalia by IDI Eikon

5.1CVSS0.00188EPSS

SaveExploits0References2

RedhatCVE•added 2025/12/02 7:22 a.m.•9 views

CVE-2025-63735

A reflected Cross site scripting XSS vulnerability in Ruckus Unleashed 200.13.6.1.319 via the name parameter to the the captive-portal endpoint selfguestpass/guestAccessSubmit.jsp...

6.1CVSS5.9AI score0.00225EPSS

SaveExploits4References1

Exploit DB•added 2025/12/02 12:00 a.m.•192 views

phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS)

Exploit Title: phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting XSS Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/thorsten/phpmyfaq/ Software Link: https://github.com/thorsten/phpmyfaq/ Version: 3.1.7 Tested on: Windows CVE : CVE-2022-3766 Proof Of Concept GET...

7.3CVSS6.9AI score0.06132EPSS

SaveExploits3

NVD•added 2025/12/01 10:15 p.m.•9 views

CVE-2025-66309

6.2CVSS0.00231EPSS

SaveExploits1References2

Vulnrichment•added 2025/12/01 10:02 p.m.•4 views

CVE-2025-66309 Grav vulnerable to Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][content][items], located in the "Blog Config" tab

6.2CVSS5.2AI score0.00231EPSS

SaveExploits1References2

Cvelist•added 2025/12/01 10:02 p.m.•20 views

CVE-2025-66309 Grav vulnerable to Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][content][items], located in the "Blog Config" tab

6.2CVSS0.00231EPSS

SaveExploits1References2

OSV•added 2025/12/01 10:02 p.m.•15 views

CVE-2025-66309 Grav vulnerable to Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][content][items], located in the "Blog Config" tab

6.2CVSS5.6AI score

SaveExploits0References4

NVD•added 2025/12/01 11:15 a.m.•13 views

CVE-2025-41070

Reflected Cross-site Scripting XSS vulnerability in Sanoma's Clickedu. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL in '/students/carpetesvaries.php'. This vulnerability can be exploited to steal sensitive user data, such...

4.8CVSS0.00289EPSS

SaveExploits0References1

EUVD•added 2025/12/01 10:40 a.m.•11 views

EUVD-2025-199980

4.8CVSS5.8AI score0.00289EPSS

SaveExploits0References2

Vulnrichment•added 2025/12/01 10:40 a.m.•18 views

CVE-2025-41070 Reflected Cross-site Scripting (XSS) in Sanoma's Clickedu

4.8CVSS5.9AI score0.00289EPSS

SaveExploits0References1

CVE•added 2025/12/01 10:40 a.m.•25 views

CVE-2025-41070

CVE-2025-41070 describes a reflected XSS in Sanoma’s Clickedu. The vulnerability exists in the web path /students/carpetes_varies.php , enabling an attacker to execute JavaScript in a victim’s browser, potentially stealing session cookies or performing actions on behalf of the user. Connected sou...

4.8CVSS5.9AI score0.00289EPSS

SaveExploits0References1

OpenVAS•added 2025/12/01 12:00 a.m.•10 views

OpenWRT < 19.07.0 XSS Vulnerability

OpenWRT is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.4CVSS6.3AI score0.0018EPSS

SaveExploits0References1

EUVD•added 2025/11/29 6:30 a.m.•15 views

EUVD-2025-199902

Reflected Cross-Site Scripting rXSS in krpano before version 1.23.2 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the victim's browser via a crafted URL to the passQueryParameters function with the xml parameter enabled...

6.2AI score0.00234EPSS

SaveExploits0References3

OSV•added 2025/11/29 4:15 a.m.•17 views

CVE-2025-65892

6.1CVSS6.1AI score0.00234EPSS

SaveExploits0References2

Positive Technologies•added 2025/11/29 12:00 a.m.•10 views

PT-2025-48371

6.7AI score0.00234EPSS

SaveExploits0References3

Vulnrichment•added 2025/11/29 12:00 a.m.•4 views

CVE-2025-65892

6.3AI score0.00234EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by