Lucene search
K

110 matches found

CNNVD
CNNVD
added 2025/11/05 12:0 a.m.4 views

Cisco Identity Services Engine 跨站脚本漏洞

Cisco Identity Services Engine Cisco ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users, and devices, and develops and enforces policies to regulate the network. A cross-site scripting vulnerability...

5.4CVSS5.6AI score0.03141EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.3 views

WordPress plugin hpb seo 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.1CVSS6.2AI score0.00103EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.3 views

HCL Unica Campaign 安全漏洞

HCL Unica Campaign is a marketing campaign management solution from HCL India. A security vulnerability exists in HCL Unica Campaign version 12.1.10, which originates from malicious script injection in HTTP requests and could lead to reflective cross-site scripting attacks...

4.3CVSS6.4AI score0.00166EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/29 12:0 a.m.2 views

Esri Portal For ArcGIS 跨站脚本漏洞

Esri Portal For ArcGIS is a component of Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A cross-site scripting vulnerability exists in Esri Portal for ArcGIS version 11.4 and earlier, which stems from a remote...

4.8CVSS5.8AI score0.00209EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/09/29 12:0 a.m.4 views

Esri Portal For ArcGIS 跨站脚本漏洞

Esri Portal For ArcGIS is a component of Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A cross-site scripting vulnerability exists in Esri Portal For ArcGIS version 11.4 and earlier, which stems from a remote...

4.8CVSS5.8AI score0.00209EPSS
Exploits0References2
CNVD
CNVD
added 2025/09/28 12:0 a.m.1 views

Cisco IOS XE Software Cross-Site Scripting Vulnerability

Cisco IOS XE Software is a network operating system from the American company Cisco Cisco. A cross-site scripting vulnerability exists in Cisco IOS XE Software that originates from improper user input cleanup and can be exploited by an attacker to cause a reflective cross-site scripting attack...

6.1CVSS5.7AI score0.00272EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/23 12:0 a.m.2 views

WSO2 Identity Server 安全漏洞

WSO2 Identity Server IS is an identity server from the US-based WSO2 Inc. A security vulnerability exists in WSO2 Identity Server IS that stems from improperly encoded output and could lead to a reflective cross-site scripting attack...

6.1CVSS6AI score0.00218EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/16 12:0 a.m.2 views

Workcube ERP 跨站脚本漏洞

Workcube ERP is an enterprise resource planning platform from Workcube Turkey. A cross-site scripting vulnerability exists in Workcube ERP versions V12 through V14 and 20250916 and earlier, which stems from improper input neutralization during web page generation and could lead to a reflective...

5.3CVSS6AI score0.0024EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.1 views

WordPress plugin Bulk Watermark 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS6.1AI score0.00118EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.1 views

WordPress plugin WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin WordPress Buffer - HYPESocial...

7.1CVSS6AI score0.00118EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.1 views

WordPress plugin WN Flipbox Pro 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

7.1CVSS6.1AI score0.00118EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.2 views

Netcad NetGIS Server 跨站脚本漏洞

Netcad NetGIS Server is a geospatial data distribution server from Netcad Turkey. A cross-site scripting vulnerability exists in Netcad NetGIS Server versions 5.2.4 through 22.08.2025, which stems from improper input neutralization and could lead to a reflective cross-site scripting attack...

5.4CVSS6AI score0.00204EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.3 views

WordPress plugin WP likes 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS6.1AI score0.00122EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/01 12:0 a.m.4 views

Sunnet eHRD CTMS 跨站脚本漏洞

Sunnet eHRD CTMS is a Human Resource Development and Clinical Training Management System from Sunnet China Sunnet. A cross-site scripting vulnerability exists in Sunnet eHRD CTMS that stems from a reflective cross-site scripting issue that could lead to arbitrary JavaScript code execution...

6.1CVSS6.6AI score0.00245EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/08/22 12:0 a.m.3 views

Liferay Portal和Liferay DXP 跨站脚本漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

5.4CVSS5.9AI score0.0024EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/08/18 12:0 a.m.3 views

Liferay Portal和Liferay DXP 跨站脚本漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

6.9CVSS6.5AI score0.00199EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/31 12:0 a.m.2 views

Alfasado PowerCMS 跨站脚本漏洞

Alfasado PowerCMS is a content management system CMS from Alfasado Japan. A cross-site scripting vulnerability exists in PowerCMS that stems from reflective cross-site scripting and could lead to the execution of arbitrary script...

6.1CVSS6.7AI score0.00182EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/29 12:0 a.m.2 views

Human Resource Management System 跨站脚本漏洞

Human Resource Management System is a Human Resource Management System by maverickosama Individual Developer. A cross-site scripting vulnerability exists in Human Resource Management System version 1.0, which stems from improper parameter manipulation and could lead to a reflective cross-site...

6.1CVSS6AI score0.00158EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/22 12:0 a.m.2 views

AIBOX 跨站脚本漏洞

AIBOX is an AI authoring platform from the Chinese company AIBOX. A security vulnerability exists in AIBOX versions 2025-05-27 and earlier, which stems from a reflective cross-site scripting attack that could lead to account hijacking...

6.5CVSS5.8AI score0.00353EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/07/22 12:0 a.m.2 views

Rolantis Agentis 跨站脚本漏洞

Rolantis Agentis is a software for enterprise information management and automated processing from the Turkish company Rolantis. A cross-site scripting vulnerability exists in Rolantis Agentis versions prior to 4.32, which stems from improper input neutralization during web page generation and...

6.1CVSS5.6AI score0.0019EPSS
Exploits0References3
Rows per page
Query Builder