CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

317 matches found

RedhatCVE•added 2026/06/05 7:58 p.m.•25 views

CVE-2023-42343

A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type...

6.1CVSS8.4AI score0.0059EPSS

SaveExploits1References1

RedhatCVE•added 2026/05/11 8:27 p.m.•24 views

CVE-2023-42346

Alkacon OpenCms before 16 allows XXE when the refers to an external host...

7.5CVSS8.3AI score0.00232EPSS

SaveExploits0References1

osv_ghsa•added 2026/05/08 6:32 a.m.•29 views

GHSA-PJ6P-9P8X-5MFC Alkacon OpenCms is vulnerable to XXE when the <!DOCTYPE> refers to an external host

Alkacon OpenCms before 16 allows XXE when the refers to an external host...

7.5CVSS8.3AI score0.00232EPSS

SaveExploits0References3

EUVD•added 2026/05/08 6:32 a.m.•30 views

EUVD-2023-46796

A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type...

6.1CVSS8.4AI score0.0059EPSS

SaveExploits1References2

osv_ghsa•added 2026/05/08 6:32 a.m.•47 views

GHSA-8GPV-C454-3HFC Alkacon OpenCms is vulnerable to XSS via cmis-online/type

A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type...

6.1CVSS8.3AI score0.0059EPSS

SaveExploits1References3

Github Security Blog•added 2026/05/08 6:32 a.m.•30 views

Alkacon OpenCms is vulnerable to XXE when the <!DOCTYPE> refers to an external host

Alkacon OpenCms before 16 allows XXE when the refers to an external host...

7.5CVSS8.3AI score0.00232EPSS

SaveExploits0References3Affected Software1

Github Security Blog•added 2026/05/08 6:32 a.m.•32 views

Alkacon OpenCms is vulnerable to XSS via updateModelGroups.jsp

A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp...

6.1CVSS8.4AI score0.00149EPSS

SaveExploits0References3Affected Software1

Github Security Blog•added 2026/05/08 6:32 a.m.•38 views

Alkacon OpenCms allows remote unauthenticated attackers to obtain sensitive information

Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/query XXE attack on a Chemistry servlet...

7.3CVSS8.4AI score0.0234EPSS

SaveExploits0References4Affected Software1

NVD•added 2026/05/08 5:16 a.m.•29 views

CVE-2023-42343

A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type...

6.1CVSS0.0059EPSS

SaveExploits1References1

NVD•added 2026/05/08 5:16 a.m.•32 views

CVE-2023-42345

A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp...

6.1CVSS0.00149EPSS

SaveExploits0References1

CNNVD•added 2026/05/08 12:00 a.m.•33 views

Alkacon OpenCMS cross-site scripting vulnerability

Alkacon OpenCMS is a content management system developed by Alkacon Corporation. Versions of Alkacon OpenCMS prior to version 16 contained a cross-site scripting vulnerability, which was caused by the updateModelGroups.jsp file allowing for cross-site scripting attacks...

6.1CVSS7.9AI score0.00149EPSS

SaveExploits0References1

EUVD•added 2026/05/08 12:00 a.m.•26 views

EUVD-2023-46798

A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp...

6.1CVSS8.4AI score0.00149EPSS

SaveExploits0References1

attackerkb•added 2026/05/08 12:00 a.m.•18 views

CVE-2023-42345

A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp...

8.4AI score0.00149EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2026/05/08 12:00 a.m.•6 views

CVE-2023-42343: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type...

6.1CVSS8.4AI score0.0059EPSS

SaveExploits1References2

Vulnrichment•added 2026/05/08 12:00 a.m.•16 views

CVE-2023-42345

A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp...

8.3AI score0.00149EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/05/08 12:00 a.m.•9 views

CVE-2023-42346: Improper Restriction of XML External Entity Reference

Alkacon OpenCms before 16 allows XXE when the refers to an external host...

7.5CVSS8.3AI score0.00232EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2026/05/08 12:00 a.m.•10 views

CVE-2023-42345: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp...

6.1CVSS8.4AI score0.00149EPSS

SaveExploits0References2

Cvelist•added 2026/05/08 12:00 a.m.•56 views

CVE-2023-42343

A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type...

0.0059EPSS

SaveExploits1References1

attackerkb•added 2026/05/08 12:00 a.m.•16 views

CVE-2023-42343

A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type...

8.4AI score0.0059EPSS

SaveExploits1References2

Vulnrichment•added 2026/05/08 12:00 a.m.•14 views

CVE-2023-42343

A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type...

8.3AI score0.0059EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by