26217 matches found
CVE-2021-22291: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2...
CVE-2025-0609
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Logo Software Inc. Logo Cloud allows Cross-Site Scripting XSS. This issue affects Logo Cloud: before 1.18...
EUVD-2025-32527
Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing.This issue affects Logo Cloud: before 2.57...
CVE-2025-60961: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts...
PT-2025-40995
Name of the Vulnerable Software and Affected Versions Kibana versions 8.18.8 through 8.19.5 Kibana versions 9.0.8 through 9.1.5 Description The software contains an issue related to the improper neutralization of input during web page generation. This can lead to Stored Cross-Site Scripting XSS...
PT-2025-40885
Name of the Vulnerable Software and Affected Versions Logo Cloud versions prior to 1.18 Description A flaw exists in Logo Cloud that allows for Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The vulnerability could potentially allow an...
CVE-2025-60967: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information...
PT-2025-40883
Name of the Vulnerable Software and Affected Versions Logo Cloud versions prior to 2.57 Description An issue exists in Logo Cloud that allows for phishing attacks due to improper encoding or escaping of output. This can lead to cross-site scripting XSS where malicious code is injected into web...
CVE-2025-11282: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Frappe LMS 2.34.x/2.35.0. The impacted element is an unknown function of the component Incomplete Fix CVE-2025-55006. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been made public and could b...
CVE-2025-11278: Improper Neutralization of Input During Web Page Generation
A security vulnerability has been detected in AllStarLink Supermon up to 6.2. This vulnerability affects unknown code of the component AllMon2. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor...
EUVD-2025-24707
Malicious code in bioql PyPI...
EUVD-2025-24724
Malicious code in bioql PyPI...
EUVD-2025-24758
Malicious code in bioql PyPI...
EUVD-2025-24764
Malicious code in bioql PyPI...
EUVD-2025-24771
Malicious code in bioql PyPI...
EUVD-2025-24903
Malicious code in bioql PyPI...
EUVD-2025-24906
Malicious code in bioql PyPI...
EUVD-2025-24918
Malicious code in bioql PyPI...