Lucene search
+L

11072 matches found

NVD
NVD
added 2025/12/29 10:15 p.m.11 views

CVE-2025-68504

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSearch jet-search allows DOM-Based XSS.This issue affects JetSearch: from n/a through = 3.5.16...

6.5CVSS0.00178EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/29 6:15 p.m.6 views

CVE-2025-55063

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS0.00148EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/29 6:15 p.m.10 views

CVE-2025-55062

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS0.00148EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/29 6:15 p.m.7 views

CVE-2025-55064

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS0.00148EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/29 5:23 p.m.7 views

EUVD-2025-205628

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.1AI score0.00148EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/29 5:19 p.m.8 views

EUVD-2025-205621

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.1AI score0.00148EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/29 5:19 p.m.3 views

CVE-2025-55063 Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.2AI score0.00148EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/29 5:19 p.m.14 views

CVE-2025-55063

CVE-2025-55063 is described across multiple sources as CWE-79: improper neutralization of input during web page generation, i.e., a Cross-site Scripting (XSS) vulnerability. The connected documents consistently identify XSS as the core issue (improper input neutralization) but do not provide prec...

4.8CVSS6.2AI score0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/29 5:18 p.m.34 views

CVE-2025-55062 Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS0.00148EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/29 5:18 p.m.10 views

EUVD-2025-205625

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.1AI score0.00148EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/29 7:28 a.m.6 views

Security Bulletin: Vulnerability in cipher-base affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in cipher-base has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

9.1CVSS6.7AI score0.00504EPSS
SaveExploits1Affected Software2
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.11 views

Priority Web 跨站脚本漏洞

Priority Web is the Web side of an Enterprise Resource Planning system from Priority Israel. A cross-site scripting vulnerability exists in Priority Web that stems from improper input neutralization and could lead to a cross-site scripting attack...

4.8CVSS5.6AI score0.00148EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.8 views

Priority Web 跨站脚本漏洞

Priority Web is the Web side of an Enterprise Resource Planning system from Priority Israel. A cross-site scripting vulnerability exists in Priority Web that stems from improper input neutralization and could lead to a cross-site scripting attack...

4.8CVSS5.6AI score0.00148EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.7 views

ljharb qs 安全漏洞

ljharb qs is a query string parser with nesting support by Jordan Harband, an individual developer in the United States. A security vulnerability exists in ljharb qs versions prior to 6.14.1 that stems from improper input validation and could lead to an HTTP denial of service attack...

6.3CVSS6.8AI score0.00417EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.8 views

PT-2025-53766

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The software is susceptible to a cross-site scripting XSS issue due to improper input neutralization during web page generation. This allows for the injection o...

4.8CVSS6AI score0.00148EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.11 views

PT-2025-53770

Name of the Vulnerable Software and Affected Versions affected versions not specified Description The software suffers from an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for the injection of malicious scripts into web pages. Th...

4.8CVSS6.8AI score0.00148EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/12/27 12:5 a.m.26 views

CVE-2025-67349

A cross-site scripting XSS vulnerability was identified in FluentCMS 1.2.3. After logging in as an admin and navigating to the "Add Page" function, the application fails to properly sanitize input in the...

6.1CVSS5.9AI score0.00266EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/26 2:8 p.m.8 views

CVE-2025-2405

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Titarus allows Cross-Site Scripting XSS.This issue affects Titarus: before 2.144.4...

7.6CVSS5.9AI score0.00284EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/26 4:20 a.m.39 views

CVE-2025-52600

CVE-2025-52600 affects Hanwha Vision cameras; vulnerability in camera video analytics due to improper input validation could allow a remote attacker to execute commands on the host PC. Patch firmware has been released by the manufacturer. Connected Nessus/NVD entries reiterate the same descriptio...

7.2CVSS6.5AI score0.00376EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/26 4:20 a.m.5 views

CVE-2025-52600 Improper Input Validation

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems ICS and OT/IoT security, has discovered a vulnerability in camera video analytics that Improper input validation. This vulnerability could allow an attacker to execute specific commands on the...

5.2CVSS6.8AI score0.00376EPSS
SaveExploits0References1
Rows per page
Query Builder