CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1263 matches found

Rapid7 Vulnerability Database (full)•added 2016/03/19 12:00 a.m.•3 views

CVE-2016-0283: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the OpenID Connect OIDC client web application in IBM WebSphere Application Server WAS Liberty Profile 8.5.5 before 8.5.5.9 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

6.1CVSS6.4AI score0.01449EPSS

SaveExploits0References2

Friends Of PHP•added 1970/01/01 12:00 a.m.•23 views

CVE-2026-45069: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims

More info at https://symfony.com/cve-2026-45069...

9.1CVSS5.8AI score0.00258EPSS

SaveExploits0Affected Software1

Friends Of PHP•added 1970/01/01 12:00 a.m.•20 views

CVE-2026-45069: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims

More info at https://symfony.com/cve-2026-45069...

9.1CVSS5.8AI score0.00258EPSS

SaveExploits0Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by