Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

979368 matches found

NVD
NVD•added 2026/05/20 8:16 p.m.•21 views

CVE-2026-35013

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in streetview.php that allows authenticated attackers to inject arbitrary JavaScript by passing unsanitized values through the thelat and thelng GET parameters directly into JavaScript variable assignments...

5.1CVSS0.00221EPSS
SaveExploits0References3
NVD
NVD•added 2026/05/20 8:16 p.m.•24 views

CVE-2026-35008

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticketid GET parameter directly into an HTML attribute. Attackers can craft a...

5.1CVSS0.00221EPSS
SaveExploits0References3
NVD
NVD•added 2026/05/20 8:16 p.m.•16 views

CVE-2026-35007

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in singleunit.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the id GET parameter directly into an HTML attribute. Attackers can craft a maliciou...

5.1CVSS0.00221EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2026/05/20 7:41 p.m.•43 views

CVE-2026-35016 Open ISES Tickets < 3.44.2 Reflected XSS via search.php frm_query Parameter

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frmquery POST parameter directly into an HTML input field VALUE attribute. Attackers...

5.1CVSS0.00221EPSS
SaveExploits0References3
CVE
CVE•added 2026/05/20 7:41 p.m.•26 views

CVE-2026-35016

Open ISES Tickets prior to 3.44.2 is vulnerable to a reflected XSS in search.php. The issue arises when an unsanitized value is passed via the frm_query POST parameter, which gets injected into an HTML input field VALUE attribute and echoed back to the user. Exploitation requires authentication a...

5.1CVSS5.8AI score0.00221EPSS
SaveExploits0References3
OSV
OSV•added 2026/05/20 7:41 p.m.•12 views

CVE-2026-35016 Open ISES Tickets < 3.44.2 Reflected XSS via search.php frm_query Parameter

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frmquery POST parameter directly into an HTML input field VALUE attribute. Attackers...

5.1CVSS6AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB•added 2026/05/20 7:41 p.m.•13 views

CVE-2026-35016

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frmquery POST parameter directly into an HTML input field VALUE attribute. Attackers...

5.1CVSS5.8AI score0.00221EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2026/05/20 7:40 p.m.•41 views

CVE-2026-35015 Open ISES Tickets < 3.44.2 Reflected XSS via do_unit_mail.php the_ticket Parameter

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in dounitmail.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the theticket GET parameter directly into a JavaScript variable assignment. Attacker...

5.1CVSS0.00221EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2026/05/20 7:40 p.m.•10 views

CVE-2026-35015 Open ISES Tickets < 3.44.2 Reflected XSS via do_unit_mail.php the_ticket Parameter

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in dounitmail.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the theticket GET parameter directly into a JavaScript variable assignment. Attacker...

5.1CVSS5.8AI score0.00221EPSS
SaveExploits0References3
OSV
OSV•added 2026/05/20 7:40 p.m.•7 views

CVE-2026-35015 Open ISES Tickets < 3.44.2 Reflected XSS via do_unit_mail.php the_ticket Parameter

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in dounitmail.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the theticket GET parameter directly into a JavaScript variable assignment. Attacker...

5.1CVSS5.9AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB•added 2026/05/20 7:40 p.m.•10 views

CVE-2026-35015

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in dounitmail.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the theticket GET parameter directly into a JavaScript variable assignment. Attacker...

5.1CVSS5.8AI score0.00221EPSS
SaveExploits0References4
CVE
CVE•added 2026/05/20 7:40 p.m.•29 views

CVE-2026-35015

Open ISES Tickets before 3.44.2 is vulnerable to a reflected XSS in do_unit_mail.php via the_ticket parameter. An authenticated attacker can inject arbitrary JavaScript by passing an unsanitized value into the_ticket, which is then inserted into a JavaScript variable assignment and executed when ...

5.1CVSS5.8AI score0.00221EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2026/05/20 7:40 p.m.•11 views

CVE-2026-35014 Open ISES Tickets < 3.44.2 Reflected XSS via routes_nm.php ticket_id Parameter

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routesnm.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticketid GET parameter directly into a hidden input field VALUE attribute. Attacke...

5.1CVSS5.8AI score0.00229EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB•added 2026/05/20 7:40 p.m.•14 views

CVE-2026-35014

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routesnm.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticketid GET parameter directly into a hidden input field VALUE attribute. Attacke...

5.1CVSS5.8AI score0.00229EPSS
SaveExploits0References4
CVE
CVE•added 2026/05/20 7:40 p.m.•27 views

CVE-2026-35014

Open ISES Tickets before 3.44.2 is affected by a reflected XSS in routes_nm.php. The vulnerability allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value in the ticket_id GET parameter, which is placed into a hidden input VALUE attribute and executed in the ...

5.1CVSS5.8AI score0.00229EPSS
SaveExploits0References3
EUVD
EUVD•added 2026/05/20 7:40 p.m.•17 views

EUVD-2026-31184

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routesnm.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticketid GET parameter directly into a hidden input field VALUE attribute. Attacke...

5.1CVSS5.8AI score0.00229EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2026/05/20 7:39 p.m.•50 views

CVE-2026-35013 Open ISES Tickets < 3.44.2 Reflected XSS via street_view.php thelat and thelng Parameters

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in streetview.php that allows authenticated attackers to inject arbitrary JavaScript by passing unsanitized values through the thelat and thelng GET parameters directly into JavaScript variable assignments...

5.1CVSS0.00221EPSS
SaveExploits0References3
CVE
CVE•added 2026/05/20 7:39 p.m.•23 views

CVE-2026-35013

Open ISES Tickets prior to 3.44.2 is affected by a reflected XSS in street_view.php. The vulnerability lets authenticated attackers inject arbitrary JavaScript by passing unsanitized values in thelat and thelng GET parameters, which get embedded into JavaScript variable assignments and executed i...

5.1CVSS5.8AI score0.00221EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB•added 2026/05/20 7:39 p.m.•10 views

CVE-2026-35013

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in streetview.php that allows authenticated attackers to inject arbitrary JavaScript by passing unsanitized values through the thelat and thelng GET parameters directly into JavaScript variable assignments...

5.1CVSS5.8AI score0.00221EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2026/05/20 7:39 p.m.•8 views

CVE-2026-35013 Open ISES Tickets < 3.44.2 Reflected XSS via street_view.php thelat and thelng Parameters

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in streetview.php that allows authenticated attackers to inject arbitrary JavaScript by passing unsanitized values through the thelat and thelng GET parameters directly into JavaScript variable assignments...

5.1CVSS5.8AI score0.00221EPSS
SaveExploits0References3
Rows per page
Query Builder