CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

10 matches found

Kitploit•added 2026/09/15 8:43 a.m.•9 views

CVE-2021-26084_Confluence

CVE-2021-26084 - Confluence Server Webwork OGNL インジェクション OGNL インジェクションの脆弱性が存在し、認証されたユーザー、および場合によっては認証されていないユーザーが、Confluence Server または Data Center インスタンス上で任意のコードを実行できる可能性があります。重要...

9.8CVSS8.4AI score0.99999EPSS

SaveExploits46References1

Kitploit•added 2026/09/08 4:20 p.m.•8 views

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084、Atlassian Confluence の OGNL インジェクションの脆弱性 Atlassian Confluence は企業で広く使用されている Wiki システムであり、一部のバージョンには OGNL 式インジェクションの脆弱性が存在します。攻撃者はこの脆弱性を利用して、ユーザーを必要とせずに対象の Confluence 上で任意のコードを実行できます。 queryStringパラメータによる任意コマンド実行 root@kitploit:...

9.8CVSS7.9AI score0.99999EPSS

SaveExploits46References2

Packet Storm News•added 2026/02/02 12:00 a.m.•23 views

TWiki 6.0.1 Cross Site Scripting

A cross site scripting vulnerability exists in TWiki version 6.0.1 via the QUERYSTRING parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. This issue is older research added to the archive...

4.3CVSS5.2AI score0.01903EPSS

SaveExploits2

EUVD•added 2025/10/07 12:30 a.m.•13 views

EUVD-2008-6693

Malware in sbrugna...

4.3CVSS6.4AI score0.01074EPSS

SaveExploits0References6

RedhatCVE•added 2025/04/11 4:02 p.m.•23 views

CVE-2025-32371

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. A url could be crafted to the DNN ImageHandler to render text from a querystring parameter. This text would display in the resulting image and a user that trusts the domain might think that t...

4.3CVSS6.4AI score0.00295EPSS

SaveExploits0References1

OSV•added 2020/09/09 6:15 p.m.•15 views

CVE-2020-13127

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...

8.8CVSS7.6AI score0.01378EPSS

SaveExploits1References2

OSV•added 2018/11/16 6:29 p.m.•12 views

CVE-2018-18761

SaltOS 3.1 r8126 allows action=login&querystring=&user=SQL SQL Injection...

9.8CVSS5.8AI score0.16456EPSS

SaveExploits5References1

ATTACKERKB•added 2009/04/21 6:30 p.m.•6 views

CVE-2008-6733

Cross-site scripting XSS vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter...

4.3CVSS5.9AI score0.01074EPSS

SaveExploits0References6

NVD•added 2009/04/21 6:30 p.m.•23 views

CVE-2008-6733

Cross-site scripting XSS vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter...

4.3CVSS5.7AI score0.01074EPSS

SaveExploits0References5

Prion•added 2009/04/21 6:30 p.m.•25 views

Cross site scripting

Cross-site scripting XSS vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter...

4.3CVSS6.1AI score0.01074EPSS

SaveExploits0References5Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by