CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6665 matches found

NVD•added 2021/04/29 6:15 p.m.•13 views

CVE-2021-1458

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

4.8CVSS0.00109EPSS

Exploits0References1

NVD•added 2021/04/29 6:15 p.m.•12 views

CVE-2021-1457

4.8CVSS0.00138EPSS

Exploits0References1

Prion•added 2021/04/29 6:15 p.m.•17 views

Cross site scripting

3.5CVSS5AI score0.00306EPSS

Exploits0References1Affected Software1

Prion•added 2021/04/29 6:15 p.m.•17 views

Cross site scripting

3.5CVSS5AI score0.00138EPSS

Exploits0References1Affected Software1

Prion•added 2021/04/29 6:15 p.m.•11 views

Cross site scripting

3.5CVSS5AI score0.00187EPSS

Exploits0References1Affected Software1

Vulnrichment•added 2021/04/29 5:30 p.m.•9 views

CVE-2021-1457 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

4.8CVSS6.1AI score0.00138EPSS

Exploits0References1

Cvelist•added 2021/04/29 5:30 p.m.•15 views

CVE-2021-1457 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

4.8CVSS5.3AI score0.00138EPSS

Exploits0References1

NVD•added 2021/04/27 6:15 p.m.•10 views

CVE-2020-21987

HomeAutomation 3.3.2 is affected by persistent Cross Site Scripting XSS. XSS vulnerabilities occur when input passed via several parameters to several scripts is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's...

6.1CVSS0.00234EPSS

Exploits2References2

CVE•added 2021/04/27 5:37 p.m.•58 views

CVE-2020-21987

CVE-2020-21987 affects HomeAutomation v3.3.2. The vulnerability is persistent Cross Site Scripting (XSS) caused by insufficient sanitization of input passed via multiple parameters to several scripts, allowing arbitrary HTML/script execution in a user’s browser session. Multiple connected sources...

6.1CVSS6.2AI score0.00234EPSS

Exploits2References2Affected Software1

Github Security Blog•added 2021/04/13 3:19 p.m.•38 views

Cross-site Scripting in vis-timeline

This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application...

6.8CVSS6.5AI score0.00517EPSS

Exploits1References8Affected Software1

NVD•added 2021/04/08 4:15 a.m.•17 views

CVE-2021-1407

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unity Connection...

6.1CVSS0.00339EPSS

Exploits0References1

Prion•added 2021/04/08 4:15 a.m.•18 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface do...

4.3CVSS5.9AI score0.00339EPSS

Exploits0References1Affected Software2

Prion•added 2021/04/08 4:15 a.m.•19 views

Cross site scripting

4.3CVSS6.1AI score0.00346EPSS

Exploits0References1Affected Software3

Prion•added 2021/04/08 4:15 a.m.•18 views

Cross site scripting

4.3CVSS6.1AI score0.00346EPSS

Exploits0References1Affected Software3

Prion•added 2021/04/08 4:15 a.m.•27 views

Cross site scripting