Lucene search
+L

31221 matches found

NVD
NVD
added 2026/02/01 1:15 p.m.9 views

CVE-2021-47856

Easy Cart Shopping Cart 2021 contains a non-persistent cross-site scripting vulnerability in the search module's keyword parameter. Remote attackers can inject malicious script code through the search input to compromise user sessions and manipulate application content...

6.4CVSS0.00305EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/02/01 12:15 p.m.14 views

EUVD-2021-34751

WebMO Job Manager 20.0 contains a cross-site scripting vulnerability in search parameters that allows remote attackers to inject malicious script code. Attackers can exploit the filterSearch and filterSearchType parameters to perform non-persistent attacks including session hijacking and external...

5.4CVSS5.9AI score0.00264EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/01 12:15 p.m.6 views

CVE-2021-47920

WebMO Job Manager 20.0 contains a cross-site scripting vulnerability in search parameters that allows remote attackers to inject malicious script code. Attackers can exploit the filterSearch and filterSearchType parameters to perform non-persistent attacks including session hijacking and external...

5.4CVSS5.9AI score0.00264EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/01 12:15 p.m.5 views

CVE-2021-47920 WebMO Job Manager 20.0 Cross-Site Scripting via Search Parameters

WebMO Job Manager 20.0 contains a cross-site scripting vulnerability in search parameters that allows remote attackers to inject malicious script code. Attackers can exploit the filterSearch and filterSearchType parameters to perform non-persistent attacks including session hijacking and external...

5.4CVSS5.1AI score0.00264EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/01 12:15 p.m.46 views

CVE-2021-47920 WebMO Job Manager 20.0 Cross-Site Scripting via Search Parameters

WebMO Job Manager 20.0 contains a cross-site scripting vulnerability in search parameters that allows remote attackers to inject malicious script code. Attackers can exploit the filterSearch and filterSearchType parameters to perform non-persistent attacks including session hijacking and external...

5.4CVSS0.00264EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/01 12:15 p.m.21 views

CVE-2021-47920

CVE-2021-47920 affects WebMO Job Manager 20.0. The vulnerability is a cross-site scripting flaw in search parameters, exploitable through the filterSearch and filterSearchType fields, enabling remote attackers to inject script code. Described impacts include non-persistent attacks such as session...

5.4CVSS5.9AI score0.00264EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/01 12:15 p.m.4 views

CVE-2021-47856 Easy Cart Shopping Cart 2021 Cross-Site Scripting via Search Parameter

Easy Cart Shopping Cart 2021 contains a non-persistent cross-site scripting vulnerability in the search module's keyword parameter. Remote attackers can inject malicious script code through the search input to compromise user sessions and manipulate application content...

6.4CVSS5.2AI score0.00305EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/02/01 12:15 p.m.7 views

EUVD-2021-34764

Easy Cart Shopping Cart 2021 contains a non-persistent cross-site scripting vulnerability in the search module's keyword parameter. Remote attackers can inject malicious script code through the search input to compromise user sessions and manipulate application content...

6.4CVSS5.9AI score0.00305EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/01 12:15 p.m.5 views

CVE-2021-47856

Easy Cart Shopping Cart 2021 contains a non-persistent cross-site scripting vulnerability in the search module's keyword parameter. Remote attackers can inject malicious script code through the search input to compromise user sessions and manipulate application content...

6.4CVSS5.9AI score0.00305EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/02/01 12:15 p.m.17 views

CVE-2021-47856

CVE-2021-47856 affects Easy Cart Shopping Cart 2021, with a non-persistent cross-site scripting flaw in the search module’s keyword parameter. The underlying issue is XSS in the search input that can expose or manipulate user sessions and content. A PoC exploit is indicated in connected data, but...

6.4CVSS5.9AI score0.00305EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/01 12:15 p.m.34 views

CVE-2021-47856 Easy Cart Shopping Cart 2021 Cross-Site Scripting via Search Parameter

Easy Cart Shopping Cart 2021 contains a non-persistent cross-site scripting vulnerability in the search module's keyword parameter. Remote attackers can inject malicious script code through the search input to compromise user sessions and manipulate application content...

6.4CVSS0.00305EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/02/01 3:14 a.m.10 views

CVE-2025-36384

IBM Db2 for Windows 12.1.0 - 12.1.3 could allow a local user with filesystem access to escalate their privileges due to the use of an unquoted search path element...

8.4CVSS5.9AI score0.00163EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/01 12:0 a.m.10 views

PT-2026-5552

Easy Cart Shopping Cart 2021 contains a non-persistent cross-site scripting vulnerability in the search module's keyword parameter. Remote attackers can inject malicious script code through the search input to compromise user sessions and manipulate application content...

6.4CVSS5.9AI score0.00305EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/01 12:0 a.m.12 views

NetArt Media Easy Cart Shopping Cart 跨站脚本漏洞

NetArt Media Easy Cart Shopping Cart is a lightweight PHP e-commerce shopping system developed by NetArt Media in Bulgaria. The 2021 version of NetArt Media Easy Cart Shopping Cart contains a cross-site scripting vulnerability. This vulnerability stems from the non-persistent cross-site scripting...

6.4CVSS5.7AI score0.00305EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/01 12:0 a.m.28 views

PT-2026-5565

WebMO Job Manager 20.0 contains a cross-site scripting vulnerability in search parameters that allows remote attackers to inject malicious script code. Attackers can exploit the filterSearch and filterSearchType parameters to perform non-persistent attacks including session hijacking and external...

5.4CVSS5.9AI score0.00264EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/31 12:30 a.m.9 views

EUVD-2020-30940

Code Blocks 20.03 contains a denial of service vulnerability that allows attackers to crash the application by manipulating input in the FSymbols search field. Attackers can paste a large payload of 5000 repeated characters into the search field to trigger an application crash...

7.5CVSS5.9AI score0.00373EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/01/31 12:30 a.m.9 views

EUVD-2020-30942

e-Learning PHP Script 0.1.0 contains a SQL injection vulnerability in the search functionality that allows attackers to manipulate database queries through unvalidated user input. Attackers can inject malicious SQL code in the 'search' parameter to potentially extract, modify, or access sensitive...

8.8CVSS6AI score0.00362EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/31 12:30 a.m.8 views

EUVD-2025-206560

IBM Db2 for Windows 12.1.0 - 12.1.3 could allow a local user with filesystem access to escalate their privileges due to the use of an unquoted search path element...

8.4CVSS5.9AI score0.00163EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/31 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2020-37038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Code Blocks 20.03 contains a denial of service vulnerability that allows attackers to crash the application by manipulating input in the FSymbols search field...

7.5CVSS5.9AI score0.00373EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/30 11:16 p.m.8 views

DEBIAN-CVE-2020-37038

Code Blocks 20.03 contains a denial of service vulnerability that allows attackers to crash the application by manipulating input in the FSymbols search field. Attackers can paste a large payload of 5000 repeated characters into the search field to trigger an application crash...

7.5CVSS5.4AI score0.00373EPSS
SaveExploits0References1
Rows per page
Query Builder