Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

5576 matches found

OSV
OSV•added 2017/03/21 6:59 a.m.•26 views

CVE-2017-7203

A Cross-Site Scripting XSS was discovered in ZoneMinder before 1.30.2. The vulnerability exists due to insufficient filtration of user-supplied data postLoginQuery passed to the "ZoneMinder-master/web/skins/classic/views/js/postlogin.js.php" URL. An attacker could execute arbitrary HTML and scrip...

6.1CVSS5.9AI score
SaveExploits0References2
Prion
Prion•added 2017/03/21 6:59 a.m.•16 views

Cross site scripting

A Cross-Site Scripting XSS was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of user-supplied data name passed to the "imdbphp-master/demo/search.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

4.3CVSS5.9AI score0.00717EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve•added 2017/03/21 6:59 a.m.•22 views

CVE-2017-7203

A Cross-Site Scripting XSS was discovered in ZoneMinder before 1.30.2. The vulnerability exists due to insufficient filtration of user-supplied data postLoginQuery passed to the "ZoneMinder-master/web/skins/classic/views/js/postlogin.js.php" URL. An attacker could execute arbitrary HTML and scrip...

6.1CVSS7AI score0.00812EPSS
SaveExploits1References2
NVD
NVD•added 2017/03/21 6:59 a.m.•18 views

CVE-2017-7202

Multiple Cross-Site Scripting XSS were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supplied data id passed to the 'slims7cendana-master/template/default/detailtemplate.php' and...

6.1CVSS6.1AI score0.00693EPSS
SaveExploits1References2
NVD
NVD•added 2017/03/21 6:59 a.m.•13 views

CVE-2017-7204

A Cross-Site Scripting XSS was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of user-supplied data name passed to the "imdbphp-master/demo/search.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

6.1CVSS5.9AI score0.00717EPSS
SaveExploits1References2
Prion
Prion•added 2017/03/21 6:59 a.m.•19 views

Cross site scripting

A Cross-Site Scripting XSS was discovered in ZoneMinder before 1.30.2. The vulnerability exists due to insufficient filtration of user-supplied data postLoginQuery passed to the "ZoneMinder-master/web/skins/classic/views/js/postlogin.js.php" URL. An attacker could execute arbitrary HTML and scrip...

4.3CVSS6AI score0.00812EPSS
SaveExploits1References2Affected Software1
OSV
OSV•added 2017/03/21 6:59 a.m.•16 views

CVE-2017-7204

A Cross-Site Scripting XSS was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of user-supplied data name passed to the "imdbphp-master/demo/search.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

6.1CVSS5.9AI score
SaveExploits0References2
OSV
OSV•added 2017/03/21 6:59 a.m.•18 views

CVE-2017-7205

A Cross-Site Scripting XSS was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtration of user-supplied data a passed to the "GamePanelX-V3-master/ajax/ajax.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the...

6.1CVSS5.9AI score
SaveExploits0References2
Debian CVE
Debian CVE•added 2017/03/21 6:21 a.m.•46 views

CVE-2017-7203

A Cross-Site Scripting XSS was discovered in ZoneMinder before 1.30.2. The vulnerability exists due to insufficient filtration of user-supplied data postLoginQuery passed to the "ZoneMinder-master/web/skins/classic/views/js/postlogin.js.php" URL. An attacker could execute arbitrary HTML and scrip...

6.1CVSS2.7AI score0.00812EPSS
SaveExploits1
Cvelist
Cvelist•added 2017/03/21 6:21 a.m.•31 views

CVE-2017-7204

A Cross-Site Scripting XSS was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of user-supplied data name passed to the "imdbphp-master/demo/search.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

5.9AI score0.00717EPSS
SaveExploits1References2
Cvelist
Cvelist•added 2017/03/21 6:21 a.m.•37 views

CVE-2017-7203

A Cross-Site Scripting XSS was discovered in ZoneMinder before 1.30.2. The vulnerability exists due to insufficient filtration of user-supplied data postLoginQuery passed to the "ZoneMinder-master/web/skins/classic/views/js/postlogin.js.php" URL. An attacker could execute arbitrary HTML and scrip...

6AI score0.00812EPSS
SaveExploits1References2
Cvelist
Cvelist•added 2017/03/21 6:21 a.m.•33 views

CVE-2017-7202

Multiple Cross-Site Scripting XSS were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supplied data id passed to the 'slims7cendana-master/template/default/detailtemplate.php' and...

6.1AI score0.00693EPSS
SaveExploits1References2
NVD
NVD•added 2017/03/15 12:59 a.m.•23 views

CVE-2017-6905

An issue was discovered in concrete5 = 5.6.3.4. The vulnerability exists due to insufficient filtration of user-supplied data disablechoose passed to the "concrete5-legacy-master/web/concrete/tools/files/searchdialog.php" URL. An attacker could execute arbitrary HTML and script code in a browser ...

6.1CVSS6.4AI score0.00989EPSS
SaveExploits0References4
OSV
OSV•added 2017/03/15 12:59 a.m.•16 views

CVE-2017-6906

An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-supplied data log passed to the "SiberianCMS-master/errors/500.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

6.1CVSS7.1AI score
SaveExploits0References2
Prion
Prion•added 2017/03/15 12:59 a.m.•20 views

Authorization

An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-supplied data log passed to the "SiberianCMS-master/errors/500.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

4.3CVSS6.4AI score0.00747EPSS
SaveExploits0References2Affected Software1
NVD
NVD•added 2017/03/15 12:59 a.m.•24 views

CVE-2017-6906

An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-supplied data log passed to the "SiberianCMS-master/errors/500.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

6.1CVSS6.4AI score0.00747EPSS
SaveExploits0References2
Prion
Prion•added 2017/03/15 12:59 a.m.•23 views

Authorization

An issue was discovered in Open.GL before 2017-03-13. The vulnerability exists due to insufficient filtration of user-supplied data content passed to the "Open.GL-master/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

4.3CVSS6.4AI score0.00743EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2017/03/15 12:00 a.m.•27 views

CVE-2017-6909

An issue was discovered in Shimmie = 2.5.1. The vulnerability exists due to insufficient filtration of user-supplied data log passed to the "shimmie2-master/ext/chatbox/history/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

6.4AI score0.00758EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2017/03/15 12:00 a.m.•33 views

CVE-2017-6906

An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-supplied data log passed to the "SiberianCMS-master/errors/500.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

6.4AI score0.00747EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2017/03/15 12:00 a.m.•27 views

CVE-2017-6905

An issue was discovered in concrete5 = 5.6.3.4. The vulnerability exists due to insufficient filtration of user-supplied data disablechoose passed to the "concrete5-legacy-master/web/concrete/tools/files/searchdialog.php" URL. An attacker could execute arbitrary HTML and script code in a browser ...

6.4AI score0.00989EPSS
SaveExploits0References4
Rows per page
Query Builder