CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7523 matches found

NVD•added 2023/05/12 2:15 a.m.•29 views

CVE-2023-28520

IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 250454...

6.4CVSS5.8AI score0.0035EPSS

SaveExploits0References2

Prion•added 2023/05/12 2:15 a.m.•27 views

Cross site scripting

4.9CVSS5.2AI score0.0035EPSS

SaveExploits0References2Affected Software1

NVD•added 2023/05/12 1:15 a.m.•25 views

CVE-2021-39036

IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213966...

6.1CVSS6AI score0.00528EPSS

SaveExploits0References3

Prion•added 2023/05/12 1:15 a.m.•33 views

Cross site scripting

5.8CVSS5.8AI score0.00528EPSS

SaveExploits0References3Affected Software1

CVE•added 2023/05/12 1:11 a.m.•73 views

CVE-2023-28520

IBM Planning Analytics Local 2.0 is affected by a stored cross-site scripting vulnerability (CVE-2023-28520) in the Web UI. The issue stems from inadequate filtering/escaping of user-supplied input, enabling an attacker to embed arbitrary JavaScript in the Web UI and potentially disclose credenti...

6.4CVSS5.3AI score0.0035EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2023/05/12 12:49 a.m.•42 views

CVE-2021-39036 IBM Cognos Analytics cross-site scripting

6.1CVSS6.1AI score0.00528EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2023/05/12 12:00 a.m.•5 views

CVE-2023-28520: Improper Neutralization of Input During Web Page Generation

6.4CVSS5.7AI score0.0035EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2023/05/12 12:00 a.m.•2 views

CVE-2021-39036: Improper Neutralization of Input During Web Page Generation

6.1CVSS5.7AI score0.00528EPSS

SaveExploits0References2

NVD•added 2023/05/06 3:15 a.m.•39 views

CVE-2023-24957

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

5.4CVSS5.4AI score0.00371EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2023/05/06 12:00 a.m.•3 views

CVE-2023-24957: Improper Neutralization of Input During Web Page Generation

5.4CVSS5.7AI score0.00371EPSS

SaveExploits0References3

Prion•added 2023/05/05 7:15 p.m.•33 views

Cross site scripting

IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

4.9CVSS5.2AI score0.00371EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2023/05/05 6:20 p.m.•46 views

CVE-2022-43866 IBM Maximo Asset Management cross-site scripting

5.4CVSS5.3AI score0.00371EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2023/05/05 12:00 a.m.•3 views

CVE-2022-43866: Improper Neutralization of Input During Web Page Generation

5.4CVSS5.7AI score0.00371EPSS

SaveExploits0References3

NVD•added 2023/05/02 1:15 p.m.•22 views

CVE-2023-29772

A Cross-site scripting XSS vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router firmware version up to and including 3.0.0.4.380.8591 allows remote attackers to inject arbitrary web script or HTML via a malicious network request...

5.2CVSS5.1AI score0.11237EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2023/05/02 12:00 a.m.•8 views

CVE-2023-29772: Improper Neutralization of Input During Web Page Generation

5.2CVSS5.8AI score0.11237EPSS

SaveExploits1References3

Vulnrichment•added 2023/05/02 12:00 a.m.•18 views

CVE-2023-29772

5.1AI score0.11237EPSS

SaveExploits1References1

Positive Technologies•added 2023/05/02 12:00 a.m.•19 views

PT-2023-22412 · Asus · Asus Rt-Ac51U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC51U wireless router firmware versions up to and including 3.0.0.4.380.8591 Description: A Cross-site scripting XSS vulnerability in the System Log/General Log page of the administrator web UI allows remote attackers to inject...

5.2CVSS5.8AI score0.11237EPSS

SaveExploits1References4

Cvelist•added 2023/05/02 12:00 a.m.•39 views

CVE-2023-29772

5.3AI score0.11237EPSS

SaveExploits1References1

CVE•added 2023/05/02 12:00 a.m.•78 views

CVE-2023-29772

Affected product/version: ASUS RT-AC51U wireless router firmware up to and including 3.0.0.4.380.8591. Vulnerability: Cross-site scripting (XSS) on the System Log/General Log page of the administrator web UI, allowing remote attackers to inject arbitrary web script or HTML via a malicious network...

5.2CVSS5AI score0.11237EPSS

SaveExploits1References1Affected Software1

NVD•added 2023/04/29 3:15 a.m.•42 views

CVE-2022-43871

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS4.8AI score0.00371EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by