CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7529 matches found

Positive Technologies•added 2023/05/02 12:00 a.m.•19 views

PT-2023-22412 · Asus · Asus Rt-Ac51U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC51U wireless router firmware versions up to and including 3.0.0.4.380.8591 Description: A Cross-site scripting XSS vulnerability in the System Log/General Log page of the administrator web UI allows remote attackers to inject...

5.2CVSS5.8AI score0.11237EPSS

SaveExploits1References4

Vulnrichment•added 2023/05/02 12:00 a.m.•18 views

CVE-2023-29772

A Cross-site scripting XSS vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router firmware version up to and including 3.0.0.4.380.8591 allows remote attackers to inject arbitrary web script or HTML via a malicious network request...

5.1AI score0.11237EPSS

SaveExploits1References1

CVE•added 2023/05/02 12:00 a.m.•78 views

CVE-2023-29772

Affected product/version: ASUS RT-AC51U wireless router firmware up to and including 3.0.0.4.380.8591. Vulnerability: Cross-site scripting (XSS) on the System Log/General Log page of the administrator web UI, allowing remote attackers to inject arbitrary web script or HTML via a malicious network...

5.2CVSS5AI score0.11237EPSS

SaveExploits1References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2023/05/02 12:00 a.m.•8 views

CVE-2023-29772: Improper Neutralization of Input During Web Page Generation

5.2CVSS5.8AI score0.11237EPSS

SaveExploits1References3

Cvelist•added 2023/05/02 12:00 a.m.•39 views

CVE-2023-29772

5.3AI score0.11237EPSS

SaveExploits1References1

NVD•added 2023/04/29 3:15 a.m.•42 views

CVE-2022-43871

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS4.8AI score0.00371EPSS

SaveExploits0References2

Prion•added 2023/04/29 3:15 a.m.•30 views

Cross site scripting

4.9CVSS5.2AI score0.00371EPSS

SaveExploits0References2Affected Software1

CVE•added 2023/04/29 2:42 a.m.•86 views

CVE-2022-43871

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is affected by a cross-site scripting vulnerability in the Web UI. The issue allows embedding arbitrary JavaScript, potentially leading to credentials disclosure in a trusted session. Remediation per IBM Security Bulletin: install Fix Pac...

5.4CVSS4.8AI score0.00371EPSS

SaveExploits0References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2023/04/29 12:00 a.m.•7 views

CVE-2022-43871: Improper Neutralization of Input During Web Page Generation

5.4CVSS5.7AI score0.00371EPSS

SaveExploits0References2

osv_cve•added 2023/04/27 2:15 p.m.•6 views

CVE-2023-24966

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

6.1CVSS6AI score0.00399EPSS

SaveExploits0References2

Prion•added 2023/04/27 2:15 p.m.•20 views

Cross site scripting

5.8CVSS5.8AI score0.00399EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2023/04/27 1:08 p.m.•28 views

CVE-2023-24966 IBM WebSphere Application Server cross-site scripting

6.1CVSS6AI score0.00399EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2023/04/27 12:00 a.m.•2 views

CVE-2023-24966: Improper Neutralization of Input During Web Page Generation

6.1CVSS5.7AI score0.00399EPSS

SaveExploits0References2

NVD•added 2023/04/07 2:15 p.m.•26 views

CVE-2022-43914

IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 241036...

5.4CVSS4.8AI score0.00371EPSS

SaveExploits0References2

Prion•added 2023/04/07 2:15 p.m.•24 views

Cross site scripting

4.9CVSS5.2AI score0.00371EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2023/04/07 1:26 p.m.•34 views

CVE-2022-43914 IBM TRIRIGA Application Platform cross-site scripting

4.6CVSS5.3AI score0.00371EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2023/04/07 12:00 a.m.•9 views

CVE-2022-43914: Improper Neutralization of Input During Web Page Generation

5.4CVSS5.7AI score0.00371EPSS

SaveExploits0References2

Oracle linux•added 2023/04/05 12:00 a.m.•38 views

pcs security update

0.11.3-4.el91.3 - Fixed a vulnerability in pcs-web-ui-node-modules - Resolves: rhbz2179900...

9.8CVSS9AI score0.01409EPSS

SaveExploits0

Vulnrichment•added 2023/04/05 12:00 a.m.•16 views

CVE-2023-20132 Cisco Webex Meetings Web UI Vulnerabilities

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

5.4CVSS6.1AI score0.00446EPSS

SaveExploits0References1

NVD•added 2023/04/02 9:15 p.m.•13 views

CVE-2023-26283

IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 248416...

5.4CVSS5.2AI score0.00371EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by