Lucene search
+L

18304 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 1:25 a.m.15 views

CVE-2010-1515

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS 2.0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 keyword or 2 article-id parameter in conjunction with a /admin/news/article/list PATHINFO; the 3 keyword parameter in conjunction...

2.6CVSS6AI score0.01028EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:21 a.m.15 views

CVE-2010-4778

Multiple cross-site scripting XSS vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allow remote attackers to inject arbitrary web script or HTML via the 1 username aka fmusername, 2 password aka fmpassword, or 3 server aka fmserver...

4.3CVSS6AI score0.04979EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:13 a.m.8 views

CVE-2017-10975

Cross-site scripting XSS vulnerability in Lutim before 0.8 might allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is mishandled in an upload notification and in the myfiles component, if the attacker can convince the victim to proceed with an upload despit...

6.1CVSS5.3AI score0.00766EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:11 a.m.15 views

CVE-2013-0933

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.00942EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:08 a.m.10 views

CVE-2010-1008

Cross-site scripting XSS vulnerability in the Sellector.com Widget Integration chsellector extension before 0.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.01022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:51 a.m.12 views

CVE-2015-8759

Cross-site scripting XSS vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field...

5.4CVSS5.4AI score0.00643EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:50 a.m.9 views

CVE-2015-6753

Multiple cross-site scripting XSS vulnerabilities in the Quick Edit module 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via an 1 entity title, related to in-place editing, or a 2 node title...

3.5CVSS5.6AI score0.00774EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:49 a.m.16 views

CVE-2013-5690

Multiple cross-site scripting XSS vulnerabilities in Open-Xchange AppSuite before 7.2.2 allow remote authenticated users to inject arbitrary web script or HTML via 1 content with the text/xml MIME type or 2 the Status comment field of an appointment...

3.5CVSS5.5AI score0.00767EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:44 a.m.14 views

CVE-2015-5529

Multiple cross-site scripting XSS vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 name parameter to dashboard/settings/categories/, 2 title or 3 rel parameter to dashboard/settings/links/, or 4 url parameter to...

4.3CVSS5.9AI score0.03999EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:42 a.m.12 views

CVE-2012-5176

Cross-site scripting XSS vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to tag embedding...

4.3CVSS5.8AI score0.01148EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:34 a.m.11 views

CVE-2014-3761

Cross-site scripting XSS vulnerability in D-Link DAP 1150 with firmware 1.2.94 allows remote attackers to inject arbitrary web script or HTML via the resbuf parameter to index.cgi in the Control/URL-filter section...

4.3CVSS6AI score0.00995EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:29 a.m.10 views

CVE-2010-0328

Cross-site scripting XSS vulnerability in the Unit Converter cs2unitconv extension 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.0103EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:22 a.m.12 views

CVE-2005-3730

Multiple cross-site scripting XSS vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the 1 resourcetype, 2 objectmap, and 3 redirect parameters, possibly involving setWebSpace.jsp...

4.3CVSS6.1AI score0.01736EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:20 a.m.15 views

CVE-2005-1582

Cross-site scripting XSS vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 nom, 2 email, 3 siteweb, or 4 commentaire variables...

4.3CVSS6AI score0.0101EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:17 a.m.14 views

CVE-2005-2042

Cross-site scripting XSS vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags...

4.3CVSS6AI score0.01177EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:13 a.m.14 views

CVE-2005-4649

Multiple cross-site scripting XSS vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to inject arbitrary web script or HTML via 1 the entry parameter in index.php and 2 the gbid parameter in comment.php. NOTE: The index.php/entry vector might be resultant from CVE-2005-154...

7.5CVSS5.9AI score0.01242EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:07 a.m.15 views

CVE-2009-3486

Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...

3.5CVSS5.6AI score0.01248EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:07 a.m.17 views

CVE-2009-5000

Multiple cross-site scripting XSS vulnerabilities in the Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 4.0.2.x before 4.0.2.3-P8AE-FP003 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to .jsp pages...

4.3CVSS5.8AI score0.00845EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 11:56 p.m.11 views

CVE-2009-0245

Cross-site scripting XSS vulnerability in Usagi Project MyNETS 1.2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4629...

4.3CVSS5.9AI score0.01223EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 11:11 p.m.15 views

CVE-2004-2246

Cross-site scripting XSS vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or web script via the conversationid parameter to viewpic.php...

4.3CVSS6AI score0.0269EPSS
SaveExploits2References1
Rows per page
Query Builder