Lucene search
+L

27451 matches found

CVE
CVE
added 2017/05/22 4:00 p.m.53 views

CVE-2016-4903

CVE-2016-4903 is a cross-site scripting vulnerability affecting WP-OliveCart versions before 3.1.3 and WP-OliveCartPro versions before 3.1.8. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially enabling script execution in a user’s browser...

6.1CVSS6.4AI score0.01195EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2017/05/22 4:00 p.m.31 views

CVE-2016-4903

Cross-site scripting vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.3AI score0.01195EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2017/05/22 4:00 p.m.29 views

CVE-2017-2174

Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1AI score0.01195EPSS
SaveExploits0References3
OSV
OSV
added 2017/05/17 9:29 p.m.11 views

CVE-2017-4015

Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header...

4.5CVSS5.9AI score0.01198EPSS
SaveExploits0References2
CVE
CVE
added 2017/05/17 2:00 p.m.55 views

CVE-2015-3998

phpwhois version 4.2.5 used in the WordPress adsense-click-fraud-monitoring plugin version 1.7.5 is documented to have a cross-site scripting (XSS) vulnerability. An attacker can inject arbitrary script or HTML via the query parameter to whois.php. The linked reports confirm the affected componen...

6.1CVSS6AI score0.01117EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2017/05/17 2:00 p.m.24 views

CVE-2015-3998

Cross-site scripting XSS vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 for WordPress, allows remote attackers to inject arbitrary web script or HTML via the query parameter to whois.php...

6.1AI score0.01117EPSS
SaveExploits0References1
OSV
OSV
added 2017/05/12 6:29 p.m.22 views

CVE-2016-4880

Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

5.4CVSS5.9AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2017/05/12 6:29 p.m.21 views

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6.8AI score0.01946EPSS
SaveExploits0References3
Prion
Prion
added 2017/05/12 6:29 p.m.27 views

Cross site scripting

Cross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3.x prior to 6.3.5 allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...

3.5CVSS6.2AI score0.00976EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2017/05/12 6:29 p.m.9 views

CVE-2016-4856

Cross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3.x prior to 6.3.5 allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...

4.8CVSS5.9AI score0.00976EPSS
SaveExploits0References3
Prion
Prion
added 2017/05/12 6:29 p.m.24 views

Cross site scripting

Cross-site scripting vulnerability in Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

3.5CVSS5AI score0.00775EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2017/05/12 6:29 p.m.25 views

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6.1AI score
SaveExploits0References4
NVD
NVD
added 2017/05/12 6:29 p.m.22 views

CVE-2017-2164

Cross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6.1AI score0.00842EPSS
SaveExploits0References1
Prion
Prion
added 2017/05/12 6:29 p.m.21 views

Cross site scripting

Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

3.5CVSS6.6AI score0.00902EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2017/05/12 6:29 p.m.22 views

Cross site scripting

Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

3.5CVSS6.1AI score0.00897EPSS
SaveExploits0References3Affected Software2
NVD
NVD
added 2017/05/12 6:29 p.m.20 views

CVE-2016-4877

Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

5.4CVSS5AI score0.00897EPSS
SaveExploits0References3
OSV
OSV
added 2017/05/12 6:29 p.m.9 views

CVE-2017-2122

Cross-site scripting vulnerability in Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

5.4CVSS5.9AI score0.00775EPSS
SaveExploits0References2
Prion
Prion
added 2017/05/12 6:29 p.m.15 views

Cross site scripting

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6.4AI score0.01946EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2017/05/12 6:29 p.m.23 views

Cross site scripting

Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

3.5CVSS6.2AI score0.00921EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2017/05/12 6:29 p.m.22 views

CVE-2016-4855

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6.2AI score0.01946EPSS
SaveExploits0References4
Rows per page
Query Builder