Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (88023 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2019-17496 1 Craftcms 1 Craft Cms 2024-11-21 6.1 Medium
Craft CMS before 3.3.8 has stored XSS via a name field. This field is mishandled during site deletion.
CVE-2019-17494 1 Laravel-bjyblog Project 1 Laravel-bjyblog 2024-11-21 6.1 Medium
laravel-bjyblog 6.1.1 has XSS via a crafted URL.
CVE-2019-17493 1 Jnoj 1 Jiangnan Online Judge 2024-11-21 6.1 Medium
Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web/admin/problem/create or web/polygon/problem/update.
CVE-2019-17491 1 Jnoj 1 Jiangnan Online Judge 2024-11-21 6.1 Medium
Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web/admin/problem/create or web/polygon/problem/update.
CVE-2019-17489 1 Jnoj 1 Jiangnan Online Judge 2024-11-21 6.1 Medium
Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create or web/polygon/problem/update or web/admin/problem/create.
CVE-2019-17488 1 B3log 1 Symphony 2024-11-21 6.1 Medium
b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header.
CVE-2019-17434 1 Lavalite 1 Lavalite 2024-11-21 5.4 Medium
LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen.
CVE-2019-17433 1 Laravel-admin 1 Laravel-admin 2024-11-21 4.8 Medium
z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation log" screen.
CVE-2019-17432 1 Fastadmin 1 Fastadmin 2024-11-21 6.5 Medium
An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/admin/general.config/edit CSRF vulnerability, as demonstrated by resultant XSS via the row[name] parameter.
CVE-2019-17430 1 Eyoucms 1 Eyoucms 2024-11-21 6.1 Medium
EyouCms through 2019-07-11 has XSS related to the login.php web_recordnum parameter.
CVE-2019-17427 1 Redmine 1 Redmine 2024-11-21 6.1 Medium
In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors.
CVE-2019-17424 1 Nipper-ng Project 1 Nipper-ng 2024-11-21 7.8 High
A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file.
CVE-2019-17417 1 Pbootcms 1 Pbootcms 2024-11-21 4.8 Medium
PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs.
CVE-2019-17409 1 Open-emr 1 Openemr 2024-11-21 6.1 Medium
Reflected XSS exists in interface/forms/eye_mag/view.php in OpenEMR 5.x before 5.0.2.1 ia the id parameter.
CVE-2019-17405 1 Nokia 1 Impact 2024-11-21 6.1 Medium
Nokia IMPACT < 18A: has Reflected self XSS
CVE-2019-17391 1 Espressif 8 Esp32-d0wd, Esp32-d0wd Firmware, Esp32-d2wd and 5 more 2024-11-21 4.6 Medium
An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage bootloader of the ESP32 chip allows an attacker (with physical access to the device) to read the contents of read-protected eFuses, such as flash encryption and secure boot keys, by injecting a glitch into the power supply of the chip shortly after reset.
CVE-2019-17388 4 Aviatrix, Freebsd, Linux and 1 more 4 Vpn Client, Freebsd, Linux Kernel and 1 more 2024-11-21 7.8 High
Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications.
CVE-2019-17385 1 Eleopard 1 Animate It\! 2024-11-21 6.1 Medium
The animate-it plugin before 2.3.5 for WordPress has XSS.
CVE-2019-17384 1 Eleopard 1 Animate It\! 2024-11-21 6.1 Medium
The animate-it plugin before 2.3.4 for WordPress has XSS.
CVE-2019-17380 1 Cpanel 1 Cpanel 2024-11-21 6.1 Medium
cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface (SEC-528).