Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (51439 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2015-0918 1 Sefrengo 1 Sefrengo 2025-04-12 N/A
Cross-site scripting (XSS) vulnerability in the administrative backend in Sefrengo before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter to backend/main.php.
CVE-2015-0937 1 Blue Coat 1 Malware Analysis Appliance 2025-04-12 N/A
Cross-site scripting (XSS) vulnerability in search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2015-0950 1 Qualiteam 1 X-cart 2025-04-12 N/A
Cross-site scripting (XSS) vulnerability in admin.php in X-Cart 5.1.6 through 5.1.10 allows remote attackers to inject arbitrary web script or HTML via the substring parameter.
CVE-2015-0967 1 Searchblox 1 Searchblox 2025-04-12 N/A
Multiple cross-site scripting (XSS) vulnerabilities in SearchBlox before 8.2 allow remote attackers to inject arbitrary web script or HTML via (1) the search field in plugin/index.html or (2) the title field in the Create Featured Result form in admin/main.jsp.
CVE-2015-0976 1 Inductiveautomation 1 Ignition 2025-04-12 N/A
Cross-site scripting (XSS) vulnerability in Inductive Automation Ignition 7.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2015-1000004 1 Filedownload Project 1 Filedownload 2025-04-12 N/A
XSS in filedownload v1.4 wordpress plugin
CVE-2016-1000132 1 Cminds 1 Tooltip Glossary 2025-04-12 N/A
Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8
CVE-2016-1000131 1 E-search Project 1 Esearch 2025-04-12 N/A
Reflected XSS in wordpress plugin e-search v1.0
CVE-2016-1000130 1 E-search Project 1 E-search 2025-04-12 N/A
Reflected XSS in wordpress plugin e-search v1.0
CVE-2016-1000129 1 Defa-online-image-protector Project 1 Defa-online-image-protector 2025-04-12 N/A
Reflected XSS in wordpress plugin defa-online-image-protector v3.3
CVE-2016-1000128 1 Anti-plagiarism Project 1 Anti-plagiarism 2025-04-12 N/A
Reflected XSS in wordpress plugin anti-plagiarism v3.60
CVE-2016-1000127 1 Ajax-random-post Project 1 Ajax-random-post 2025-04-12 N/A
Reflected XSS in wordpress plugin ajax-random-post v2.00
CVE-2015-1039 1 Zfcuser Project 1 Zfcuser 2025-04-12 N/A
Cross-site scripting (XSS) vulnerability in user/login.phtml in ZF-Commons ZfcUser before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter.
CVE-2016-1000126 1 Admin-font-editor Project 1 Admin-font-editor 2025-04-12 N/A
Reflected XSS in wordpress plugin admin-font-editor v1.8
CVE-2016-1000121 1 Huge-it 1 Slider 2025-04-12 N/A
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
CVE-2015-1057 1 E107 1 E107 2025-04-12 N/A
Cross-site scripting (XSS) vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary web script or HTML via the "Real Name" value.
CVE-2015-1028 1 Dlink 2 Dsl-2730b, Dsl-2730b Firmware 2025-04-12 N/A
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2730B router (rev C1) with firmware GE_1.01 allow remote authenticated users to inject arbitrary web script or HTML via the (1) domainname parameter to dnsProxy.cmd (DNS Proxy Configuration Panel); the (2) brName parameter to lancfg2get.cgi (Lan Configuration Panel); the (3) wlAuthMode, (4) wl_wsc_reg, or (5) wl_wsc_mode parameter to wlsecrefresh.wl (Wireless Security Panel); or the (6) wlWpaPsk parameter to wlsecurity.wl (Wireless Password Viewer).
CVE-2016-1000119 1 Huge-it 1 Catalog 2025-04-12 N/A
SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
CVE-2016-1000118 1 Huge-it 1 Slideshow 2025-04-12 N/A
XSS & SQLi in HugeIT slideshow v1.0.4
CVE-2016-1000117 1 Huge-it 1 Slideshow 2025-04-12 N/A
XSS & SQLi in HugeIT slideshow v1.0.4