Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
Filtering: Tag: javascript Clear
ID Title
CVE-2024-3166 Cross-Site Scripting (XSS) in mintplexlabs (CVE-2024-3166)
cross-site scripting in mintplexlabs (CVE-2024-3166). Successful exploitation can lead to full system takeover.
CVE-2024-4367 Vulnerability in pdfjs-dist (CVE-2024-4367)
vulnerability in pdfjs-dist (CVE-2024-4367). Successful exploitation can lead to full system takeover. Exploitable via ``isEvalSupported``. Mitigation: upgrade to `4.2.67` or later.
CVE-2023-6717 Cross-Site Scripting (XSS) in CVE-2023-6717 (CVE-2023-6717)
cross-site scripting in CVE-2023-6717 (CVE-2023-6717). Confidential information can be exposed externally.
CVE-2024-24398 Path Traversal in path-traversal (CVE-2024-24398)
path traversal in path-traversal (CVE-2024-24398). Successful exploitation can lead to full system takeover.
CVE-2024-24396 Cross-Site Scripting (XSS) in stimulsoft (CVE-2024-24396)
cross-site scripting in stimulsoft (CVE-2024-24396). Risk of unauthorized operations or information disclosure.
CVE-2024-24397 Cross-Site Scripting (XSS) in stimulsoft (CVE-2024-24397)
cross-site scripting in stimulsoft (CVE-2024-24397). Risk of unauthorized operations or information disclosure.
CVE-2024-0758 Cross-Site Scripting (XSS) in ipb-halle (CVE-2024-0758)
cross-site scripting in ipb-halle (CVE-2024-0758). Risk of unauthorized operations or information disclosure.
CVE-2024-22048 Cross-Site Scripting (XSS) in govuk (CVE-2024-22048)
cross-site scripting in govuk (CVE-2024-22048). Risk of unauthorized operations or information disclosure.
CVE-2024-21910 Cross-Site Scripting (XSS) in django-tinymce (CVE-2024-21910)
cross-site scripting in django-tinymce (CVE-2024-21910). Risk of unauthorized operations or information disclosure. Exploitable via ``image``. Mitigation: upgrade to `3.4.0` or later.
CVE-2024-21911 Cross-Site Scripting (XSS) in tiny (CVE-2024-21911)
cross-site scripting in tiny (CVE-2024-21911). Risk of unauthorized operations or information disclosure.
CVE-2024-21908 Cross-Site Scripting (XSS) in tiny (CVE-2024-21908)
cross-site scripting in tiny (CVE-2024-21908). Risk of unauthorized operations or information disclosure.
CVE-2023-48795 Vulnerability in russh (CVE-2023-48795)
vulnerability in russh (CVE-2023-48795). Data can be tampered with by attackers. Mitigation: upgrade to `0.40.2` or later.
CVE-2023-48238 Vulnerability in json-web-token (CVE-2023-48238)
vulnerability in json-web-token (CVE-2023-48238). Data can be tampered with by attackers. Exploitable via ``decode``. Mitigation: upgrade to `4.0.0` or later.
CVE-2023-46233 Vulnerability in crypto-js-project (CVE-2023-46233)
vulnerability in crypto-js-project (CVE-2023-46233). Confidential information can be exposed externally.
CVE-2023-45815 Cross-Site Scripting (XSS) in archivebox (CVE-2023-45815)
cross-site scripting in archivebox (CVE-2023-45815). Confidential information can be exposed externally. Mitigation: upgrade to `0.9.0` or later.
CVE-2023-40932 Cross-Site Scripting (XSS) in nagios (CVE-2023-40932)
cross-site scripting in nagios (CVE-2023-40932). Risk of unauthorized operations or information disclosure.
CVE-2023-30186 Use-After-Free in onlyoffice (CVE-2023-30186)
vulnerability in onlyoffice (CVE-2023-30186). Successful exploitation can lead to full system takeover.
CVE-2023-30187 Out-of-Bounds Write in onlyoffice (CVE-2023-30187)
out-of-bounds write in onlyoffice (CVE-2023-30187). Successful exploitation can lead to full system takeover.
CVE-2023-30188 Vulnerability in dos (CVE-2023-30188)
vulnerability in dos (CVE-2023-30188). Risk of unauthorized operations or information disclosure.
CVE-2023-26961 Cross-Site Scripting (XSS) in alteryx (CVE-2023-26961)
cross-site scripting in alteryx (CVE-2023-26961). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /gallery/api/media`.
CVE-2023-31868 Cross-Site Scripting (XSS) in sage (CVE-2023-31868)
cross-site scripting in sage (CVE-2023-31868). Risk of unauthorized operations or information disclosure.
CVE-2023-29549 Vulnerability in mozilla (CVE-2023-29549)
vulnerability in mozilla (CVE-2023-29549). Data can be tampered with by attackers.
CVE-2023-28606 js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.
js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.
CVE-2023-28607 js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip.
js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip.
CVE-2023-23326 Cross-Site Scripting (XSS) in avantfax (CVE-2023-23326)
cross-site scripting in avantfax (CVE-2023-23326). Risk of unauthorized operations or information disclosure.
CVE-2019-17003 Cross-Site Scripting (XSS) in mozilla (CVE-2019-17003)
cross-site scripting in mozilla (CVE-2019-17003). Risk of unauthorized operations or information disclosure.
CVE-2023-24027 In MISP 2.4.167, app/webroot/js/action_table.js allows XSS via a network history name.
In MISP 2.4.167, app/webroot/js/action_table.js allows XSS via a network history name.
CVE-2022-44303 Cross-Site Scripting (XSS) in resque-scheduler-project (CVE-2022-44303)
cross-site scripting in resque-scheduler-project (CVE-2022-44303). Risk of unauthorized operations or information disclosure.
CVE-2022-37721 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2022-37721)
cross-site scripting in privilege-escalation (CVE-2022-37721). Successful exploitation can lead to full system takeover.
CVE-2022-37720 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2022-37720)
cross-site scripting in privilege-escalation (CVE-2022-37720). Successful exploitation can lead to full system takeover.
CVE-2022-20969 Cross-Site Scripting (XSS) in cisco (CVE-2022-20969)
cross-site scripting in cisco (CVE-2022-20969). Risk of unauthorized operations or information disclosure.
CVE-2022-38901 Cross-Site Scripting (XSS) in liferay (CVE-2022-38901)
cross-site scripting in liferay (CVE-2022-38901). Risk of unauthorized operations or information disclosure.
CVE-2022-38902 Cross-Site Scripting (XSS) in liferay (CVE-2022-38902)
cross-site scripting in liferay (CVE-2022-38902). Risk of unauthorized operations or information disclosure.
CVE-2022-37257 Vulnerability in stealjs (CVE-2022-37257)
vulnerability in stealjs (CVE-2022-37257). Successful exploitation can lead to full system takeover.
CVE-2022-36083 Vulnerability in panva (CVE-2022-36083)
vulnerability in panva (CVE-2022-36083). Risk of unauthorized operations or information disclosure. Exploitable via ``p2c``.
CVE-2022-35554 Cross-Site Scripting (XSS) in bpcbt (CVE-2022-35554)
cross-site scripting in bpcbt (CVE-2022-35554). Risk of unauthorized operations or information disclosure.
CVE-2022-24654 Cross-Site Scripting (XSS) in intelbras (CVE-2022-24654)
cross-site scripting in intelbras (CVE-2022-24654). Risk of unauthorized operations or information disclosure.
CVE-2022-37434 Out-of-Bounds Write in c (CVE-2022-37434)
out-of-bounds write in c (CVE-2022-37434). Successful exploitation can lead to full system takeover.
CVE-2022-32114 Unrestricted File Upload in strapi (CVE-2022-32114)
vulnerability in strapi (CVE-2022-32114). Successful exploitation can lead to full system takeover.
CVE-2022-33098 Cross-Site Scripting (XSS) in magnolia-cms (CVE-2022-33098)
cross-site scripting in magnolia-cms (CVE-2022-33098). Risk of unauthorized operations or information disclosure.
CVE-2020-24085 Cross-Site Scripting (XSS) in misp-project (CVE-2020-24085)
cross-site scripting in misp-project (CVE-2020-24085). Risk of unauthorized operations or information disclosure.
CVE-2021-25325 Cross-Site Scripting (XSS) in misp-project (CVE-2021-25325)
cross-site scripting in misp-project (CVE-2021-25325). Risk of unauthorized operations or information disclosure.
CVE-2020-28210 Cross-Site Scripting (XSS) in schneider-electric (CVE-2020-28210)
cross-site scripting in schneider-electric (CVE-2020-28210). Risk of unauthorized operations or information disclosure.
CVE-2020-21731 Cross-Site Scripting (XSS) in gazie-project (CVE-2020-21731)
cross-site scripting in gazie-project (CVE-2020-21731). Risk of unauthorized operations or information disclosure.
CVE-2020-21732 Cross-Site Scripting (XSS) in rukovoditel (CVE-2020-21732)
cross-site scripting in rukovoditel (CVE-2020-21732). Risk of unauthorized operations or information disclosure.
CVE-2019-11814 Cross-Site Scripting (XSS) in misp-project (CVE-2019-11814)
cross-site scripting in misp-project (CVE-2019-11814). Risk of unauthorized operations or information disclosure.
CVE-2019-11813 Cross-Site Scripting (XSS) in misp-project (CVE-2019-11813)
cross-site scripting in misp-project (CVE-2019-11813). Risk of unauthorized operations or information disclosure.
CVE-2019-11812 Cross-Site Scripting (XSS) in misp-project (CVE-2019-11812)
cross-site scripting in misp-project (CVE-2019-11812). Risk of unauthorized operations or information disclosure.
CVE-2021-31674 Cross-Site Scripting (XSS) in cyclos (CVE-2021-31674)
cross-site scripting in cyclos (CVE-2021-31674). Risk of unauthorized operations or information disclosure.
CVE-2022-29532 Cross-Site Scripting (XSS) in misp-project (CVE-2022-29532)
cross-site scripting in misp-project (CVE-2022-29532). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →