Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
Filtering: Tag: cwe-79 Clear
ID Title
CVE-2017-14192 Cross-Site Scripting (XSS) in finecms-project (CVE-2017-14192)
cross-site scripting in finecms-project (CVE-2017-14192). Risk of unauthorized operations or information disclosure.
CVE-2017-14193 Cross-Site Scripting (XSS) in finecms-project (CVE-2017-14193)
cross-site scripting in finecms-project (CVE-2017-14193). Risk of unauthorized operations or information disclosure. Exploitable via `Referer header`.
CVE-2017-14194 Cross-Site Scripting (XSS) in finecms-project (CVE-2017-14194)
cross-site scripting in finecms-project (CVE-2017-14194). Risk of unauthorized operations or information disclosure. Exploitable via `Referer header`.
CVE-2017-14195 Cross-Site Scripting (XSS) in finecms-project (CVE-2017-14195)
cross-site scripting in finecms-project (CVE-2017-14195). Risk of unauthorized operations or information disclosure. Exploitable via `Referer header`.
CVE-2017-1098 Cross-Site Scripting (XSS) in ibm (CVE-2017-1098)
cross-site scripting in ibm (CVE-2017-1098). Risk of unauthorized operations or information disclosure.
CVE-2017-1189 Cross-Site Scripting (XSS) in ibm (CVE-2017-1189)
cross-site scripting in ibm (CVE-2017-1189). Risk of unauthorized operations or information disclosure.
CVE-2017-1502 Cross-Site Scripting (XSS) in ibm (CVE-2017-1502)
cross-site scripting in ibm (CVE-2017-1502). Risk of unauthorized operations or information disclosure.
CVE-2017-12416 Cross-Site Scripting (XSS) in paloaltonetworks (CVE-2017-12416)
cross-site scripting in paloaltonetworks (CVE-2017-12416). Risk of unauthorized operations or information disclosure.
CVE-2017-12794 Cross-Site Scripting (XSS) in django (CVE-2017-12794)
cross-site scripting in django (CVE-2017-12794). Risk of unauthorized operations or information disclosure.
CVE-2017-12906 Cross-Site Scripting (XSS) in nexusphp-project (CVE-2017-12906)
cross-site scripting in nexusphp-project (CVE-2017-12906). Risk of unauthorized operations or information disclosure.
CVE-2017-13754 Cross-Site Scripting (XSS) in wibu (CVE-2017-13754)
cross-site scripting in wibu (CVE-2017-13754). Risk of unauthorized operations or information disclosure.
CVE-2015-3161 Cross-Site Scripting (XSS) in beaker-project (CVE-2015-3161)
cross-site scripting in beaker-project (CVE-2015-3161). Risk of unauthorized operations or information disclosure.
CVE-2015-3162 Cross-Site Scripting (XSS) in beaker-project (CVE-2015-3162)
cross-site scripting in beaker-project (CVE-2015-3162). Risk of unauthorized operations or information disclosure.
CVE-2017-1457 Cross-Site Scripting (XSS) in ibm (CVE-2017-1457)
cross-site scripting in ibm (CVE-2017-1457). Risk of unauthorized operations or information disclosure.
CVE-2017-14126 The Participants Database plugin before 1.7.5.10 for WordPress has XSS.
The Participants Database plugin before 1.7.5.10 for WordPress has XSS.
CVE-2015-7711 Cross-Site Scripting (XSS) in atutor (CVE-2015-7711)
cross-site scripting in atutor (CVE-2015-7711). Risk of unauthorized operations or information disclosure.
CVE-2017-7855 Cross-Site Scripting (XSS) in icewarp (CVE-2017-7855)
cross-site scripting in icewarp (CVE-2017-7855). Risk of unauthorized operations or information disclosure.
CVE-2016-10508 Cross-Site Scripting (XSS) in phpthumb-project (CVE-2016-10508)
cross-site scripting in phpthumb-project (CVE-2016-10508). Risk of unauthorized operations or information disclosure.
CVE-2016-10510 Cross-Site Scripting (XSS) in kohanaframework (CVE-2016-10510)
cross-site scripting in kohanaframework (CVE-2016-10510). Risk of unauthorized operations or information disclosure.
CVE-2017-14070 Cross-Site Scripting (XSS) in nexusphp (CVE-2017-14070)
cross-site scripting in nexusphp (CVE-2017-14070). Risk of unauthorized operations or information disclosure.
CVE-2016-0713 Cross-Site Scripting (XSS) in cloudfoundry (CVE-2016-0713)
cross-site scripting in cloudfoundry (CVE-2016-0713). Risk of unauthorized operations or information disclosure.
CVE-2017-1444 Cross-Site Scripting (XSS) in ibm (CVE-2017-1444)
cross-site scripting in ibm (CVE-2017-1444). Risk of unauthorized operations or information disclosure.
CVE-2017-1447 Cross-Site Scripting (XSS) in ibm (CVE-2017-1447)
cross-site scripting in ibm (CVE-2017-1447). Risk of unauthorized operations or information disclosure.
CVE-2017-14049 Cross-Site Scripting (XSS) in blackcat-cms (CVE-2017-14049)
cross-site scripting in blackcat-cms (CVE-2017-14049). Risk of unauthorized operations or information disclosure.
CVE-2017-14036 CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS.
CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS.
CVE-2017-1443 Cross-Site Scripting (XSS) in ibm (CVE-2017-1443)
cross-site scripting in ibm (CVE-2017-1443). Risk of unauthorized operations or information disclosure.
CVE-2017-1445 Cross-Site Scripting (XSS) in ibm (CVE-2017-1445)
cross-site scripting in ibm (CVE-2017-1445). Risk of unauthorized operations or information disclosure.
CVE-2017-1446 Cross-Site Scripting (XSS) in ibm (CVE-2017-1446)
cross-site scripting in ibm (CVE-2017-1446). Risk of unauthorized operations or information disclosure.
CVE-2016-6800 Cross-Site Scripting (XSS) in apache (CVE-2016-6800)
cross-site scripting in apache (CVE-2016-6800). Risk of unauthorized operations or information disclosure.
CVE-2017-13778 Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter.
Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter.
CVE-2017-13762 ONOS versions 1.8.0, 1.9.0, and 1.10.0 are vulnerable to XSS.
ONOS versions 1.8.0, 1.9.0, and 1.10.0 are vulnerable to XSS.
CVE-2016-2967 Cross-Site Scripting (XSS) in ibm (CVE-2016-2967)
cross-site scripting in ibm (CVE-2016-2967). Risk of unauthorized operations or information disclosure.
CVE-2016-2975 Cross-Site Scripting (XSS) in ibm (CVE-2016-2975)
cross-site scripting in ibm (CVE-2016-2975). Risk of unauthorized operations or information disclosure.
CVE-2017-1427 Cross-Site Scripting (XSS) in ibm (CVE-2017-1427)
cross-site scripting in ibm (CVE-2017-1427). Risk of unauthorized operations or information disclosure.
CVE-2017-1485 Cross-Site Scripting (XSS) in ibm (CVE-2017-1485)
cross-site scripting in ibm (CVE-2017-1485). Risk of unauthorized operations or information disclosure.
CVE-2017-1535 Cross-Site Scripting (XSS) in ibm (CVE-2017-1535)
cross-site scripting in ibm (CVE-2017-1535). Risk of unauthorized operations or information disclosure.
CVE-2013-7433 Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!.
Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!.
CVE-2017-3150 Cross-Site Scripting (XSS) in apache (CVE-2017-3150)
cross-site scripting in apache (CVE-2017-3150). Risk of unauthorized operations or information disclosure.
CVE-2017-3151 Cross-Site Scripting (XSS) in apache (CVE-2017-3151)
cross-site scripting in apache (CVE-2017-3151). Risk of unauthorized operations or information disclosure.
CVE-2017-3152 Cross-Site Scripting (XSS) in apache (CVE-2017-3152)
cross-site scripting in apache (CVE-2017-3152). Risk of unauthorized operations or information disclosure.
CVE-2017-3153 Cross-Site Scripting (XSS) in apache (CVE-2017-3153)
cross-site scripting in apache (CVE-2017-3153). Risk of unauthorized operations or information disclosure.
CVE-2017-3155 Cross-Site Scripting (XSS) in apache (CVE-2017-3155)
cross-site scripting in apache (CVE-2017-3155). Risk of unauthorized operations or information disclosure.
CVE-2016-2973 Cross-Site Scripting (XSS) in ibm (CVE-2016-2973)
cross-site scripting in ibm (CVE-2016-2973). Risk of unauthorized operations or information disclosure.
CVE-2016-2979 Cross-Site Scripting (XSS) in ibm (CVE-2016-2979)
cross-site scripting in ibm (CVE-2016-2979). Risk of unauthorized operations or information disclosure.
CVE-2015-6588 Cross-Site Scripting (XSS) in modx (CVE-2015-6588)
cross-site scripting in modx (CVE-2015-6588). Risk of unauthorized operations or information disclosure.
CVE-2015-6942 Cross-Site Scripting (XSS) in coremail (CVE-2015-6942)
cross-site scripting in coremail (CVE-2015-6942). Risk of unauthorized operations or information disclosure.
CVE-2017-12856 Cross-Site Scripting (XSS) in c (CVE-2017-12856)
cross-site scripting in c (CVE-2017-12856). Risk of unauthorized operations or information disclosure.
CVE-2017-10837 Cross-Site Scripting (XSS) in backup-guard (CVE-2017-10837)
cross-site scripting in backup-guard (CVE-2017-10837). Risk of unauthorized operations or information disclosure.
CVE-2017-10838 Cross-Site Scripting (XSS) in seopanel (CVE-2017-10838)
cross-site scripting in seopanel (CVE-2017-10838). Risk of unauthorized operations or information disclosure.
CVE-2017-10840 Cross-Site Scripting (XSS) in webcalendar-project (CVE-2017-10840)
cross-site scripting in webcalendar-project (CVE-2017-10840). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →