Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (43398 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-15051 1 Articatech 1 Artica Proxy 2024-11-21 6.1 Medium
An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields.
CVE-2020-15041 1 Php-fusion 1 Php-fusion 2024-11-21 4.8 Medium
PHP-Fusion 9.03.60 allows XSS via the administration/site_links.php Add Site Link field.
CVE-2020-15038 1 Seedprod 1 Coming Soon Page\, Under Construction \& Maintenance Mode 2024-11-21 5.4 Medium
The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS.
CVE-2020-15037 1 Nedi 1 Nedi 2024-11-21 5.4 Medium
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Reports-Devices.php page st[] parameter.
CVE-2020-15036 1 Nedi 1 Nedi 2024-11-21 5.4 Medium
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Linked.php dv parameter.
CVE-2020-15035 1 Nedi 1 Nedi 2024-11-21 5.4 Medium
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Map.php hde parameter.
CVE-2020-15034 1 Nedi 1 Nedi 2024-11-21 5.4 Medium
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Setup.php tet parameter.
CVE-2020-15033 1 Nedi 1 Nedi 2024-11-21 5.4 Medium
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the snmpget.php ip parameter.
CVE-2020-15032 1 Nedi 1 Nedi 2024-11-21 5.4 Medium
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Incidents.php id parameter.
CVE-2020-15031 1 Nedi 1 Nedi 2024-11-21 5.4 Medium
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Assets-Management.php chg parameter.
CVE-2020-15030 1 Nedi 1 Nedi 2024-11-21 5.4 Medium
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Routes.php rtr parameter.
CVE-2020-15029 1 Nedi 1 Nedi 2024-11-21 5.4 Medium
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Assets-Management.php sn parameter.
CVE-2020-15028 1 Nedi 1 Nedi 2024-11-21 5.4 Medium
NeDi 1.9C is vulnerable to a cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Map.php xo parameter.
CVE-2020-15020 1 Elementor 1 Website Builder 2024-11-21 5.4 Medium
An issue was discovered in the Elementor plugin through 2.9.13 for WordPress. An authenticated attacker can achieve stored XSS via the Name Your Template field.
CVE-2020-15017 1 Nedi 1 Nedi 2024-11-21 6.1 Medium
NeDi 1.9C is vulnerable to reflected cross-site scripting. The Devices-Config.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the sta GET parameter.
CVE-2020-15016 1 Nedi 1 Nedi 2024-11-21 6.1 Medium
NeDi 1.9C is vulnerable to reflected cross-site scripting. The Other-Converter.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the txt GET parameter.
CVE-2020-15015 1 Gleamtech 1 Fileultimate 2024-11-21 6.1 Medium
The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document.
CVE-2020-15011 4 Canonical, Debian, Gnu and 1 more 4 Ubuntu Linux, Debian Linux, Mailman and 1 more 2024-11-21 4.3 Medium
GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
CVE-2020-15006 1 Bludit 1 Bludit 2024-11-21 5.4 Medium
Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php.
CVE-2020-15004 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 4.8 Medium
OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS.