Export limit exceeded: 348029 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 348029 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 45703 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (45703 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2021-40968 | 1 Spotweb Project | 1 Spotweb | 2024-11-21 | 6.1 Medium |
| Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter. | ||||
| CVE-2021-40928 | 1 Glimmrtv | 1 Flextv | 2024-11-21 | 6.1 Medium |
| Cross-site scripting (XSS) vulnerability in index.php in FlexTV beta development version allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF parameter. | ||||
| CVE-2021-40927 | 1 Alfred-spotify-mini-player | 1 Alfred Spotify Mini Player | 2024-11-21 | 6.1 Medium |
| Cross-site scripting (XSS) vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary web script or HTML via the error parameter. | ||||
| CVE-2021-40926 | 1 Getid3 | 1 Getid3 | 2024-11-21 | 6.1 Medium |
| Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter. | ||||
| CVE-2021-40925 | 1 Faveohelpdesk | 1 Faveo | 2024-11-21 | 6.1 Medium |
| Cross-site scripting (XSS) vulnerability in dompdf/dompdf/www/demo.php infaveo-helpdesk v1.11.0 and below allow remote attackers to inject arbitrary web script or HTML via the $_SERVER["PHP_SELF"] parameter. | ||||
| CVE-2021-40924 | 1 Pixeline | 1 Bugs | 2024-11-21 | 6.1 Medium |
| Cross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the first_name parameter. | ||||
| CVE-2021-40923 | 1 Pixeline | 1 Bugs | 2024-11-21 | 6.1 Medium |
| Cross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter. | ||||
| CVE-2021-40922 | 1 Pixeline | 1 Bugs | 2024-11-21 | 6.1 Medium |
| Cross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the last_name parameter. | ||||
| CVE-2021-40921 | 1 Detector Project | 1 Detector | 2024-11-21 | 6.1 Medium |
| Cross-site scripting (XSS) vulnerability in _contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter. | ||||
| CVE-2021-40910 | 1 Phpcms | 1 Phpcms | 2024-11-21 | 6.1 Medium |
| There is a reflective cross-site scripting (XSS) vulnerability in the PHPCMS V9.6.3 management side. | ||||
| CVE-2021-40909 | 1 Php Crud Without Refresh\/reload Using Ajax And Datatables Tutorial Project | 1 Php Crud Without Refresh\/reload Using Ajax And Datatables Tutorial | 2024-11-21 | 9.6 Critical |
| Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud. | ||||
| CVE-2021-40906 | 2 Checkmk, Tribe29 | 2 Checkmk, Checkmk | 2024-11-21 | 6.1 Medium |
| CheckMK Raw Edition software (versions 1.5.0 to 1.6.0) does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser (such as JavaScript or other client-side scripts) or to steal the session cookies of a user who has previously authenticated via a man in the middle. Successful exploitation requires access to the web service resource without authentication. | ||||
| CVE-2021-40903 | 1 Antminer Monitor Project | 1 Antminer Monitor | 2024-11-21 | 9.8 Critical |
| A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static. | ||||
| CVE-2021-40902 | 1 Flatcore | 1 Flatcore-cms | 2024-11-21 | 5.4 Medium |
| flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page" option through the index page. | ||||
| CVE-2021-40888 | 1 Projectsend | 1 Projectsend | 2024-11-21 | 5.4 Medium |
| Projectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization when echo output data in returnFilesIds() function. A low privilege user can call this function through process.php file and execute scripting code. | ||||
| CVE-2021-40882 | 1 Piwigo | 1 Piwigo | 2024-11-21 | 6.1 Medium |
| A Cross Site Scripting (XSS) vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location. | ||||
| CVE-2021-40868 | 1 Cloudron | 1 Cloudron | 2024-11-21 | 6.1 Medium |
| In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS. | ||||
| CVE-2021-40840 | 1 Liveconfig | 1 Liveconfig | 2024-11-21 | 5.4 Medium |
| A Stored XSS issue exists in the admin/users user administration form in LiveConfig 2.12.2. | ||||
| CVE-2021-40813 | 1 Element-it | 1 Http Commander | 2024-11-21 | 5.4 Medium |
| A cross-site scripting (XSS) vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote authenticated users to inject arbitrary web script or HTML via filenames. | ||||
| CVE-2021-40678 | 1 Piwigo | 1 Piwigo | 2024-11-21 | 5.4 Medium |
| In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit. | ||||