Search vulnerabilities

Expected end of text, found ':' (at char 25), (line:1, col:26)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,897

CVE-2014-10398

Multiple cross-site scripting (XSS) vulnerabilities in bsi.dll in Bank Soft Systems (BSS) RBS BS-Client. Private Client (aka RBS BS-Client. Retail Client) 2.5, 2.4, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) DICTIONARY, (2) FILTERIDENT, (3) FROMSCHEME, (4) FromPoint, or (5) FName_0 parameter and a valid sid parameter value.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Bssys
Products
Rbs Bs-client. Retail Client
CVE-2014-10397

The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Para
Products
Antioch
CVE-2014-10396

The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/download.php.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Organizedthemes
Products
Epic
CVE-2014-10394

The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Saschart
Products
Rich Counter
CVE-2014-10386

The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
3cx
Products
Live Chat