Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 51,949

CVE-2024-7368

SourceCodester Simple Realtime Quiz System ajax.php cross site scripting

A vulnerability has been found in SourceCodester Simple Realtime Quiz System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /ajax.php?action=save_quiz. The manipulation of the argument title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273352.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Oretnom23 Sourcecodester
Products
Simple Realtime Quiz System Simple Realtime Quiz System
CVE-2024-7466

PMWeb Web Application Firewall cross site scripting

A vulnerability has been found in PMWeb 7.2.00 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Web Application Firewall. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273559. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Pmweb
Products
Pmweb
CVE-2020-23064

jquery: Cross-site scripting

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-2020-11023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 3.1 · 6.3 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Amq Broker
CVE-2017-16012

js-jquery: XSS in responses from cross-origin ajax requests

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9251. Reason: This candidate is a duplicate of CVE-2015-9251. Notes: All CVE users should reference CVE-2015-9251 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 6.8 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Jboss Fuse Jboss Single Sign On
CVE-2016-2144

Sat5: XSS in uset details

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-0284. Reason: This candidate is a reservation duplicate of CVE-2015-0284. Notes: All CVE users should reference CVE-2015-0284 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 2.0 · 4.3 Medium EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2013-6406

Horizon: Nova strings persistent XSS

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-6858. Reason: This candidate is a reservation duplicate of CVE-2013-6858. Notes: All CVE users should reference CVE-2013-6858 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 2.0 · 4.3 Medium EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2012-2639

(SimpleHTTPServer): XSS attacks against Internet Explorer 7 via UTF-7 encoding

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4940. Reason: This candidate is a reservation duplicate of CVE-2011-4940. Notes: All CVE users should reference CVE-2011-4940 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 2.0 · 4.3 Medium EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2007-5317

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5292. Reason: This candidate is a duplicate of CVE-2007-5292. Notes: All CVE users should reference CVE-2007-5292 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—