Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-1001 1 Domoticz 1 Domoticz 2026-03-26 4.8 Medium
Domoticz versions prior to 2026.1 contain a stored cross-site scripting vulnerability in the Add Hardware and rename device functionality of the web interface that allows authenticated administrators to execute arbitrary scripts by supplying crafted names containing script or HTML markup. Attackers can inject malicious code that is stored and rendered without proper output encoding, causing script execution in the browsers of users viewing the affected page and enabling unauthorized actions within their session context.
CVE-2019-15480 1 Domoticz 1 Domoticz 2024-11-21 N/A
Domoticz 4.10717 has XSS via item.Name.
CVE-2019-10678 1 Domoticz 1 Domoticz 2024-11-21 N/A
Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options.
CVE-2019-10664 1 Domoticz 1 Domoticz 2024-11-21 N/A
Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp.