Export limit exceeded: 425850 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 51979 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (51979 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2014-5391 | 1 Sos | 1 Jobscheduler | 2025-04-12 | N/A |
| Cross-site scripting (XSS) vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote attackers to inject arbitrary web script or HTML via the hash property (location.hash). | ||||
| CVE-2016-1000136 | 1 Heat-trackr Project | 1 Heat-trackr | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin heat-trackr v1.0 | ||||
| CVE-2016-1000137 | 1 Hero-maps-pro Project | 1 Hero-maps-pro | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin hero-maps-pro v2.1.0 | ||||
| CVE-2016-1000138 | 1 Indexisto Project | 1 Indexisto | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin indexisto v1.0.5 | ||||
| CVE-2016-1000139 | 1 Infusionsoft Project | 1 Infusionsoft | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin infusionsoft v1.5.11 | ||||
| CVE-2014-5441 | 1 Fatfreecrm | 1 Fat Free Crm | 2025-04-12 | N/A |
| Multiple cross-site scripting (XSS) vulnerabilities in app/views/layouts/application.html.haml in Fat Free CRM before 0.13.3 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name in a (a) create or (b) edit user action. | ||||
| CVE-2016-1000140 | 1 New-year-firework Project | 1 New-year-firework | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin new-year-firework v1.1.9 | ||||
| CVE-2016-1000141 | 1 Page-layout-builder Project | 1 Page-layout-builder | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin page-layout-builder v1.9.3 | ||||
| CVE-2014-5438 | 1 Arris | 2 Touchstone Tg862g\/ct, Touchstone Tg862g\/ct Firmware | 2025-04-12 | N/A |
| Cross-site scripting (XSS) vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allows remote authenticated users to inject arbitrary web script or HTML via the computer_name parameter to connected_devices_computers_edit.php. | ||||
| CVE-2014-5451 | 1 Modx | 1 Modx Revolution | 2025-04-12 | N/A |
| Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in MODX Revolution 2.3.1-pl and earlier allows remote attackers to inject arbitrary web script or HTML via the "a" parameter to manager/. NOTE: this issue exists because of a CVE-2014-2080 regression. | ||||
| CVE-2014-5452 | 1 Hl7 | 1 C-cda | 2025-04-12 | N/A |
| CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA documents with crafted XML attributes, which allows remote attackers to conduct XSS attacks via a document containing a table that is improperly handled during unrestricted xsl:copy operations. | ||||
| CVE-2014-5456 | 1 Social Stats Project | 1 Social Stats | 2025-04-12 | N/A |
| Cross-site scripting (XSS) vulnerability in the Social Stats module before 7.x-1.5 for Drupal allows remote authenticated users with the "[Content Type]: Create new content" permission to inject arbitrary web script or HTML via vectors related to the configuration. | ||||
| CVE-2014-5464 | 1 Ntop | 1 Ntopng | 2025-04-12 | N/A |
| Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header. | ||||
| CVE-2014-5466 | 1 Splunk | 1 Splunk | 2025-04-12 | N/A |
| Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.7, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | ||||
| CVE-2016-1000142 | 1 Parsi-font Project | 1 Parsi-font | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin parsi-font v4.2.5 | ||||
| CVE-2014-7199 | 1 Mediawiki | 1 Mediawiki | 2025-04-12 | N/A |
| Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and 1.23.x before 1.23.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file. | ||||
| CVE-2014-7138 | 1 Google Calendar Events Project | 1 Google Calendar Events | 2025-04-12 | N/A |
| Cross-site scripting (XSS) vulnerability in the Google Calendar Events plugin before 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gce_feed_ids parameter in a gce_ajax action to wp-admin/admin-ajax.php. | ||||
| CVE-2014-7139 | 1 Cfdbplugin | 1 Contact Form Db | 2025-04-12 | N/A |
| Multiple cross-site scripting (XSS) vulnerabilities in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin before 2.8.16 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) form or (2) enc parameter in the CF7DBPluginShortCodeBuilder page to wp-admin/admin.php. | ||||
| CVE-2014-7152 | 1 Mailchimp | 1 Easy Mailchimp Forms Plugin | 2025-04-12 | N/A |
| Cross-site scripting (XSS) vulnerability in the Easy MailChimp Forms plugin 3.0 through 5.0.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the update_options action to wp-admin/admin-ajax.php. | ||||
| CVE-2014-7157 | 1 Exinda | 1 Wan Optimization Suite | 2025-04-12 | N/A |
| Cross-site scripting (XSS) vulnerability in Exinda WAN Optimization Suite 7.0.0 (2160) allows remote attackers to inject arbitrary web script or HTML via the tabsel parameter to admin/launch. | ||||