Export limit exceeded: 425740 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 55

Export CSV
CVE-2020-25122

The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type to User Rank Manager.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Vbulletin
Products
Vbulletin
CVE-2020-25121

The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Vbulletin
Products
Vbulletin
CVE-2020-25120

The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Vbulletin
Products
Vbulletin
CVE-2020-25119

The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Vbulletin
Products
Vbulletin
CVE-2020-25118

The Admin CP in vBulletin 5.6.3 allows XSS via a Style Options Settings Title to Styles Manager.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Vbulletin
Products
Vbulletin
CVE-2020-25117

The Admin CP in vBulletin 5.6.3 allows XSS via a Junior Member Title to User Title Manager.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Vbulletin
Products
Vbulletin
CVE-2020-25116

The Admin CP in vBulletin 5.6.3 allows XSS via an Announcement Title to Channel Manager.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Vbulletin
Products
Vbulletin
CVE-2020-25115

The Admin CP in vBulletin 5.6.3 allows XSS via an Occupation Title or Description to User Profile Field Manager.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Vbulletin
Products
Vbulletin
CVE-2020-12720

vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.

CVSS 3.1 · 9.8 Critical EPSS 88.9% KEV · Not listed
Vendors
Vbulletin
Products
Vbulletin
CVE-2019-17271

vBulletin 5.5.4 allows SQL Injection via the ajax/api/hook/getHookList or ajax/api/widget/getWidgetList where parameter.

CVSS 3.1 · 4.9 Medium EPSS 1.4% KEV · Not listed
Vendors
Vbulletin
Products
Vbulletin
CVE-2019-17130

vBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Vbulletin
Products
Vbulletin
CVE-2018-6200

vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter.

CVSS 3.0 · 6.1 Medium EPSS 3.5% KEV · Not listed
Vendors
Vbulletin
Products
Vbulletin