Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-31674

Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacker to execute javascript code via undefine enum constant.

CVSS 3.1 · 6.1 Medium EPSS 3.9% KEV · Not listed
Vendors
Cyclos
Products
Cyclos
CVE-2021-31673

A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remote attackers to inject arbitrary web script or HTML via the groupId parameter.

CVSS 3.1 · 6.1 Medium EPSS 2.6% KEV · Not listed
Vendors
Cyclos
Products
Cyclos