Export limit exceeded: 425852 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2022-24227

A cross-site scripting (XSS) vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters.

CVSS 3.1 · 6.1 Medium EPSS 1.9% KEV · Not listed
Vendors
Boltwire
Products
Boltwire
CVE-2013-2651

Multiple cross-site scripting (XSS) vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) "p" or (2) content parameter to index.php.

CVSS 2.0 · 4.3 Medium EPSS 2.1% KEV · Not listed
Vendors
Boltwire
Products
Boltwire
CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function.

CVSS 3.1 · 9.1 Critical EPSS 1.7% KEV · Not listed
Vendors
Boltwire
Products
Boltwire
CVE-2013-0737

Cross-site scripting (XSS) vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Boltwire
Products
Boltwire