Export limit exceeded: 30292 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 30292 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2015-1032

Cross-site scripting (XSS) vulnerability in Kiwix before 0.9.1, when using kiwix-serve, allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to /search.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Kiwix
Products
Kiwix
CVE-2022-27920

libkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search suggestions URL parameter. This is fixed in 10.1.0.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Kiwix
Products
Fedora Libkiwix