Export limit exceeded: 26203 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 51992 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 51,992

Export CSV
CVE-2018-19809

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupCopy.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Infovista
Products
Vistaportal
CVE-2018-19799

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.

CVSS 3.0 · 6.1 Medium EPSS 4.5% KEV · Not listed
Vendors
Dolibarr
Products
Dolibarr
CVE-2018-19794

Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Internet2
Products
Grouper
CVE-2018-19785

PHP-Proxy through 5.1.0 has Cross-Site Scripting (XSS) via the URL field in index.php.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Php-proxy
Products
Php-proxy
CVE-2018-19782

Multiple cross-site scripting (XSS) vulnerabilities in GET requests in FreshRSS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the (1) c parameter or (2) a parameter.

CVSS 3.0 · 6.1 Medium EPSS 4.4% KEV · Not listed
Vendors
Freshrss
Products
Freshrss
CVE-2018-19775

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Variables.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Infovista
Products
Vistaportal
CVE-2018-19774

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the GroupId and ConnPoolName parameters.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Infovista
Products
Vistaportal
CVE-2018-19773

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentUser.jsp" has reflected XSS via the GroupId and ConnPoolName parameters.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Infovista
Products
Vistaportal
CVE-2018-19772

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Infovista
Products
Vistaportal
CVE-2018-19771

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPool.jsp" has reflected XSS via the PropName parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Infovista
Products
Vistaportal
CVE-2018-19770

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Users.jsp" has reflected XSS via the ConnPoolName parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Infovista
Products
Vistaportal
CVE-2018-19769

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "UserProperties.jsp" has reflected XSS via the ConnPoolName parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Infovista
Products
Vistaportal
CVE-2018-19768

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "SubPagePackages.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Infovista
Products
Vistaportal
CVE-2018-19767

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Infovista
Products
Vistaportal
CVE-2018-19766

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "GroupRessourceAdmin.jsp" has reflected XSS via the ConnPoolName parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Infovista
Products
Vistaportal
CVE-2018-19765

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Infovista
Products
Vistaportal
CVE-2018-19752

DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.

CVSS 3.0 · 4.8 Medium EPSS 3.3% KEV · Not listed
Vendors
Domainmod
Products
Domainmod
CVE-2018-19751

DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields.

CVSS 3.0 · 4.8 Medium EPSS 3.3% KEV · Not listed
Vendors
Domainmod
Products
Domainmod
CVE-2018-19750

DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields.

CVSS 3.0 · 5.4 Medium EPSS 1.8% KEV · Not listed
Vendors
Domainmod
Products
Domainmod
CVE-2018-19749

DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field.

CVSS 3.0 · 4.8 Medium EPSS 3.3% KEV · Not listed
Vendors
Domainmod
Products
Domainmod