Export limit exceeded: 51989 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 51,989

Export CSV
CVE-2018-17586

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_timeout_pages action.

CVSS 3.0 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Wpfastestcache
Products
Wp Fastest Cache
CVE-2018-17585

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreload_number or wpFastestCacheLanguage parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Wpfastestcache
Products
Wp Fastest Cache
CVE-2018-17583

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_exclude_pages action.

CVSS 3.0 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Wpfastestcache
Products
Wp Fastest Cache
CVE-2018-17574

An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Ymfe
Products
Yapi
CVE-2018-17572

influxdb: Reflected cross-site-scripting in the Write Data module

InfluxDB 0.9.5 has Reflected XSS in the Write Data module.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Influxdata
Products
Influxdb
CVE-2018-17560

The admin interface of the Grouptime Teamwire Client 1.5.1 prior to 1.9.0 on-premises messenger server allows stored XSS. All backend versions prior to prod-2018-11-13-15-00-42 are affected.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Teamwire
Products
Teamwire
CVE-2018-17558

Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18, TVIP10051 LM.1.6.18, TVIP11050 MG.1.6.03.05, TVIP20550 LM.1.6.18, TVIP10050 LM.1.6.18, TVIP11550 MG.1.6.03, TVIP21050 MG.1.6.03, and TVIP51550 MG.1.6.03 cameras allow remote attackers to execute code as root.

CVSS 3.1 · 9.8 Critical EPSS 2.9% KEV · Not listed
Vendors
Abus
Products
Tvip 10000 Tvip 10000 Firmware Tvip 10001 and 91 more
CVE-2018-17556

MODX Revolution v2.6.5-pl allows stored XSS via a Create New Media Source action.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Modx
Products
Modx Revolution
CVE-2018-17533

Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization.

CVSS 3.0 · 6.1 Medium EPSS 2.0% KEV · Not listed
Vendors
Teltonika
Products
Rut900 Rut900 Firmware Rut950 and 3 more
CVE-2018-17492

EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application.

CVSS 3.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Hidglobal
Products
Easylobby Solo
CVE-2018-17443

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'sitename' parameter of the UpdateSite endpoint is vulnerable to stored XSS.

CVSS 3.0 · 6.1 Medium EPSS 5.7% KEV · Not listed
Vendors
Dlink
Products
Central Wifimanager
CVE-2018-17441

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUser endpoint is vulnerable to stored XSS.

CVSS 3.0 · 6.1 Medium EPSS 5.7% KEV · Not listed
Vendors
Dlink
Products
Central Wifimanager