Export limit exceeded: 51989 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 51,989

Export CSV
CVE-2018-17423

An issue was discovered in e107 v2.1.9. There is a XSS attack on e107_admin/comment.php.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
E107
Products
E107
CVE-2018-17421

An issue was discovered in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted attached/file/ pathname.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Zrlog
Products
Zrlog
CVE-2018-17413

XSS exists in zzcms v8.3 via the /uploadimg_form.php noshuiyin parameter.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-17361

Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php because $_SERVER['PHP_SELF'] is mishandled.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Weaselcms Project
Products
Weaselcms
CVE-2018-17322

Cross-site scripting (XSS) vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Yunucms
Products
Yunucms
CVE-2018-17321

An issue was discovered in SeaCMS 6.64. XSS exists in admin_datarelate.php via the time or maxHit parameter in a dorandomset action.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Seacms
Products
Seacms
CVE-2018-17320

An issue was discovered in UCMS 1.4.6. aaddpost.php has stored XSS via the sadmin/aindex.php minfo parameter in a sadmin_aaddpost action.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ucms Project
Products
Ucms
CVE-2018-17316

On the RICOH MP C6003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Ricoh
Products
Mp C6003 Mp C6003 Firmware
CVE-2018-17315

On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Ricoh
Products
Mp C2003 Mp C2003sp Firmware
CVE-2018-17314

On the RICOH Aficio MP 305+ printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Ricoh
Products
Mp 305\+ Mp 305\+ Firmware
CVE-2018-17313

On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 2.3% KEV · Not listed
Vendors
Ricoh
Products
Mp C307 Mp C307 Firmware
CVE-2018-17312

On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Ricoh
Products
Aficio Mp 301spf Aficio Mp 301spf Firmware
CVE-2018-17311

On the RICOH MP C6503 Plus printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Ricoh
Products
Mp C6503 Mp C6503 Firmware
CVE-2018-17310

On the RICOH MP C1803 JPN printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 2.3% KEV · Not listed
Vendors
Ricoh
Products
Mp C1803 Jpn Mp C1803 Jpn Firmware
CVE-2018-17309

On the RICOH MP C406Z printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Ricoh
Products
Mp C406z Mp C406zspf Firmware
CVE-2018-17302

Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Espocrm
Products
Espocrm
CVE-2018-17301

Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Espocrm
Products
Espocrm
CVE-2018-17300

Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator/#/component/table_manager/view/cu_menus section name.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Cuppacms
Products
Cuppacms