Export limit exceeded: 425868 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 24540 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 51987 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 51,987

Export CSV
CVE-2018-0559

Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cybozu
Products
Mailwise
CVE-2018-0558

Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cybozu
Products
Mailwise
CVE-2018-0557

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cybozu
Products
Mailwise
CVE-2018-0551

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cybozu
Products
Garoon
CVE-2018-0549

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cybozu
Products
Garoon
CVE-2018-0547

Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.7 for WordPress allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Soflyy
Products
Wp All Import
CVE-2018-0546

Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.6 for WordPress allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Soflyy
Products
Wp All Import
CVE-2018-0538

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Qqq Systems Project
Products
Qqq Systems
CVE-2018-0537

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz_op.cgi.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Qqq Systems Project
Products
Qqq Systems
CVE-2018-0536

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Qqq Systems Project
Products
Qqq Systems
CVE-2018-0535

Cross-site scripting vulnerability in PHP 2chBBS version bbs18c allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Php 2chbbs Project
Products
Php 2chbbs
CVE-2018-0534

Cross-site scripting vulnerability in ArsenoL Version 0.5 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Arsenol Project
Products
Arsenol
CVE-2018-0532

Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified vectors.

CVSS 3.0 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Cybozu
Products
Garoon
CVE-2018-0527

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cybozu
Products
Office
CVE-2018-0519

Cross-site scripting vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Fsi
Products
Fs010w Fs010w Firmware
CVE-2018-0513

Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Mtssb.mt-systems
Products
Simple Booking
CVE-2018-0511

Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Meowapps
Products
Wp Retina 2x
CVE-2018-0508

Cross-site scripting vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Kkcald Project
Products
Kkcald
CVE-2018-0503

$wgRateLimits entry for 'user' overrides 'newbie'

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.

CVSS 3.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Debian Mediawiki Redhat
Products
Debian Linux Mediawiki Openshift
CVE-2018-0499

xapian-core: Cross-site-scripting in queryparser/termgenerator_internal.cc

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Canonical Xapian
Products
Ubuntu Linux Xapian-core