Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (94435 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2013-5659 1 Info-zip 1 Wiz 2024-11-21 7.5 High
Wiz 5.0.3 has a user mode write access violation
CVE-2013-5658 1 Aultware 1 Pwstore 2024-11-21 6.1 Medium
AultWare pwStore 2010.8.30.0 has XSS
CVE-2013-5656 1 Fuzezip Project 1 Fuzezip 2024-11-21 7.8 High
FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability
CVE-2013-5638 1 Transcend-info 2 Wifisd, Wifisd Firmware 2024-11-21 5.4 Medium
Transcend WiFiSD 1.8 has persistent XSS
CVE-2013-5637 1 Pqigroup 2 Air Card, Air Card Firmware 2024-11-21 5.4 Medium
PQI AirCard has persistent XSS
CVE-2013-5212 1 Easyxdm 1 Easyxdm 2024-11-21 6.1 Medium
Cross-site Scripting (XSS) in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary web script or html via the easyxdm.swf file.
CVE-2013-4968 1 Puppet 1 Puppet Enterprise 2024-11-21 6.1 Medium
Puppet Enterprise before 3.0.1 allows remote attackers to (1) conduct clickjacking attacks via unspecified vectors related to the console, and (2) conduct cross-site scripting (XSS) attacks via unspecified vectors related to "live management."
CVE-2013-4891 1 Codeigniter 1 Codeigniter 2024-11-21 N/A
The xss_clean function in CodeIgniter before 2.1.4 might allow remote attackers to bypass an intended protection mechanism and conduct cross-site scripting (XSS) attacks via an unclosed HTML tag.
CVE-2013-4791 1 Prestashop 1 Prestashop 2024-11-21 5.4 Medium
PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE.
CVE-2013-4770 1 Eucalyptus 1 Eucalyptus Management Console 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-4752 2 Fedoraproject, Sensiolabs 2 Fedora, Symfony 2024-11-21 6.1 Medium
Symfony 2.0.X before 2.0.24, 2.1.X before 2.1.12, 2.2.X before 2.2.5, and 2.3.X before 2.3.3 have an issue in the HttpFoundation component. The Host header can be manipulated by an attacker when the framework is generating an absolute URL. A remote attacker could exploit this vulnerability to inject malicious content into the Web application page and conduct various attacks.
CVE-2013-4718 1 Otrs 2 Otrs, Otrs Itsm 2024-11-21 5.4 Medium
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x before 3.0.9, 3.1.x before 3.1.10, and 3.2.x before 3.2.7 allows remote authenticated users to inject arbitrary web script or HTML via an ITSM ConfigItem search.
CVE-2013-4695 1 Winamp 1 Winamp 2024-11-21 7.8 High
Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution
CVE-2013-4693 1 Xorbin 1 Digital Flash Clock 2024-11-21 6.1 Medium
WordPress Xorbin Digital Flash Clock 1.0 has XSS
CVE-2013-4692 1 Xorbin 1 Analog Flash Clock 2024-11-21 6.1 Medium
Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS
CVE-2013-4691 1 Sencha 1 Connect 2024-11-21 6.1 Medium
Sencha Labs Connect has XSS with connect.methodOverride()
CVE-2013-4664 1 Spbas 1 Business Automation Software 2024-11-21 6.1 Medium
SPBAS Business Automation Software 2012 has XSS.
CVE-2013-4584 2 Debian, Horms 2 Debian Linux, Perdition 2024-11-21 5.9 Medium
Perdition before 2.2 may have weak security when handling outbound connections, caused by an error in the STARTTLS IMAP and POP server. ssl_outgoing_ciphers not being applied to STARTTLS connections
CVE-2013-4486 2 Linux, Redhat 2 Linux Kernel, Zanata 2024-11-21 9.8 Critical
Zanata 3.0.0 through 3.1.2 has RCE due to EL interpolation in logging
CVE-2013-4395 1 Simplemachines 1 Simple Machines Forum 2024-11-21 6.1 Medium
Simple Machines Forum (SMF) through 2.0.5 has XSS