Export limit exceeded: 95369 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (95369 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2021-37542 | 1 Jetbrains | 1 Teamcity | 2024-11-21 | 6.1 Medium |
| In JetBrains TeamCity before 2020.2.3, XSS was possible. | ||||
| CVE-2021-37541 | 1 Jetbrains | 1 Hub | 2024-11-21 | 6.1 Medium |
| In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible. | ||||
| CVE-2021-37534 | 1 Misp-project | 1 Misp | 2024-11-21 | 5.4 Medium |
| app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster. | ||||
| CVE-2021-37531 | 1 Sap | 1 Netweaver Knowledge Management Xml Forms | 2024-11-21 | 8.8 High |
| SAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerability which allows a non-administrative authenticated attacker to craft a malicious XSL stylesheet file containing a script with OS-level commands, copy it into a location to be accessed by the system and then create a file which will trigger the XSLT engine to execute the script contained within the malicious XSL file. This can result in a full compromise of the confidentiality, integrity, and availability of the system. | ||||
| CVE-2021-37530 | 2 Debian, Fig2dev Project | 2 Debian Linux, Fig2dev | 2024-11-21 | 5.5 Medium |
| A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c. | ||||
| CVE-2021-37524 | 1 Fusionpbx | 1 Fusionpbx | 2024-11-21 | 6.1 Medium |
| Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php. | ||||
| CVE-2021-37504 | 1 Hayageek | 1 Jquery Upload File | 2024-11-21 | 6.1 Medium |
| A cross-site scripting (XSS) vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name. | ||||
| CVE-2021-37470 | 1 Nchsoftware | 1 Webdictate | 2024-11-21 | 5.4 Medium |
| In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript. | ||||
| CVE-2021-37467 | 1 Nchsoftware | 1 Quorum | 2024-11-21 | 5.4 Medium |
| In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected). | ||||
| CVE-2021-37466 | 1 Nchsoftware | 1 Quorum | 2024-11-21 | 5.4 Medium |
| In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected). | ||||
| CVE-2021-37465 | 1 Nchsoftware | 1 Quorum | 2024-11-21 | 5.4 Medium |
| In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected). | ||||
| CVE-2021-37464 | 1 Nchsoftware | 1 Quorum | 2024-11-21 | 5.4 Medium |
| In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored). | ||||
| CVE-2021-37463 | 1 Nchsoftware | 1 Quorum | 2024-11-21 | 5.4 Medium |
| In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored). | ||||
| CVE-2021-37462 | 1 Nchsoftware | 1 Axon Pbx | 2024-11-21 | 5.4 Medium |
| Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected). | ||||
| CVE-2021-37461 | 1 Nchsoftware | 1 Axon Pbx | 2024-11-21 | 5.4 Medium |
| Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected). | ||||
| CVE-2021-37460 | 1 Nchsoftware | 1 Axon Pbx | 2024-11-21 | 5.4 Medium |
| Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected). | ||||
| CVE-2021-37459 | 1 Nchsoftware | 1 Axon Pbx | 2024-11-21 | 5.4 Medium |
| Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored). | ||||
| CVE-2021-37458 | 1 Nchsoftware | 1 Axon Pbx | 2024-11-21 | 5.4 Medium |
| Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored). | ||||
| CVE-2021-37457 | 1 Nchsoftware | 1 Axon Pbx | 2024-11-21 | 5.4 Medium |
| Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored). | ||||
| CVE-2021-37456 | 1 Nchsoftware | 1 Axon Pbx | 2024-11-21 | 5.4 Medium |
| Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored). | ||||