Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (89526 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-63842 1 Repetico 1 Web Backend 2026-09-17 5.4 Medium
A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field.
CVE-2023-46035 1 Fnando 1 Svg Optimizer 2026-09-17 5.9 Medium
The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents.
CVE-2024-23176 1 Mediawiki 1 Massmessage 2026-09-17 5.4 Medium
An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS.
CVE-2026-82762 1 Contec 14 Fxa3000, Fxa3020, Fxa3200 and 11 more 2026-09-17 8.8 High
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
CVE-2026-82766 1 Contec 1 Sga1000 2026-09-17 8.8 High
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
CVE-2026-82767 1 Contec 1 Sga1000 2026-09-17 5.2 Medium
Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
CVE-2026-82769 1 Contec 4 Rp-wah-sr1, Rp-wah-sr12, Rp-wah-sr2 and 1 more 2026-09-17 5.4 Medium
Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
CVE-2026-82771 1 Contec 3 Ece1000, Ece1020, Ecs1020 2026-09-17 5.4 Medium
Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
CVE-2026-82773 1 Contec 4 M2m Controller Configurable Type Cps-mcs341*, M2m Controller Integrated Type Cps-mc341, M2m Gateway Configurable Type Cps-mgs341* and 1 more 2026-09-17 6.1 Medium
Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
CVE-2026-82774 1 Contec 4 M2m Controller Configurable Type Cps-mcs341*, M2m Controller Integrated Type Cps-mc341, M2m Gateway Configurable Type Cps-mgs341* and 1 more 2026-09-17 8.8 High
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
CVE-2026-82776 1 Contec 2 Configurable Type Cps-pcs341-ds1-1201, Integrated Type Cps-pc341-*-9201 2026-09-17 6.1 Medium
Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
CVE-2026-82777 1 Contec 2 Configurable Type Cps-pcs341-ds1-1201, Integrated Type Cps-pc341-*-9201 2026-09-17 8.8 High
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
CVE-2026-82781 1 Contec 3 Programmable Remote I/o Coupler Unit (software Plc Type) Cpsn-pcb271-s1-041, Remote I/o Coupler Unit (ethernet/ip Adapter) Cpsn-eob471ei-[]1, Remote I/o Coupler Unit (server Type) Cpsn-mcb271-* 2026-09-17 5.4 Medium
Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
CVE-2026-82782 1 Contec 3 Programmable Remote I/o Coupler Unit (software Plc Type) Cpsn-pcb271-s1-041, Remote I/o Coupler Unit (ethernet/ip Adapter) Cpsn-eob471ei-[]1, Remote I/o Coupler Unit (server Type) Cpsn-mcb271-* 2026-09-17 4.3 Medium
Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service (DoS) condition.
CVE-2026-82788 1 Contec 1 Cpsl-08p1en 2026-09-17 6.1 Medium
Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
CVE-2026-82763 1 Contec 14 Fxa3000, Fxa3020, Fxa3200 and 11 more 2026-09-17 5.4 Medium
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
CVE-2026-82790 1 Contec 2 Pc-helper Wireless I/o Dio-0404ry-lwf, Pc-helper Wireless I/o Dio-0404ry-lwf-us 2026-09-17 5.4 Medium
Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
CVE-2026-82791 1 Contec 2 Can-2-usb, Can-2-wf 2026-09-17 8.8 High
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
CVE-2026-82792 1 Contec 2 Can-2-usb, Can-2-wf 2026-09-17 5.2 Medium
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
CVE-2026-82019 1 Triplelift 1 Video-bundle.js 2026-09-17 4.2 Medium
TripleLift's ad rendering script (video-bundle.js) contains a DOM-based cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a publisher's domain by sending crafted postMessage payloads without origin validation. Attackers can cause a victim to visit an attacker-controlled page that sends malicious postMessage events to a publisher page running the ad script, enabling session hijacking and unauthorized DOM manipulation.