Exploit Intelligence Platform

Updated 1h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

339,501 CVEs tracked 53,335 with exploits 4,748 exploited in wild 1,551 CISA KEV 3,948 Nuclei templates 49,234 vendors 42,835 researchers

42,628 results Clear all

CVE-2014-4694 EPSS 0.00

Suricata <1.0.6 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in suricata_select_alias.php in the Suricata package before 1.0.6 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script or HTML via unspecified variables.

CWE-79 Jul 02, 2014

CVE-2014-4693 EPSS 0.00

Snort <3.0.13 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the eng parameter to snort_import_aliases.php or (2) unspecified variables to snort_select_alias.php.

CWE-79 Jul 02, 2014

CVE-2014-4687 EPSS 0.00

pfSense <2.1.4 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the starttime0 parameter to firewall_schedule.php, (2) the rssfeed parameter to rss.widget.php, (3) the servicestatusfilter parameter to services_status.widget.php, (4) the txtRecallBuffer parameter to exec.php, or (5) the HTTP Referer header to log.widget.php.

CWE-79 Jul 02, 2014

CVE-2014-3492 EPSS 0.00

Foreman < 1.4.4 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in the host YAML view in Foreman before 1.4.5 and 1.5.x before 1.5.1 allow remote attackers to inject arbitrary web script or HTML via a parameter (1) name or (2) value related to the host.

CWE-79 Jul 01, 2014

CVE-2014-3491 EPSS 0.00

Foreman < 1.4.4 - XSS

Cross-site scripting (XSS) vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field to the New Host groups page, related to create, update, and destroy notification boxes.

CWE-79 Jul 01, 2014

CVE-2014-4602 EPSS 0.00

XEN Carousel <0.12.2 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in xencarousel-admin.js.php in the XEN Carousel plugin 0.12.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) path or (2) ajaxpath parameter.

CWE-79 Jul 01, 2014

CVE-2014-4585 EPSS 0.00

WP-FaceThumb <1.0 - XSS

Cross-site scripting (XSS) vulnerability in the WP-FaceThumb plugin possibly 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ajax_url parameter to index.php.

CWE-79 Jul 01, 2014

CVE-2014-4584 EPSS 0.00

wp-easybooking <1.0.3 - XSS

Cross-site scripting (XSS) vulnerability in admin/editFacility.php in the wp-easybooking plugin 1.0.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the fID parameter.

CWE-79 Jul 01, 2014

CVE-2014-4583 EPSS 0.00

WP-Contact <1.0 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in forms/messages.php in the WP-Contact (wp-contact-sidebar-widget) plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) edit, (2) order_direction, (3) limit_start, (4) id, or (5) order parameter.

CWE-79 Jul 01, 2014

CVE-2014-4575 EPSS 0.00

Wikipop <2.0 - XSS

Cross-site scripting (XSS) vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.

CWE-79 Jul 01, 2014

CVE-2014-4569 EPSS 0.00

VideoWhisper Live Streaming Integration <4.27.2 - XSS

Cross-site scripting (XSS) vulnerability in ls/vv_login.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the room_name parameter.

CWE-79 Jul 01, 2014

CVE-2014-4564 EPSS 0.00

WordPress Validated <1.0.2 - XSS

Cross-site scripting (XSS) vulnerability in check.php in the Validated plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter.

CWE-79 Jul 01, 2014

CVE-2014-4556 EPSS 0.00

Swipe Checkout for eShop <3.7.0 - XSS

Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for eShop plugin 3.7.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter.

CWE-79 Jul 01, 2014

CVE-2014-4545 EPSS 0.00

Pro Quoter <1.0 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in pq_dialog.php in the Pro Quoter plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) leftorright or (2) author parameter.

CWE-79 Jul 01, 2014

CVE-2014-4538 EPSS 0.00

WordPress Malware Finder <1.1 - XSS

Cross-site scripting (XSS) vulnerability in process.php in the Malware Finder plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the query parameter.

CWE-79 Jul 01, 2014

CVE-2014-4533 EPSS 0.00

GEO Redirector <1.0.1 - XSS

Cross-site scripting (XSS) vulnerability in ajax_functions.php in the GEO Redirector plugin 1.0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the hid_id parameter.

CWE-79 Jul 01, 2014

CVE-2014-4528 EPSS 0.00

Bugs Go Viral : Facebook Promotion Generator <1.3.4 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in admin/swarm-settings.php in the Bugs Go Viral : Facebook Promotion Generator (fbpromotions) plugin 1.3.4 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) promo_type, (2) fb_edit_action, or (3) promo_id parameter.

CWE-79 Jul 01, 2014

CVE-2014-4521 EPSS 0.00

WordPress dsIDXpress <2.1.1 - XSS

Cross-site scripting (XSS) vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.

CWE-79 Jul 01, 2014

CVE-2014-4520 EPSS 0.00

WordPress DMCA WaterMarker <1.1 - XSS

Cross-site scripting (XSS) vulnerability in phprack.php in the DMCA WaterMarker plugin before 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the plugin_dir parameter.

CWE-79 Jul 01, 2014

CVE-2014-4518 EPSS 0.00

Contact Form by ContactMe.com <2.3 - XSS

Cross-site scripting (XSS) vulnerability in xd_resize.php in the Contact Form by ContactMe.com plugin 2.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the width parameter.

CWE-79 Jul 01, 2014