Exploit Intelligence Platform

Updated 5h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

339,495 CVEs tracked 53,335 with exploits 4,748 exploited in wild 1,551 CISA KEV 3,948 Nuclei templates 49,233 vendors 42,833 researchers

42,628 results Clear all

CVE-2014-4329 EPSS 0.00

ntopng 1.1 - XSS

Cross-site scripting (XSS) vulnerability in lua/host_details.lua in ntopng 1.1 allows remote attackers to inject arbitrary web script or HTML via the host parameter.

CWE-79 Jun 19, 2014

CVE-2014-1652 EPSS 0.01

Symantec Web Gateway <5.2 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters.

CWE-79 Jun 18, 2014

CVE-2012-2592 1 PoC Analysis EPSS 0.00

Axigen Mail Server 8.0.1 - XSS

Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email.

CWE-79 Jun 18, 2014

CVE-2014-0599 EPSS 0.01

Novell Open Enterprise Server - XSS

Cross-site scripting (XSS) vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Jun 18, 2014

CVE-2014-3013 EPSS 0.00

IBM Curam Social Program Management - XSS

Multiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through 6.0.5.4 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to a (1) custom JSP or (2) custom renderer.

CWE-79 Jun 18, 2014

CVE-2014-0910 1 PoC Analysis EPSS 0.01

IBM Websphere Portal - XSS

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, and 7.0.0 through 7.0.0.2 CF28 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Jun 18, 2014

CVE-2014-4309 EPSS 0.00

Openfiler 2.99 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote attackers to inject arbitrary web script or HTML via the (1) TinkerAjax parameter to uptime.html, or remote authenticated users to inject arbitrary web script or HTML via the (2) MaxInstances, (3) PassivePorts, (4) Port, (5) ServerName, (6) TimeoutLogin, (7) TimeoutNoTransfer, or (8) TimeoutStalled parameter to admin/services_ftp.html; the (9) dns1 or (10) dns2 parameter to admin/system.html; the (11) newTgtName parameter to admin/volumes_iscsi_targets.html; the User-Agent HTTP header to (12) language.html, (13) login.html, or (14) password.html in account/; or the User-Agent HTTP header to (15) account_groups.html, (16) account_users.html, (17) services.html, (18) services_ftp.html, (19) services_iscsi_target.html, (20) services_rsync.html, (21) system_clock.html, (22) system_info.html, (23) system_ups.html, (24) volumes_editpartitions.html, or (25) volumes_iscsi_targets.html in admin/.

CWE-79 Jun 18, 2014

CVE-2014-4308 EPSS 0.00

NICE Recording eXpress <6.5.5 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) before 6.5.5 allow remote attackers to inject arbitrary web script or HTML via the (1) USRLNM parameter to myaccount/mysettings.edit.validate.asp or the frame parameter to (2) iframe.picker.statchannels.asp, (3) iframe.picker.channelgroups.asp, (4) iframe.picker.extensions.asp, (5) iframe.picker.licenseusergroups.asp, (6) iframe.picker.licenseusers.asp, (7) iframe.picker.lookup.asp, or (8) iframe.picker.marks.asp in _ifr/.

CWE-79 Jun 18, 2014

CVE-2014-4304 EPSS 0.00

SQL Buddy <1.3.3 - XSS

Cross-site scripting (XSS) vulnerability in browse.php in SQL Buddy 1.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the table parameter.

CWE-79 Jun 18, 2014

CVE-2014-4303 EPSS 0.00

Touch theme 7.x-1.x - XSS

Multiple cross-site scripting (XSS) vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the (1) Twitter and (2) Facebook username settings.

CWE-79 Jun 18, 2014

CVE-2014-4302 EPSS 0.00

HAM3D Shop Engine - XSS

Cross-site scripting (XSS) vulnerability in rating/rating.php in HAM3D Shop Engine allows remote attackers to inject arbitrary web script or HTML via the ID parameter.

CWE-79 Jun 18, 2014

CVE-2014-4301 EPSS 0.00

Eugene Pankov Ajenti <1.2.21.7 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) resources.js or (2) resources.css in ajenti:static/, related to the traceback page.

CWE-79 Jun 18, 2014

CVE-2014-3876 EPSS 0.00

Ulli Horlacher Fex < 20140313 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML via the (1) akey parameter to rup or (2) disclaimer or (3) gm parameter to fuc.

CWE-79 Jun 18, 2014

CVE-2014-4189 EPSS 0.00

Hitachi Tuning Manager <7.6.1-06,8.x <8.0.0-04 - XSS

Cross-site scripting (XSS) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Jun 17, 2014

CVE-2014-4187 EPSS 0.00

ClipBucket - XSS

Cross-site scripting (XSS) vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web script or HTML via the Username field.

CWE-79 Jun 17, 2014

CVE-2014-4166 1 PoC Analysis EPSS 0.03

SHOUTcast DNAS 2.2.1 - XSS

Cross-site scripting (XSS) vulnerability in the song history in SHOUTcast DNAS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the mp3 title field.

CWE-79 Jun 16, 2014

CVE-2014-4165 EPSS 0.00

Cross-site scripting (XSS) vulnerability in ntop allows remote attackers to inject arbitrary web script or HTML via the title parameter in a list action to plugins/rrdPlugin.

CWE-79 Jun 16, 2014

CVE-2014-4164 EPSS 0.00

AlgoSec FireFlow 6.3-b230 - XSS

Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a user signature to SelfService/Prefs.html.

CWE-79 Jun 16, 2014

CVE-2014-3995 EPSS 0.00

Djblets <0.7.30, <0.8.3 - XSS

Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name.

CWE-79 Jun 16, 2014

CVE-2014-3994 EPSS 0.01

Djblets <0.7.30 and <0.8.3 - XSS

Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to inject arbitrary web script or HTML via a JSON object, as demonstrated by the name field when changing a user name.

CWE-79 Jun 16, 2014