Exploit Intelligence Platform

Updated 4h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

339,490 CVEs tracked 53,352 with exploits 4,748 exploited in wild 1,551 CISA KEV 3,945 Nuclei templates 49,201 vendors 42,812 researchers

42,624 results Clear all

CVE-2013-4711 EPSS 0.00

Accela BizSearch 3.2 - XSS

Cross-site scripting (XSS) vulnerability in Accela BizSearch 3.2 on Linux and Solaris allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Oct 04, 2013

CVE-2013-6010 EPSS 0.00

Wearegumball Comment-attachment - XSS

Cross-site scripting (XSS) vulnerability in the Comment Attachment plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "Attachment field title."

CWE-79 Oct 03, 2013

CVE-2013-5690 EPSS 0.00

Open-xchange Appsuite < 7.2.1 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite before 7.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) content with the text/xml MIME type or (2) the Status comment field of an appointment.

CWE-79 Oct 03, 2013

CVE-2013-5519 EPSS 0.00

Cisco WLC - XSS

Cross-site scripting (XSS) vulnerability in the management interface on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuf77810.

CWE-79 Oct 03, 2013

CVE-2013-5976 EPSS 0.00

F5 Big-ip Access Policy Manager - XSS

Cross-site scripting (XSS) vulnerability in the access policy logout page (logout.inc) in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.1.0 through 11.3.0 allows remote attackers to inject arbitrary web script or HTML via the LastMRH_Session cookie.

CWE-79 Oct 01, 2013

CVE-2013-3964 EPSS 0.00

Samsung Shr-5082 - XSS

Cross-site scripting (XSS) vulnerability in Samsung SHR-5162, SHR-5082, and possibly other models, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CWE-79 Oct 01, 2013

CVE-2013-3962 EPSS 0.00

Grandstream Gxv Device Firmware < 1.0.4.43 - XSS

Cross-site scripting (XSS) vulnerability in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models before firmware 1.0.4.44, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CWE-79 Oct 01, 2013

CVE-2013-4019 EPSS 0.00

IBM Maximo Asset Management - XSS

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 before 7.1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Oct 01, 2013

CVE-2013-4014 EPSS 0.00

IBM Maximo Asset Management - XSS

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Oct 01, 2013

CVE-2013-3048 EPSS 0.00

IBM Maximo Asset Management <7.5.0.3 - XSS

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Oct 01, 2013

CVE-2013-5693 1 PoC Analysis EPSS 0.00

X2engine X2crm < 3.4.1 - XSS

Cross-site scripting (XSS) vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web script or HTML via the model parameter to index.php/admin/editor.

CWE-79 Sep 30, 2013

CVE-2013-4378 2 PoCs Analysis EPSS 0.01

Emeric Vernat Javamelody < 1.46 - XSS

Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header.

CWE-79 Sep 30, 2013

CVE-2013-5964 EPSS 0.00

Joachim Noreiko Flag Module - XSS

Cross-site scripting (XSS) vulnerability in the administration page in the Flag module 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "Administer flags" permission to inject arbitrary web script or HTML via the flag title.

CWE-79 Sep 30, 2013

CVE-2013-4372 1 Writeup EPSS 0.00

Redhat Jboss A-mq - XSS

Multiple cross-site scripting (XSS) vulnerabilities in Fuse Management Console in Red Hat JBoss Fuse 6.0.0 before patch 3 and JBoss A-MQ 6.0.0 before patch 3 allow remote attackers to inject arbitrary web script or HTML via the (1) user field in the create user page or (2) profile version to the create profile page.

CWE-79 Sep 30, 2013

CVE-2013-5505 EPSS 0.01

Cisco ISE - XSS

Cross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30275.

CWE-79 Sep 30, 2013

CVE-2013-5504 EPSS 0.01

Cisco ISE - XSS

Cross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30266.

CWE-79 Sep 30, 2013

CVE-2013-5943 EPSS 0.00

Graphite < 0.9.10 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Sep 27, 2013

CVE-2013-4626 EPSS 0.00

BackWPup <3.0.13 - XSS

Cross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php.

CWE-79 Sep 26, 2013

CVE-2013-5938 EPSS 0.00

Click2sell Suite Module - XSS

Cross-site scripting (XSS) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a confirmation form.

CWE-79 Sep 25, 2013

CVE-2013-5586 EPSS 0.01

WikkaWiki <1.3.4-p1 - XSS

Cross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or HTML via the wakka parameter to sql/.

CWE-79 Sep 25, 2013