CVE & Exploit Intelligence Database

Updated 2h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

338,223 CVEs tracked 53,278 with exploits 4,730 exploited in wild 1,542 CISA KEV 3,929 Nuclei templates 37,826 vendors 42,568 researchers

42,457 results Clear all

CVE-2007-5947 EPSS 0.08

Mozilla Firefox <2.0.0.10 & SeaMonkey <1.1.7 - XSS

The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI.

CWE-79 Nov 14, 2007

CVE-2007-5948 EPSS 0.00

SF-Shoutbox <1.4 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in main.php in SF-Shoutbox 1.2.1 through 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) nick (aka Name) and (2) shout (aka Shout) parameters.

CWE-79 Nov 14, 2007

CVE-2007-5949 EPSS 0.00

IBM Tivoli Service Desk 6.2 - XSS

Cross-site scripting (XSS) vulnerability in IBM Tivoli Service Desk 6.2 allows remote authenticated users to inject arbitrary web script or HTML via the Description parameter in a Maximo change action.

CWE-79 Nov 14, 2007

CVE-2007-5954 6.1 MEDIUM 1 PoC Analysis EPSS 0.00

JLMForo System - XSS

Cross-site scripting (XSS) vulnerability in buscador.php in JLMForo System allows remote attackers to inject arbitrary web script or HTML via the clave parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CWE-79 Nov 14, 2007

CVE-2007-5944 1 PoC Analysis EPSS 0.03

IBM WebSphere Application Server <5.1.1.17 - XSS

Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. NOTE: this might be the same issue as CVE-2006-3918, but there are insufficient details to be sure.

CWE-79 Nov 14, 2007

CVE-2007-5932 EPSS 0.01

Fatwire Content Server (CS) CMS 6.3.0 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in Fatwire Content Server (CS) CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the (1) search function, (2) advanced search function, and possibly other components.

CWE-79 Nov 10, 2007

CVE-2007-5930 EPSS 0.01

Cerberus FTP Server <2.46 - XSS

Cross-site scripting (XSS) vulnerability in the web interface in Cerberus FTP Server before 2.46 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Nov 10, 2007

CVE-2007-5924 EPSS 0.00

IBM Lotus Domino <7.0.2 - XSS

Cross-site scripting (XSS) vulnerability in the Web Server (HTTP) task in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.2 FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Nov 10, 2007

CVE-2007-5923 1 PoC Analysis EPSS 0.01

CA eTrust SiteMinder - XSS

Cross-site scripting (XSS) vulnerability in forms/smpwservices.fcc in CA (formerly Computer Associates) eTrust SiteMinder Agent allows remote attackers to inject arbitrary web script or HTML via the SMAUTHREASON parameter, a different vector than CVE-2005-2204.

CWE-79 Nov 10, 2007

CVE-2007-5581 EPSS 0.01

Cisco Unified Meetingplace < 5.4 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName and (2) LastName parameters.

CWE-79 Nov 08, 2007

CVE-2007-5891 EPSS 0.00

ManageEngine OpManager MSP Edition/7.0 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in jsp/Login.do in ManageEngine OpManager MSP Edition and OpManager 7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) requestid, (2) fileid, (3) woMode, and (2) woID parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CWE-79 Nov 08, 2007

CVE-2007-5888 EPSS 0.00

Coppermine Photo Gallery <1.4.14 - XSS

Cross-site scripting (XSS) vulnerability in displayecard.php in Coppermine Photo Gallery (CPG) before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the data parameter.

CWE-79 Nov 07, 2007

CVE-2007-5834 EPSS 0.00

BosDev BosNews 4 - XSS

Cross-site scripting (XSS) vulnerability in BosDev BosNews 4 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in a news post.

CWE-79 Nov 05, 2007

CVE-2007-5833 EPSS 0.00

BosDev BosMarket - XSS

Multiple cross-site scripting (XSS) vulnerabilities in BosDev BosMarket Business Directory System allow remote authenticated users to inject arbitrary web script or HTML via (1) user info (account details) or (2) a post.

CWE-79 Nov 05, 2007

CVE-2007-5817 6.1 MEDIUM 1 PoC Analysis EPSS 0.00

CONTENTCustomizer <3.1mp - RCE

dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1) del, (2) delbackup, (3) res, or (4) ren action. NOTE: this issue can be leveraged to conduct cross-site scripting (XSS) and possibly other attacks.

CWE-79 Nov 05, 2007

CVE-2007-5806 EPSS 0.01

ILIAS <3.8.3 - XSS

Cross-site scripting (XSS) vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the (1) mailing or (2) forum component, as demonstrated using the style and onmouseover HTML attributes.

CWE-79 Nov 05, 2007

CVE-2007-5809 EPSS 0.00

Hitachi Web Server <03-10 - XSS

Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.

CWE-79 Nov 05, 2007

CVE-2007-5798 EPSS 0.00

IBM WebSphere Application Server <6.1.0.13 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to inject arbitrary web script or HTML via the (1) keyField, (2) nameField, (3) valueField, and (4) frameReturn parameters.

CWE-79 Nov 03, 2007

CVE-2007-5796 1 PoC Analysis EPSS 0.00

Blue Coat ProxySG <4.2.6.1, <5.2.2.5 - XSS

Cross-site scripting (XSS) vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists.

CWE-79 Nov 03, 2007

CVE-2007-5724 1 PoC Analysis EPSS 0.03

Omnistar Interactive Omnistar Live - XSS

Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web script or HTML via (1) the category_id parameter to users/kb.php, and possibly (3) the Email Box field in profile.php.

CWE-79 Oct 30, 2007