A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo P...

Oct 11, 2022

CVE-2021-3824

MEDIUM

OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL

Sep 23, 2021

CVE-2020-7011

MEDIUM

Elastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in the Reference UI

Jun 3, 2020

Searching...

Filters

11 vulnerabilities found

CVE-2026-54443

MEDIUM

Dashy: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Jul 15, 2026

CVE-2025-58444

HIGH

MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server

Sep 8, 2025

CVE-2024-52890

MEDIUM

IBM Engineering Lifecycle Optimization - Publishing cross-site scripting

Aug 5, 2025

CVE-2025-30203

MEDIUM

Tuleap allows XSS via the content of RSS feeds in the RSS widgets

Mar 31, 2025

CVE-2024-42184

LOW

HCL BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme

Jan 23, 2025

CVE-2024-45045

MEDIUM

JavaScript Injection via url encoded values in links in Collabora Office Android

Aug 29, 2024

CVE-2023-30959

MEDIUM

Stored XSS via javascript URI in Apollo Change Requests comment

Sep 26, 2023

CVE-2023-25571

MEDIUM

Backstage has XSS Vulnerability in Software Catalog

Feb 14, 2023

CVE-2022-40181

HIGH

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo P...

Oct 11, 2022

CVE-2021-3824

MEDIUM

OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL

Sep 23, 2021

CVE-2020-7011

MEDIUM

Elastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in the Reference UI

Jun 3, 2020