Syntax: kev:true severity:critical epss:>0.95 vendor:cisco patch:false
Filters
Severity
Exploitation
Data Source
Data Quality
Vendor
CWE — Weakness Type
Clear all
Top 20 matches Showing top matches — use filters or a more specific query to narrow
3 HIGH17 MEDIUM
CVE-2025-55064
MEDIUM CVSS 4.8
Find Similar
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
NVD RRF 0.016
CVE-2025-55063
MEDIUM CVSS 4.8
Find Similar
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
NVD RRF 0.016
CVE-2025-55062
MEDIUM CVSS 4.8
Find Similar
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
NVD RRF 0.016
CVE-2025-55059
MEDIUM CVSS 6.1
Find Similar
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
maxum
NVD RRF 0.016
CVE-2025-55054
MEDIUM CVSS 6.1
Find Similar
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
NVD RRF 0.015
CVE-2025-46383
MEDIUM CVSS 6.1
Find Similar
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
NVD RRF 0.015
CVE-2025-55056
MEDIUM CVSS 6.1
Find Similar
Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
maxum
NVD RRF 0.015
CVE-2024-47917
HIGH CVSS 7.5
Find Similar
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
NVD RRF 0.015
CVE-2024-47924
HIGH CVSS 7.5
Find Similar
Boa web server – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
NVD RRF 0.014
CVE-2025-7746
MEDIUM CVSS 5.3
Find Similar
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading
NVD RRF 0.014
CVE-2025-3117
MEDIUM CVSS 5.1
Find Similar
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting configuration file paths that could cause an unvalidated data injected by au
NVD RRF 0.014
CVE-2024-47925
HIGH CVSS 7.5
Find Similar
Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
NVD RRF 0.014
CVE-2024-8401
MEDIUM CVSS 5.4
Find Similar
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an authenticated attacker modifies folder names within the context of the product
NVD RRF 0.014
CVE-2025-3899
MEDIUM CVSS 5.1
Find Similar
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in Certificates page on Webserver that could cause an unvalidated data injected by aut
NVD RRF 0.013
CVE-2024-38757
MEDIUM CVSS 6.5
Find Similar
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Typebot allows Stored XSS.This issue affects Typebot: from n/a through 3.6.0.
NVD RRF 0.013
CVE-2025-5742
MEDIUM CVSS 5.1
Find Similar
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an authenticated user modifies configuration parameters on the web server
NVD RRF 0.013
CVE-2025-13902
MEDIUM CVSS 5.1
Find Similar
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition where authenticated attackers can have a victim’s browser ru
schneider-electric
NVD RRF 0.013
CVE-2025-26869
MEDIUM CVSS 6.5
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Build allows Stored XSS.This issue affects Build: from n/a through 1.0.3.
NVD RRF 0.013
CVE-2025-3905
MEDIUM CVSS 5.1
Find Similar
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting PLC system variables that could cause an unvalidated data injected by authen
NVD RRF 0.013
Page 1+ Next →