KEV + Critical EPSS ≥ 50% Critical + PoC No Auth + Critical XSS (CWE-79) SQLi (CWE-89) Code Injection KEV + Has PoC

Results for "cwe:79"

1,759 found Export CSV
CVE Severity CVSS EPSS Published Flags Description
CVE-2026-5643 low 1.9 0.0021 2026-04-06 A vulnerability was identified in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291
CVE-2026-5644 low 1.9 0.0021 2026-04-06 A security flaw has been discovered in Cyber-III Student-Management-System up to 1a938fa61e9f735078e
CVE-2026-5647 low 1.9 0.0021 2026-04-06 A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of
CVE-2026-5668 low 1.9 0.0021 2026-04-06 A flaw has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4
CVE-2026-6003 low 1.9 0.0020 2026-04-10 A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This iss
CVE-2026-6184 low 1.9 0.0030 2026-04-13 A weakness has been identified in code-projects Simple Content Management System 1.0. This affects a
CVE-2026-6622 low 1.9 0.0021 2026-04-20 A vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20. This affects an unknow
CVE-2026-6624 low 1.9 0.0021 2026-04-20 A weakness has been identified in BichitroGan ISP Billing Software 2025.3.20. Affected is an unknown
CVE-2026-6651 low 1.9 0.0021 2026-04-20 A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0. This vulnerability affe
CVE-2026-6995 low 1.9 0.0024 2026-04-25 A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacted element
CVE-2026-6996 low 1.9 0.0024 2026-04-25 A weakness has been identified in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This affects an unknown fu
CVE-2026-6997 low 1.9 0.0024 2026-04-25 A security vulnerability has been detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This impacts a
CVE-2026-6998 low 1.9 0.0024 2026-04-25 A vulnerability was detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. Affected is an unknown funct
CVE-2026-6999 low 1.9 0.0027 2026-04-25 A flaw has been found in BIVOCOM TR321 21.1.1.50. Affected by this vulnerability is an unknown funct
CVE-2026-7000 low 1.9 0.0024 2026-04-25 A vulnerability has been found in Datacom DM4100 1.3.6.1.4.1.3709. Affected by this issue is some un
CVE-2026-7001 low 1.9 0.0024 2026-04-25 A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709. This affects an unknown part of the co
CVE-2026-7011 low 1.9 0.0027 2026-04-26 A weakness has been identified in MaxSite CMS up to 109.3. Affected by this vulnerability is an unkn
CVE-2026-7012 low 1.9 0.0029 2026-04-26 A vulnerability was detected in MaxSite CMS up to 109.3. This affects an unknown part of the compone
CVE-2026-7013 low 1.9 0.0022 2026-04-26 A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is som
CVE-2026-7014 low 1.9 0.0027 2026-04-26 A flaw has been found in MaxSite CMS up to 109.3. This vulnerability affects unknown code of the com
CVE-2026-7015 low 1.9 0.0022 2026-04-26 A vulnerability has been found in MaxSite CMS up to 109.3. This issue affects some unknown processin
CVE-2026-7016 low 1.9 0.0022 2026-04-26 A vulnerability was found in MaxSite CMS up to 109.3. Impacted is an unknown function of the compone
CVE-2026-7027 low 1.9 0.0043 2026-04-26 A vulnerability was identified in D-Link DSL-2740R EU_01.15. Impacted is an unknown function of the
CVE-2026-7090 low 1.9 0.0025 2026-04-27 A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of t
CVE-2026-7269 low 1.9 0.0021 2026-04-28 A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an
CVE-2026-7281 low 1.9 0.0021 2026-04-28 A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impact
CVE-2026-7294 low 1.9 0.0021 2026-04-28 A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability
CVE-2026-8136 low 1.9 0.0020 2026-05-08 A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unk
CVE-2026-11338 low 1.9 0.0026 2026-06-05 A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.
CVE-2026-14655 low 1.9 0.0037 2026-07-04 A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is
CVE-2026-15532 low 1.9 0.0037 2026-07-13 A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects so
CVE-2026-16205 low 1.9 0.0035 2026-07-19 A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function ht
CVE-2026-19207 low 1.9 0.0037 2026-08-07 A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This
CVE-2026-112038 low 1.9 0.0021 2026-10-19 A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.
CVE-2026-116100 low 1.9 0.0020 2026-10-26 A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file a
CVE-2026-41430 low 1.3 0.0015 2026-04-24 Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace
CVE-2026-13140 low 1.1 0.0029 2026-06-24 Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytoken
CVE-2026-44956 none — 0.0039 2026-06-23 Low‑privileged users could use their Full Name as a vector for a stored XSS attack. The name is incl
CVE-2026-44960 none — 0.0039 2026-06-23 A stored XSS can be exploited by leveraging the usernames as an attack vector. When an admin user vi
CVE-2026-58031 none — 0.0027 2026-07-01 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab
CVE-2026-58034 none — 0.0029 2026-07-01 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab
CVE-2026-58035 none — 0.0029 2026-07-01 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab
CVE-2026-58037 none — 0.0027 2026-07-01 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab
CVE-2026-58038 none — 0.0027 2026-07-01 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab
CVE-2026-4765 none — 0.0044 2026-07-13 Self Cross-Site Scripting (Self-XSS) vulnerability in the RD Station Conversas chat feature. The vul
CVE-2026-116627 — — 0.0016 2026-10-27 Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifica
CVE-2018-6882 — — — — KEV Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might al
CVE-2020-3580 — — — — KEV Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient i
CVE-2018-19943 — — — — KEV A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to
CVE-2018-19953 — — — — KEV A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to