Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:79"
1,759 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-66376 |
— | — | 0.2023 | — | KEV | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classi |
CVE-2026-28861 |
— | — | 0.0032 | 2026-03-25 | A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS | |
CVE-2026-40734 |
— | — | 0.0014 | 2026-04-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-8391 |
— | — | 0.0030 | 2026-05-12 | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Fir | |
CVE-2026-44990 |
— | — | 0.0068 | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simp | |
CVE-2026-11998 |
— | — | 0.0040 | 2026-06-24 | A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies fo | |
CVE-2026-86898 |
— | — | 0.0034 | 2026-09-14 | A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 | |
CVE-2026-96379 |
— | — | 0.0015 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2012-0767 |
— | — | — | — | KEV | Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or |