Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:79"
1,821 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-44960 |
none | — | 0.0039 | 2026-06-23 | A stored XSS can be exploited by leveraging the usernames as an attack vector. When an admin user vi | |
CVE-2026-58031 |
none | — | 0.0027 | 2026-07-01 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab | |
CVE-2026-58034 |
none | — | 0.0029 | 2026-07-01 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab | |
CVE-2026-58035 |
none | — | 0.0029 | 2026-07-01 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab | |
CVE-2026-58037 |
none | — | 0.0027 | 2026-07-01 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab | |
CVE-2026-58038 |
none | — | 0.0027 | 2026-07-01 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab | |
CVE-2026-4765 |
none | — | 0.0044 | 2026-07-13 | Self Cross-Site Scripting (Self-XSS) vulnerability in the RD Station Conversas chat feature. The vul | |
CVE-2026-116627 |
— | — | 0.0016 | 2026-10-27 | Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifica | |
CVE-2018-6882 |
— | — | 0.2976 | — | KEV | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might al |
CVE-2020-3580 |
— | — | 0.8558 | — | KEV | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient i |
CVE-2018-19943 |
— | — | 0.2268 | — | KEV | A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to |
CVE-2018-19953 |
— | — | 0.3053 | — | KEV | A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to |
CVE-2025-66376 |
— | — | 0.2023 | — | KEV | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classi |
CVE-2026-28861 |
— | — | 0.0032 | 2026-03-25 | A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS | |
CVE-2026-40734 |
— | — | 0.0014 | 2026-04-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-8391 |
— | — | 0.0030 | 2026-05-12 | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Fir | |
CVE-2026-44990 |
— | — | 0.0068 | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simp | |
CVE-2026-11998 |
— | — | 0.0040 | 2026-06-24 | A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies fo | |
CVE-2026-86898 |
— | — | 0.0034 | 2026-09-14 | A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 | |
CVE-2026-96379 |
— | — | 0.0015 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2012-0767 |
— | — | 0.0619 | — | KEV | Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or |