CVE Tracker
244,235 total CVEsLive vulnerability feed from the National Vulnerability Database
Reflected XSS in wordpress plugin pondol-carousel v1.0
Reflected XSS in wordpress plugin photoxhibit v2.1.8
Reflected XSS in wordpress plugin photoxhibit v2.1.8
Reflected XSS in wordpress plugin parsi-font v4.2.5
Reflected XSS in wordpress plugin page-layout-builder v1.9.3
Reflected XSS in wordpress plugin new-year-firework v1.1.9
Reflected XSS in wordpress plugin infusionsoft v1.5.11
Reflected XSS in wordpress plugin indexisto v1.0.5
Reflected XSS in wordpress plugin hero-maps-pro v2.1.0
Reflected XSS in wordpress plugin heat-trackr v1.0
Reflected XSS in wordpress plugin hdw-tube v1.2
Reflected XSS in wordpress plugin hdw-tube v1.2
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1
Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8
Reflected XSS in wordpress plugin e-search v1.0
Reflected XSS in wordpress plugin e-search v1.0
Reflected XSS in wordpress plugin defa-online-image-protector v3.3
Reflected XSS in wordpress plugin anti-plagiarism v3.60
Reflected XSS in wordpress plugin ajax-random-post v2.00
Reflected XSS in wordpress plugin admin-font-editor v1.8
The updater subsystem in Intel SSD Toolbox before 3.3.7 allows local users to gain privileges via unspecified vectors.
Intel Integrated Performance Primitives (aka IPP) Cryptography before 9.0.4 makes it easier for local users to discover RSA private keys via a side-channel attack.
The mptsas_process_scsi_io_request function in QEMU (aka Quick Emulator), when built with LSI SAS1068 Host Bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors involving MPTSASRequest objects.
The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the reason argument.
Showing 165626-165650 of 244,235 CVEs