CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2018-8979 |
| HOCH8.8 |
Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI. |
| 25/03/2018 |
| CVE-2018-8978 | MITTEL5.4 | Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI. | 25/03/2018 |
| CVE-2018-8903 | MITTEL5.4 | Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen. | 22/03/2018 |