CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| MÉDIO |
Cross-Site Scripting in swagger-ui |
| 11/09/2020 |
| GHSA-4f9m-pxwh-68hg | MÉDIO6.5 | Cross-Site Scripting in swagger-ui | 11/09/2020 |
| GHSA-388g-jwpg-x6j4 | MÉDIO6.5 | Cross-Site Scripting in swagger-ui | 11/09/2020 |
| GHSA-g336-c7wv-8hp3 | CRÍTICO | Cross-Site Scripting in swagger-ui | 01/09/2020 |
| CVE-2016-1000233 | ALTO | Cross-Site Scripting in swagger-ui | 01/09/2020 |
| CVE-2016-1000226 | CRÍTICO | Cross-Site Scripting in swagger-ui | 01/09/2020 |
| CVE-2016-1000229 | MÉDIO6.1 | swagger-ui has XSS in key names | 20/12/2019 |
| CVE-2019-17495 | CRÍTICO9.8 | A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untr | 10/10/2019 |
| GHSA-x9p2-fxq6-2m5f | MÉDIO4.3 | Reverse Tabnapping in swagger-ui | 20/06/2019 |
| CVE-2016-5682 | MÉDIO6.1 | Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section. | 10/04/2017 |