CWE-81

9 CVEs classified under CWE-81. Browse by severity and year.

Top CVEs for CWE-81
CVESeverityScorePublishedSummary
CVE-2022-4361Critical10.02023-07-07Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerabili…
CVE-2022-4137High8.12023-09-25A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious l…
CVE-2025-24344Medium6.32025-04-30A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags an…
CVE-2026-41568Medium6.12026-06-12Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version…
CVE-2024-47064Medium6.12024-09-30Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. If an attacker can trick a logged-in CVAT user in…
CVE-2024-6892Medium6.12024-08-08Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx web application.
CVE-2019-25027Medium6.12021-04-23Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (Vaadin 10.0.0 through 10.0.13), and 1.1…
CVE-2024-47882Medium5.92024-10-24OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in "Something went wrong!" error page includes the except…
CVE-2025-08832025-03-12Improper Neutralization of Script in an Error Message Web Page vulnerability in OpenText™ Service Manager.  The vulnerability could reveal sensitive informati…
All CVEs classified under CWE-81 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-41568Medium6.12026-06-12Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version…
CVE-2025-24344Medium6.32025-04-30A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags an…
CVE-2025-08832025-03-12Improper Neutralization of Script in an Error Message Web Page vulnerability in OpenText™ Service Manager.  The vulnerability could reveal sensitive informati…
CVE-2024-47882Medium5.92024-10-24OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in "Something went wrong!" error page includes the except…
CVE-2024-47064Medium6.12024-09-30Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. If an attacker can trick a logged-in CVAT user in…
CVE-2024-6892Medium6.12024-08-08Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx web application.
CVE-2022-4137High8.12023-09-25A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious l…
CVE-2022-4361Critical10.02023-07-07Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerabili…
CVE-2019-25027Medium6.12021-04-23Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (Vaadin 10.0.0 through 10.0.13), and 1.1…