CVE-2017-18286

nZEDb v0.7.3.3 has XSS in the 404 error page.

• CWE-79

• https://packetstormsecurity.com/files/143725/nZEDb-0.7.3.3-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/143725/nZEDb-0.7.3.3-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry

Published

Jun 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-18280In Snapdragon (Automobile, Mobile, Wear) in version MDM9607,…
• CVE-2017-18281A bool variable in Video function, which gets typecasted to …
• CVE-2017-18282Non-secure SW can cause SDCC to generate secure bus accesses…
• CVE-2017-18283Possible memory corruption when Read Val Blob Req is receive…
• CVE-2017-18284The Gentoo app-backup/burp package before 2.1.32 sets the ow…
• CVE-2017-18285The Gentoo app-backup/burp package before 2.1.32 has incorre…
• CVE-2017-18287An issue was discovered in PvPGN Stats 2.4.6. SQL Injection …
• CVE-2017-18288An issue was discovered in PvPGN Stats 2.4.6. SQL Injection …
• CVE-2017-18289An issue was discovered in PvPGN Stats 2.4.6. SQL Injection …
• CVE-2017-1829Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-18290An issue was discovered in PvPGN Stats 2.4.6. SQL Injection …
• CVE-2017-18291An issue was discovered in PvPGN Stats 2.4.6. SQL Injection …