https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2016-4847.htmlhttps://patchthecve.com/cve/CVE-2016-4847.htmlWed, 17 Jun 2026 00:48:19 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex.https://patchthecve.com/cve/CVE-2014-7280.htmlhttps://patchthecve.com/cve/CVE-2014-7280.htmlWed, 17 Jun 2026 00:14:41 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the Web UI before 2.3.4 Build #85 for Tenable Nessus 5.x allows remote web servers to inject arbitrary web script or HTML via the server header.https://patchthecve.com/cve/CVE-2014-4980.htmlhttps://patchthecve.com/cve/CVE-2014-4980.htmlWed, 17 Jun 2026 00:10:52 +0000MEDIUM 5.0: The /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7 allows remote attackers to obtain sensitive information via the token parameter.