Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (370024 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-22617 1 Ardour 1 Ardour 2024-11-21 9.8 Critical
Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext.
CVE-2020-22612 1 Mybb 1 Mybb 2024-11-21 9.8 Critical
Installer RCE on settings file write in MyBB before 1.8.22.
CVE-2020-22609 1 Enhancesoft 1 Osticket 2024-11-21 6.1 Medium
Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php.
CVE-2020-22608 1 Enhancesoft 1 Osticket 2024-11-21 6.1 Medium
Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php.
CVE-2020-22607 1 Limesurvey 1 Limesurvey 2024-11-21 6.1 Medium
Cross Site Scripting vulnerabilty in LimeSurvey 4.1.11+200316 via the (1) name and (2) description parameters in application/controllers/admin/PermissiontemplatesController.php.
CVE-2020-22570 1 Memcached 1 Memcached 2024-11-21 7.5 High
Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta command.
CVE-2020-22552 1 Snap7 Project 1 Snap7 2024-11-21 7.5 High
The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No and S7 writes a var function, the Snap7 server will be crashed.
CVE-2020-22550 1 Veno File Manager Project 1 Veno File Manager 2024-11-21 7.5 High
Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server.
CVE-2020-22535 1 Pbootcms 1 Pbootcms 2024-11-21 6.5 Medium
Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php.
CVE-2020-22481 1 Hack 1 Hfish 2024-11-21 6.1 Medium
An issue was discovered in HFish 0.5.1. When a payload is inserted where the password is entered, XSS code is triggered when the administrator views the information.
CVE-2020-22475 1 Tasks 1 Tasks 2024-11-21 6.8 Medium
"Tasks" application version before 9.7.3 is affected by insecure permissions. The VoiceCommandActivity application component allows arbitrary applications on a device to add tasks with no restrictions.
CVE-2020-22474 1 Weberp 1 Weberp 2024-11-21 6.5 Medium
In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.
CVE-2020-22453 1 Untis 1 Webuntis 2024-11-21 6.1 Medium
Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information.
CVE-2020-22428 1 Solarwinds 2 Serv-u Ftp Server, Serv-u Mft Server 2024-11-21 4.8 Medium
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload.
CVE-2020-22427 1 Nagios 1 Nagios Xi 2024-11-21 7.2 High
NagiosXI 5.6.11 is affected by a remote code execution (RCE) vulnerability. An authenticated nagiosadmin user can inject additional commands into a request. NOTE: the vendor disputes whether the CVE and its references are actionable because all technical details are omitted, and the only option is to pay for a subscription service where technical details may be disclosed at an unspecified later time
CVE-2020-22425 1 Centreon 1 Centreon 2024-11-21 8.8 High
Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution.
CVE-2020-22421 1 74cms 1 74cms 2024-11-21 6.1 Medium
74CMS v6.0.4 was discovered to contain a cross-site scripting (XSS) vulnerability via /index.php?m=&c=help&a=help_list&key.
CVE-2020-22403 1 Express-cart Project 1 Express-cart 2024-11-21 8.8 High
Cross Site Request Forgery (CSRF) vulnerability in Express cart v1.1.16 allows attackers to add an administrator account, add discount code or other unspecified impacts.
CVE-2020-22394 1 Yzmcms 1 Yzmcms 2024-11-21 6.1 Medium
In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting (XSS) vulnerability.
CVE-2020-22392 1 Intelliants 1 Subrion Cms 2024-11-21 5.4 Medium
Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.2 when adding a blog and then editing an image file.