Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (347112 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-19225 1 Dlink 2 Dsl-2680, Dsl-2680 Firmware 2024-11-21 7.5 High
A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to change DNS servers without being authenticated on the admin interface by submitting a crafted Forms/dns_1 POST request.
CVE-2019-19224 1 Dlink 2 Dsl-2680, Dsl-2680 Firmware 2024-11-21 7.5 High
A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to download the configuration (binary file) settings by submitting a rom-0 GET request without being authenticated on the admin interface.
CVE-2019-19223 1 Dlink 2 Dsl-2680, Dsl-2680 Firmware 2024-11-21 7.5 High
A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to reboot the router by submitting a reboot.html GET request without being authenticated on the admin interface.
CVE-2019-19222 1 Dlink 2 Dsl-2680, Dsl-2680 Firmware 2024-11-21 5.4 Medium
A Stored XSS issue in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an authenticated attacker to inject arbitrary JavaScript code into the info.html administration page by sending a crafted Forms/wireless_autonetwork_1 POST request.
CVE-2019-19221 5 Canonical, Debian, Fedoraproject and 2 more 5 Ubuntu Linux, Debian Linux, Fedora and 2 more 2024-11-21 5.5 Medium
In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
CVE-2019-19220 1 Bmcsoftware 1 Control-m\/agent 2024-11-21 8.8 High
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2).
CVE-2019-19219 1 Bmcsoftware 1 Control-m\/agent 2024-11-21 7.5 High
BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download.
CVE-2019-19218 1 Bmcsoftware 1 Control-m\/agent 2024-11-21 7.5 High
BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage.
CVE-2019-19217 1 Bmcsoftware 1 Control-m\/agent 2024-11-21 8.8 High
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection.
CVE-2019-19216 1 Bmcsoftware 1 Control-m\/agent 2024-11-21 8.8 High
BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy.
CVE-2019-19215 1 Bmcsoftware 1 Control-m\/agent 2024-11-21 8.8 High
A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server.
CVE-2019-19212 1 Dolibarr 1 Dolibarr 2024-11-21 9.8 Critical
Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php (product price screen).
CVE-2019-19211 1 Dolibarr 1 Dolibarr 2024-11-21 6.1 Medium
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS.
CVE-2019-19210 1 Dolibarr 1 Dolibarr 2024-11-21 5.4 Medium
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files.
CVE-2019-19209 1 Dolibarr 1 Dolibarr 2024-11-21 7.5 High
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection.
CVE-2019-19208 1 Codiad 1 Codiad 2024-11-21 9.8 Critical
Codiad Web IDE through 2.8.4 allows PHP Code injection.
CVE-2019-19207 1 Rconfig 1 Rconfig 2024-11-21 8.8 High
rConfig 3.9.2 allows devices.php?searchColumn= SQL injection.
CVE-2019-19206 1 Dolibarr 1 Dolibarr Erp\/crm 2024-11-21 5.4 Medium
Dolibarr CRM/ERP 10.0.3 allows viewimage.php?file= Stored XSS due to JavaScript execution in an SVG image for a profile picture.
CVE-2019-19204 4 Debian, Fedoraproject, Oniguruma Project and 1 more 6 Debian Linux, Fedora, Oniguruma and 3 more 2024-11-21 7.5 High
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.
CVE-2019-19203 3 Fedoraproject, Oniguruma Project, Redhat 5 Fedora, Oniguruma, Enterprise Linux and 2 more 2024-11-21 7.5 High
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.