Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (370465 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-23389 1 Publiccms 1 Publiccms 2024-11-21 9.8 Critical
PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.
CVE-2022-23387 1 Taocms 1 Taocms 2024-11-21 7.5 High
An issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Comment Update field.
CVE-2022-23384 1 Yzmcms 1 Yzmcms 2024-11-21 8.8 High
YzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF) in /admin.add
CVE-2022-23383 1 Yzmcms 1 Yzmcms 2024-11-21 9.1 Critical
YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non login status because real authentication is not carried out.
CVE-2022-23382 1 Hichip 1 Shenzhen Hichip Vision Technology Firmware 2024-11-21 8.1 High
Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted multicast message in a local network.
CVE-2022-23380 1 Taogogo 1 Taocms 2024-11-21 8.8 High
There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit.
CVE-2022-23379 1 Emlog 1 Emlog 2024-11-21 9.8 Critical
Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().
CVE-2022-23378 1 Tastyigniter 1 Tastyigniter 2024-11-21 5.4 Medium
A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D" parameter of a request made to /admin/allergens/edit/1 is vulnerable.
CVE-2022-23377 1 Keep 1 Archeevo 2024-11-21 7.5 High
Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local files.
CVE-2022-23376 1 Wikidocs 1 Wikidocs 2024-11-21 6.1 Medium
WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages.
CVE-2022-23375 1 Wikidocs 1 Wikidocs 2024-11-21 8.8 High
WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php.
CVE-2022-23367 1 Fulusso Project 1 Fulusso 2024-11-21 6.1 Medium
Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection.
CVE-2022-23366 1 Hms Project 1 Hms 2024-11-21 9.8 Critical
HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php.
CVE-2022-23365 1 Hms Project 1 Hms 2024-11-21 9.8 Critical
HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php.
CVE-2022-23364 1 Hms Project 1 Hms 2024-11-21 9.8 Critical
HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php.
CVE-2022-23363 1 Online Banking System Project 1 Online Banking System 2024-11-21 9.8 Critical
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via index.php.
CVE-2022-23358 1 Easycms 1 Easycms 2024-11-21 9.8 Critical
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement.
CVE-2022-23357 1 Mozilo 1 Mozilocms 2024-11-21 9.1 Critical
mozilo2.0 was discovered to be vulnerable to directory traversal attacks via the parameter curent_dir.
CVE-2022-23352 1 Bigantsoft 1 Bigant Server 2024-11-21 7.5 High
An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).
CVE-2022-23350 1 Bigantsoft 1 Bigant Server 2024-11-21 5.4 Medium
BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.