Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (371834 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-41724 2 Golang, Redhat 20 Go, Ansible Automation Platform, Cert Manager and 17 more 2025-03-07 7.5 High
Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).
CVE-2022-41727 2 Fedoraproject, Golang 3 Fedora, Image, Tiff 2025-03-07 5.5 Medium
An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service.
CVE-2023-23315 1 Stripe 1 Stripe Payment Pro 2025-03-07 9.8 Critical
The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method `stripejsValidationModuleFrontController::initContent()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
CVE-2023-24127 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2025-03-07 6.5 Medium
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet.
CVE-2023-24128 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2025-03-07 6.5 Medium
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet.
CVE-2023-24129 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2025-03-07 6.5 Medium
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet.
CVE-2023-24130 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2025-03-07 6.5 Medium
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet.
CVE-2023-24131 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2025-03-07 6.5 Medium
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey1_5g parameter at /goform/WifiBasicSet.
CVE-2023-24132 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2025-03-07 6.5 Medium
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey3_5g parameter at /goform/WifiBasicSet.
CVE-2023-24133 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2025-03-07 6.5 Medium
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey_5g parameter at /goform/WifiBasicSet.
CVE-2023-24134 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2025-03-07 6.5 Medium
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet.
CVE-2023-24751 2 Debian, Struktur 2 Debian Linux, Libde265 2025-03-07 6.5 Medium
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
CVE-2023-24752 2 Debian, Struktur 2 Debian Linux, Libde265 2025-03-07 5.5 Medium
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
CVE-2023-25221 2 Debian, Struktur 2 Debian Linux, Libde265 2025-03-07 7.8 High
Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function in motion.cc.
CVE-2023-25222 1 Gnu 1 Libredwg 2025-03-07 8.8 High
A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c.
CVE-2023-26608 1 Vxcontrol 1 Soldr 2025-03-07 5.4 Medium
SOLDR (System of Orchestration, Lifecycle control, Detection and Response) 1.1.0 allows stored XSS via the module editor.
CVE-2022-46501 1 Accruent 1 Maintenance Connection 2025-03-07 9.8 Critical
Accruent LLC Maintenance Connection 2021 (all) & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function.
CVE-2023-0656 1 Sonicwall 32 Nsa 2700, Nsa 3700, Nsa 4700 and 29 more 2025-03-07 7.5 High
A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.
CVE-2023-25362 2 Redhat, Webkitgtk 2 Enterprise Linux, Webkitgtk 2025-03-07 8.8 High
A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely.
CVE-2023-25363 2 Redhat, Webkitgtk 2 Enterprise Linux, Webkitgtk 2025-03-07 8.8 High
A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely.