Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (357875 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-35010 1 Pngdec Project 1 Pngdec 2024-11-21 6.5 Medium
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asan_interceptors_memintrinsics.cpp.
CVE-2022-35009 1 Pngdec Project 1 Pngdec 2024-11-21 6.5 Medium
PNGDec commit 8abf6be was discovered to contain a memory allocation problem via asan_malloc_linux.cpp.
CVE-2022-35008 1 Pngdec Project 1 Pngdec 2024-11-21 6.5 Medium
PNGDec commit 8abf6be was discovered to contain a stack overflow via /linux/main.cpp.
CVE-2022-35007 1 Pngdec Project 1 Pngdec 2024-11-21 6.5 Medium
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite.part.57 at sanitizer_common_interceptors.inc.
CVE-2022-35004 1 Bitbanksoftware 1 Jpegdec 2024-11-21 5.5 Medium
JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl.
CVE-2022-35003 1 Bitbanksoftware 1 Jpegdec 2024-11-21 7.8 High
JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl.
CVE-2022-35002 1 Bitbanksoftware 1 Jpegdec 2024-11-21 5.5 Medium
JPEGDEC commit be4843c was discovered to contain a segmentation fault via TIFFSHORT at /src/jpeg.inl.
CVE-2022-35000 1 Bitbanksoftware 1 Jpegdec 2024-11-21 5.5 Medium
JPEGDEC commit be4843c was discovered to contain a segmentation fault via fseek at /libio/fseek.c.
CVE-2022-34999 1 Bitbanksoftware 1 Jpegdec 2024-11-21 5.5 Medium
JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl.
CVE-2022-34998 1 Bitbanksoftware 1 Jpegdec 2024-11-21 7.8 High
JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl.
CVE-2022-34993 1 Totolink 2 A3600r, A3600r Firmware 2024-11-21 9.8 Critical
Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample.
CVE-2022-34992 1 Luadec Project 1 Luadec 2024-11-21 7.8 High
Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending.
CVE-2022-34991 1 Techvill 1 Paymoney 2024-11-21 5.4 Medium
Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the first_name and last_name parameters.
CVE-2022-34989 1 Fruits Bazar Project 1 Fruits Bazar 2024-11-21 9.8 Critical
Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recover_email parameter at user_password_recover.php.
CVE-2022-34988 1 Inoutscripts 1 Blockchain Altexchanger 2024-11-21 5.4 Medium
Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/js.
CVE-2022-34983 1 Scu-captcha Project 1 Scu-captcha 2024-11-21 9.8 Critical
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.
CVE-2022-34982 1 Eziod Project 1 Eziod 2024-11-21 9.8 Critical
The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
CVE-2022-34981 1 Pycrowdtangle Project 1 Pycrowdtangle 2024-11-21 9.8 Critical
The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
CVE-2022-34972 1 So Filter Shop By Project 1 So Filter Shop By 2024-11-21 9.8 Critical
So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the att_value_id , manu_value_id , opt_value_id , and subcate_value_id parameters at /index.php?route=extension/module/so_filter_shop_by/filter_data.
CVE-2022-34971 1 Feehi 1 Feehi Cms 2024-11-21 8.8 High
An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a crafted PHP file.