Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (369876 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-43322 1 Zpesystems 1 Nodegrid Os 2024-11-21 8.8 High
ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/.
CVE-2023-43321 1 Dcnetworks 2 Dcfw-1800-sdc, Dcfw-1800-sdc Firmware 2024-11-21 8.8 High
File Upload vulnerability in Digital China Networks DCFW-1800-SDC v.3.0 allows an authenticated attacker to execute arbitrary code via the wget function in the /sbin/cloudadmin.sh component.
CVE-2023-43319 1 Icewarp 1 Webclient 2024-11-21 6.1 Medium
Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter.
CVE-2023-43309 1 Webmin 1 Webmin 2024-11-21 4.8 Medium
There is a stored cross-site scripting (XSS) vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload.
CVE-2023-43305 1 Linecorp 1 Line 2024-11-21 8.2 High
An issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43302 1 Linecorp 1 Line 2024-11-21 8.2 High
An issue in sanTas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43301 1 Linecorp 1 Line 2024-11-21 8.2 High
An issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43300 1 Linecorp 1 Line 2024-11-21 8.2 High
An issue in urban_project mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43299 1 Linecorp 1 Line 2024-11-21 5.3 Medium
An issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43297 1 Linecorp 1 Line 2024-11-21 5.4 Medium
An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.
CVE-2023-43295 1 Clickstudios 1 Passwordstate 2024-11-21 3.5 Low
Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a local attacker to execute arbitrary code via a crafted request.
CVE-2023-43291 1 Emlog 1 Emlog 2024-11-21 9.8 Critical
Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component.
CVE-2023-43284 1 Dlink 2 Dir-846, Dir-846 Firmware 2024-11-21 8.8 High
D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker to execute arbitrary code via an unspecified manipulation of the QoS POST parameter.
CVE-2023-43281 1 Nothings 1 Stb Image.h 2024-11-21 6.5 Medium
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function.
CVE-2023-43278 1 Seacms 1 Seacms 2024-11-21 8.8 High
A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account.
CVE-2023-43275 1 Dedecms 1 Dedecms 2024-11-21 8.8 High
Cross-Site Request Forgery (CSRF) vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalog_add.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form.
CVE-2023-43274 1 Phpjabbers 1 Php Shopping Cart 2024-11-21 7.5 High
Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter.
CVE-2023-43271 1 70mai 2 A500s, A500s Firmware 2024-11-21 9.1 Critical
Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the driving recorder through ftp and other protocols.
CVE-2023-43270 1 Dst-admin Project 1 Dst-admin 2024-11-21 9.8 Critical
dst-admin v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the userId parameter at /home/playerOperate.
CVE-2023-43269 1 Pigcms 1 Pigcms 2024-11-21 9.8 Critical
pigcms up to 7.0 was discovered to contain an arbitrary file upload vulnerability.