Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (360311 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-32234 1 Smartertools 1 Smartermail 2024-11-21 9.8 Critical
SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.
CVE-2021-32233 1 Smartertools 1 Smartermail 2024-11-21 6.1 Medium
SmarterTools SmarterMail before Build 7776 allows XSS.
CVE-2021-32202 1 Cs-cart 1 Cs-cart 2024-11-21 6.1 Medium
In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation page.
CVE-2021-32198 1 Emtec 1 Zoc 2024-11-21 9.8 Critical
EmTec ZOC through 8.02.4 allows remote servers to cause a denial of service (Windows GUI hang) by telling the ZOC window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. In other words, it does not implement a usleep or similar delay upon processing a title change.
CVE-2021-32172 1 Maianscriptworld 1 Maian Cart 2024-11-21 9.8 Critical
Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin.
CVE-2021-32162 1 Webmin 1 Webmin 2024-11-21 8.8 High
A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 through the File Manager feature.
CVE-2021-32161 1 Webmin 1 Webmin 2024-11-21 6.1 Medium
A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the File Manager feature.
CVE-2021-32160 1 Webmin 1 Webmin 2024-11-21 6.1 Medium
A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Add Users feature.
CVE-2021-32159 1 Webmin 1 Webmin 2024-11-21 8.8 High
A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Upload and Download feature.
CVE-2021-32158 1 Webmin 1 Webmin 2024-11-21 6.1 Medium
A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Upload and Download feature.
CVE-2021-32157 1 Webmin 1 Webmin 2024-11-21 9.6 Critical
A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.
CVE-2021-32156 1 Webmin 1 Webmin 2024-11-21 8.8 High
A cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.
CVE-2021-32139 1 Gpac 1 Gpac 2024-11-21 5.5 Medium
The gf_isom_vp_config_get function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVE-2021-32138 1 Gpac 1 Gpac 2024-11-21 5.5 Medium
The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVE-2021-32137 1 Gpac 1 Gpac 2024-11-21 5.5 Medium
Heap buffer overflow in the URL_GetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVE-2021-32136 1 Gpac 1 Gpac 2024-11-21 7.8 High
Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVE-2021-32135 1 Gpac 1 Gpac 2024-11-21 5.5 Medium
The trak_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVE-2021-32134 1 Gpac 1 Gpac 2024-11-21 5.5 Medium
The gf_odf_desc_copy function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVE-2021-32132 1 Gpac 1 Gpac 2024-11-21 5.5 Medium
The abst_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVE-2021-32122 1 Netgear 8 Ex3700, Ex3700 Firmware, Ex3800 and 5 more 2024-11-21 9.8 Critical
Certain NETGEAR devices are affected by CSRF. This affects EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, and EX6130 before 1.0.0.44.