Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (324384 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-15491 1 It-novum 1 Openitcockpit 2024-11-21 N/A
openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21.
CVE-2019-15490 1 It-novum 1 Openitcockpit 2024-11-21 N/A
openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21.
CVE-2019-15489 1 Laracom 1 Laracom 2024-11-21 N/A
laracom (aka Laravel FREE E-Commerce Software) 1.4.11 has search?q= XSS.
CVE-2019-15488 1 Igniterealtime 1 Openfire 2024-11-21 N/A
Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test.
CVE-2019-15487 1 Schoolexperience 1 Department For Education School Experience 2024-11-21 N/A
DfE School Experience before v16333-GA has XSS via a teacher training URL.
CVE-2019-15486 1 Django Js Reverse Project 1 Django Js Reserve 2024-11-21 N/A
django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline.
CVE-2019-15485 1 Boltcms 1 Bolt 2024-11-21 N/A
Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php.
CVE-2019-15484 1 Boltcms 1 Bolt 2024-11-21 N/A
Bolt before 3.6.10 has XSS via an image's alt or title field.
CVE-2019-15483 1 Boltcms 1 Bolt 2024-11-21 N/A
Bolt before 3.6.10 has XSS via a title that is mishandled in the system log.
CVE-2019-15482 1 Selectize-plugin-a11y Project 1 Selectize-plugin-a11y 2024-11-21 N/A
selectize-plugin-a11y before 1.1.0 has XSS via the msg field.
CVE-2019-15481 1 Kimai 1 Kimai 2 2024-11-21 N/A
Kimai v2 before 1.1 has XSS via a timesheet description.
CVE-2019-15480 1 Domoticz 1 Domoticz 2024-11-21 N/A
Domoticz 4.10717 has XSS via item.Name.
CVE-2019-15479 1 Status Board Project 1 Status Board 2024-11-21 N/A
Status Board 1.1.81 has reflected XSS via dashboard.ts.
CVE-2019-15478 1 Status Board Project 1 Status Board 2024-11-21 N/A
Status Board 1.1.81 has reflected XSS via logic.ts.
CVE-2019-15477 1 Jooby 1 Jooby 2024-11-21 N/A
Jooby before 1.6.4 has XSS via the default error handler.
CVE-2019-15476 1 Former Project 1 Former 2024-11-21 N/A
Former before 4.2.1 has XSS via a checkbox value.
CVE-2019-15475 1 Mi 2 A3, A3 Firmware 2024-11-21 5.5 Medium
The Xiaomi Mi A3 Android device with a build fingerprint of xiaomi/onc_eea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. This app allows a third-party app to use its open interface to record telephone calls to external storage.
CVE-2019-15474 1 Mi 2 Cepheus, Cepheus Firmware 2024-11-21 5.5 Medium
The Xiaomi Cepheus Android device with a build fingerprint of Xiaomi/cepheus/cepheus:9/PKQ1.181121.001/V10.2.6.0.PFAMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. This app allows a third-party app to use its open interface to record telephone calls to external storage.
CVE-2019-15473 1 Mi 2 A2 Lite, A2 Lite Firmware 2024-11-21 5.5 Medium
The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/jasmine/jasmine_sprout:9/PKQ1.180904.001/V10.0.2.0.PDIMIFJ:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. This app allows a third-party app to use its open interface to record telephone calls to external storage.
CVE-2019-15472 1 Mi 2 A2 Lite, A2 Lite Firmware 2024-11-21 5.5 Medium
The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy_sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. This app allows a third-party app to use its open interface to record telephone calls to external storage.