Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (367953 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-46110 1 Phpgurukul 1 Online Shopping Portal 2024-11-21 9.8 Critical
Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters.
CVE-2021-46109 1 Asus 1 Rt-ac52u B1 Firmware 2024-11-21 6.1 Medium
Invalid input sanitizing leads to reflected Cross Site Scripting (XSS) in ASUS RT-AC52U_B1 3.0.0.4.380.10931 can lead to a user session hijack.
CVE-2021-46108 1 Dlink 2 Dsl-2730e, Dsl-2730e Firmware 2024-11-21 5.4 Medium
D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration.
CVE-2021-46107 1 Ligeo-archives 1 Ligeo Basics 2024-11-21 7.5 High
Ligeo Archives Ligeo Basics as of 02_01-2022 is vulnerable to Server Side Request Forgery (SSRF) which allows an attacker to read any documents via the download features.
CVE-2021-46104 1 Webp 1 Webp Server Go 2024-11-21 7.5 High
An issue was discovered in webp_server_go 0.4.0. There is a directory traversal vulnerability that can read arbitrary file information on the server.
CVE-2021-46102 1 Solanalabs 1 Rbpf 2024-11-21 7.5 High
From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_value is read directly from ELF file without checking. If the sym.st_value is rather large, an integer overflow is triggered while calculating the variable "addr" via "addr = (sym.st_value + refd_pa) as u64";
CVE-2021-46101 1 Gitforwindows 1 Git 2024-11-21 7.5 High
In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.
CVE-2021-46097 1 Dolphinphp 1 Dolphinphp 2024-11-21 8.8 High
Dolphinphp v1.5.0 contains a remote code execution vulnerability in /application/common.php#action_log
CVE-2021-46093 1 Elitecms 1 Elite Cms 2024-11-21 9.8 Critical
eliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php.
CVE-2021-46089 1 Jeecg 1 Jeecg Boot 2024-11-21 9.8 Critical
In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.
CVE-2021-46088 1 Zabbix 1 Zabbix 2024-11-21 7.2 High
Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user.
CVE-2021-46087 1 Jflyfox 1 Jfinal Cms 2024-11-21 5.4 Medium
In jfinal_cms >= 5.1 0, there is a storage XSS vulnerability in the background system of CMS. Because developers do not filter the parameters submitted by the user input form, any user with background permission can affect the system security by entering malicious code.
CVE-2021-46086 1 Mindskip 1 Xzs-mysql 2024-11-21 7.5 High
xzs-mysql >= t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destroy real data.
CVE-2021-46085 1 Oneblog Project 1 Oneblog 2024-11-21 6.5 Medium
OneBlog <= 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority.
CVE-2021-46084 1 Uscat Project 1 Uscat 2024-11-21 5.4 Medium
uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting (XSS) via "close registration information" input box.
CVE-2021-46083 1 Uscat Project 1 Uscat 2024-11-21 5.4 Medium
uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting (XSS) via the input box of the statistical code.
CVE-2021-46082 1 Moxa 12 Mgate 5101-pbm-mn, Mgate 5101-pbm-mn-t, Mgate 5101-pbm-mn-t Firmware and 9 more 2024-11-21 7.5 High
Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discovered to contain a memory leak which allows attackers to cause a Denial of Service (DoS) via crafted packets.
CVE-2021-46080 1 Vehicle Service Management System Project 1 Vehicle Service Management System 2024-11-21 4.8 Medium
A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability.
CVE-2021-46079 1 Vehicle Service Management System Project 1 Vehicle Service Management System 2024-11-21 7.2 High
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection.
CVE-2021-46078 1 Vehicle Service Management System Project 1 Vehicle Service Management System 2024-11-21 4.8 Medium
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability.