Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (386926 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-40699 1 Yasr - Yet Another Stars Rating Project 1 Yasr - Yet Another Stars Rating 2025-01-13 5.4 Medium
Cross-Site Scripting (XSS) vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin <= 3.1.2 versions.
CVE-2022-41554 1 Slideshow Se Project 1 Slideshow Se 2025-01-13 4.8 Medium
Stored Cross-Site Scripting (XSS) vulnerability in John West Slideshow SE plugin <= 2.5.5 versions.
CVE-2022-43461 1 Slideshow Se Project 1 Slideshow Se 2025-01-13 4.8 Medium
Stored Cross-Site Scripting (XSS) vulnerability in John West Slideshow SE plugin <= 2.5.5 versions.
CVE-2022-45817 1 Gc Testimonials Project 1 Gc Testimonials 2025-01-13 5.4 Medium
Cross-Site Scripting (XSS) vulnerability in Erin Garscadden GC Testimonials plugin <= 1.3.2 versions.
CVE-2022-46854 1 Obox 1 Launchpad - Coming Soon \& Maintenance Mode Plugin 2025-01-13 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin <= 1.0.13 versions.
CVE-2022-46867 1 Universal Star Rating Project 1 Universal Star Rating 2025-01-13 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Chasil Universal Star Rating plugin <= 2.1.0 version.
CVE-2023-25795 1 Wp-master 1 Feed Changer \& Remover 2025-01-13 5.9 Medium
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in WP-master.Ir Feed Changer & Remover plugin <= 0.2 versions.
CVE-2023-25794 1 Nooz Project 1 Nooz 2025-01-13 5.9 Medium
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mighty Digital Nooz plugin <= 1.6.0 versions.
CVE-2024-24377 1 Idocv 1 Idocview 2025-01-13 9.8 Critical
An issue in idocv v.14.1.3_20231228 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script.
CVE-2023-51931 1 Alanclarke 1 Urlite 2025-01-13 7.5 High
An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service (DoS) via a crafted payload to the parsing function.
CVE-2024-25415 1 Phoenixcart 1 Ce Phoenix Cart 2025-01-13 7.2 High
A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload into the file english.php.
CVE-2024-51728 2025-01-13 N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2024. Notes: none.
CVE-2021-30184 2 Fedoraproject, Gnu 2 Fedora, Chess 2025-01-12 7.8 High
GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is related to a buffer overflow in the use of a .tmp.epd temporary file in the cmd_pgnload and cmd_pgnreplay functions in frontend/cmd.cc.
CVE-2025-23128 2025-01-11 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-23127 2025-01-11 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-23126 2025-01-11 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-23125 2025-01-11 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-23124 2025-01-11 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-34205 1 Moov 1 Signedxml 2025-01-10 9.1 Critical
In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML. Thus, signature validation can be bypassed via a Signature Wrapping attack (aka XSW).
CVE-2023-33656 1 Emqx 1 Nanomq 2025-01-10 5.5 Medium
A memory leak vulnerability exists in NanoMQ 0.17.2. The vulnerability is located in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack by causing the program to consume all available memory resources.