Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (357580 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-2845 2025-04-09 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-40539 2025-04-09 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-40223 2025-04-09 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-40159 2025-04-09 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2022-47656 1 Gpac 1 Gpac 2025-04-09 7.8 High
GPAC MP4box 2.1-DEV-rev617-g85ce76efd is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8273
CVE-2022-47523 1 Zohocorp 3 Manageengine Access Manager Plus, Manageengine Pam360, Manageengine Password Manager Pro 2025-04-09 9.8 Critical
Zoho ManageEngine Access Manager Plus before 4309, Password Manager Pro before 12210, and PAM360 before 5801 are vulnerable to SQL Injection.
CVE-2022-47095 1 Gpac 1 Gpac 2025-04-09 7.8 High
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer overflow in hevc_parse_vps_extension function of media_tools/av_parsers.c
CVE-2022-46762 1 Huawei 2 Emui, Harmonyos 2025-04-09 7.5 High
The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-46761 1 Huawei 2 Emui, Harmonyos 2025-04-09 7.5 High
The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons.
CVE-2022-45913 1 Zimbra 1 Collaboration 2025-04-09 6.1 Medium
An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via one of attributes in webmail URLs to execute arbitrary JavaScript code, leading to information disclosure.
CVE-2022-45911 1 Zimbra 1 Collaboration 2025-04-09 6.1 Medium
An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur on the Classic UI login page by injecting arbitrary JavaScript code in the username field. This occurs before the user logs into the system, which means that even if the attacker executes arbitrary JavaScript, they will not get any sensitive information.
CVE-2022-44939 1 Echatserver 1 Easy Chat Server 2025-04-09 7.8 High
Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL.
CVE-2022-44870 1 Maccms 1 Maccms 2025-04-09 6.1 Medium
A reflected cross-site scripting (XSS) vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module.
CVE-2022-44149 1 Nexxtsolutions 2 Amp300, Amp300 Firmware 2025-04-09 8.8 High
The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing &telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required
CVE-2022-42979 1 Rydesharing 1 Ryde 2025-04-09 8.8 High
Information disclosure due to an insecure hostname validation in the RYDE application 5.8.43 for Android and iOS allows attackers to take over an account via a deep link.
CVE-2022-25725 1 Qualcomm 134 Ar8035, Ar8035 Firmware, Csrb31024 and 131 more 2025-04-09 6.2 Medium
Denial of service in MODEM due to improper pointer handling
CVE-2022-25722 1 Qualcomm 156 Apq8096au, Apq8096au Firmware, Ar9380 and 153 more 2025-04-09 6 Medium
Information exposure in DSP services due to improper handling of freeing memory
CVE-2022-25721 1 Qualcomm 90 Aqt1000, Aqt1000 Firmware, Mdm9150 and 87 more 2025-04-09 6.7 Medium
Memory corruption in video driver due to type confusion error during video playback
CVE-2025-25632 1 Tenda 2 Ac15, Ac15 Firmware 2025-04-09 9.8 Critical
Tenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform/telnet.
CVE-2022-4818 1 Talend 1 Open Studio For Mdm 2025-04-09 5.5 Medium
A vulnerability was found in Talend Open Studio for MDM. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file org.talend.mdm.core/src/com/amalto/core/storage/SystemStorageWrapper.java. The manipulation leads to xml external entity reference. Upgrading to version 20221220_1938 is able to address this issue. The name of the patch is 95590db2ad6a582c371273ceab1a73ad6ed47853. It is recommended to upgrade the affected component. The identifier VDB-216997 was assigned to this vulnerability.