Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (30288 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-24310 1 Schneider-electric 1 Interactive Graphical Scada System Data Server 2024-11-21 9.8 Critical
A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
CVE-2022-24307 1 Joinmastodon 1 Mastodon 2024-11-21 9.8 Critical
Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.)
CVE-2022-24306 1 Zohocorp 1 Manageengine Sharepoint Manager Plus 2024-11-21 9.8 Critical
Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled.
CVE-2022-24305 1 Zohocorp 1 Manageengine Sharepoint Manager Plus 2024-11-21 9.8 Critical
Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege escalation.
CVE-2022-24303 2 Fedoraproject, Python 2 Fedora, Pillow 2024-11-21 9.1 Critical
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
CVE-2022-24300 2 Debian, Minetest 2 Debian Linux, Minetest 2024-11-21 9.8 Critical
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.
CVE-2022-24293 1 Hp 136 Laserjet Pro M304-m305 W1a46a, Laserjet Pro M304-m305 W1a46a Firmware, Laserjet Pro M304-m305 W1a47a and 133 more 2024-11-21 9.8 Critical
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
CVE-2022-24292 1 Hp 136 Laserjet Pro M304-m305 W1a46a, Laserjet Pro M304-m305 W1a46a Firmware, Laserjet Pro M304-m305 W1a47a and 133 more 2024-11-21 9.8 Critical
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
CVE-2022-24263 1 Phpgurukul 1 Hospital Management System 2024-11-21 9.8 Critical
Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter.
CVE-2022-24260 1 Voipmonitor 1 Voipmonitor 2024-11-21 9.8 Critical
A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level.
CVE-2022-24259 1 Voipmonitor 1 Voipmonitor 2024-11-21 9.8 Critical
An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a crafted request.
CVE-2022-24240 1 Aceware 1 Aceweb Online Portal 2024-11-21 9.8 Critical
ACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via the criteria parameter in showschedule.awp.
CVE-2022-24239 1 Aceware 1 Aceweb Online Portal 2024-11-21 9.8 Critical
ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.
CVE-2022-24231 1 Simple Student Information System Project 1 Simple Student Information System 2024-11-21 9.8 Critical
Simple Student Information System v1.0 was discovered to contain a SQL injection vulnerability via add/Student.
CVE-2022-24223 1 Thedigitalcraft 1 Atomcms 2024-11-21 9.8 Critical
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.
CVE-2022-24222 1 Elitecms 1 Elite Cms 2024-11-21 9.8 Critical
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.
CVE-2022-24221 1 Elitecms 1 Elite Cms 2024-11-21 9.8 Critical
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php.
CVE-2022-24220 1 Elitecms 1 Elite Cms 2024-11-21 9.8 Critical
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.
CVE-2022-24219 1 Elitecms 1 Elite Cms 2024-11-21 9.8 Critical
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_page.php.
CVE-2022-24218 1 Elitecms 1 Elite Cms 2024-11-21 9.1 Critical
An issue in /admin/delete_image.php of eliteCMS v1.0 allows attackers to delete arbitrary files.