Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (36177 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-39113 1 Miniupnp Project 1 Ngiflib 2024-11-21 5.5 Medium
ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c. This vulnerability is triggered when running the program gif2tga.
CVE-2023-39076 1 Gm 2 Chevrolet Equinox, Mylink Infotainment System 2024-11-21 4.6 Medium
Injecting random data into the USB memory area on a General Motors (GM) Chevrolet Equinox 2021 Software. 2021.03.26 (build version) vehicle causes a Denial of Service (DoS) in the in-car infotainment system.
CVE-2023-39075 1 Renault 2 Zoe Ev 2021, Zoe Ev 2021 Firmware 2024-11-21 4.6 Medium
Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R (builds 11.10.2021 to 16.01.2023) allows attackers to crash the infotainment system by sending arbitrary USB data via a USB device.
CVE-2023-39059 1 Ansible-semaphore 1 Ansible Semaphore 2024-11-21 8.8 High
An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter.
CVE-2023-39057 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39054 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in Tokudaya.ekimae_mc v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39053 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in Hattoriya v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39052 1 Earthgarden Waiting Project 1 Earthgarden Waiting 2024-11-21 6.5 Medium
An information leak in Earthgarden_waiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39051 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39050 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in Daiky-value.Fukueten v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39048 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39047 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in shouzu sweets oz v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39045 1 Kokoroe Members Card Project 1 Kokoroe Members Card 2024-11-21 6.5 Medium
An information leak in kokoroe_members card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39044 1 Ajino-shiretoko Project 1 Ajino-shiretoko 2024-11-21 6.5 Medium
An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39042 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in Gyouza-newhushimi v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39041 1 Kukurudeli Project 1 Kukurudeli 2024-11-21 6.5 Medium
An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-38996 1 Douran 1 Dsgate 2024-11-21 6.7 Medium
An issue in all versions of Douran DSGate allows a local authenticated privileged attacker to execute arbitrary code via the debug command.
CVE-2023-38990 1 Jeesite 1 Jeesite 2024-11-21 4.3 Medium
An issue in the delete function in the MenuController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete menus created by the Administrator.
CVE-2023-38988 1 Jeesite 1 Jeesite 2024-11-21 4.3 Medium
An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators.
CVE-2023-38949 1 Zkteco 1 Biotime 2024-11-21 7.5 High
An issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily reset the Administrator password via a crafted web request.