Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (359603 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-29170 1 Piwebsolution 1 Product Enquiry For Woocommerce 2025-01-10 5.9 Medium
Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product Enquiry for WooCommerce, WooCommerce product catalog plugin <= 2.2.12 versions.
CVE-2023-29388 1 Implecode 1 Product Catalog Simple 2025-01-10 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in impleCode Product Catalog Simple plugin <= 1.6.17 versions.
CVE-2025-0213 1 Campcodes 1 Project Management System 2025-01-10 6.3 Medium
A vulnerability was found in Campcodes Project Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forms/update_forms.php?action=change_pic2&id=4. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2022-45358 1 Colorlib 1 Activello 2025-01-10 5.4 Medium
Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions.
CVE-2023-27610 1 Transbank 1 Transbank Webpay Rest 2025-01-10 5.5 Medium
Auth. (admin+) SQL Injection (SQLi) vulnerability in TransbankDevelopers Transbank Webpay REST plugin <= 1.6.6 versions.
CVE-2023-30474 1 Ultimate Noindex Nofollow Tool Ii Project 1 Ultimate Noindex Nofollow Tool Ii 2025-01-10 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Kilian Evang Ultimate Noindex Nofollow Tool II plugin <= 1.3 versions.
CVE-2023-22687 1 Freesoul Deactivate Plugins - Plugin Manager And Cleanup Project 1 Freesoul Deactivate Plugins - Plugin Manager And Cleanup 2025-01-10 3.7 Low
Insecure Storage of Sensitive Information vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup plugin <= 1.9.4.0 versions.
CVE-2022-43458 1 Codetides 1 Advanced Floating Content 2025-01-10 4.1 Medium
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Code Tides Advanced Floating Content plugin <= 1.2.1 versions.
CVE-2023-2972 1 Antfu 1 Utils 2025-01-10 9.8 Critical
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3.
CVE-2022-44734 1 Bestwebsoft 1 Car Rental 2025-01-10 4.8 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BestWebSoft Car Rental by BestWebSoft plugin <= 1.1.2 versions.
CVE-2022-45849 1 Colorlib 1 Activello Theme 2025-01-10 5.4 Medium
Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions.
CVE-2022-45838 1 Reputeinfosystems 1 Arforms Form Builder 2025-01-10 6.1 Medium
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARForms Form Builder plugin <= 1.5.5 versions.
CVE-2022-44632 1 Content-repeater Project 1 Content-repeater 2025-01-10 4.8 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Denis Buka Content Repeater – Custom Posts Simplified plugin <= 1.1.13 versions.
CVE-2022-44631 1 1app 1 1app Business Forms 2025-01-10 4.8 Medium
Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in 1app Technologies, Inc 1app Business Forms plugin <= 1.0.0 versions.
CVE-2022-44582 1 Apptivo 1 Apptivo Business Site Crm 2025-01-10 4.8 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apptivo Apptivo Business Site CRM plugin <= 3.0.12 versions.
CVE-2024-50339 1 Glpi-project 1 Glpi 2025-01-10 5.3 Medium
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can retrieve all the sessions IDs and use them to steal any valid session. Version 10.0.17 contains a patch for this issue.
CVE-2022-44594 1 Codebangers 1 All In One Time Clock Lite 2025-01-10 4.8 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Codebangers All in One Time Clock Lite plugin <= 1.3.320 versions.
CVE-2023-24584 1 Gallagher 2 Controller 6000, Controller 6000 Firmware 2025-01-10 7.5 High
Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. This issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior.
CVE-2022-47435 1 Wp-olivecart Project 1 Wp-olivecart 2025-01-10 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Olive Design WP-OliveCart plugin <= 1.1.3 versions.
CVE-2023-24386 1 Ai Contact Us Form Project 1 Ai Contact Us Form 2025-01-10 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Karishma Arora AI Contact Us Form plugin <= 1.0 versions.