Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (357535 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-33898 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2024-45842 2 Sharp, Toshibatec 643 Bp-30c25, Bp-30c25 Firmware, Bp-30c25t and 640 more 2024-12-03 5.3 Medium
Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability. Unintended internal files may be retrieved when processing crafted HTTP requests.
CVE-2023-3423 1 Fit2cloud 1 Cloudexplorer Lite 2024-12-03 8.8 High
Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1.2.0.
CVE-2023-33899 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-2627 1 Iqonic 1 Kivicare 2024-12-03 4.3 Medium
The KiviCare WordPress plugin before 3.2.1 does not have proper CSRF and authorisation checks in various AJAX actions, allowing any authenticated users, such as subscriber to call them. Attacks include but are not limited to: Add arbitrary Clinic Admin/Doctors/etc and update plugin's settings
CVE-2023-32789 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33879 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 3.3 Low
In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33880 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 3.3 Low
In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33881 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33882 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33883 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33884 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33885 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-2877 1 Strategy11 1 Formidable Forms 2024-12-03 8.8 High
The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in its functionality for installing add-ons. This allows a user with a role as low as Subscriber to install and activate arbitrary plugins of arbitrary versions from the WordPress.org plugin repository onto the site, leading to Remote Code Execution.
CVE-2023-33886 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33887 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2024-38862 1 Checkmk 1 Checkmk 2024-12-03 4.4 Medium
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35, <2.1.0p48 and <=2.0.0p39 (EOL) causes SNMP and IMPI secrets of host and folder properties to be written to audit log files accessible to administrators.
CVE-2023-36464 2 Pypdf2 Project, Pypdf Project 2 Pypdf2, Pypdf 2024-12-03 6.2 Medium
pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a PDF which leads to an infinite loop if `__parse_content_stream` is executed. That is, for example, the case if the user extracted text from such a PDF. This issue was introduced in pull request #969 and resolved in pull request #1828. Users are advised to upgrade. Users unable to upgrade may modify the line `while peek not in (b"\r", b"\n")` in `pypdf/generic/_data_structures.py` to `while peek not in (b"\r", b"\n", b"")`.
CVE-2023-40224 1 Misp 1 Misp 2024-12-03 6.1 Medium
MISP 2.4.174 allows XSS in app/View/Events/index.ctp.
CVE-2024-38863 1 Checkmk 1 Checkmk 2024-12-03 7.5 High
Exposure of CSRF tokens in query parameters on specific requests in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35 and <2.1.0p48 could lead to a leak of the token to facilitate targeted phishing attacks.