Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (359547 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-38857 1 Checkmk 1 Checkmk 2024-12-04 4.3 Medium
Improper neutralization of input in Checkmk before versions 2.3.0p8, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows attackers to craft malicious links that can facilitate phishing attacks.
CVE-2023-35979 1 Arubanetworks 14 Arubaos, Mc-va-10, Mc-va-1k and 11 more 2024-12-04 5.3 Medium
There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in a Denial-of-Service (DoS) condition affecting the web-based management interface of the controller.
CVE-2023-30924 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30925 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2024-28827 1 Checkmk 1 Checkmk 2024-12-04 8.8 High
Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) allows a local attacker to gain SYSTEM privileges.
CVE-2023-30926 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33987 1 Sap 1 Web Dispatcher 2024-12-04 8.6 High
An unauthenticated attacker in SAP Web Dispatcher - versions WEBDISP 7.49, WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.81, WEBDISP 7.85, WEBDISP 7.88, WEBDISP 7.89, WEBDISP 7.90, KERNEL 7.49, KERNEL 7.53, KERNEL 7.54 KERNEL 7.77, KERNEL 7.81, KERNEL 7.85, KERNEL 7.88, KERNEL 7.89, KERNEL 7.90, KRNL64NUC 7.49, KRNL64UC 7.49, KRNL64UC 7.53, HDB 2.00, XS_ADVANCED_RUNTIME 1.00, SAP_EXTENDED_APP_SERVICES 1, can submit a malicious crafted request over a network to a front-end server which may, over several attempts, result in a back-end server confusing the boundaries of malicious and legitimate messages. This can result in the back-end server executing a malicious payload which can be used to read or modify information on the server or make it temporarily unavailable.
CVE-2023-30927 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30916 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 7.8 High
In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2023-30917 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 7.8 High
In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2023-30930 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30918 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30931 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30919 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30932 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30933 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30934 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30935 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30936 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-3346 1 Mitsubishielectric 42 C80, C80 Firmware, E70 and 39 more 2024-12-04 9.8 Critical
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.