Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (322989 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-13855 1 Pandorafms 1 Pandora Fms 2024-11-21 7.2 High
Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Manager feature.
CVE-2020-13854 1 Pandorafms 1 Pandora Fms 2024-11-21 9.8 Critical
Artica Pandora FMS 7.44 allows privilege escalation.
CVE-2020-13853 1 Pandorafms 1 Pandora Fms 2024-11-21 5.4 Medium
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature.
CVE-2020-13852 1 Pandorafms 1 Pandora Fms 2024-11-21 7.2 High
Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature.
CVE-2020-13851 1 Pandorafms 1 Pandora Fms 2024-11-21 8.8 High
Artica Pandora FMS 7.44 allows remote command execution via the events feature.
CVE-2020-13850 1 Pandorafms 1 Pandora Fms 2024-11-21 7.5 High
Artica Pandora FMS 7.44 has inadequate access controls on a web folder.
CVE-2020-13849 1 Mqtt 1 Mqtt 2024-11-21 7.5 High
The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client, which allows remote attackers to cause a denial of service (loss of the ability to establish new connections), as demonstrated by SlowITe.
CVE-2020-13848 2 Debian, Libupnp Project 2 Debian Linux, Libupnp 2024-11-21 7.5 High
Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/service_table/service_table.c.
CVE-2020-13847 1 Sylabs 1 Singularity 2024-11-21 7.5 High
Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file.
CVE-2020-13846 1 Sylabs 1 Singularity 2024-11-21 7.5 High
Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code.
CVE-2020-13845 1 Sylabs 1 Singularity 2024-11-21 7.5 High
Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Image integrity is not validated when an ECL policy is enforced. The fingerprint required by the ECL is compared against the signature object descriptor(s) in the SIF file, rather than to a cryptographically validated signature.
CVE-2020-13844 2 Arm, Opensuse 15 Cortex-a32, Cortex-a32 Firmware, Cortex-a34 and 12 more 2024-11-21 5.5 Medium
Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."
CVE-2020-13843 1 Google 1 Android 2024-11-21 5.5 Medium
An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial of service because checking of the userdata partition is mishandled. The LG ID is LVE-SMP-200014 (June 2020).
CVE-2020-13842 2 Google, Lg 35 Android, Cv1, Cv1s and 32 more 2024-11-21 7.8 High
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). A dangerous AT command was made available even though it is unused. The LG ID is LVE-SMP-200010 (June 2020).
CVE-2020-13841 2 Google, Lg 35 Android, Cv1, Cv1s and 32 more 2024-11-21 9.8 Critical
An issue was discovered on LG mobile devices with Android OS 9 and 10 (MTK chipsets). An AT command handler allows attackers to bypass intended access restrictions. The LG ID is LVE-SMP-200009 (June 2020).
CVE-2020-13840 2 Google, Lg 35 Android, Cv1, Cv1s and 32 more 2024-11-21 9.8 Critical
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via an MTK AT command handler buffer overflow. The LG ID is LVE-SMP-200008 (June 2020).
CVE-2020-13839 2 Google, Lg 35 Android, Cv1, Cv1s and 32 more 2024-11-21 9.8 Critical
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via a custom AT command handler buffer overflow. The LG ID is LVE-SMP-200007 (June 2020).
CVE-2020-13838 1 Google 1 Android 2024-11-21 3.5 Low
An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The DeX Lockscreen feature does not block access to Quick Panel and notifications. The Samsung ID is SVE-2020-17187 (June 2020).
CVE-2020-13837 1 Google 1 Android 2024-11-21 3.5 Low
An issue was discovered on Samsung mobile devices with Q(10.0) software. The Lockscreen feature does not block Quick Panel access to Music Share. The Samsung ID is SVE-2020-17145 (June 2020).
CVE-2020-13836 1 Google 1 Android 2024-11-21 7.5 High
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. HWRResProvider allows path traversal for data exposure. The Samsung ID is SVE-2020-16954 (June 2020).