Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (361510 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-32336 1 Fast Food Ordering System Project 1 Fast Food Ordering System 2024-11-21 9.8 Critical
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/view_menu.php?id=.
CVE-2022-32335 1 Fast Food Ordering System Project 1 Fast Food Ordering System 2024-11-21 7.2 High
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/manage_menu.php?id=.
CVE-2022-32334 1 Fast Food Ordering System Project 1 Fast Food Ordering System 2024-11-21 7.2 High
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/manage_category.php?id=.
CVE-2022-32333 1 Fast Food Ordering System Project 1 Fast Food Ordering System 2024-11-21 7.2 High
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=.
CVE-2022-32332 1 Fast Food Ordering System Project 1 Fast Food Ordering System 2024-11-21 7.2 High
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=delete_category.
CVE-2022-32331 1 Fast Food Ordering System Project 1 Fast Food Ordering System 2024-11-21 7.2 High
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/view_category.php?id=.
CVE-2022-32330 1 Fast Food Ordering System Project 1 Fast Food Ordering System 2024-11-21 7.2 High
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=delete_menu.
CVE-2022-32328 1 Fast Food Ordering System Project 1 Fast Food Ordering System 2024-11-21 9.1 Critical
Fast Food Ordering System v1.0 is vulnerable to Delete any file. via /ffos/classes/Master.php?f=delete_img.
CVE-2022-32325 2 Fedoraproject, Jpegoptim Project 2 Fedora, Jpegoptim 2024-11-21 6.5 Medium
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.
CVE-2022-32324 1 Pdfalto Project 1 Pdfalto 2024-11-21 9.8 Critical
PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc.
CVE-2022-32323 3 Autotrace Project, Fedoraproject, Redhat 3 Autotrace, Fedora, Enterprise Linux 2024-11-21 7.3 High
AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.
CVE-2022-32320 2 Ferdium, Getferdi 2 Ferdium, Ferdi 2024-11-21 8.8 High
A Cross-Site Request Forgery (CSRF) in Ferdi through 5.8.1 and Ferdium through 6.0.0-nightly.98 allows attackers to read files via an uploaded file such as a settings/preferences file.
CVE-2022-32318 1 Fast Food Ordering System Project 1 Fast Food Ordering System 2024-11-21 5.4 Medium
Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the component /ffos/classes/Master.php?f=save_category.
CVE-2022-32317 1 Mplayerhq 1 Mplayer 2024-11-21 5.5 Medium
The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vo_v4l2.c. This vulnerability can lead to a Denial of Service (DoS) via a crafted file. The device=strdup statement is not executed on every call. Note: This has been disputed by third parties as invalid and not reproduceable.
CVE-2022-32311 1 Ingredient Stock Management System Project 1 Ingredient Stock Management System 2024-11-21 9.8 Critical
Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /isms/admin/stocks/view_stock.php.
CVE-2022-32310 1 Ingredient Stock Management System Project 1 Ingredient Stock Management System 2024-11-21 9.8 Critical
An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request to /isms/classes/Users.php.
CVE-2022-32308 1 Ublock Origin Project 1 Ublock Origin 2024-11-21 6.1 Medium
Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.
CVE-2022-32302 1 Theme Park Ticketing System Project 1 Theme Park Ticketing System 2024-11-21 8.8 High
Theme Park Ticketing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edit_ticket.php.
CVE-2022-32301 1 Youdiancms 1 Youdiancms 2024-11-21 9.8 Critical
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.php.
CVE-2022-32300 1 Youdiancms 1 Youdiancms 2024-11-21 8.8 High
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php.