Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29907 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-21224 1 Inspur 1 Clusterengine 2024-11-21 9.8 Critical
A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server
CVE-2020-21180 1 Koa2-blog Project 1 Koa2-blog 2024-11-21 9.8 Critical
Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signup page.
CVE-2020-21179 1 Koa2-blog Project 1 Koa2-blog 2024-11-21 9.8 Critical
Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signin page.
CVE-2020-21176 1 Thinkjs 1 Thinkjs 2024-11-21 9.8 Critical
SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter.
CVE-2020-21133 1 Metinfo 1 Metinfo 2024-11-21 9.8 Critical
SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid.
CVE-2020-21132 1 Metinfo 1 Metinfo 2024-11-21 9.8 Critical
SQL Injection vulnerability in Metinfo 7.0.0beta in index.php.
CVE-2020-21127 1 Metinfo 1 Metinfo 2024-11-21 9.8 Critical
MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel.
CVE-2020-21125 1 Ureport Project 1 Ureport 2024-11-21 9.8 Critical
An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code.
CVE-2020-21124 1 Ureport Project 1 Ureport 2024-11-21 9.8 Critical
UReport 2.2.9 allows attackers to execute arbitrary code due to a lack of access control to the designer page.
CVE-2020-21121 1 Kliqqi 1 Kliqqi Cms 2024-11-21 9.8 Critical
Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admin_update_module_widgets.php file.
CVE-2020-21012 1 Hotel And Lodge Booking Management System Project 1 Hotel And Lodge Booking Management System 2024-11-21 9.8 Critical
Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details.
CVE-2020-20982 1 Wdja 1 Wdja Cms 2024-11-21 9.6 Critical
Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php.
CVE-2020-20979 1 8cms 1 Ljcms 2024-11-21 9.8 Critical
An arbitrary file upload vulnerability in the move_uploaded_file() function of LJCMS v4.3 allows attackers to execute arbitrary code.
CVE-2020-20975 1 Gxlcms 1 Gxlcms 2024-11-21 9.8 Critical
In \lib\admin\action\dataaction.class.php in Gxlcms v1.1, SQL Injection exists via the $filename parameter.
CVE-2020-20951 1 Pluck-cms 1 Pluck 2024-11-21 9.8 Critical
In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files.
CVE-2020-20944 1 Qibosoft 1 Qibosoft 2024-11-21 9.1 Critical
An issue in /admin/index.php?lfj=mysql&action=del of Qibosoft v7 allows attackers to arbitrarily delete files.
CVE-2020-20907 2 Metinfo, Microsoft 2 Metinfo, Windows 2024-11-21 9.1 Critical
MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/language_general.class.php and app/system/include/function/file.func.php.
CVE-2020-20800 1 Metinfo 1 Metinfo 2024-11-21 9.8 Critical
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI.
CVE-2020-20797 1 Flamecms Project 1 Flamecms 2024-11-21 9.8 Critical
FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php.
CVE-2020-20796 1 Flamecms Project 1 Flamecms 2024-11-21 9.8 Critical
FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter.