Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29368 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2012-6451 1 Lorextechnology 4 Lnc104, Lnc104 Firmware, Lnc116 and 1 more 2024-11-21 9.8 Critical
Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability
CVE-2012-6306 1 Hcview Project 1 Hcview 2024-11-21 9.8 Critical
A vulnerability exists in HCView (aka Hardcoreview) 1.4 due to a write access violation with a GIF file.
CVE-2012-6125 1 Call-cc 1 Chicken 2024-11-21 9.8 Critical
Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions.
CVE-2012-6094 2 Apple, Debian 2 Cups, Debian Linux 2024-11-21 9.8 Critical
cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system
CVE-2012-5878 1 Bulbsecurity 1 Smartphone Pentest Framework 2024-11-21 9.8 Critical
Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or (2) CSAttack.pl in frameworkgui/ or the (3) appURLPath parameter to frameworkgui/attachMobileModem.pl.
CVE-2012-5867 1 Ht Editor Project 1 Ht Editor 2024-11-21 9.8 Critical
HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability
CVE-2012-5699 1 Babygekko 1 Babygekko 2024-11-21 9.8 Critical
BabyGekko before 1.2.4 allows PHP file inclusion.
CVE-2012-5686 1 Zpanelcp 1 Zpanel 2024-11-21 9.8 Critical
ZPanel 10.0.1 has insufficient entropy for its password reset process.
CVE-2012-5618 1 Ushahidi 1 Ushahidi 2024-11-21 9.8 Critical
Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens.
CVE-2012-5582 1 Opendnssec 1 Opendnssec 2024-11-21 9.8 Critical
opendnssec misuses libcurl API
CVE-2012-5190 1 Accusoft 1 Prizm Content Connect 2024-11-21 9.8 Critical
Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability
CVE-2012-4919 1 Gallery Project 1 Gallery 2024-11-21 9.8 Critical
Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability
CVE-2012-4750 1 Ezhometech 1 Ezserver 2024-11-21 9.8 Critical
A Code Execution vulnerability exists in the memcpy function when processing AMF requests in Ezhometech EzServer 7.0, which could let a remote malicious user execute arbitrary code or cause a Denial of Service
CVE-2012-4284 1 Sparklabs 1 Viscosity 2024-11-21 9.8 Critical
A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code
CVE-2012-3807 1 Samsung 1 Kies 2024-11-21 9.8 Critical
Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.
CVE-2012-3460 1 Redhat 1 Enterprise Mrg 2024-11-21 9.8 Critical
cumin: At installation postgresql database user created without password
CVE-2012-2714 1 Browserid Project 1 Browserid 2024-11-21 9.8 Critical
The BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users via the audience identifier.
CVE-2012-2666 1 Golang 1 Go 2024-11-21 9.8 Critical
golang/go in 1.0.2 fixes all.bash on shared machines. dotest() in src/pkg/debug/gosym/pclntab_test.go creates a temporary file with predicable name and executes it as shell script.
CVE-2012-2226 1 Invisioncommunity 1 Invision Power Board 2024-11-21 9.8 Critical
Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sensitive information or execute arbitrary code by uploading a malicious file.
CVE-2012-2087 1 Ispconfig 1 Ispconfig 2024-11-21 9.8 Critical
ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface.