Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (362865 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-29228 1 Egavilanmedia 1 User Registration And Login System With Admin Panel 2024-11-21 7.5 High
EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page.
CVE-2020-29227 1 Car Rental Management System Project 1 Car Rental Management System 2024-11-21 9.8 Critical
An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution.
CVE-2020-29215 1 Razormist 1 Employee Management System 2024-11-21 5.4 Medium
A Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to execute alert messages via /Employee Management System/addemp.php on admin account.
CVE-2020-29214 1 Alumni Management System Project 1 Alumni Management System 2024-11-21 9.8 Critical
SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authentication via admin/login.php.
CVE-2020-29205 1 Projectworlds 1 Travel Management System 2024-11-21 6.1 Medium
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field
CVE-2020-29204 1 Xuxueli 1 Xxl-job 2024-11-21 6.1 Medium
XXL-JOB 2.2.0 allows Stored XSS (in Add User) to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java.
CVE-2020-29203 1 Struct2json Project 1 Struct2json 2024-11-21 9.8 Critical
struct2json before 2020-11-18 is affected by a Buffer Overflow because strcpy is used for S2J_STRUCT_GET_string_ELEMENT.
CVE-2020-29194 1 Panasonic 2 Wv-s2231l, Wv-s2231l Firmware 2024-11-21 7.5 High
Panasonic Security System WV-S2231L 4.25 allows a denial of service of the admin control panel (which will require a physical reset to restore administrative control) via Randomnum=99AC8CEC6E845B28&mode=1 in a POST request to the cgi-bin/set_factory URI.
CVE-2020-29193 1 Panasonic 2 Wv-s2231l, Wv-s2231l Firmware 2024-11-21 6.8 Medium
Panasonic Security System WV-S2231L 4.25 has an insecure hard-coded password of lkjhgfdsa (which is just the asdf keyboard row in reverse order).
CVE-2020-29189 1 Terra-master 1 Tos 2024-11-21 8.1 High
Incorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated attackers to bypass read-only restriction and obtain full access to any folder within the NAS
CVE-2020-29177 1 Zblogcn 1 Z-blogphp 2024-11-21 9.1 Critical
Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \app_del.php.
CVE-2020-29176 1 Zblogcn 1 Z-blogphp 2024-11-21 7.8 High
An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafted JPG file.
CVE-2020-29172 1 Litespeedtech 1 Litespeed Cache 2024-11-21 6.1 Medium
A cross-site scripting (XSS) vulnerability in the LiteSpeed Cache plugin before 3.6.1 for WordPress can be exploited via the Server IP setting.
CVE-2020-29171 1 Tipsandtricks-hq 1 Wp Security \& Firewall 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall (all-in-one-wp-security-and-firewall) plugin before 4.4.6 for WordPress.
CVE-2020-29166 1 Rainbowfishsoftware 1 Pacsone Server 2024-11-21 7.5 High
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.
CVE-2020-29165 1 Rainbowfishsoftware 1 Pacsone Server 2024-11-21 9.8 Critical
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges.
CVE-2020-29164 1 Rainbowfishsoftware 1 Pacsone Server 2024-11-21 6.1 Medium
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).
CVE-2020-29163 1 Rainbowfishsoftware 1 Pacsone Server 2024-11-21 8.8 High
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.
CVE-2020-29160 1 Zammad 1 Zammad 2024-11-21 7.5 High
An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing.
CVE-2020-29159 1 Zammad 1 Zammad 2024-11-21 4.9 Medium
An issue was discovered in Zammad before 3.5.1. The default signup Role (for newly created Users) can be a privileged Role, if configured by an admin. This behvaior was unintended.