Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (36989 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-38283 1 Jflyfox 1 Jfinal Cms 2024-11-21 7.2 High
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list.
CVE-2022-38282 1 Jflyfox 1 Jfinal Cms 2024-11-21 7.2 High
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list.
CVE-2022-38281 1 Jflyfox 1 Jfinal Cms 2024-11-21 7.2 High
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list.
CVE-2022-38280 1 Jflyfox 1 Jfinal Cms 2024-11-21 7.2 High
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list.
CVE-2022-38279 1 Jflyfox 1 Jfinal Cms 2024-11-21 7.2 High
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.
CVE-2022-38278 1 Jflyfox 1 Jfinal Cms 2024-11-21 7.2 High
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.
CVE-2022-38277 1 Jflyfox 1 Jfinal Cms 2024-11-21 7.2 High
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.
CVE-2022-38276 1 Jflyfox 1 Jfinal Cms 2024-11-21 7.2 High
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.
CVE-2022-38275 1 Jflyfox 1 Jfinal Cms 2024-11-21 7.2 High
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list.
CVE-2022-38274 1 Jflyfox 1 Jfinal Cms 2024-11-21 7.2 High
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list.
CVE-2022-38273 1 Jflyfox 1 Jfinal Cms 2024-11-21 7.2 High
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.
CVE-2022-38272 1 Jflyfox 1 Jfinal Cms 2024-11-21 7.2 High
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list.
CVE-2022-38269 1 School Activity Updates With Sms Notification Project 1 School Activity Updates With Sms Notification 2024-11-21 7.2 High
School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstudent/index.php?view=edit&id=.
CVE-2022-38268 1 School Activity Updates With Sms Notification Project 1 School Activity Updates With Sms Notification 2024-11-21 7.2 High
School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/autonumber/index.php?view=edit&id=.
CVE-2022-38267 1 School Activity Updates With Sms Notification Project 1 School Activity Updates With Sms Notification 2024-11-21 7.2 High
School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/index.php?view=edit&id=.
CVE-2022-38265 1 Apartment Visitor Management System Project 1 Apartment Visitor Management System 2024-11-21 7.2 High
Apartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /avms/edit-apartment.php.
CVE-2022-38250 1 Nagios 1 Nagios Xi 2024-11-21 9.8 Critical
Nagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mib_name parameter at the Manage MIBs page.
CVE-2022-38183 1 Gitea 1 Gitea 2024-11-21 6.5 Medium
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea (there was no permission check for fetching the issue). As a result, the attacker would get access to private issue titles.
CVE-2022-38130 1 Keysight 1 Sensor Management Server 2024-11-21 9.8 Critical
The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file (i.e., \\<attacker-host>\sms\<attacker-db.zip>), effectively controlling the content of the database to be restored.
CVE-2022-38118 1 Hgiga 1 Oaklouds Portal 2024-11-21 8.8 High
OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service.