Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (323414 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2013-4109 1 Cryptocat Project 1 Cryptocat 2024-11-21 6.1 Medium
An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.
CVE-2013-4108 1 Cryptocat Project 1 Cryptocat 2024-11-21 9.8 Critical
Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.
CVE-2013-4107 1 Cryptocat Project 1 Cryptocat 2024-11-21 6.1 Medium
Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting
CVE-2013-4106 1 Cryptocat Project 1 Cryptocat 2024-11-21 6.1 Medium
A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.
CVE-2013-4105 1 Cryptocat Project 1 Cryptocat 2024-11-21 7.5 High
Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure
CVE-2013-4104 1 Cryptocat Project 1 Cryptocat 2024-11-21 7.5 High
Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol
CVE-2013-4103 1 Cryptocat Project 1 Cryptocat 2024-11-21 9.8 Critical
Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input
CVE-2013-4102 1 Cryptocat Project 1 Cryptocat 2024-11-21 9.1 Critical
Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness
CVE-2013-4101 1 Cryptocat Project 1 Cryptocat 2024-11-21 5.3 Medium
Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness
CVE-2013-4100 1 Cryptocat Project 1 Cryptocat 2024-11-21 7.5 High
Cryptocat before 2.0.22 has Remote Denial of Service via username
CVE-2013-4090 1 Varnish Cache Project 1 Varnish Cache 2024-11-21 7.5 High
Varnish HTTP cache before 3.0.4: ACL bug
CVE-2013-4088 1 Otrs 1 Otrs 2024-11-21 6.5 Medium
Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.21, 3.1.x before 3.1.17, and 3.2.x before 3.2.8 does not properly restrict tickets, which allows remote attackers with a valid agent login to read restricted tickets via a crafted URL involving the ticket split mechanism.
CVE-2013-4040 1 Ibm 1 Tivoli Application Dependency Discovery Manager 2024-11-21 N/A
IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2.x before 7.2.1.5 and 7.2.x before 7.2.2.0 on Unix use weak permissions (755) for unspecified configuration and log files, which allows local users to obtain sensitive information by reading the files. IBM X-Force ID: 86176.
CVE-2013-4035 1 Ibm 1 Sterling Connect 2024-11-21 N/A
IBM Sterling Connect:Direct for OpenVMS 3.4.00, 3.4.01, 3.5.00, 3.6.0, and 3.6.0.1 allow remote attackers to have unspecified impact by leveraging failure to reject client requests for an unencrypted session when used as the server in a TCP/IP session and configured for SSL encryption with the client. IBM X-Force ID: 86138.
CVE-2013-3960 1 Easytimestudio 1 Easy File Manager 2024-11-21 9.9 Critical
Easytime Studio Easy File Manager 1.1 has a HTTP request security bypass
CVE-2013-3947 1 Ahnlab 1 V3 Internet Security 2024-11-21 N/A
Buffer overflow in MedCoreD.sys in AhnLab V3 Internet Security 8.0.7.5 (Build 1373) allows local users to gain privileges via a crafted 0xA3350014 IOCTL call.
CVE-2013-3946 1 Extensis 1 Mrsid 2024-11-21 7.8 High
Heap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a levels header.
CVE-2013-3945 1 Extensis 1 Mrsid 2024-11-21 7.8 High
The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a nband tag.
CVE-2013-3944 1 Extensis 1 Mrsid 2024-11-21 7.8 High
Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag.
CVE-2013-3942 1 Daum 1 Potplayer 2024-11-21 7.8 High
Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability