Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (364527 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-20700 1 S-cms 1 S-cms 2024-11-21 4.8 Medium
A stored cross site scripting (XSS) vulnerability in /app/form_add/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Title Entry text box.
CVE-2020-20699 1 S-cms 1 S-cms 2024-11-21 4.8 Medium
A cross site scripting (XSS) vulnerability in S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Copyright text box under Basic Settings.
CVE-2020-20698 1 S-cms 1 S-cms 2024-11-21 7.2 High
A remote code execution (RCE) vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file.
CVE-2020-20696 1 Gilacms 1 Gila Cms 2024-11-21 5.4 Medium
A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.
CVE-2020-20695 1 Gilacms 1 Gila Cms 2024-11-21 5.4 Medium
A stored cross-site scripting (XSS) vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.
CVE-2020-20693 1 Gilacms 1 Gila Cms 2024-11-21 8.8 High
A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.
CVE-2020-20692 1 Gilacms 1 Gila Cms 2024-11-21 7.2 High
GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.
CVE-2020-20691 1 Monstra 1 Monstra Cms 2024-11-21 6.5 Medium
An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML files.
CVE-2020-20675 1 Nuishop 1 Nuishop 2024-11-21 9.8 Critical
Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/.
CVE-2020-20672 1 Kitesky 1 Kitecms 2024-11-21 7.8 High
An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.
CVE-2020-20671 1 Kitesky 1 Kitecms 2024-11-21 8.8 High
A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.
CVE-2020-20670 1 Zkea 1 Zkeacms 2024-11-21 8.8 High
An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file.
CVE-2020-20665 1 Rudp Project 1 Rudp 2024-11-21 7.5 High
rudp v0.6 was discovered to contain a memory leak in the component main.c.
CVE-2020-20664 1 Libiec Iccp Mod Project 1 Libiec Iccp Mod 2024-11-21 6.5 Medium
libiec_iccp_mod v1.5 contains a segmentation violation in the component server_example1.c.
CVE-2020-20663 1 Libiec Iccp Mod Project 1 Libiec Iccp Mod 2024-11-21 6.5 Medium
libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_connection.c.
CVE-2020-20662 1 Libiec Iccp Mod Project 1 Libiec Iccp Mod 2024-11-21 6.5 Medium
libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_example1.c.
CVE-2020-20658 1 Libiec Iccp Mod Project 1 Libiec Iccp Mod 2024-11-21 7.5 High
Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denail of service when trying to calloc an unexpectiedly large space.
CVE-2020-20657 1 Libiec Iccp Mod Project 1 Libiec Iccp Mod 2024-11-21 7.5 High
Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denial of service via an unexpected packet while trying to connect.
CVE-2020-20645 1 Eyoucms 1 Eyoucms 2024-11-21 5.4 Medium
Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area.
CVE-2020-20642 1 Eyoucms 1 Eyoucms 2024-11-21 8.8 High
Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filemanager&a=newfile&lang=cn.