Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (322822 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-33029 1 Qualcomm 6 Qca6584au, Qca6584au Firmware, Qca6698aq and 3 more 2024-11-08 6.7 Medium
Memory corruption while handling the PDR in driver for getting the remote heap maps.
CVE-2024-23377 1 Qualcomm 79 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 76 more 2024-11-08 6.7 Medium
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
CVE-2024-50411 1 Kevonadonis 1 Wp Abstracts 2024-11-07 5.9 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts allows Stored XSS.This issue affects WP Abstracts: from n/a through 2.7.1.
CVE-2024-49642 1 Rafasashi 1 Todo Custom Field 2024-11-07 7.1 High
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Rafasashi Todo Custom Field allows Reflected XSS.This issue affects Todo Custom Field: from n/a through 3.0.4.
CVE-2024-9443 1 Basticom 1 Framework 2024-11-07 6.4 Medium
The Basticom Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVE-2024-51358 1 Linuxserver 1 Heimdall Application Dashboard 2024-11-07 9.8 Critical
An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application.
CVE-2024-47855 1 Redhat 1 Ocp Tools 2024-11-07 5.3 Medium
util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.
CVE-2024-50410 1 Kibokolabs 1 Namaste\! Lms 2024-11-07 6.5 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Namaste! LMS allows Stored XSS.This issue affects Namaste! LMS: from n/a through 2.6.4.
CVE-2024-50409 1 Kibokolabs 1 Namaste\! Lms 2024-11-07 6.5 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Namaste! LMS allows Stored XSS.This issue affects Namaste! LMS: from n/a through 2.6.2.
CVE-2024-50407 1 Kibokolabs 1 Namaste\! Lms 2024-11-07 7.1 High
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Namaste! LMS allows Reflected XSS.This issue affects Namaste! LMS: from n/a through 2.6.2.
CVE-2024-33068 1 Qualcomm 246 Ar8035, Ar8035 Firmware, Fastconnect 6900 and 243 more 2024-11-07 7.5 High
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
CVE-2024-38403 1 Qualcomm 156 Ar8035, Ar8035 Firmware, Fastconnect 6900 and 153 more 2024-11-07 7.5 High
Transient DOS while parsing BTM ML IE when per STA profile is not included.
CVE-2024-38405 1 Qualcomm 200 Ar8035, Ar8035 Firmware, Fastconnect 6700 and 197 more 2024-11-07 7.5 High
Transient DOS while processing the CU information from RNR IE.
CVE-2024-23385 1 Qualcomm 189 205 Mobile Platform, 205 Mobile Platform Firmware, Apq8017 and 186 more 2024-11-07 7.5 High
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
CVE-2024-51522 1 Huawei 1 Harmonyos 2024-11-07 6.2 Medium
Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-51523 1 Huawei 1 Harmonyos 2024-11-07 7.1 High
Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-51524 1 Huawei 1 Harmonyos 2024-11-07 4 Medium
Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-51526 1 Huawei 1 Harmonyos 2024-11-07 8.2 High
Permission control vulnerability in the hidebug module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-51527 1 Huawei 2 Emui, Harmonyos 2024-11-07 5.1 Medium
Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-51528 1 Huawei 2 Emui, Harmonyos 2024-11-07 4 Medium
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality.