Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (32004 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2010-1433 1 Joomla 1 Joomla\! 2024-11-21 9.8 Critical
Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable.
CVE-2010-0748 3 Debian, Linux, Transmissionbt 3 Debian Linux, Linux Kernel, Transmission 2024-11-21 9.8 Critical
Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.
CVE-2009-5043 2 Burn Project, Debian 2 Burn, Debian Linux 2024-11-21 9.8 Critical
burn allows file names to escape via mishandled quotation marks
CVE-2009-5042 2 Debian, Python-docutils Project 2 Debian Linux, Python-docutils 2024-11-21 9.1 Critical
python-docutils allows insecure usage of temporary files
CVE-2009-5041 1 Debian 1 Overkill 2024-11-21 9.8 Critical
overkill has buffer overflow via long player names that can corrupt data on the server machine
CVE-2009-4899 1 Pixelpost 1 Pixelpost 2024-11-21 9.8 Critical
pixelpost 1.7.1 has SQL injection
CVE-2009-3887 1 Ytnef Project 1 Ytnef 2024-11-21 9.8 Critical
ytnef has directory traversal
CVE-2009-1120 1 Dell 1 Emc Replistor 2024-11-21 9.8 Critical
EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -exposed via the rep_srv.exe process- where the vulnerability is caused by an error when the rep_srv.exe handles a specially crafted packet sent by an unauthenticated attacker.
CVE-2009-0948 1 Apple 1 Files 2024-11-21 9.8 Critical
Multiple buffer overflows in the (1) cdf_read_sat, (2) cdf_read_long_sector_chain, and (3) cdf_read_ssat function in file before 5.02.
CVE-2009-0947 1 Apple 1 Files 2024-11-21 9.8 Critical
Multiple integer overflows in the (1) cdf_read_property_info and (2) cdf_read_sat functions in file before 5.02.
CVE-2008-7291 2 Debian, Gri Project 2 Debian Linux, Gri 2024-11-21 9.8 Critical
gri before 2.12.18 generates temporary files in an insecure way.
CVE-2007-6745 2 Clamav, Debian 2 Clamav, Debian Linux 2024-11-21 9.8 Critical
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
CVE-2007-4773 1 Systrace Project 1 Systrace 2024-11-21 9.8 Critical
Systrace before 1.6.0 has insufficient escape policy enforcement.
CVE-2007-3915 1 Mandriva 1 Mondo 2024-11-21 9.1 Critical
Mondo 2.24 has insecure handling of temporary files.
CVE-2007-0899 2 Clamav, Debian 2 Clamav, Debian Linux 2024-11-21 9.8 Critical
There is a possible heap overflow in libclamav/fsg.c before 0.100.0.
CVE-2007-0158 1 Acme 1 Thttpd 2024-11-21 9.8 Critical
thttpd 2007 has buffer underflow.
CVE-2006-4243 1 Linux-vserver 1 Linux-vserver 2024-11-21 9.8 Critical
linux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code.
CVE-2006-3100 1 Termpkg Project 1 Termpkg 2024-11-21 9.8 Critical
termpkg 3.3 suffers from buffer overflow.
CVE-2006-0062 1 Sillycycle 1 Xlockmore 2024-11-21 9.8 Critical
xlockmore 5.13 allows potential xlock bypass when FVWM switches to the same virtual desktop as a new Gaim window.
CVE-2006-0061 1 Sillycycle 1 Xlockmore 2024-11-21 9.8 Critical
xlockmore 5.13 and 5.22 segfaults when using libpam-opensc and returns the underlying xsession. This allows unauthorized users access to the X session.