Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (43577 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2016-11036 1 Google 1 Android 2024-11-21 9.8 Critical
An issue was discovered on Samsung mobile devices with M(6.0) software. There is a Factory Reset Protection (FRP) bypass. The Samsung ID is SVE-2016-6008 (August 2016).
CVE-2016-11024 1 Odata4j Project 1 Odata4j 2024-11-21 9.8 Critical
odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
CVE-2016-11023 1 Odata4j Project 1 Odata4j 2024-11-21 9.8 Critical
odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
CVE-2016-11018 1 Huge-it 1 Image Gallery 2024-11-21 9.8 Critical
An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is huge_it_image_gallery_ajax_callback().
CVE-2016-11000 1 Smackcoders 1 Ultimate Exporter 2024-11-21 9.8 Critical
The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the export_type_name parameter.
CVE-2016-10996 1 Optinmonster 1 Optinmonster 2024-11-21 5.3 Medium
The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak.
CVE-2016-10951 1 Firestormplugins 1 Fs-shopping-cart 2024-11-21 7.2 High
The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter.
CVE-2016-10950 1 Sirv 1 Sirv 2024-11-21 8.8 High
The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter.
CVE-2016-10949 1 Relevanssi 1 Relevanssi 2024-11-21 8.8 High
The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization.
CVE-2016-10947 1 Post Indexer Project 1 Post Indexer 2024-11-21 7.2 High
The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin.
CVE-2016-10943 1 Zx-csv-upload Project 1 Zx-csv-upload 2024-11-21 7.2 High
The zx-csv-upload plugin 1 for WordPress has SQL injection via the id parameter.
CVE-2016-10942 1 Podlove 1 Podlove Podcast Publisher 2024-11-21 9.8 Critical
The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insert_id parameter exploitable via CSRF.
CVE-2016-10940 1 Zm-gallery Project 1 Zm-gallery 2024-11-21 7.2 High
The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.
CVE-2016-10939 1 Xtremelocator 1 Xtremelocator 2024-11-21 7.2 High
The xtremelocator plugin 1.5 for WordPress has SQL injection via the id parameter.
CVE-2016-10921 1 Ays-pro 1 Photo Gallery 2024-11-21 N/A
The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.
CVE-2016-10917 1 Search Everything Project 1 Search Everything 2024-11-21 N/A
The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316.
CVE-2016-10916 1 Codepeople 1 Appointment Booking Calendar 2024-11-21 N/A
The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319.
CVE-2016-10909 1 Codepeople 1 Booking Calendar Contact Form 2024-11-21 N/A
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.
CVE-2016-10904 1 Olimometer Project 1 Olimometer 2024-11-21 N/A
The olimometer plugin before 2.57 for WordPress has SQL injection.
CVE-2016-10889 1 Imagely 1 Nextgen Gallery 2024-11-21 N/A
The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name.