Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (71245 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-20891 1 Ffmpeg 1 Ffmpeg 2024-11-21 8.8 High
Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.
CVE-2020-20813 1 Openvpn 1 Openvpn 2024-11-21 7.5 High
Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet.
CVE-2020-20746 1 Tendacn 2 Ac9, Ac9 Firmware 2024-11-21 7.2 High
A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via a crafted POST request to /goform/SetStaticRouteCfg.
CVE-2020-20740 3 Debian, Fedoraproject, Pdfresurrect Project 3 Debian Linux, Fedora, Pdfresurrect 2024-11-21 7.8 High
PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version().
CVE-2020-20698 1 S-cms 1 S-cms 2024-11-21 7.2 High
A remote code execution (RCE) vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file.
CVE-2020-20693 1 Gilacms 1 Gila Cms 2024-11-21 8.8 High
A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.
CVE-2020-20692 1 Gilacms 1 Gila Cms 2024-11-21 7.2 High
GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.
CVE-2020-20672 1 Kitesky 1 Kitecms 2024-11-21 7.8 High
An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.
CVE-2020-20671 1 Kitesky 1 Kitecms 2024-11-21 8.8 High
A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.
CVE-2020-20670 1 Zkea 1 Zkeacms 2024-11-21 8.8 High
An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file.
CVE-2020-20665 1 Rudp Project 1 Rudp 2024-11-21 7.5 High
rudp v0.6 was discovered to contain a memory leak in the component main.c.
CVE-2020-20658 1 Libiec Iccp Mod Project 1 Libiec Iccp Mod 2024-11-21 7.5 High
Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denail of service when trying to calloc an unexpectiedly large space.
CVE-2020-20657 1 Libiec Iccp Mod Project 1 Libiec Iccp Mod 2024-11-21 7.5 High
Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denial of service via an unexpected packet while trying to connect.
CVE-2020-20642 1 Eyoucms 1 Eyoucms 2024-11-21 8.8 High
Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filemanager&a=newfile&lang=cn.
CVE-2020-20625 1 Slicedinvoices 1 Sliced Invoices 2024-11-21 7.5 High
Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated SQL injection via core/class-sliced.php.
CVE-2020-20593 1 Rockoa 1 Rockoa 2024-11-21 8.0 High
A cross-site request forgery (CSRF) in Rockoa v1.9.8 allows an authenticated attacker to arbitrarily add an administrator account.
CVE-2020-20585 1 Metinfo 1 Metinfo 2024-11-21 7.5 High
A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information.
CVE-2020-20583 1 8cms 1 Ljcms 2024-11-21 7.5 High
A SQL injection vulnerability in /question.php of LJCMS Version v4.3.R60321 allows attackers to obtain sensitive database information.
CVE-2020-20582 1 Mipcms 1 Mipcms 2024-11-21 7.5 High
A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information.
CVE-2020-20514 1 Maccms 1 Maccms 2024-11-21 8.1 High
A Cross-Site Request Forgery (CSRF) in Maccms v10 via admin.php/admin/admin/del/ids/<id>.html allows authenticated attackers to delete all users.