Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (84953 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-38339 1 Safe 1 Fme Server 2024-11-21 9.6 Critical
Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the login page.
CVE-2022-38314 1 Tenda 2 Ac18, Ac18 Firmware 2024-11-21 9.8 Critical
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the urls parameter at /goform/saveParentControlInfo.
CVE-2022-38313 1 Tenda 2 Ac18, Ac18 Firmware 2024-11-21 9.8 Critical
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/saveParentControlInfo.
CVE-2022-38312 1 Tenda 2 Ac18, Ac18 Firmware 2024-11-21 9.8 Critical
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
CVE-2022-38311 1 Tenda 2 Ac18, Ac18 Firmware 2024-11-21 9.8 Critical
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet.
CVE-2022-38310 1 Tenda 2 Ac18, Ac18 Firmware 2024-11-21 9.8 Critical
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
CVE-2022-38309 1 Tenda 2 Ac18, Ac18 Firmware 2024-11-21 9.8 Critical
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2022-38308 1 Totolink 2 A7000ru, A7000ru Firmware 2024-11-21 9.8 Critical
TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload.
CVE-2022-38306 1 Lief-project 1 Lief 2024-11-21 7.8 High
LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.
CVE-2022-38295 1 Cuppacms 1 Cuppacms 2024-11-21 6.1 Medium
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager/view/cu_user_groups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function.
CVE-2022-38291 1 Slims 1 Senayan Library Management System 2024-11-21 6.1 Medium
SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar.
CVE-2022-38256 1 Tastyigniter 1 Tastyigniter 2024-11-21 5.4 Medium
TastyIgniter v3.5.0 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVE-2022-38254 1 Nagios 1 Nagios Xi 2024-11-21 6.1 Medium
Nagios XI before v5.8.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the ajax.php script in CCM 3.1.5.
CVE-2022-38251 1 Nagios 1 Nagios Xi 2024-11-21 4.8 Medium
Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the System Performance Settings page under the Admin panel.
CVE-2022-38249 1 Nagios 1 Nagios Xi 2024-11-21 6.1 Medium
Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR component in version 1.0.4.
CVE-2022-38248 1 Nagios 1 Nagios Xi 2024-11-21 6.1 Medium
Nagios XI before v5.8.7 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at auditlog.php.
CVE-2022-38247 1 Nagios 1 Nagios Xi 2024-11-21 4.8 Medium
Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the System Settings page under the Admin panel.
CVE-2022-38238 1 Xpdf Project 1 Xpdf 2024-11-21 7.8 High
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc.
CVE-2022-38237 1 Xpdf Project 1 Xpdf 2024-11-21 7.8 High
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc.
CVE-2022-38235 1 Xpdf Project 1 Xpdf 2024-11-21 5.5 Medium
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc.