Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (84643 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-3945 1 Django-helpdesk Project 1 Django-helpdesk 2024-11-21 6.1 Medium
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3939 1 Canonical 2 Accountsservice, Ubuntu Linux 2024-11-21 7.8 High
Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallback_locale variable, pointing to static storage, to be freed, in the user_change_language_authorized_cb function. This is reachable via the SetLanguage dbus function. This is fixed in versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1.
CVE-2021-3938 1 Snipeitapp 1 Snipe-it 2024-11-21 5.4 Medium
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3934 1 Planetargon 1 Oh My Zsh 2024-11-21 7.5 High
ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command
CVE-2021-3927 3 Debian, Fedoraproject, Vim 3 Debian Linux, Fedora, Vim 2024-11-21 7.8 High
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3920 1 Getgrav 1 Grav-plugin-admin 2024-11-21 5.4 Medium
grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3914 1 Redhat 4 Build Of Quarkus, Openshift Application Runtimes, Quarkus and 1 more 2024-11-21 6.1 Medium
It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks.
CVE-2021-3912 2 Cloudflare, Debian 2 Octorpki, Debian Linux 2024-11-21 4.2 Medium
OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory, making it possible to create a repository that makes OctoRPKI run out of memory (and thus crash).
CVE-2021-3904 1 Getgrav 1 Grav 2024-11-21 5.4 Medium
grav is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3903 4 Debian, Fedoraproject, Redhat and 1 more 4 Debian Linux, Fedora, Enterprise Linux and 1 more 2024-11-21 7.8 High
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3879 1 Snipeitapp 1 Snipe-it 2024-11-21 5.4 Medium
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3875 2 Fedoraproject, Vim 2 Fedora, Vim 2024-11-21 5.5 Medium
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3866 1 Zulip 1 Zulip 2024-11-21 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository zulip/zulip more than and including 44f935695d452cc3fb16845a0c6af710438b153d and prior to 3eb2791c3e9695f7d37ffe84e0c2184fae665cb6.
CVE-2021-3863 1 Snipeitapp 1 Snipe-it 2024-11-21 6.1 Medium
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3862 1 Icecoder 1 Icecoder 2024-11-21 4.8 Medium
icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3861 1 Zephyrproject 1 Zephyr 2024-11-21 8.2 High
The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvj
CVE-2021-3857 1 Chaskiq 1 Chaskiq 2024-11-21 5.4 Medium
chaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3853 1 Chaskiq 1 Chaskiq 2024-11-21 6.1 Medium
chaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3845 1 Ws Scrcpy Project 1 Ws Scrcpy 2024-11-21 7.5 High
ws-scrcpy is vulnerable to External Control of File Name or Path
CVE-2021-3839 3 Dpdk, Fedoraproject, Redhat 4 Data Plane Development Kit, Fedora, Enterprise Linux and 1 more 2024-11-21 7.5 High
A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.