Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (80264 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-17253 1 Irfanview 1 Irfanview 2024-11-21 7.8 High
IrfanView 4.53 allows a User Mode Write AV starting at JPEG_LS+0x000000000000a6b8.
CVE-2019-17252 1 Irfanview 1 Irfanview 2024-11-21 7.8 High
IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!Read_BadPNG+0x0000000000000115.
CVE-2019-17251 1 Irfanview 1 Irfanview 2024-11-21 7.8 High
IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d43.
CVE-2019-17250 1 Irfanview 1 Irfanview 2024-11-21 7.8 High
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x00000000000042f5.
CVE-2019-17249 1 Irfanview 1 Irfanview 2024-11-21 7.8 High
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000d57b.
CVE-2019-17248 1 Irfanview 1 Irfanview 2024-11-21 7.8 High
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x00000000000025b6.
CVE-2019-17247 1 Irfanview 1 Irfanview 2024-11-21 7.8 High
IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at JPEG_LS+0x0000000000007da8.
CVE-2019-17246 1 Irfanview 1 Irfanview 2024-11-21 7.8 High
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000258c.
CVE-2019-17245 1 Irfanview 1 Irfanview 2024-11-21 7.8 High
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x0000000000004359.
CVE-2019-17244 1 Irfanview 1 Irfanview 2024-11-21 7.8 High
IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEG_LS+0x0000000000001d8a.
CVE-2019-17243 1 Irfanview 1 Irfanview 2024-11-21 7.8 High
IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEG_LS+0x0000000000003155.
CVE-2019-17242 1 Irfanview 1 Irfanview 2024-11-21 7.8 High
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000966f.
CVE-2019-17241 1 Irfanview 1 Irfanview 2024-11-21 7.8 High
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000d563.
CVE-2019-17237 1 Getigniteup 1 Igniteup 2024-11-21 8.8 High
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF.
CVE-2019-17234 1 Getigniteup 1 Igniteup 2024-11-21 7.5 High
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion.
CVE-2019-17232 1 Etoilewebdesign 1 Ultimate Faq 2024-11-21 7.5 High
Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows unauthenticated options import.
CVE-2019-17221 1 Phantomjs 1 Phantomjs 2024-11-21 7.5 High
PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the page.open() function of the webpage module, which loads a specified URL and calls a given callback. An attacker can supply a specially crafted HTML file, as user input, that allows reading arbitrary files on the filesystem. For example, if page.render() is the function callback, this generates a PDF or an image of the targeted file. NOTE: this product is no longer developed.
CVE-2019-17219 1 Vzug 2 Combi-stream Mslq, Combi-stream Mslq Firmware 2024-11-21 8.8 High
An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the device does not enforce any authentication. An adjacent attacker is able to use the network interface without proper access control.
CVE-2019-17217 1 Vzug 2 Combi-stream Mslq, Combi-stream Mslq Firmware 2024-11-21 8.8 High
An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. There is no CSRF protection established on the web service.
CVE-2019-17214 1 Webarxsecurity 1 Webarx 2024-11-21 7.5 High
The WebARX plugin 1.3.0 for WordPress allows firewall bypass by appending &cc=1 to a URI.