Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9789 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2014-0882 1 Ibm 16 Flex System Manager 7955, Flex System Manager 8731, Flex System X220 and 13 more 2024-11-21 N/A
Integrated Management Module II (IMM2) on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data (FFDC). IBM X-Force ID: 91149.
CVE-2014-0872 1 Ibm 1 Security Key Lifecycle Manager 2024-11-21 N/A
The installation process in IBM Security Key Lifecycle Manager 2.5 stores unencrypted credentials, which might allow local users to obtain sensitive information by leveraging root access. IBM X-Force ID: 90988.
CVE-2014-0242 2 Modwsgi, Redhat 2 Mod Wsgi, Enterprise Linux 2024-11-21 7.5 High
mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread.
CVE-2013-7435 1 Evergreen-ils 1 Evergreen 2024-11-21 N/A
The open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to obtain sensitive settings history information by leveraging lack of user permission for retrieval in fm_IDL.xml.
CVE-2013-7203 1 Gitolite 1 Gitolite 2024-11-21 N/A
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup.
CVE-2013-7089 3 Clamav, Debian, Fedoraproject 3 Clamav, Debian Linux, Fedora 2024-11-21 7.5 High
ClamAV before 0.97.7: dbg_printhex possible information leak
CVE-2013-6681 1 Mapway 1 Tube Map 2024-11-21 5.9 Medium
Tube Map Live Underground for Android before 3.0.22 has an Information Disclosure Vulnerability
CVE-2013-6455 1 Mediawiki 1 Mediawiki 2024-11-21 5.3 Medium
The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page.
CVE-2013-5687 1 Aicorporation 1 Risknet Acquirer 2024-11-21 7.5 High
RiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service information disclosure.
CVE-2013-4868 1 Karotz 1 Api 2024-11-21 5.3 Medium
Karotz API 12.07.19.00: Session Token Information Disclosure
CVE-2013-4856 1 Dlink 2 Dir-865l, Dir-865l Firmware 2024-11-21 6.5 Medium
D-Link DIR-865L has Information Disclosure.
CVE-2013-4518 1 Redhat 2 Enterprise Linux, Update Infrastructure 2024-11-21 5.5 Medium
RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates
CVE-2013-4317 1 Apache 1 Cloudstack 2024-11-21 N/A
In Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as a regular, non-administrative user, the user is able to see information for accounts other than their own.
CVE-2013-4209 1 Redhat 1 Automatic Bug Reporting Tool 2024-11-21 N/A
Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums.
CVE-2013-4187 1 Flippy Project 1 Flippy 2024-11-21 6.5 Medium
The Flippy module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to nodes, which allows remote authenticated users with the permission to access content to read a link or alias to a restricted node.
CVE-2013-4176 1 Mysecureshell Project 1 Mysecureshell 2024-11-21 5.5 Medium
mysecureshell 1.31: Local Information Disclosure Vulnerability
CVE-2013-4166 2 Gnome, Redhat 6 Evolution, Evolution Data Server, Enterprise Linux and 3 more 2024-11-21 7.5 High
The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG key to use for email encryption, which might cause the email to be encrypted with the wrong key and allow remote attackers to obtain sensitive information.
CVE-2013-4110 1 Cryptocat Project 1 Cryptocat 2024-11-21 5.3 Medium
Cryptocat has an Unspecified Chat Participant User List Disclosure
CVE-2013-4105 1 Cryptocat Project 1 Cryptocat 2024-11-21 7.5 High
Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure
CVE-2013-4088 1 Otrs 1 Otrs 2024-11-21 6.5 Medium
Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.21, 3.1.x before 3.1.17, and 3.2.x before 3.2.8 does not properly restrict tickets, which allows remote attackers with a valid agent login to read restricted tickets via a crafted URL involving the ticket split mechanism.