Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (30893 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-40118 1 Online Banking System Project 1 Online Banking System 2025-05-22 9.8 Critical
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/send_funds_action.php.
CVE-2022-40117 1 Online Banking System Project 1 Online Banking System 2025-05-22 9.8 Critical
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_customer.php.
CVE-2022-40113 1 Online Banking System Project 1 Online Banking System 2025-05-22 9.8 Critical
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/send_funds.php.
CVE-2022-32847 1 Apple 6 Ipados, Iphone Os, Mac Os X and 3 more 2025-05-22 9.1 Critical
This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2024-31022 1 Steve228uk 1 Candycms 2025-05-22 9.8 Critical
An issue was discovered in CandyCMS version 1.0.0, allows remote attackers to execute arbitrary code via the install.php component.
CVE-2022-32845 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2025-05-22 10 Critical
This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to break out of its sandbox.
CVE-2022-41571 1 Eyesofnetwork 1 Eyesofnetwork 2025-05-21 9.8 Critical
An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Local file inclusion can occur.
CVE-2022-40485 1 Wedding Planner Project 1 Wedding Planner 2025-05-21 9.8 Critical
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.php.
CVE-2022-40484 1 Wedding Planner Project 1 Wedding Planner 2025-05-21 9.8 Critical
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_edit.php.
CVE-2022-40483 1 Wedding Planner Project 1 Wedding Planner 2025-05-21 9.8 Critical
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_details.php.
CVE-2022-40050 1 Zfile 1 Zfile 2025-05-21 9.8 Critical
ZFile v4.1.1 was discovered to contain an arbitrary file upload vulnerability via the component /file/upload/1.
CVE-2022-37346 1 Ec-cube 1 Product Image Bulk Upload 2025-05-21 9.8 Critical
EC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient verification vulnerability when uploading files. Exploiting this vulnerability allows a remote unauthenticated attacker to upload arbitrary files other than image files. If a user with an administrative privilege of EC-CUBE where the vulnerable plugin is installed is led to upload a specially crafted file, an arbitrary script may be executed on the system.
CVE-2022-30004 1 Online Market Place Site Project 1 Online Market Place Site 2025-05-21 9.8 Critical
Sourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing remote attackers to dump the SQL database via time-based SQL injection..
CVE-2024-5488 1 Seopress 1 Seopress 2025-05-21 9.8 Critical
The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can allow unauthenticated attackers to unserialize malicious gadget chains, compromising the site if a suitable chain is present.
CVE-2024-3050 1 Geminilabs 1 Site Reviews 2025-05-21 9.1 Critical
The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass IP-based blocking
CVE-2022-40116 1 Online Banking System Project 1 Online Banking System 2025-05-21 9.8 Critical
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/beneficiary.php.
CVE-2022-40115 1 Online Banking System Project 1 Online Banking System 2025-05-21 9.8 Critical
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_beneficiary.php.
CVE-2022-40114 1 Online Banking System Project 1 Online Banking System 2025-05-21 9.8 Critical
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/edit_customer.php.
CVE-2024-33661 1 Portainer 1 Portainer 2025-05-21 9.1 Critical
Portainer before 2.20.0 allows redirects when the target is not index.yaml.
CVE-2024-50919 2 Jpress, Microsoft 2 Jpress, Windows 2025-05-21 9.8 Critical
Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of non-standard file formats such as .jsp. can lead to arbitrary command execution