Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (30871 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-30247 1 Nextcloud 1 Nextcloudpi 2025-05-07 10 Critical
NextcloudPi is a ready to use image for Virtual Machines, Raspberry Pi, Odroid HC1, Rock64 and other boards. A command injection vulnerability in NextCloudPi allows command execution as the root user via the NextCloudPi web-panel. Due to a security misconfiguration this can be used by anyone with access to NextCloudPi web-panel, no authentication is required. It is recommended that the NextCloudPi is upgraded to 1.53.1.
CVE-2022-40876 1 Tenda 2 Ax1803, Ax1803 Firmware 2025-05-07 9.8 Critical
In Tenda ax1803 v1.0.0.1, the http requests handled by the fromAdvSetMacMtuWan functions, wanSpeed, cloneType, mac, can cause a stack overflow and enable remote code execution (RCE).
CVE-2022-39976 1 School Activity Updates With Sms Notification Project 1 School Activity Updates With Sms Notification 2025-05-07 9.8 Critical
School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /modules/announcement/index.php?view=edit&id=.
CVE-2021-38734 1 Sem-cms 1 Semcms 2025-05-07 9.8 Critical
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php.
CVE-2021-38733 1 Sem-cms 1 Semcms 2025-05-07 9.8 Critical
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php.
CVE-2021-38732 1 Sem-cms 1 Semcms 2025-05-07 9.8 Critical
SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php.
CVE-2021-38731 1 Sem-cms 1 Semcms 2025-05-07 9.8 Critical
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php.
CVE-2021-38730 1 Sem-cms 1 Semcms 2025-05-07 9.8 Critical
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php.
CVE-2021-38729 1 Sem-cms 1 Semcms 2025-05-07 9.8 Critical
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php.
CVE-2025-3709 1 Flowring 1 Agentflow 2025-05-07 9.8 Critical
Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to perform password brute force attack.
CVE-2025-3708 1 Le-show 1 Le-yan 2025-05-07 9.8 Critical
Le-show medical practice management system from Le-yan has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
CVE-2025-45042 1 Tenda 2 Ac9, Ac9 Firmware 2025-05-07 9.8 Critical
Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function.
CVE-2024-25029 1 Ibm 1 Personal Communications 2025-05-07 9 Critical
IBM Personal Communications 14.0.6 through 15.0.1 includes a Windows service that is vulnerable to remote code execution (RCE) and local privilege escalation (LPE). The vulnerability allows any unprivileged user with network access to a target computer to run commands with full privileges in the context of NT AUTHORITY\SYSTEM. This allows for a low privileged attacker to move laterally to affected systems and to escalate their privileges. IBM X-Force ID: 281619.
CVE-2025-0471 1 Sigb 1 Pmb 2025-05-07 9.9 Critical
Unrestricted file upload vulnerability in the PMB platform, affecting versions 4.0.10 and above. This vulnerability could allow an attacker to upload a file to gain remote access to the machine, being able to access, modify and execute commands freely.
CVE-2022-43400 1 Siemens 1 Siveillance Video Mobile Server 2025-05-07 9.8 Critical
A vulnerability has been identified in Siveillance Video Mobile Server V2022 R2 (All versions < V22.2a (80)). The mobile server component of affected applications improperly handles the log in for Active Directory accounts that are part of Administrators group. This could allow an unauthenticated remote attacker to access the application without a valid account.
CVE-2022-40984 1 Yokogawa 2 Wtviewere 761941, Wtviewerefree 2025-05-07 9.8 Critical
Stack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and WTViewerEfree from 1.01 to 1.52 allows an attacker to cause the product to crash by processing a long file name.
CVE-2021-42010 1 Apache 1 Heron 2025-05-07 9.8 Critical
Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue.
CVE-2021-38737 1 Sem-cms 1 Semcms 2025-05-07 9.8 Critical
SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php.
CVE-2021-38736 1 Sem-cms 1 Semcms 2025-05-07 9.8 Critical
SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php.
CVE-2024-48168 2 D-link, Dlink 3 Dcs 960l, Dcs-960l, Dcs-960l Firmware 2025-05-07 9.8 Critical
A stack overflow vulnerability exists in the sub_402280 function of the HNAP service of D-Link DCS-960L 1.09, allowing an attacker to execute arbitrary code.