Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (30800 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-46538 1 Tenda 2 F1203, F1203 Firmware 2025-04-16 9.8 Critical
Tenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteFacMac.
CVE-2022-46326 1 Huawei 2 Emui, Harmonyos 2025-04-16 9.8 Critical
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions.
CVE-2022-46325 1 Huawei 2 Emui, Harmonyos 2025-04-16 9.8 Critical
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions.
CVE-2022-46324 1 Huawei 2 Emui, Harmonyos 2025-04-16 9.8 Critical
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions.
CVE-2022-46323 1 Huawei 2 Emui, Harmonyos 2025-04-16 9.8 Critical
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions.
CVE-2022-46320 1 Huawei 2 Emui, Harmonyos 2025-04-16 9.8 Critical
The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting.
CVE-2022-46319 1 Huawei 2 Emui, Harmonyos 2025-04-16 9.8 Critical
Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability may cause out-of-bounds write.
CVE-2024-27710 1 Eskooly 2 Eskooly, Free Online School Management Software 2025-04-16 9.8 Critical
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the authentication mechanism.
CVE-2024-46374 2 Best House Rental Management System, Mayurik 2 Best House Rental Management System, Best House Rental Management System 2025-04-16 9.8 Critical
Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin_class.php.
CVE-2024-46375 2 Best House Rental Management System, Mayurik 2 Best House Rental Management System, Best House Rental Management System 2025-04-16 9.8 Critical
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the file rental/admin_class.php.
CVE-2024-46376 2 Best House Rental Management System, Mayurik 2 Best House Rental Management System, Best House Rental Management System 2025-04-16 9.8 Critical
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rental/admin_class.php.
CVE-2024-46377 2 Mayurik, Sourcecodester 2 Best House Rental Management System, Best House Rental Management System 2025-04-16 9.8 Critical
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file rental/admin_class.php.
CVE-2024-25507 1 Ruvar 2 Ruvaroa, Ruvaroa 2025-04-16 9.4 Critical
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the email_attach_id parameter at /LHMail/AttachDown.aspx.
CVE-2024-25508 2 Guangzhou Luhua Information Technology, Ruvar 2 Ruvaroa, Ruvaroa 2025-04-16 9.8 Critical
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /bulletin/bulletin_template_show.aspx.
CVE-2024-25509 1 Ruvar 1 Ruvaroa 2025-04-16 9.4 Critical
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_file_download.aspx.
CVE-2024-25510 2 Guangzhou Luhua Information Technology, Ruvar 2 Ruvaroa, Ruvaroa 2025-04-16 9.8 Critical
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_show.aspx.
CVE-2024-25511 1 Ruvar 2 Ruvaroa, Ruvaroa 2025-04-16 9.4 Critical
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_new.aspx.
CVE-2024-25514 1 Ruvar 1 Ruvaroa 2025-04-16 9.4 Critical
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /SysManage/wf_template_child_field_list.aspx.
CVE-2024-34249 1 Wasm3 Project 1 Wasm3 2025-04-16 9.8 Critical
wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in wasm3/source/m3_compile.c.
CVE-2024-33350 2 Taocms, Taogogo 2 Taocms, Taocms 2025-04-16 9.8 Critical
Directory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information via the include/model/file.php component.