Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (41104 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-1869 1 Mayurik 1 Best Online News Portal 2025-03-07 9.8 Critical
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/check_avalability.php.
CVE-2025-1875 1 Mayurik 1 Best Online News Portal 2025-03-07 9.8 Critical
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "searchtitle" parameter in search.php.
CVE-2025-1870 1 Mayurik 1 Best Online News Portal 2025-03-07 9.8 Critical
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagedescription" parameter in admin/aboutus.php.
CVE-2025-1871 1 Mayurik 1 Best Online News Portal 2025-03-07 9.8 Critical
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php.
CVE-2025-1874 1 Mayurik 1 Best Online News Portal 2025-03-07 9.8 Critical
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "description" parameter in admin/add-category.php.
CVE-2025-1873 1 Mayurik 1 Best Online News Portal 2025-03-07 9.8 Critical
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php.
CVE-2023-27560 1 Phpseclib 1 Phpseclib 2025-03-06 7.5 High
Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields.
CVE-2022-4134 2 Openstack, Redhat 2 Glance, Openstack 2025-03-06 2.8 Low
A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.
CVE-2023-24643 1 Judging Management System Project 1 Judging Management System 2025-03-06 9.8 Critical
Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateBlankTxtview.php.
CVE-2023-24781 1 Funadmin 1 Funadmin 2025-03-06 9.8 Critical
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.
CVE-2023-24780 1 Funadmin 1 Funadmin 2025-03-06 9.8 Critical
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.
CVE-2022-47478 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-06 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2022-47477 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-06 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2022-47475 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-06 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2022-47474 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-06 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-4059 1 Cozmoslabs 1 Profile Builder 2025-03-06 4.3 Medium
The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the register, log-in and edit-profile pages from the plugin on the blog
CVE-2023-42553 1 Samsung 1 Email 2025-03-06 4 Medium
Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers to read sandbox data of email.
CVE-2023-42541 1 Samsung 1 Push Service 2025-03-06 4 Medium
Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id.
CVE-2023-3814 1 Advancedfilemanager 1 Advanced File Manager 2025-03-06 4.9 Medium
The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary files and folders on the server.
CVE-2023-0328 1 Wpcode 1 Wpcode 2025-03-06 4.3 Medium
The WPCode WordPress plugin before 2.0.7 does not have adequate privilege checks in place for several AJAX actions, only checking the nonce. This may lead to allowing any authenticated user who can edit posts to call the endpoints related to WPCode Library authentication (such as update and delete the auth key).