Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (88023 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-35020 2 Advancemame, Fedoraproject 2 Advancecomp, Fedora 2024-11-21 5.5 Medium
Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc.
CVE-2022-35017 2 Advancemame, Fedoraproject 2 Advancecomp, Fedora 2024-11-21 5.5 Medium
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
CVE-2022-35016 2 Advancemame, Fedoraproject 2 Advancecomp, Fedora 2024-11-21 5.5 Medium
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
CVE-2022-35015 2 Advancemame, Fedoraproject 2 Advancecomp, Fedora 2024-11-21 5.5 Medium
Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
CVE-2022-35012 1 Pngdec Project 1 Pngdec 2024-11-21 6.5 Medium
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via SaveBMP at /linux/main.cpp.
CVE-2022-35010 1 Pngdec Project 1 Pngdec 2024-11-21 6.5 Medium
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asan_interceptors_memintrinsics.cpp.
CVE-2022-35009 1 Pngdec Project 1 Pngdec 2024-11-21 6.5 Medium
PNGDec commit 8abf6be was discovered to contain a memory allocation problem via asan_malloc_linux.cpp.
CVE-2022-35008 1 Pngdec Project 1 Pngdec 2024-11-21 6.5 Medium
PNGDec commit 8abf6be was discovered to contain a stack overflow via /linux/main.cpp.
CVE-2022-35007 1 Pngdec Project 1 Pngdec 2024-11-21 6.5 Medium
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite.part.57 at sanitizer_common_interceptors.inc.
CVE-2022-34993 1 Totolink 2 A3600r, A3600r Firmware 2024-11-21 9.8 Critical
Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample.
CVE-2022-34992 1 Luadec Project 1 Luadec 2024-11-21 7.8 High
Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending.
CVE-2022-34991 1 Techvill 1 Paymoney 2024-11-21 5.4 Medium
Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the first_name and last_name parameters.
CVE-2022-34988 1 Inoutscripts 1 Blockchain Altexchanger 2024-11-21 5.4 Medium
Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/js.
CVE-2022-34966 1 Openteknik 1 Open Source Social Network 2024-11-21 7.5 High
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ip_address/:port/ossn/home.
CVE-2022-34964 1 Openteknik 1 Open Source Social Network 2024-11-21 4.8 Medium
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the SitePages module.
CVE-2022-34963 1 Openteknik 1 Open Source Social Network 2024-11-21 5.4 Medium
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the News Feed module.
CVE-2022-34962 1 Openteknik 1 Open Source Social Network 2024-11-21 5.4 Medium
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Group Timeline module.
CVE-2022-34961 1 Openteknik 1 Open Source Social Network 2024-11-21 5.4 Medium
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Users Timeline module.
CVE-2022-34927 1 Milkytracker Project 1 Milkytracker 2024-11-21 7.8 High
MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file.
CVE-2022-34916 1 Apache 1 Flume 2024-11-21 9.8 Critical
Apache Flume versions 1.4.0 through 1.10.0 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI to allow only the use of the java protocol or no protocol.