Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (47600 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2024-11966 1 Phpgurukul 1 Complaint Management System 2024-12-04 7.3 High
A vulnerability was found in PHPGurukul Complaint Management system 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-28824 2 Checkmk, Tribe29 2 Checkmk, Checkmk 2024-12-04 8.8 High
Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41 and 2.0.0 (EOL) allows local users to escalate privileges.
CVE-2023-33895 2 Google, Unisoc 14 Android, S8004, Sc7731e and 11 more 2024-12-04 5.5 Medium
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33894 2 Google, Unisoc 14 Android, S8003, Sc7731e and 11 more 2024-12-04 5.5 Medium
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33893 2 Google, Unisoc 14 Android, S8002, Sc7731e and 11 more 2024-12-04 5.5 Medium
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33892 2 Google, Unisoc 14 Android, S8001, Sc7731e and 11 more 2024-12-04 5.5 Medium
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33891 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30929 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 7.8 High
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2023-30928 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 7.8 High
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2024-28831 1 Checkmk 1 Checkmk 2024-12-04 5.4 Medium
Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute arbitrary scripts by injecting HTML elements into some user input fields that are shown in a confirmation pop-up.
CVE-2024-28832 1 Checkmk 1 Checkmk 2024-12-04 4.8 Medium
Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows users with permission to change Global Settings to execute arbitrary scripts by injecting HTML elements into the Crash Report URL in the Global Settings.
CVE-2023-30920 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30921 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30922 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-0425 1 Abb 8 Ac700f, Ac700f Firmware, Ac900f and 5 more 2024-12-04 8.6 High
ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these vulnerabilities could cause the product to stop or make the product inaccessible.  Numeric Range Comparison Without Minimum Check vulnerability in ABB Freelance controllers AC 700F (Controller modules), ABB Freelance controllers AC 900F (controller modules).This issue affects: Freelance controllers AC 700F:  from 9.0;0 through V9.2 SP2, through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1;  Freelance controllers AC 900F:  Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1.
CVE-2023-30923 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30924 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30925 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30926 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30927 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.