Search

Expected end of text, found 'èmes' (at char 20), (line:1, col:21)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (366296 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2024-32317 1 Tenda 2 Ac10, Ac10 Firmware 2025-03-17 7.5 High
Tenda AC10 v4.0 V16.03.10.13 and V16.03.10.20 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.
CVE-2024-32306 1 Tenda 2 Ac10u, Ac10u Firmware 2025-03-17 5.7 Medium
Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.
CVE-2024-30612 2 Tenda, Tendacn 3 Ac10u, Ac10u Firmware, Ac10u Firmware 2025-03-17 8.1 High
Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function.
CVE-2024-25373 1 Tenda 2 Ac10, Ac10 Firmware 2025-03-17 4.6 Medium
Tenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub_49B384 function.
CVE-2024-12602 1 Huawei 1 Harmonyos 2025-03-17 6.2 Medium
Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-57956 1 Huawei 1 Harmonyos 2025-03-17 2.8 Low
Out-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-57957 1 Huawei 1 Harmonyos 2025-03-17 6.6 Medium
Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-57958 1 Huawei 2 Emui, Harmonyos 2025-03-17 5.7 Medium
Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2024-57959 1 Huawei 2 Emui, Harmonyos 2025-03-17 6.1 Medium
Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2024-57960 1 Huawei 2 Emui, Harmonyos 2025-03-17 7.7 High
Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-46571 1 Draytek 2 Vigor3910, Vigor3910 Firmware 2025-03-17 7.5 High
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2024-46568 1 Draytek 2 Vigor3910, Vigor3910 Firmware 2025-03-17 7.5 High
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2024-44375 1 Dlink 2 Di-8100, Di-8100 Firmware 2025-03-17 7.5 High
D-Link DI-8100 v16.07.26A1 has a stack overflow vulnerability in the dbsrv_asp function.
CVE-2024-38454 1 Expressionengine 1 Expressionengine 2025-03-17 6.1 Medium
ExpressionEngine before 7.4.11 allows XSS.
CVE-2024-29508 1 Artifex 1 Ghostscript 2025-03-17 3.3 Low
Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
CVE-2024-57961 1 Huawei 2 Emui, Harmonyos 2025-03-17 6.8 Medium
Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2024-57962 1 Huawei 1 Harmonyos 2025-03-17 6.1 Medium
Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-7267 1 Nask 1 Ezd Rp 2025-03-17 6.5 Medium
Exposure of Sensitive Information vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to retrieve information about IP infrastructure and credentials. This issue affects EZD RP all versions before 19.6
CVE-2024-7265 2 Nask, Nask-pib 2 Ezd Rp, Ezd Rp 2025-03-17 8.8 High
Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, including root user, which could lead to privilege escalation. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2.
CVE-2024-10153 1 Phpgurukul 1 Boat Booking System 2025-03-16 6.3 Medium
A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file book-boat.php?bid=1 of the component Book a Boat Page. The manipulation of the argument bookingdatefrom/nopeople leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.