Export limit exceeded: 365096 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (365096 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2024-6097 | 1 Progress | 1 Telerik Reporting | 2025-02-24 | 5.3 Medium |
| In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local threat actor through an absolute path vulnerability. | ||||
| CVE-2023-28470 | 1 Couchbase | 1 Couchbase Server | 2025-02-24 | 5.3 Medium |
| In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication. | ||||
| CVE-2023-28679 | 1 Jenkins | 1 Mashup Portlets | 2025-02-24 | 5.4 Medium |
| Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides the "Generic JS Portlet" feature that lets a user populate a portlet using a custom JavaScript expression, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission. | ||||
| CVE-2023-21047 | 1 Google | 1 Android | 2025-02-24 | 4.4 Medium |
| In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-256166866References: N/A | ||||
| CVE-2023-21020 | 1 Google | 1 Android | 2025-02-24 | 6.7 Medium |
| In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256591441 | ||||
| CVE-2023-21013 | 1 Google | 1 Android | 2025-02-24 | 4.4 Medium |
| In forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256818945 | ||||
| CVE-2023-20993 | 1 Google | 1 Android | 2025-02-24 | 7.8 High |
| In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-261588851 | ||||
| CVE-2022-48353 | 1 Huawei | 2 Emui, Harmonyos | 2025-02-24 | 9.8 Critical |
| Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which results in system service exceptions. | ||||
| CVE-2022-48352 | 1 Huawei | 2 Emui, Harmonyos | 2025-02-24 | 7.5 High |
| Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic. | ||||
| CVE-2022-34067 | 1 Oretnom23 | 1 Warehouse Management System | 2025-02-24 | 7.5 High |
| Warehouse Management System v1.0 was discovered to contain a SQL injection vulnerability via the cari parameter. | ||||
| CVE-2023-36158 | 1 Oretnom23 | 1 Toll Tax Management System | 2025-02-24 | 6.1 Medium |
| Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page. | ||||
| CVE-2022-26283 | 1 Oretnom23 | 1 Simple Subscription Website | 2025-02-24 | 9.8 Critical |
| Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the view_plan endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests. | ||||
| CVE-2022-30837 | 1 Oretnom23 | 1 Toll Tax Management System | 2025-02-24 | 5.4 Medium |
| Toll-tax-management-system v1.0 is vulnerable to Cross Site Scripting (XSS) via /ttms/classes/Master.php?f=save_recipient, vehicle_name. | ||||
| CVE-2023-44047 | 1 Oretnom23 | 1 Toll Tax Management System | 2025-02-24 | 7.2 High |
| Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection. | ||||
| CVE-2021-43140 | 1 Oretnom23 | 1 Simple Subscription Website | 2025-02-24 | 9.8 Critical |
| SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login. | ||||
| CVE-2021-43141 | 1 Oretnom23 | 1 Simple Subscription Website | 2025-02-24 | 6.1 Medium |
| Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in plan_application. | ||||
| CVE-2022-30053 | 1 Oretnom23 | 1 Toll Tax Management System | 2025-02-24 | 9.8 Critical |
| In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks. | ||||
| CVE-2025-1599 | 1 Mayurik | 1 Best Church Management Software | 2025-02-24 | 5.4 Medium |
| A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/app/profile_crud.php. The manipulation of the argument old_cat_img leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. | ||||
| CVE-2025-1589 | 1 Janobe | 1 E-learning System | 2025-02-24 | 4.3 Medium |
| A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. | ||||
| CVE-2025-1616 | 1 Fiberhome | 2 An5506-01a, An5506-01a Firmware | 2025-02-24 | 4.7 Medium |
| A vulnerability, which was classified as critical, has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this issue is some unknown functionality of the component Diagnosis. The manipulation of the argument Destination Address leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. | ||||