Search

Expected end of text, found '/' (at char 44), (line:1, col:45)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (366848 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2023-48681 3 Acronis, Linux, Microsoft 3 Cyber Protect, Linux Kernel, Windows 2025-02-06 6.1 Medium
Self cross-site scripting (XSS) vulnerability in storage nodes search field. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
CVE-2023-48682 3 Acronis, Linux, Microsoft 3 Cyber Protect, Linux Kernel, Windows 2025-02-06 5.4 Medium
Stored cross-site scripting (XSS) vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
CVE-2023-2106 1 Janeczku 1 Calibre-web 2025-02-06 9.8 Critical
Weak Password Requirements in GitHub repository janeczku/calibre-web prior to 0.6.20.
CVE-2023-2105 1 Easyappointments 1 Easyappointments 2025-02-06 8.8 High
Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
CVE-2023-2104 1 Easyappointments 1 Easyappointments 2025-02-06 5.4 Medium
Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
CVE-2023-2103 1 Easyappointments 1 Easyappointments 2025-02-06 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
CVE-2023-2102 1 Easyappointments 1 Easyappointments 2025-02-06 4.8 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
CVE-2023-29774 1 Iteachyou 1 Dreamer Cms 2025-02-06 5.4 Medium
Dreamer CMS 3.0.1 is vulnerable to stored Cross Site Scripting (XSS).
CVE-2023-27911 1 Autodesk 1 Fbx Software Development Kit 2025-02-06 7.8 High
A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution.
CVE-2023-27910 1 Autodesk 1 Fbx Software Development Kit 2025-02-06 7.8 High
A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution.
CVE-2023-27844 1 Litextension 1 Leurlrewrite 2025-02-06 9.8 Critical
SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges via the Dispatcher::getController component.
CVE-2023-27755 1 71note 1 Go-bbs 2025-02-06 8.8 High
go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download.
CVE-2023-27733 1 Dedecms 1 Dedecms 2025-02-06 7.2 High
DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/sys_sql_query.php.
CVE-2023-27705 1 Apng Optimizer Project 1 Apng Optimizer 2025-02-06 7.5 High
APNG_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png.
CVE-2023-27092 1 Jbootfly Project 1 Jbootfly 2025-02-06 6.1 Medium
Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username parameter.
CVE-2023-25010 1 Autodesk 1 Maya Usd 2025-02-06 7.8 High
A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code execution.
CVE-2023-24503 1 Electra-air 1 Smart Kit For Split Ac 2025-02-06 7.5 High
Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.
CVE-2023-24502 1 Electra-air 2 Central Ac Unit, Central Ac Unit Firmware 2025-02-06 7.5 High
Electra Central AC unit – The unit opens an AP with an easily calculated password.
CVE-2023-24500 1 Electra-air 2 Central Ac Unit, Central Ac Unit Firmware 2025-02-06 7.5 High
Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.
CVE-2023-1473 1 Metaslider 1 Slider\, Gallery\, And Carousel 2025-02-06 6.1 Medium
The Slider, Gallery, and Carousel by MetaSlider WordPress plugin 3.29.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin