Search

Expected end of text, found '/' (at char 38), (line:1, col:39)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (357808 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-35454 1 Otfcc Project 1 Otfcc 2024-11-21 6.5 Medium
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b05aa.
CVE-2022-35453 1 Otfcc Project 1 Otfcc 2024-11-21 6.5 Medium
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c08a6.
CVE-2022-35452 1 Otfcc Project 1 Otfcc 2024-11-21 6.5 Medium
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0b2c.
CVE-2022-35451 1 Otfcc Project 1 Otfcc 2024-11-21 6.5 Medium
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b03b5.
CVE-2022-35450 1 Otfcc Project 1 Otfcc 2024-11-21 6.5 Medium
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b84b1.
CVE-2022-35449 1 Otfcc Project 1 Otfcc 2024-11-21 6.5 Medium
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0466.
CVE-2022-35448 1 Otfcc Project 1 Otfcc 2024-11-21 6.5 Medium
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b55af.
CVE-2022-35447 1 Otfcc Project 1 Otfcc 2024-11-21 6.5 Medium
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b04de.
CVE-2022-35434 1 Jpeg Quant Smooth Project 1 Jpeg Quant Smooth 2024-11-21 5.5 Medium
jpeg-quantsmooth before commit 8879454 contained a floating point exception (FPE) via /jpeg-quantsmooth/jpegqs+0x4f5d6c.
CVE-2022-35433 1 Ffjpeg Project 1 Ffjpeg 2024-11-21 6.5 Medium
ffjpeg commit caade60a69633d74100bd3c2528bddee0b6a1291 was discovered to contain a memory leak via /src/jfif.c.
CVE-2022-35426 1 Ucms Project 1 Ucms 2024-11-21 9.8 Critical
UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.
CVE-2022-35422 1 Web Based Quiz System Project 1 Web Based Quiz System 2024-11-21 9.8 Critical
Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the qid parameter at update.php.
CVE-2022-35421 1 Online Tours And Travels Management System Project 1 Online Tours And Travels Management System 2024-11-21 7.2 High
Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php.
CVE-2022-35416 1 H3c 1 Ssl Vpn 2024-11-21 6.1 Medium
H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS.
CVE-2022-35415 1 Ni 1 Configuration Manager 2024-11-21 7.8 High
An improper input validation in NI System Configuration Manager before 22.5 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-35414 2 Debian, Qemu 2 Debian Linux, Qemu 2024-11-21 8.8 High
softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use case are not considered security bugs at this time.
CVE-2022-35413 1 Pentasecurity 1 Wapples 2024-11-21 9.8 Critical
WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information (such as SSL keys) via an HTTPS request to the /webapi/ URI on port 443 or 5001.
CVE-2022-35412 1 Digitalguardian 1 Digital Guardian 2024-11-21 5.1 Medium
Digital Guardian Agent 7.7.4.0042 allows an administrator (who ordinarily does not have a supported way to uninstall the product) to disable some of the agent functionality and then exfiltrate files to an external USB device.
CVE-2022-35411 1 Rpc.py Project 1 Rpc.py 2024-11-21 9.8 Critical
rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON (not Pickle) is the default data format, an unauthenticated client can cause the data to be processed with unpickle.
CVE-2022-35410 2 0xacab, Debian 2 Mat2, Debian Linux 2024-11-21 7.5 High
mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.