Search

Expected end of text, found '/' (at char 24), (line:1, col:25)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (364710 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-31774 1 Ibm 1 Datapower Gateway 2024-11-21 5.4 Medium
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 228358.
CVE-2022-31773 1 Ibm 1 Datapower Gateway 2024-11-21 8.8 High
IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 228357.
CVE-2022-31770 1 Ibm 1 App Connect Enterprise Certified Container 2024-11-21 4.9 Medium
IBM App Connect Enterprise Certified Container 4.2 could allow a user from the administration console to cause a denial of service by creating a specially crafted request. IBM X-Force ID: 228221.
CVE-2022-31769 2 Ibm, Linux 2 Spectrum Copy Data Management, Linux Kernel 2024-11-21 5.3 Medium
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored in PostgreSQL, which could be used in further attacks against the system. IBM X-Force ID: 228219.
CVE-2022-31768 1 Ibm 1 Infosphere Information Server 2024-11-21 9.8 Critical
IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
CVE-2022-31767 2 Ibm, Linux 2 Cics Tx, Linux Kernel 2024-11-21 9.8 Critical
IBM CICS TX Standard and Advanced 11.1 could allow a remote attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 227980.
CVE-2022-31763 1 Huawei 2 Emui, Harmonyos 2024-11-21 5.5 Medium
The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability.
CVE-2022-31762 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-11-21 7.8 High
The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation.
CVE-2022-31761 1 Huawei 2 Emui, Magic Ui 2024-11-21 7.5 High
Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality.
CVE-2022-31760 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-11-21 9.1 Critical
Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality.
CVE-2022-31759 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-11-21 5.5 Medium
AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability.
CVE-2022-31758 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-11-21 4.7 Medium
The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-31757 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-11-21 7.5 High
The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-31756 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-11-21 5.5 Medium
The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-31755 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-11-21 5.5 Medium
The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability.
CVE-2022-31754 1 Huawei 2 Emui, Magic Ui 2024-11-21 7.5 High
Logical defects in code implementation in some products. Successful exploitation of this vulnerability may affect the availability of some features.
CVE-2022-31753 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-11-21 7.5 High
The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability.
CVE-2022-31752 1 Huawei 2 Emui, Magic Ui 2024-11-21 5.5 Medium
Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality.
CVE-2022-31751 1 Huawei 3 Emui, Harmonyos, Magic Ui 2024-11-21 5.5 Medium
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability.
CVE-2022-31735 1 Osstech 1 Openam 2024-11-21 6.1 Medium
OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server through some specially crafted URL, the user may be redirected to an arbitrary website.