Export limit exceeded: 366014 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (366014 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-29576 1 Axiosys 1 Bento4 2025-02-10 5.5 Medium
Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_TrunAtom::SetDataOffset(int) function in Ap4TrunAtom.h.
CVE-2022-47468 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-02-10 5.5 Medium
In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
CVE-2022-47467 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-02-10 5.5 Medium
In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
CVE-2022-47466 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-02-10 5.5 Medium
In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
CVE-2022-47336 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-02-10 5.5 Medium
In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
CVE-2022-47335 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-02-10 5.5 Medium
In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
CVE-2022-32579 1 Intel 4 Lapbc510, Lapbc510 Firmware, Lapbc710 and 1 more 2025-02-10 6.9 Medium
Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via physical access.
CVE-2024-3948 1 Library System Project 1 Library System 2025-02-10 6.3 Medium
A vulnerability was found in SourceCodester Home Clean Service System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file \admin\student.add.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-261440.
CVE-2023-1880 1 Phpmyfaq 1 Phpmyfaq 2025-02-10 6.1 Medium
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1881 1 Microweber 1 Microweber 2025-02-10 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.
CVE-2023-1882 1 Phpmyfaq 1 Phpmyfaq 2025-02-10 5.4 Medium
Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1883 1 Phpmyfaq 1 Phpmyfaq 2025-02-10 5.4 Medium
Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1884 1 Phpmyfaq 1 Phpmyfaq 2025-02-10 6.1 Medium
Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1885 1 Phpmyfaq 1 Phpmyfaq 2025-02-10 6.3 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1886 1 Phpmyfaq 1 Phpmyfaq 2025-02-10 7.3 High
Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1887 1 Phpmyfaq 1 Phpmyfaq 2025-02-10 4.3 Medium
Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1892 1 Contribsys 1 Sidekiq 2025-02-10 9.6 Critical
Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8.
CVE-2024-2449 1 Progress 1 Loadmaster 2025-02-10 7.5 High
A cross-site request forgery vulnerability has been identified in LoadMaster.  It is possible for a malicious actor, who has prior knowledge of the IP or hostname of a specific LoadMaster, to direct an authenticated LoadMaster administrator to a third-party site. In such a scenario, the CSRF payload hosted on the malicious site would execute HTTP transactions on behalf of the LoadMaster administrator.
CVE-2024-21990 1 Netapp 1 Ontap Select Deploy Administration Utility 2025-02-10 5.4 Medium
ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x contain hard-coded credentials that could allow an attacker to view Deploy configuration information and modify the account credentials.
CVE-2024-21989 1 Netapp 1 Ontap Select Deploy Administration Utility 2025-02-10 8.1 High
ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when successfully exploited could allow a read-only user to escalate their privileges.