Export limit exceeded: 361935 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 361935 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 361935 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 361935 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 34), (line:1, col:35)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (361935 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2024-27906 1 Apache 1 Airflow 2025-05-06 5.9 Medium
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI. Users of Apache Airflow are recommended to upgrade to version 2.8.2 or newer to mitigate the risk associated with this vulnerability
CVE-2024-21742 1 Apache 1 James Mime4j 2025-05-06 5.3 Medium
Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages.
CVE-2022-32877 1 Apple 1 Macos 2025-05-06 5.5 Medium
A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Monterey 12.6. An app may be able to access user-sensitive data.
CVE-2022-32875 1 Apple 3 Iphone Os, Macos, Watchos 2025-05-06 5 Medium
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6. An app may be able to read sensitive location information.
CVE-2024-27984 1 Ivanti 1 Avalanche 2025-05-06 7.1 High
A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete specific type of files and/or cause denial of service.
CVE-2023-52342 2 Google, Unisoc 9 Android, S8000, S8000 Firmware and 6 more 2025-05-06 7.5 High
In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed
CVE-2023-52343 2 Google, Unisoc 5 Android, S8000, T760 and 2 more 2025-05-06 5.5 Medium
In SecurityCommand message after as security has been actived., there is a possible improper input validation. This could lead to remote information disclosure no additional execution privileges needed
CVE-2023-52344 2 Google, Unisoc 5 Android, S8000, T760 and 2 more 2025-05-06 5.3 Medium
In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed
CVE-2023-52346 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-06 4.4 Medium
In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with System execution privileges needed
CVE-2023-52347 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-06 5.5 Medium
In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-52348 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-06 4.4 Medium
In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-52351 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-06 7.8 High
In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-52533 2 Google, Unisoc 5 Android, S8000, T760 and 2 more 2025-05-06 5.3 Medium
In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed
CVE-2023-52534 2 Google, Unisoc 5 Android, S8000, T760 and 2 more 2025-05-06 5.9 Medium
In ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed
CVE-2023-52535 2 Google, Unisoc 7 Android, Sc7731e, Sc9832e and 4 more 2025-05-06 4.4 Medium
In vsp driver, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execution privileges needed
CVE-2024-23658 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-06 4.4 Medium
In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed
CVE-2024-39441 2 Google, Unisoc 13 Android, S8000, T310 and 10 more 2025-05-06 7.1 High
In wifi display, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
CVE-2023-52341 2 Google, Unisoc 5 Android, S8000, T760 and 2 more 2025-05-06 7.5 High
In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
CVE-2024-42789 2 Kashipara, Lopalopa 2 Music Management System, Music Management System 2025-05-06 6.3 Medium
A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via the "page" parameter.
CVE-2024-42788 2 Kashipara, Lopalopa 2 Music Management System, Music Management System 2025-05-06 6.1 Medium
A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via "title" & "artist" parameter fields.