Search

Expected end of text, found ':' (at char 26), (line:1, col:27)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (387228 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2023-30257 1 Fiio 2 M6, M6 Firmware 2025-01-29 7.8 High
A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root.
CVE-2023-30237 1 Cyberghostvpn 1 Cyberghost 2025-01-29 7.8 High
CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe.
CVE-2023-30203 1 Judging Management System Project 1 Judging Management System 2025-01-29 9.8 Critical
Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the event_id parameter at /php-jms/result_sheet.php.
CVE-2023-30185 1 Crmeb 1 Crmeb 2025-01-29 9.8 Critical
CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component \attachment\SystemAttachmentServices.php.
CVE-2023-30184 1 Typecho 1 Typecho 2025-01-29 5.4 Medium
A stored cross-site scripting (XSS) vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter at /index.php/archives/1/comment.
CVE-2023-30097 1 Totaljs 1 Messenger 2025-01-29 5.4 Medium
A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field.
CVE-2023-30096 1 Totaljs 1 Messenger 2025-01-29 5.4 Medium
A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user information field.
CVE-2023-30095 1 Totaljs 1 Messenger 2025-01-29 5.4 Medium
A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the channel description field.
CVE-2023-30094 1 Totaljs 1 Flow 2025-01-29 5.4 Medium
A stored cross-site scripting (XSS) vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module.
CVE-2023-30093 1 Onosproject 1 Onos 2025-01-29 6.1 Medium
A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard.
CVE-2023-30092 1 Online Pizza Ordering System Project 1 Online Pizza Ordering System 2025-01-29 9.8 Critical
SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter.
CVE-2023-30088 1 Cesanta 1 Mjs 2025-01-29 5.5 Medium
An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c.
CVE-2023-29963 1 S-cms 1 S-cms 2025-01-29 7.2 High
S-CMS v5.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /admin/ajax.php.
CVE-2023-29942 1 Llvm 1 Llvm 2025-01-29 5.5 Medium
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType.
CVE-2023-29941 1 Llvm 1 Llvm 2025-01-29 5.5 Medium
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp<mlir::sparse_tensor::SortOp>(mlir::sparse_tensor::SortOp.
CVE-2023-29939 1 Llvm 1 Llvm 2025-01-29 5.5 Medium
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr).
CVE-2023-29935 1 Llvm 1 Llvm 2025-01-29 5.5 Medium
llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced.
CVE-2023-29934 1 Llvm 1 Llvm 2025-01-29 5.5 Medium
llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect().
CVE-2023-29933 1 Llvm 1 Llvm 2025-01-29 5.5 Medium
llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.
CVE-2023-29932 1 Llvm 1 Llvm 2025-01-29 5.5 Medium
llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.