Search

Expected end of text, found ':' (at char 27), (line:1, col:28)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (373686 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-37243 1 Altn 1 Security Gateway For Email Servers 2024-11-21 5.4 Medium
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.
CVE-2022-37242 1 Altn 1 Security Gateway For Email Servers 2024-11-21 9.8 Critical
MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.
CVE-2022-37241 1 Altn 1 Security Gateway For Email Servers 2024-11-21 5.4 Medium
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoint.
CVE-2022-37240 1 Altn 1 Security Gateway For Email Servers 2024-11-21 9.8 Critical
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.
CVE-2022-37239 1 Altn 1 Security Gateway For Email Servers 2024-11-21 5.4 Medium
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.
CVE-2022-37238 1 Altn 1 Security Gateway For Email Servers 2024-11-21 5.4 Medium
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.
CVE-2022-37237 1 Zlmediakit 1 Zlmediakit 2024-11-21 7.5 High
An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely. Affected version is below commit 7d8b212a3c3368bc2f6507cb74664fc419eb9327.
CVE-2022-37223 1 Jflyfox 1 Jfinal Cms 2024-11-21 9.8 Critical
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.
CVE-2022-37207 1 Jflyfox 1 Jfinal Cms 2024-11-21 8.8 High
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection
CVE-2022-37203 1 Jflyfox 1 Jfinal Cms 2024-11-21 9.8 Critical
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
CVE-2022-37201 1 Jflyfox 1 Jfinal Cms 2024-11-21 8.8 High
JFinal CMS 5.1.0 is vulnerable to SQL Injection.
CVE-2022-37199 1 Jflyfox 1 Jfinal Cms 2024-11-21 9.8 Critical
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.
CVE-2022-37191 1 Cuppacms 1 Cuppacms 2024-11-21 6.5 Medium
The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST request using [function] parameter value as LFI payload.
CVE-2022-37190 1 Cuppacms 1 Cuppacms 2024-11-21 8.8 High
CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). An authenticated user can control both parameters (action and function) from "/api/index.php.
CVE-2022-37189 1 Ddmal 1 Mei2volpiano 2024-11-21 7.5 High
DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE), leading to a Denial of Service. This occurs due to the usage of the unsafe 'xml.etree' library to parse untrusted XML input.
CVE-2022-37185 1 Ems Project 1 Ems 2024-11-21 7.5 High
SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage.
CVE-2022-37184 1 Garage Management System Project 1 Garage Management System 2024-11-21 8.8 High
The application manage_website.php on Garage Management System 1.0 is vulnerable to Shell File Upload. The already authenticated malicious user, can upload a dangerous RCE or LCE exploit file.
CVE-2022-37183 1 Piwigo 1 Piwigo 2024-11-21 6.1 Medium
Piwigo 12.3.0 is vulnerable to Cross Site Scripting (XSS) via /search/1940/created-monthly-list.
CVE-2022-37181 1 72crm 1 Wukong Crm 2024-11-21 9.8 Critical
72crm 9.0 has an Arbitrary file upload vulnerability.
CVE-2022-37178 1 72crm 1 Wukong Crm 2024-11-21 8.8 High
An issue was discovered in 72crm 9.0. There is a SQL Injection vulnerability in View the task calendar.