Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (383330 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-5592 1 Freefloat 1 Ftp Server 2025-06-09 7.3 High
A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the component PASSIVE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2022-0394 1 Livehelperchat 1 Live Helper Chat 2025-06-09 5.4 Medium
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2025-5599 1 Phpgurukul 1 Student Result Management System 2025-06-09 7.3 High
A vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3. This vulnerability affects unknown code of the file /editmyexp.php. The manipulation of the argument emp1ctc leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2020-21514 1 Fluentd 2 Fluentd, Fluentd-ui 2025-06-09 8.8 High
An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password.
CVE-2018-12071 1 Codeigniter 1 Codeigniter 2025-06-09 N/A
A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.use_strict_mode in the Session Library was mishandled.
CVE-2025-5242 2025-06-07 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-5223 2025-06-07 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-5097 2025-06-07 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-5026 2025-06-07 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-0753 3 Debian, Mozilla, Redhat 9 Debian Linux, Firefox, Firefox Esr and 6 more 2025-06-07 6.5 Medium
In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVE-2024-24262 1 Ireader 1 Media-server 2025-06-06 7.5 High
media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_uac_stop_timer function at /uac/sip-uac-transaction.c.
CVE-2023-51073 1 Buffalo 2 Ls210d, Ls210d Firmware 2025-06-06 8.1 High
An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh.
CVE-2024-37826 1 Vercot 1 Serva 2025-06-06 7.5 High
A NULL pointer dereference in vercot Serva v4.6.0 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVE-2025-25522 1 Linksys 2 Wap610n, Wap610n Firmware 2025-06-06 7.3 High
Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability.
CVE-2024-1021 1 Ruifang-tech 1 Rebuild 2025-06-06 6.3 Medium
A vulnerability, which was classified as critical, has been found in Rebuild up to 3.5.5. Affected by this issue is the function readRawText of the component HTTP Request Handler. The manipulation of the argument url leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-252290 is the identifier assigned to this vulnerability.
CVE-2023-51066 1 Qstar 1 Archive Storage Manager 2025-06-06 8.8 High
An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows attackers to arbitrarily execute commands.
CVE-2025-5668 1 Phpgurukul 1 Medical Card Generation System 2025-06-06 6.3 Medium
A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/readenq.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-5639 1 Phpgurukul 1 Notice Board System 2025-06-06 7.3 High
A vulnerability was found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-5638 1 Phpgurukul 1 Notice Board System 2025-06-06 6.3 Medium
A vulnerability has been found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVE-2025-5619 1 Tenda 2 Ch22, Ch22 Firmware 2025-06-06 8.8 High
A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. This issue affects the function formaddUserName of the file /goform/addUserName. The manipulation of the argument Password leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.