Search

Expected end of text, found 'é' (at char 37), (line:1, col:38)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (372344 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-2400 2025-04-16 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-0692 1 Solarwinds 1 Security Event Manager 2025-04-16 8.8 High
The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.
CVE-2024-2076 1 Codeastro 1 House Rental Management System 2025-04-16 5.3 Medium
A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file booking.php/owner.php/tenant.php. The manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255392.
CVE-2022-46536 1 Tenda 2 F1203, F1203 Firmware 2025-04-16 7.5 High
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeedUp parameter at /goform/SetClientState.
CVE-2022-35751 1 Microsoft 22 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 19 more 2025-04-16 7.8 High
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2019-11851 1 Sierrawireless 13 Aleos, Es440, Es450 and 10 more 2025-04-16 9.8 Critical
The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows remote attackers to execute arbitrary code via a buffer overflow.
CVE-2024-46644 1 Enms 1 Enms 2025-04-16 6.5 Medium
eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via edit_file.
CVE-2024-46645 1 Enms 1 Enms 2025-04-16 7.5 High
eNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files.
CVE-2024-46646 1 Enms 1 Enms 2025-04-16 6.5 Medium
eNMS up to 4.7.1 is vulnerable to Directory Traversal via /download/file.
CVE-2024-46647 1 Enms 1 Enms 2025-04-16 6.5 Medium
eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via upload_files.
CVE-2024-46648 1 Enms 1 Enms 2025-04-16 7.5 High
eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via scan_folder.
CVE-2024-46649 1 Enms 1 Enms 2025-04-16 7.5 High
eNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder.
CVE-2022-46541 1 Tenda 2 F1203, F1203 Firmware 2025-04-16 7.5 High
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the ssid parameter at /goform/fast_setting_wifi_set.
CVE-2022-46540 1 Tenda 2 F1203, F1203 Firmware 2025-04-16 7.5 High
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/addressNat.
CVE-2022-46539 1 Tenda 2 F1203, F1203 Firmware 2025-04-16 7.5 High
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security_5g parameter at /goform/WifiBasicSet.
CVE-2022-46538 1 Tenda 2 F1203, F1203 Firmware 2025-04-16 9.8 Critical
Tenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteFacMac.
CVE-2022-46537 1 Tenda 2 F1203, F1203 Firmware 2025-04-16 7.5 High
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security parameter at /goform/WifiBasicSet.
CVE-2022-46428 1 Tp-link 2 Tl-wr1043nd V1, Tl-wr1043nd V1 Firmware 2025-04-16 4.8 Medium
TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.
CVE-2022-46424 1 Netgear 2 Xwn5001, Xwn5001 Firmware 2025-04-16 8.1 High
An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v0.4.1.1 and earlier.
CVE-2022-46326 1 Huawei 2 Emui, Harmonyos 2025-04-16 9.8 Critical
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions.