Export limit exceeded: 370168 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 370168 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 370168 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 30), (line:1, col:31)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (370168 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2020-15071 1 Getsymphony 1 Symphony 2024-11-21 6.1 Medium
content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading.
CVE-2020-15070 1 Zulip 1 Zulip Server 2024-11-21 8.8 High
Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose to write a crafted custom profile field value.
CVE-2020-15065 1 Digitus 2 Da-70254, Da-70254 Firmware 2024-11-21 6.5 Medium
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device via long input values.
CVE-2020-15064 1 Digitus 2 Da-70254, Da-70254 Firmware 2024-11-21 4.3 Medium
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.
CVE-2020-15063 1 Digitus 2 Da-70254, Da-70254 Firmware 2024-11-21 8.8 High
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.
CVE-2020-15062 1 Digitus 2 Da-70254, Da-70254 Firmware 2024-11-21 8.8 High
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.
CVE-2020-15061 1 Lindy-international 2 42633, 42633 Firmware 2024-11-21 6.5 Medium
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to denial-of-service the device via long input values.
CVE-2020-15060 1 Lindy-international 2 42633, 42633 Firmware 2024-11-21 4.3 Medium
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.
CVE-2020-15059 1 Lindy-international 2 42633, 42633 Firmware 2024-11-21 8.8 High
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.
CVE-2020-15058 1 Lindy-international 2 42633, 42633 Firmware 2024-11-21 8.8 High
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.
CVE-2020-15057 1 Tp-link 2 Tl-ps310u, Tl-ps310u Firmware 2024-11-21 6.5 Medium
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to denial-of-service the device via long input values.
CVE-2020-15056 1 Tp-link 2 Tl-ps310u, Tl-ps310u Firmware 2024-11-21 4.3 Medium
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.
CVE-2020-15055 1 Tp-link 2 Tl-ps310u, Tl-ps310u Firmware 2024-11-21 8.8 High
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.
CVE-2020-15054 1 Tp-link 2 Tl-ps310u, Tl-ps310u Firmware 2024-11-21 8.8 High
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.
CVE-2020-15053 1 Articatech 1 Artica Proxy 2024-11-21 6.1 Medium
An issue was discovered in Artica Proxy CE before 4.28.030.418. Reflected XSS exists via these search fields: real time request, System Events, Proxy Events, Proxy Objects, and Firewall objects.
CVE-2020-15052 1 Articatech 1 Artica Proxy 2024-11-21 7.5 High
An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields.
CVE-2020-15051 1 Articatech 1 Artica Proxy 2024-11-21 6.1 Medium
An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields.
CVE-2020-15050 1 Supremainc 1 Biostar 2 2024-11-21 7.5 High
An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote attackers can read arbitrary files from the server via Directory Traversal.
CVE-2020-15049 3 Fedoraproject, Redhat, Squid-cache 3 Fedora, Enterprise Linux, Squid 2024-11-21 9.9 Critical
An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or an uncommon shell whitespace character prefix to the length field-value.
CVE-2020-15047 1 Trojita Project 1 Trojita 2024-11-21 5.9 Medium
MSA/SMTP.cpp in Trojita before 0.8 ignores certificate-verification errors, which allows man-in-the-middle attackers to spoof SMTP servers.