Export limit exceeded: 349377 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 349377 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 349377 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (349377 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2018-20615 4 Canonical, Haproxy, Opensuse and 1 more 7 Ubuntu Linux, Haproxy, Leap and 4 more 2024-11-21 N/A
An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-checked to make sure they were present in the frame.
CVE-2018-20614 1 Cim Project 1 Cim 2024-11-21 N/A
public\install\install.php in CIM 0.9.3 allows remote attackers to reload the product via the public/install/#/step3 URI.
CVE-2018-20613 1 Temmoku Project 1 Temmoku 2024-11-21 N/A
TEMMOKU T1.09 Beta allows admin/user/add CSRF.
CVE-2018-20612 1 Asthis 1 Universal Website Asthis 2024-11-21 N/A
UWA 2.3.11 allows index.php?g=admin&c=admin&a=add_admin_do CSRF.
CVE-2018-20611 1 Txjia 1 Imcat 2024-11-21 N/A
imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI.
CVE-2018-20610 1 Txjia 1 Imcat 2024-11-21 N/A
imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter.
CVE-2018-20609 1 Txjia 1 Imcat 2024-11-21 N/A
imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI.
CVE-2018-20608 1 Txjia 1 Imcat 2024-11-21 N/A
imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI.
CVE-2018-20607 1 Txjia 1 Imcat 2024-11-21 N/A
imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI.
CVE-2018-20606 1 Txjia 1 Imcat 2024-11-21 N/A
imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI.
CVE-2018-20605 1 Txjia 1 Imcat 2024-11-21 N/A
imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file.
CVE-2018-20604 1 Lfdycms 1 Lei Feng Tv Cms 2024-11-21 N/A
Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URIs, as demonstrated by the admin.php?s=/Template/edit/path/*web*..*..*..*..*1.txt.html URI to read the 1.txt file.
CVE-2018-20603 1 Lfdycms 1 Lei Feng Tv Cms 2024-11-21 N/A
Lei Feng TV CMS (aka LFCMS) 3.8.6 allows admin.php?s=/Member/add.html CSRF.
CVE-2018-20602 1 Lfdycms 1 Lei Feng Tv Cms 2024-11-21 N/A
Lei Feng TV CMS (aka LFCMS) 3.8.6 allows full path disclosure via the /install.php?s=/1 URI.
CVE-2018-20601 1 Ucms Project 1 Ucms 2024-11-21 N/A
UCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action.
CVE-2018-20600 1 Ucms Project 1 Ucms 2024-11-21 N/A
sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.
CVE-2018-20599 1 Ucms Project 1 Ucms 2024-11-21 N/A
UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_fileedit action.
CVE-2018-20598 1 Ucms Project 1 Ucms 2024-11-21 N/A
UCMS 1.4.7 has ?do=user_addpost CSRF.
CVE-2018-20597 1 Ucms Project 1 Ucms 2024-11-21 N/A
UCMS 1.4.7 has XSS via the dir parameter in an index.php sadmin_fileedit action.
CVE-2018-20596 1 Jspxcms 1 Jspxcms 2024-11-21 N/A
Jspxcms v9.0.0 allows SSRF.