Export limit exceeded: 74724 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (74724 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2020-21840 1 Gnu 1 Libredwg 2024-11-21 8.8 High
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985.
CVE-2020-21838 1 Gnu 1 Libredwg 2024-11-21 8.8 High
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_appinfo ../../src/decode.c:2842.
CVE-2020-21836 1 Gnu 1 Libredwg 2024-11-21 8.8 High
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:3175.
CVE-2020-21833 1 Gnu 1 Libredwg 2024-11-21 8.8 High
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_classes ../../src/decode.c:2440.
CVE-2020-21832 1 Gnu 1 Libredwg 2024-11-21 8.8 High
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2417.
CVE-2020-21831 1 Gnu 1 Libredwg 2024-11-21 8.8 High
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637.
CVE-2020-21830 1 Gnu 1 Libredwg 2024-11-21 8.8 High
A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213.
CVE-2020-21827 1 Gnu 1 Libredwg 2024-11-21 7.8 High
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2379.
CVE-2020-21819 1 Gnu 1 Libredwg 2024-11-21 8.8 High
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51.
CVE-2020-21818 1 Gnu 1 Libredwg 2024-11-21 8.8 High
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48.
CVE-2020-21816 1 Gnu 1 Libredwg 2024-11-21 8.8 High
A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46.
CVE-2020-21814 1 Gnu 1 Libredwg 2024-11-21 8.8 High
A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97.
CVE-2020-21813 1 Gnu 1 Libredwg 2024-11-21 7.8 High
A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114.
CVE-2020-21785 1 Ibos 1 Ibos 2024-11-21 8.8 High
In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.
CVE-2020-21724 1 Ogg Video Tools Project 1 Ogg Video Tools 2024-11-21 7.8 High
Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file.
CVE-2020-21722 1 Ogg Video Tools Project 1 Ogg Video Tools 2024-11-21 7.8 High
Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file.
CVE-2020-21699 1 Alibaba 1 Tengine 2024-11-21 7.5 High
The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru 1.13.2 is vulnerable to an integer overflow vulnerability in the nginx range filter module, resulting in the leakage of potentially sensitive information triggered by specially crafted requests.
CVE-2020-21688 2 Debian, Ffmpeg 2 Debian Linux, Ffmpeg 2024-11-21 8.8 High
A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.
CVE-2020-21667 1 Fastadmin-tp6 Project 1 Fastadmin-tp6 2024-11-21 7.2 High
In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection.
CVE-2020-21665 1 Fastadmin 1 Fastadmin 2024-11-21 7.2 High
In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injection in URL /admin/ajax/weigh.