Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (8928 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-30932 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30933 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30934 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30935 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30936 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30937 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30938 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2024-10664 2024-12-04 4.3 Medium
The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the basepress_db_posts_update() function in all versions up to, and including, 2.16.3.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the database.
CVE-2023-30939 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30940 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30941 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30942 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33900 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-32788 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33888 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33889 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33890 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2024-10567 1 Woocommerce 1 Woocommerce 2024-12-04 7.5 High
The TI WooCommerce Wishlist plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wizard' function in all versions up to, and including, 2.9.1. This makes it possible for unauthenticated attackers to create new pages, modify plugin settings, and perform limited options updates.
CVE-2024-40709 1 Veeam 1 Agent 2024-12-04 N/A
A missing authorization vulnerability allows a local low-privileged user on the machine to escalate their privileges to root level.
CVE-2023-21225 1 Google 1 Android 2024-12-03 7.8 High
there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-270403821References: N/A