Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (96568 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-46536 1 Tenda 2 F1203, F1203 Firmware 2025-04-16 7.5 High
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeedUp parameter at /goform/SetClientState.
CVE-2022-35751 1 Microsoft 22 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 19 more 2025-04-16 7.8 High
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2024-46645 1 Enms 1 Enms 2025-04-16 7.5 High
eNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files.
CVE-2024-46648 1 Enms 1 Enms 2025-04-16 7.5 High
eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via scan_folder.
CVE-2024-46649 1 Enms 1 Enms 2025-04-16 7.5 High
eNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder.
CVE-2022-46541 1 Tenda 2 F1203, F1203 Firmware 2025-04-16 7.5 High
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the ssid parameter at /goform/fast_setting_wifi_set.
CVE-2022-46540 1 Tenda 2 F1203, F1203 Firmware 2025-04-16 7.5 High
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/addressNat.
CVE-2022-46539 1 Tenda 2 F1203, F1203 Firmware 2025-04-16 7.5 High
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security_5g parameter at /goform/WifiBasicSet.
CVE-2022-46537 1 Tenda 2 F1203, F1203 Firmware 2025-04-16 7.5 High
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security parameter at /goform/WifiBasicSet.
CVE-2022-46424 1 Netgear 2 Xwn5001, Xwn5001 Firmware 2025-04-16 8.1 High
An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v0.4.1.1 and earlier.
CVE-2022-46322 1 Huawei 2 Emui, Harmonyos 2025-04-16 7.5 High
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions.
CVE-2022-46321 1 Huawei 2 Emui, Harmonyos 2025-04-16 7.5 High
The Wi-Fi module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-46317 1 Huawei 2 Emui, Harmonyos 2025-04-16 7.5 High
The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.
CVE-2022-41599 1 Huawei 2 Emui, Harmonyos 2025-04-16 7.5 High
The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-41596 1 Huawei 2 Emui, Harmonyos 2025-04-16 7.5 High
The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components.
CVE-2022-41591 1 Huawei 2 Emui, Harmonyos 2025-04-16 7.5 High
The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files.
CVE-2022-38733 1 Netapp 1 Oncommand Insight 2025-04-16 8.6 High
OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data Warehouse component.
CVE-2022-25940 1 Lite-server Project 1 Lite-server 2025-04-16 7.5 High
All versions of package lite-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse.
CVE-2022-25895 1 Lite-dev-server Project 1 Lite-dev-server 2025-04-16 7.5 High
All versions of package lite-dev-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code.
CVE-2024-27713 1 Eskooly 2 Eskooly, Web Product 2025-04-16 8.8 High
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component.