Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (95359 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-33961 1 Leantime 1 Leantime 2025-01-10 8.9 High
Leantime is a lean open source project management system. Starting in version 2.3.21, an authenticated user with commenting privileges can inject malicious Javascript into a comment. Once the malicious comment is loaded in the browser by a user, the malicious Javascript code executes. As of time of publication, a patch does not exist.
CVE-2023-28079 1 Dell 1 Powerpath 2025-01-10 7 High
PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains Insecure File and Folder Permissions vulnerability. A regular user (non-admin) can exploit the weak folder and file permissions to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM.
CVE-2023-33633 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm.
CVE-2023-33632 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm.
CVE-2023-33631 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelSTList interface at /goform/aspForm.
CVE-2023-33629 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm.
CVE-2023-33628 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm.
CVE-2023-33507 1 Kramerav 2 Via Go2, Via Go2 Firmware 2025-01-10 7.5 High
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.
CVE-2023-33485 1 Totolink 2 X5000r, X5000r Firmware 2025-01-10 8.8 High
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the addEffect function.
CVE-2023-33722 1 Edimax 2 Br-6288acl, Br-6288acl Firmware 2025-01-10 8.8 High
EDIMAX BR-6288ACL v1.12 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the pppUserName parameter.
CVE-2023-33718 1 Mp4v2 Project 1 Mp4v2 2025-01-10 8.8 High
mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4file_io.cpp
CVE-2023-33643 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm.
CVE-2023-33642 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /goform/aspForm.
CVE-2023-33641 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm.
CVE-2023-33640 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm.
CVE-2023-33639 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm.
CVE-2023-33638 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm.
CVE-2023-33637 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm.
CVE-2023-33636 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm.
CVE-2023-33635 1 H3c 2 Magic R300-2100m, Magic R300-2100m Firmware 2025-01-10 7.2 High
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm.