Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (328883 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-45507 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName.
CVE-2022-45506 1 Tenda 2 W30e, W30e Firmware 2025-04-23 9.8 Critical
Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName.
CVE-2022-45505 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand.
CVE-2022-45504 1 Tenda 2 W6-s, W6-s Firmware 2025-04-23 7.5 High
An issue in the component tpi_systool_handle(0) (/goform/SysToolRestoreSet) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to arbitrarily reboot the device.
CVE-2022-45503 1 Tenda 2 W6-s, W6-s Firmware 2025-04-23 7.5 High
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing.
CVE-2022-45501 1 Tenda 2 W6-s, W6-s Firmware 2025-04-23 7.5 High
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/wifiSSIDset.
CVE-2022-45499 1 Tenda 2 W6-s, W6-s Firmware 2025-04-23 7.5 High
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/WifiMacFilterGet.
CVE-2022-45498 1 Tenda 2 W6-s, W6-s Firmware 2025-04-23 7.5 High
An issue in the component tpi_systool_handle(0) (/goform/SysToolReboot) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to arbitrarily reboot the device.
CVE-2022-45497 1 Tenda 2 W6-s, W6-s Firmware 2025-04-23 9.8 Critical
Tenda W6-S v1.0.0.4(510) was discovered to contain a command injection vulnerability in the tpi_get_ping_output function at /goform/exeCommand.
CVE-2022-45326 1 Kwoksys 1 Information Server 2025-04-23 4.9 Medium
An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks.
CVE-2022-45010 1 Simple Phone Book\/directory Web App Project 1 Simple Phone Book\/directory Web App 2025-04-23 9.8 Critical
Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit.php.
CVE-2022-44900 1 Py7zr Project 1 Py7zr 2025-04-23 9.1 Critical
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file.
CVE-2022-44838 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2025-04-23 7.2 High
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /services/view_service.php.
CVE-2022-44790 1 Interspire 1 Email Marketer 2025-04-23 7.5 High
Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could successfully perform an attack to extract potentially sensitive information from the database if the survey id exists.
CVE-2022-44289 1 Thinkphp 1 Thinkphp 2025-04-23 8.8 High
Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell.
CVE-2022-43509 1 Omron 1 Cx-programmer 2025-04-23 7.8 High
Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.
CVE-2022-43508 1 Omron 1 Cx-programmer 2025-04-23 7.8 High
Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.
CVE-2022-43464 1 Unimo 6 Udr-ja1604, Udr-ja1604 Firmware, Udr-ja1608 and 3 more 2025-04-23 8.8 High
Hidden functionality vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.
CVE-2022-42770 2 Google, Unisoc 14 Android, S8019, Sc7731e and 11 more 2025-04-23 4.7 Medium
In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.
CVE-2022-42769 2 Google, Unisoc 14 Android, S8014, Sc7731e and 11 more 2025-04-23 3.3 Low
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.