Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (100193 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-44351 1 Naviwebs 1 Navigate Cms 2024-11-21 7.5 High
An arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigate_download.php id parameter.
CVE-2021-44345 1 Wvti 1 One Card Integrated Management System 2024-11-21 7.5 High
Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System 3.0 is vulnerable to SQL Injection.
CVE-2021-44343 1 Ok-file-formats Project 1 Ok-file-formats 2024-11-21 7.8 High
David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function ok_png_read_data() in "/ok_png.c".
CVE-2021-44342 1 Ok-file-formats Project 1 Ok-file-formats 2024-11-21 7.8 High
David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow via function ok_png_transform_scanline() in "/ok_png.c:494".
CVE-2021-44340 1 Ok-file-formats Project 1 Ok-file-formats 2024-11-21 7.8 High
David Brackeen ok-file-formats dev version is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function ok_jpg_generate_huffman_table() in "/ok_jpg.c:403".
CVE-2021-44339 1 Ok-file-formats Project 1 Ok-file-formats 2024-11-21 7.8 High
David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function ok_png_transform_scanline() in "/ok_png.c:712".
CVE-2021-44335 1 Ok-file-formats Project 1 Ok-file-formats 2024-11-21 7.8 High
David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in function ok_png_transform_scanline() in "/ok_png.c:533".
CVE-2021-44334 1 Ok-file-formats Project 1 Ok-file-formats 2024-11-21 7.8 High
David Brackeen ok-file-formats 97f78ca is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in function ok_jpg_convert_YCbCr_to_RGB() in "/ok_jpg.c:513" .
CVE-2021-44331 1 Arm 1 Adaptive Scalable Texture Compression Encoder 2024-11-21 7.8 High
ARM astcenc 3.2.0 is vulnerable to Buffer Overflow in function encode_ise().
CVE-2021-44315 1 Phpgurukul 1 Bus Pass Management System 2024-11-21 7.5 High
In Bus Pass Management System v1.0, Directory Listing/Browsing is enabled on the web server which allows an attacker to view the sensitive files of the application, for example: Any file which contains sensitive information of the user or server.
CVE-2021-44312 1 Firmware Analysis And Comparison Tool Project 1 Firmware Analysis And Comparison Tool 2024-11-21 8.8 High
An issue was discovered in Firmware Analysis and Comparison Tool v3.2. Logged in administrators could be targeted by a CSRF attack through visiting a crafted web page.
CVE-2021-44302 1 Baicloud-cms Project 1 Baicloud-cms 2024-11-21 8.8 High
BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in /user/ztconfig.php.
CVE-2021-44273 1 E2bn 1 E2guardian 2024-11-21 7.4 High
e2guardian v5.4.x <= v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mode (i.e., acting as a proxy or a transparent proxy), with SSL MITM enabled, e2guardian, if built with OpenSSL v1.1.x, did not validate hostnames in certificates of the web servers that it connected to, and thus was itself vulnerable to MITM attacks.
CVE-2021-44262 1 Netgear 6 Mbr1517, Mbr1517 Firmware, Wac104 and 3 more 2024-11-21 7.5 High
A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information for the device.
CVE-2021-44260 1 Wavlink 2 Wl-wn531g3, Wl-wn531g3 Firmware 2024-11-21 7.5 High
A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router.
CVE-2021-44255 2 Motioneye Project, Motioneyeos Project 2 Motioneye, Motioneyeos 2024-11-21 7.2 High
Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which will execute arbitrary code on the server.
CVE-2021-44246 1 Totolink 6 A3100r, A3100r Firmware, A720r and 3 more 2024-11-21 7.5 High
Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in the function setNoticeCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IpTo parameter.
CVE-2021-44238 1 Ayacms Project 1 Ayacms 2024-11-21 7.2 High
AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php,
CVE-2021-44233 1 Sap 1 Access Control 2024-11-21 8.8 High
SAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization checks for an authenticated user, which could lead to escalation of privileges.
CVE-2021-44232 1 Sap 1 Saf-t Framework 2024-11-21 7.7 High
SAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server.