Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (83606 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-20625 1 Slicedinvoices 1 Sliced Invoices 2024-11-21 7.5 High
Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated SQL injection via core/class-sliced.php.
CVE-2020-20593 1 Rockoa 1 Rockoa 2024-11-21 8.0 High
A cross-site request forgery (CSRF) in Rockoa v1.9.8 allows an authenticated attacker to arbitrarily add an administrator account.
CVE-2020-20585 1 Metinfo 1 Metinfo 2024-11-21 7.5 High
A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information.
CVE-2020-20583 1 8cms 1 Ljcms 2024-11-21 7.5 High
A SQL injection vulnerability in /question.php of LJCMS Version v4.3.R60321 allows attackers to obtain sensitive database information.
CVE-2020-20582 1 Mipcms 1 Mipcms 2024-11-21 7.5 High
A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information.
CVE-2020-20514 1 Maccms 1 Maccms 2024-11-21 8.1 High
A Cross-Site Request Forgery (CSRF) in Maccms v10 via admin.php/admin/admin/del/ids/<id>.html allows authenticated attackers to delete all users.
CVE-2020-20490 1 Libiec Iccp Mod Project 1 Libiec Iccp Mod 2024-11-21 7.5 High
A heap buffer-overflow in the client_example1.c component of libiec_iccp_mod v1.5 leads to a denial of service (DOS).
CVE-2020-20486 1 Iec104 Project 1 Iec104 2024-11-21 7.5 High
IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10x_Sta_Addr.
CVE-2020-20474 1 White Shark Systems Project 1 White Shark Systems 2024-11-21 7.5 High
White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the default_task_edituser.php files failing to filter the csa_to_user parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.
CVE-2020-20473 1 White Shark Systems Project 1 White Shark Systems 2024-11-21 7.5 High
White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.
CVE-2020-20471 1 White Shark Systems Project 1 White Shark Systems 2024-11-21 8.8 High
White Shark System (WSS) 1.3.2 has an unauthorized access vulnerability in default_user_edit.php, remote attackers can exploit this vulnerability to escalate to admin privileges.
CVE-2020-20469 1 White Shark Systems Project 1 White Shark Systems 2024-11-21 7.5 High
White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the log_edit.php files failing to filter the csa_to_user parameter, remote attackers can exploit the vulnerability to obtain database sensitive information.
CVE-2020-20451 2 Debian, Ffmpeg 2 Debian Linux, Ffmpeg 2024-11-21 7.5 High
Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.
CVE-2020-20450 2 Debian, Ffmpeg 2 Debian Linux, Ffmpeg 2024-11-21 7.5 High
FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service.
CVE-2020-20444 1 Openclinic Project 1 Openclinic 2024-11-21 7.2 High
Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/view_source.php' which "could" lead to RCE vulnerability .
CVE-2020-20341 1 Yzmcms 1 Yzmcms 2024-11-21 7.5 High
YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function.
CVE-2020-20340 1 S-cms 1 S-cms 2024-11-21 7.5 High
A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information.
CVE-2020-20299 1 Weiphp 1 Weiphp 2024-11-21 7.5 High
WeiPHP 5.0 does not properly restrict access to pages, related to using POST.
CVE-2020-20290 1 Yccms 1 Yccms 2024-11-21 7.5 High
Directory traversal vulnerability in the yccms 3.3 project. The delete, deletesite, and deleteAll functions' improper judgment of the request parameters, triggers a directory traversal vulnerability.
CVE-2020-20183 1 Zyxel 2 P1302-t10 V3, P1302-t10 V3 Firmware 2024-11-21 7.5 High
Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier allows attackers to gain privileges and access certain admin pages.