Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (46930 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2023-22324 1 Contec 1 Conprosys Hmi System 2025-03-28 6.5 Medium
SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained.
CVE-2022-44298 1 Sscms 1 Siteserver Cms 2025-03-28 9.8 Critical
SiteServer CMS 7.1.3 is vulnerable to SQL Injection.
CVE-2024-27746 1 Mayurik 1 Petrol Pump Management 2025-03-28 9.8 Critical
SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component.
CVE-2023-49546 1 Oretnom23 1 Customer Support System 2025-03-28 8.8 High
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_support/ajax.php.
CVE-2023-49547 1 Oretnom23 1 Customer Support System 2025-03-28 9.8 Critical
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.php?action=login.
CVE-2023-49548 1 Oretnom23 1 Customer Support System 2025-03-28 8.8 High
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customer_support/ajax.php?action=save_user.
CVE-2023-49968 1 Oretnom23 1 Customer Support System 2025-03-28 7.3 High
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/manage_department.php.
CVE-2023-49969 1 Oretnom23 1 Customer Support System 2025-03-28 4.3 Medium
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/index.php?page=edit_customer.
CVE-2023-49970 1 Oretnom23 1 Customer Support System 2025-03-28 9.8 Critical
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket.
CVE-2023-49544 1 Oretnom23 1 Customer Support System 2025-03-28 4.9 Medium
A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customer_support/index.php.
CVE-2025-20125 1 Cisco 1 Identity Services Engine 2025-03-28 9.1 Critical
A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node. This vulnerability is due to a lack of authorization in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to attacker to obtain information, modify system configuration, and reload the device. Note: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time.
CVE-2024-28613 1 Mayurik 1 Php Task Management System 2025-03-27 9.8 Critical
SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive information via the task_id parameter of the task-details.php, and edit-task.php component.
CVE-2024-25248 1 Niushop 1 B2b2c Multi-business 2025-03-27 9.8 Critical
SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.
CVE-2023-23331 1 Amano 1 Xoffice 2025-03-27 9.8 Critical
Amano Xoffice parking solutions 7.1.3879 is vulnerable to SQL Injection.
CVE-2022-4205 1 Gitlab 1 Gitlab 2025-03-27 6.3 Medium
In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.
CVE-2024-28558 1 Mayurik 1 Petrol Pump Management 2025-03-27 8.8 High
SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin/app/web_crud.php.
CVE-2024-25217 1 Oretnom23 1 Online Medicine Ordering System 2025-03-27 8.8 High
Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/view_product.
CVE-2024-24105 1 Carmelo 1 Computer Science Time Table System 2025-03-27 7.8 High
SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvalidation.php.
CVE-2022-4872 1 Chained Products Project 1 Chained Products 2025-03-27 4.3 Medium
The Chained Products WordPress plugin before 2.12.0 does not have authorisation and CSRF checks, as well as does not ensure that the option to be updated belong to the plugin, allowing unauthenticated attackers to set arbitrary options to 'no'
CVE-2024-5693 2 Mozilla, Redhat 7 Firefox, Thunderbird, Enterprise Linux and 4 more 2025-03-27 6.1 Medium
Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.