Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (94329 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2019-8513 1 Apple 1 Mac Os X 2024-11-21 7.8 High
This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to execute arbitrary shell commands.
CVE-2019-8505 1 Apple 2 Iphone Os, Safari 2024-11-21 6.1 Medium
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting.
CVE-2019-8462 1 Checkpoint 2 Gaia, Security Gateway 2024-11-21 7.5 High
In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configuration of enhanced logging.
CVE-2019-8450 1 Atlassian 1 Jira Server 2024-11-21 4.8 Medium
Various templates of the Optimization plugin in Jira before version 7.13.6, and from version 8.0.0 before version 8.4.0 allow remote attackers who have permission to manage custom fields to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a custom field.
CVE-2019-8444 1 Atlassian 1 Jira Server 2024-11-21 5.4 Medium
The wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in image attribute specification.
CVE-2019-8440 1 Dilicms 1 Dilicms 2024-11-21 N/A
An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the third textbox (aka site logo) of "System setting->site setting" of admin/index.php, aka site_logo.
CVE-2019-8439 1 Dilicms 1 Dilicms 2024-11-21 N/A
An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the second textbox of "System setting->site setting" of admin/index.php, aka site_domain.
CVE-2019-8438 1 Dilicms 1 Dilicms 2024-11-21 N/A
An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the first textbox of "System setting->site setting" of admin/index.php, aka site_name.
CVE-2019-8436 1 Txjia 1 Imcat 2024-11-21 N/A
imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter.
CVE-2019-8435 1 Phpmywind 1 Phpmywind 2024-11-21 N/A
admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header.
CVE-2019-8434 1 Cmseasy 1 Cmseasy 2024-11-21 N/A
In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter.
CVE-2019-8432 1 Cmseasy 1 Cmseasy 2024-11-21 N/A
In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter.
CVE-2019-8427 1 Zoneminder 1 Zoneminder 2024-11-21 N/A
daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters.
CVE-2019-8426 1 Zoneminder 1 Zoneminder 2024-11-21 N/A
skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter.
CVE-2019-8425 1 Zoneminder 1 Zoneminder 2024-11-21 N/A
includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages.
CVE-2019-8419 1 Vnote Project 1 Vnote 2024-11-21 N/A
VNote 2.2 has XSS via a new text note.
CVE-2019-8410 1 Maccms 1 Maccms 2024-11-21 N/A
Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the t_name parameter (not t_key).
CVE-2019-8400 1 Ory 1 Hydra 2024-11-21 N/A
ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.
CVE-2019-8395 1 Zohocorp 1 Manageengine Servicedesk Plus 2024-11-21 N/A
An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an attachment to a request.
CVE-2019-8391 1 Qdpm 1 Qdpm 2024-11-21 N/A
qdPM 9.1 suffers from Cross-site Scripting (XSS) via configuration?type=[XSS] parameter.