Search

Expected end of text, found '.' (at char 18), (line:1, col:19)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (360863 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-21224 1 Inspur 1 Clusterengine 2024-11-21 9.8 Critical
A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server
CVE-2020-21180 1 Koa2-blog Project 1 Koa2-blog 2024-11-21 9.8 Critical
Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signup page.
CVE-2020-21179 1 Koa2-blog Project 1 Koa2-blog 2024-11-21 9.8 Critical
Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signin page.
CVE-2020-21176 1 Thinkjs 1 Thinkjs 2024-11-21 9.8 Critical
SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter.
CVE-2020-21161 1 Ruckuswireless 2 Zonedirector, Zonedirector Firmware 2024-11-21 6.1 Medium
Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0.
CVE-2020-21147 1 Rockoa 1 Rockoa 2024-11-21 4.8 Medium
RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/mode_emailmAction.php does not perform strict filtering.
CVE-2020-21146 1 Feehi 1 Feehi Cms 2024-11-21 6.1 Medium
Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS.
CVE-2020-21142 1 Ipfire 1 Ipfire 2024-11-21 6.1 Medium
Cross Site Scripting (XSS) vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi.
CVE-2020-21141 1 Idreamsoft 1 Icms 2024-11-21 8.8 High
iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app=members&do=add.
CVE-2020-21139 1 Ec Cloud E-commerce System Project 1 Ec Cloud E-commerce System 2024-11-21 6.5 Medium
EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add.
CVE-2020-21133 1 Metinfo 1 Metinfo 2024-11-21 9.8 Critical
SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid.
CVE-2020-21132 1 Metinfo 1 Metinfo 2024-11-21 9.8 Critical
SQL Injection vulnerability in Metinfo 7.0.0beta in index.php.
CVE-2020-21131 1 Metinfo 1 Metinfo 2024-11-21 7.2 High
SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=language_web&a=doAddLanguage.
CVE-2020-21130 1 Hisiphp 1 Hisiphp 2024-11-21 6.1 Medium
Cross Site Scripting (XSS) vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html.
CVE-2020-21127 1 Metinfo 1 Metinfo 2024-11-21 9.8 Critical
MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel.
CVE-2020-21126 1 Metinfo 1 Metinfo 2024-11-21 8.8 High
MetInfo 7.0.0 contains a Cross-Site Request Forgery (CSRF) via admin/?n=admin&c=index&a=doSaveInfo.
CVE-2020-21125 1 Ureport Project 1 Ureport 2024-11-21 9.8 Critical
An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code.
CVE-2020-21124 1 Ureport Project 1 Ureport 2024-11-21 9.8 Critical
UReport 2.2.9 allows attackers to execute arbitrary code due to a lack of access control to the designer page.
CVE-2020-21122 1 Ureport Project 1 Ureport 2024-11-21 5.3 Medium
UReport v2.2.9 contains a Server-Side Request Forgery (SSRF) in the designer page which allows attackers to detect intranet device ports.
CVE-2020-21121 1 Kliqqi 1 Kliqqi Cms 2024-11-21 9.8 Critical
Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admin_update_module_widgets.php file.