Search

Expected end of text, found '.' (at char 23), (line:1, col:24)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (332973 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2012-0433 1 Crowbar Project 1 Crowbar 2024-11-21 N/A
The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confidential data.
CVE-2012-0334 1 Cisco 1 Ironport Web Security Appliance 2024-11-21 6.4 Medium
Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks
CVE-2012-0070 1 Spamdyke 1 Spamdyke 2024-11-21 7.5 High
spamdyke prior to 4.2.1: STARTTLS reveals plaintext
CVE-2012-0063 1 Tucaneando 1 Tucan 2024-11-21 8.1 High
Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attacks and execute arbitrary code ith the permissions of the user running tucan.
CVE-2012-0055 2 Canonical, Linux 2 Ubuntu Linux, Linux Kernel 2024-11-21 7.8 High
OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.
CVE-2012-0051 2 Debian, Tahoe-lafs 2 Debian Linux, Tahoe-lafs 2024-11-21 7.4 High
Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval.
CVE-2012-0049 3 Debian, Fedoraproject, Openttd 3 Debian Linux, Fedora, Openttd 2024-11-21 4.3 Medium
OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server.
CVE-2012-0046 1 Mediawiki 1 Mediawiki 2024-11-21 7.5 High
mediawiki allows deleted text to be exposed
CVE-2011-5331 1 Distributed Ruby Project 1 Distributed Ruby 2024-11-21 9.8 Critical
Distributed Ruby (aka DRuby) 1.8 mishandles instance_eval.
CVE-2011-5330 1 Distributed Ruby Project 1 Distributed Ruby 2024-11-21 9.8 Critical
Distributed Ruby (aka DRuby) 1.8 mishandles the sending of syscalls.
CVE-2011-5329 1 Redirection 1 Redirection 2024-11-21 N/A
The redirection plugin before 2.2.9 for WordPress has XSS in the admin menu, a different issue than CVE-2011-4562.
CVE-2011-5328 1 User Access Manager Project 1 User Access Manager 2024-11-21 N/A
The user-access-manager plugin before 1.2 for WordPress has CSRF.
CVE-2011-5327 1 Linux 1 Linux Kernel 2024-11-21 9.8 Critical
In the Linux kernel before 3.1, an off by one in the drivers/target/loopback/tcm_loop.c tcm_loop_make_naa_tpg() function could result in at least memory corruption.
CVE-2011-5282 1 Mirc 1 Mirc 2024-11-21 5.3 Medium
mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.
CVE-2011-5271 1 Clusterlabs 1 Pacemaker 2024-11-21 5.5 Medium
Pacemaker before 1.1.6 configure script creates temporary files insecurely
CVE-2011-5266 1 Imperva 1 Securesphere Web Application Firewall 2024-11-21 9.8 Critical
Imperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection filter bypass.
CVE-2011-5250 1 Prophecyinternational 1 Snare 2024-11-21 6.5 Medium
Snare for Linux before 1.7.0 has CSRF in the web interface.
CVE-2011-5247 1 Prophecyinternational 1 Snare 2024-11-21 7.5 High
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword.
CVE-2011-5020 1 Online Tv Database Project 1 Online Tv Database 2024-11-21 9.8 Critical
An SQL Injection vulnerability exists in the ID parameter in Online TV Database 2011.
CVE-2011-5018 1 Koala-framework 1 Koala Framework 2024-11-21 6.1 Medium
Koala Framework before 2011-11-21 has XSS via the request_uri parameter.