Search

Expected end of text, found '.' (at char 32), (line:1, col:33)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (332661 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-10987 2 Anisha, Code-projects 2 E-health Care System, E-health Care System 2024-11-13 6.3 Medium
A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Doctor/user_appointment.php. The manipulation of the argument schedule_id/schedule_date/schedule_day/start_time/end_time/booking leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-34673 1 Samsung 1 Android 2024-11-13 4.1 Medium
Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service.
CVE-2024-34682 1 Samsung 1 Android 2024-11-13 2.4 Low
Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode.
CVE-2024-49403 1 Samsung 1 Voice Recorder 2024-11-13 4.6 Medium
Improper access control in Samsung Voice Recorder prior to version 21.5.40.37 allows physical attackers to access recording files on the lock screen.
CVE-2024-49404 1 Samsung 2 Android, Video Player 2024-11-13 5.5 Medium
Improper Access Control in Samsung Video Player prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows physical attackers to access video file of other users.
CVE-2024-49405 1 Samsung 1 Pass 2024-11-13 5.3 Medium
Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access sensitive information in a specific scenario.
CVE-2024-49406 1 Samsung 1 Blockchain Keystore 2024-11-13 6.7 Medium
Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability.
CVE-2024-49407 1 Samsung 1 Flow 2024-11-13 4.6 Medium
Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles.
CVE-2024-49408 1 Samsung 2 Galaxy S24, Galaxy S24 Firmware 2024-11-13 6.4 Medium
Out-of-bounds write in usb driver prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability.
CVE-2024-49409 1 Samsung 2 Galaxy S24, Galaxy S24 Firmware 2024-11-13 6.4 Medium
Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability.
CVE-2023-45872 2024-11-12 6.5 Medium
An issue was discovered in Qt before 6.2.11 and 6.3.x through 6.6.x before 6.6.1. When a QML image refers to an image whose content is not known yet, there is an assumption that it is an SVG document, leading to a denial of service (application crash) if it is not actually an SVG document.
CVE-2024-47636 1 Eyecix 1 Jobsearch Wp Job Board 2024-11-12 9.8 Critical
Deserialization of Untrusted Data vulnerability in Eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.9.
CVE-2024-43929 1 Eyecix 1 Jobsearch Wp Job Board 2024-11-12 6.5 Medium
Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JobSearch: from n/a through 2.5.4.
CVE-2024-43928 1 Eyecix 1 Jobsearch Wp Job Board 2024-11-12 5.4 Medium
Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 2.5.4.
CVE-2024-47308 1 Templately 1 Templately 2024-11-12 6.5 Medium
Missing Authorization vulnerability in Templately allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Templately: from n/a through 3.1.2.
CVE-2024-47317 1 Wpquads 1 Ads 2024-11-12 4.3 Medium
Missing Authorization vulnerability in WP Quads Ads by WPQuads – Adsense Ads, Banner Ads, Popup Ads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ads by WPQuads – Adsense Ads, Banner Ads, Popup Ads: from n/a through 2.0.84.
CVE-2024-47318 1 Magazine3 1 Pwa For Wp \& Amp 2024-11-12 4.3 Medium
Missing Authorization vulnerability in Magazine3 PWA for WP & AMP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PWA for WP & AMP: from n/a through 1.7.72.
CVE-2024-47321 1 Androidbubbles 1 Wp Datepicker 2024-11-12 6.5 Medium
Missing Authorization vulnerability in Fahad Mahmood WP Datepicker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Datepicker: from n/a through 2.1.1.
CVE-2024-47358 1 Code-atlantic 1 Popup Maker 2024-11-12 5.3 Medium
Missing Authorization vulnerability in Popup Maker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Popup Maker: from n/a through 1.19.2.
CVE-2024-47359 2 Averta, Depicter 2 Depicter Slider, Depicter 2024-11-12 5.3 Medium
Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Depicter Slider: from n/a through 3.2.2.