Search

Expected end of text, found '.' (at char 26), (line:1, col:27)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (335034 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-54450 2 Samsung, Samsung Electronics 2 Magicinfo 9 Server, Magicinfo 9 Server 2026-02-26 7.2 High
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54451 2 Samsung, Samsung Electronics 2 Magicinfo 9 Server, Magicinfo 9 Server 2026-02-26 9.8 Critical
Improper Control of Generation of Code ('Code Injection') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54453 2 Samsung, Samsung Electronics 2 Magicinfo 9 Server, Magicinfo 9 Server 2026-02-26 8.8 High
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54448 2 Samsung, Samsung Electronics 2 Magicinfo 9 Server, Magicinfo 9 Server 2026-02-26 9.8 Critical
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54446 2 Samsung, Samsung Electronics 2 Magicinfo 9 Server, Magicinfo 9 Server 2026-02-26 9.8 Critical
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0
CVE-2025-54447 2 Samsung, Samsung Electronics 2 Magicinfo 9 Server, Magicinfo 9 Server 2026-02-26 8.1 High
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54440 2 Samsung, Samsung Electronics 2 Magicinfo 9 Server, Magicinfo 9 Server 2026-02-26 9.8 Critical
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54441 2 Samsung, Samsung Electronics 2 Magicinfo 9 Server, Magicinfo 9 Server 2026-02-26 8.8 High
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54442 2 Samsung, Samsung Electronics 2 Magicinfo 9 Server, Magicinfo 9 Server 2026-02-26 9.8 Critical
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54443 2 Samsung, Samsung Electronics 2 Magicinfo 9 Server, Magicinfo 9 Server 2026-02-26 9.8 Critical
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0
CVE-2025-54444 2 Samsung, Samsung Electronics 2 Magicinfo 9 Server, Magicinfo 9 Server 2026-02-26 9.8 Critical
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54438 2 Samsung, Samsung Electronics 2 Magicinfo 9 Server, Magicinfo 9 Server 2026-02-26 9.8 Critical
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0
CVE-2025-54439 2 Samsung, Samsung Electronics 2 Magicinfo 9 Server, Magicinfo 9 Server 2026-02-26 8.8 High
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-53882 1 Suse 1 Opensuse Tumbleweed 2026-02-26 4.4 Medium
A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSE mailman3 package allows the mailman user to sent SIGHUP to arbitrary processes. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.
CVE-2025-27930 1 Zohocorp 1 Manageengine Applications Manager 2026-02-26 6.4 Medium
Zohocorp ManageEngine Applications Manager versions 176600 and prior are vulnerable to stored cross-site scripting in the File/Directory monitor.
CVE-2025-40596 1 Sonicwall 6 Sma 210, Sma 210 Firmware, Sma 410 and 3 more 2026-02-26 7.3 High
A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.
CVE-2025-40597 1 Sonicwall 6 Sma 210, Sma 210 Firmware, Sma 410 and 3 more 2026-02-26 7.5 High
A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.
CVE-2025-33076 1 Ibm 2 Engineering Systems Design Rhapsody, Rhapsody Design Manager 2026-02-26 8.8 High
IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.
CVE-2025-33077 1 Ibm 2 Engineering Systems Design Rhapsody, Rhapsody Design Manager 2026-02-26 8.8 High
IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.
CVE-2025-4700 1 Gitlab 1 Gitlab 2026-02-26 8.7 High
An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under specific circumstances, could have potentially allowed a successful attacker to trigger unintended content rendering leading to XSS.