Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (11147 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2023-33651 1 Sitecore 4 Experience Commerce, Experience Manager, Experience Platform and 1 more 2025-01-08 7.5 High
An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules.
CVE-2023-33477 1 Harmonicinc 2 Nsg 9000-6g, Nsg 9000-6g Firmware 2025-01-08 6.5 Medium
In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path.
CVE-2023-30863 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-08 7.8 High
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2022-48448 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-08 5.5 Medium
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVE-2022-48447 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-08 5.5 Medium
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVE-2022-48446 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-08 5.5 Medium
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVE-2022-48392 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-08 7.8 High
In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2022-48391 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-08 5.5 Medium
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVE-2023-33968 1 Kanboard 1 Kanboard 2025-01-08 5.4 Medium
Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to a missing access control vulnerability that allows a user with low privileges to create or transfer tasks to any project within the software, even if they have not been invited or the project is personal. The vulnerable features are `Duplicate to project` and `Move to project`, which both utilize the `checkDestinationProjectValues()` function to check his values. This issue has been addressed in version 1.2.30. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2023-33970 1 Kanboard 1 Kanboard 2025-01-08 5.4 Medium
Kanboard is open source project management software that focuses on the Kanban methodology. A vulnerability related to a `missing access control` was found, which allows a User with the lowest privileges to leak all the tasks and projects titles within the software, even if they are not invited or it's a personal project. This could also lead to private/critical information being leaked if such information is in the title. This issue has been addressed in version 1.2.30. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2023-30915 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-08 5.5 Medium
In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30914 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-08 5.5 Medium
In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30866 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-08 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30865 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-08 5.5 Medium
In dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30864 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-08 7.8 High
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2024-21259 1 Oracle 1 Vm Virtualbox 2025-01-07 7.5 High
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
CVE-2022-48445 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-07 5.9 Medium
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVE-2022-48444 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-07 5.9 Medium
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVE-2022-48443 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-07 5.9 Medium
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVE-2022-48442 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-01-07 6.2 Medium
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.