Search

Expected end of text, found ':' (at char 28), (line:1, col:29)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (331870 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-41660 1 Openbmc-project 1 Slpd-lite 2024-08-01 9.8 Critical
slpd-lite is a unicast SLP UDP server. Any OpenBMC system that includes the slpd-lite package is impacted. Installing this package is the default when building OpenBMC. Nefarious users can send slp packets to the BMC using UDP port 427 to cause memory overflow issues within the slpd-lite daemon on the BMC. Patches will be available in the latest openbmc/slpd-lite repository.
CVE-2024-41950 1 Deepset 1 Haystack 2024-08-01 7.5 High
Haystack is an end-to-end LLM framework that allows you to build applications powered by LLMs, Transformer models, vector search and more. Haystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions. Certain Components in Haystack use Jinja2 templates, if anyone can create and render that template on the client machine they run any code. The vulnerability has been fixed with Haystack `2.3.1`.
CVE-2024-41951 2024-08-01 4.4 Medium
Pheonix App is a Python application designed to streamline various tasks, from managing files to playing mini-games. The issue is that the map of encoding/decoding languages are visible in code. The Problem was patched in 0.2.4.
CVE-2023-4262 2024-08-01 N/A
User data field is not attacker controlled
CVE-2024-7205 1 Coolkit 1 Ewelink 2024-07-31 N/A
When the device is shared, the homepage module are before 2.19.0  in eWeLink Cloud Service allows Secondary user to take over devices as primary user via sharing unnecessary device-sensitive information.
CVE-2024-6770 1 Vikasratudi 1 Lifetime Free Drag \& Drop Contact Form Builder For Wordpress Vform 2024-07-31 7.2 High
The Lifetime free Drag & Drop Contact Form Builder for WordPress VForm plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-2508 1 Freshlight 1 Wp Mobile Menu 2024-07-31 5.3 Medium
The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_menu_item_icon function in all versions up to, and including, 2.8.4.4. This makes it possible for unauthenticated attackers to add the '_mobmenu_icon' post meta to arbitrary posts with an arbitrary (but sanitized) value. NOTE: Version 2.8.4.4 contains a partial fix for this vulnerability.
CVE-2024-35918 1 Redhat 1 Enterprise Linux 2024-07-30 5.5 Medium
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2019-6185 2024-07-29 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2019-6174 2024-07-29 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2019-6164 2024-07-29 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2019-6162 2024-07-29 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2017-3769 2024-07-29 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2017-3766 2024-07-29 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2017-3755 2024-07-29 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2022-4038 2024-07-29 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2022-48185 2024-07-29 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2019-19761 2024-07-29 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2019-19760 2024-07-29 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2019-19759 2024-07-29 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.