Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9069 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-34146 3 Microsoft, Trend Micro Inc, Trendmicro 3 Windows, Trend Micro Apex One, Apex One 2024-12-04 7.8 High
An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-34147 and CVE-2023-34148.
CVE-2024-11643 1 Allaccessible 1 Accessibility 2024-12-04 8.8 High
The Accessibility by AllAccessible plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'AllAccessible_save_settings' function in all versions up to, and including, 1.3.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
CVE-2023-33895 2 Google, Unisoc 14 Android, S8004, Sc7731e and 11 more 2024-12-04 5.5 Medium
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33894 2 Google, Unisoc 14 Android, S8003, Sc7731e and 11 more 2024-12-04 5.5 Medium
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33893 2 Google, Unisoc 14 Android, S8002, Sc7731e and 11 more 2024-12-04 5.5 Medium
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33892 2 Google, Unisoc 14 Android, S8001, Sc7731e and 11 more 2024-12-04 5.5 Medium
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33891 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30929 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 7.8 High
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2023-30928 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 7.8 High
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2023-30920 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30921 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30922 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30923 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30924 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30925 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30926 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30927 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-30916 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 7.8 High
In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2023-30917 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 7.8 High
In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2023-30930 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.