Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (35285 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-46433 1 Fenom Project 1 Fenom 2024-11-21 10.0 Critical
In fenom 2.12.1 and before, there is a way in fenom/src/Fenom/Template.php function getTemplateCode()to bypass sandbox to execute arbitrary PHP code when disable_native_funcs is true.
CVE-2021-46424 1 Telesquare 2 Tlr-2005ksh, Tlr-2005ksh Firmware 2024-11-21 9.1 Critical
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request.
CVE-2021-46423 1 Telesquare 2 Tlr-2005ksh, Tlr-2005ksh Firmware 2024-11-21 5.3 Medium
Telesquare TLR-2005KSH 1.0.0 is affected by an unauthenticated file download vulnerability that allows a remote attacker to download a full configuration file.
CVE-2021-46361 1 Magnolia-cms 1 Magnolia Cms 2024-11-21 9.8 Critical
An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload.
CVE-2021-46359 1 Fisco-bcos 1 Fisco-bcos 2024-11-21 7.5 High
FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed successfully, and malicious users may use this to achieve double-spending attacks.
CVE-2021-46331 1 Moddable 1 Moddable Sdk 2024-11-21 5.5 Medium
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype.
CVE-2021-46330 1 Moddable 1 Moddable Sdk 2024-11-21 5.5 Medium
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuffer_prototype_concat.
CVE-2021-46329 1 Moddable 1 Moddable Sdk 2024-11-21 5.5 Medium
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.
CVE-2021-46327 1 Moddable 1 Moddable Sdk 2024-11-21 5.5 Medium
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort.
CVE-2021-46323 1 Espruino 1 Espruino 2024-11-21 5.5 Medium
Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass.
CVE-2021-46313 1 Gpac 1 Gpac 2024-11-21 5.5 Medium
The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function __memmove_avx_unaligned_erms (). This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46255 1 Eyoucms 1 Eyoucms 2024-11-21 8.1 High
eyouCMS V1.5.5-UTF8-SP3_1 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename.
CVE-2021-46250 1 Scratchoauth2 Project 1 Scratchoauth2 2024-11-21 10 Critical
An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate as other users on downstream components that rely on ScratchOAuth2.
CVE-2021-46165 1 Zohocorp 1 Manageengine Desktop Central 2024-11-21 7.8 High
Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path might not be properly defined.
CVE-2021-46164 1 Zohocorp 1 Manageengine Desktop Central 2024-11-21 8.8 High
Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module.
CVE-2021-46101 1 Gitforwindows 1 Git 2024-11-21 7.5 High
In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.
CVE-2021-46088 1 Zabbix 1 Zabbix 2024-11-21 7.2 High
Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user.
CVE-2021-46067 1 Vehicle Service Management System Project 1 Vehicle Service Management System 2024-11-21 9.8 Critical
In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.
CVE-2021-46062 1 Mingsoft 1 Mcms 2024-11-21 7.1 High
MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName.
CVE-2021-46045 1 Gpac 1 Gpac 2024-11-21 5.5 Medium
GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service (context-dependent).