Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (46685 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-36689 1 Ingredient Stock Management System Project 1 Ingredient Stock Management System 2024-11-21 8.8 High
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/waste&month=.
CVE-2022-36688 1 Ingredient Stock Management System Project 1 Ingredient Stock Management System 2024-11-21 8.8 High
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockout&month=.
CVE-2022-36686 1 Ingredient Stock Management System Project 1 Ingredient Stock Management System 2024-11-21 8.8 High
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockin&month=.
CVE-2022-36683 1 Simple Task Scheduling System Project 1 Simple Task Scheduling System 2024-11-21 9.8 Critical
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_payment.
CVE-2022-36682 1 Simple Task Scheduling System Project 1 Simple Task Scheduling System 2024-11-21 9.8 Critical
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_student.
CVE-2022-36681 1 Simple Task Scheduling System Project 1 Simple Task Scheduling System 2024-11-21 9.8 Critical
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_account.
CVE-2022-36680 1 Simple Task Scheduling System Project 1 Simple Task Scheduling System 2024-11-21 9.8 Critical
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_schedule.
CVE-2022-36679 1 Simple Task Scheduling System Project 1 Simple Task Scheduling System 2024-11-21 9.8 Critical
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user.
CVE-2022-36678 1 Simple Task Scheduling System Project 1 Simple Task Scheduling System 2024-11-21 9.8 Critical
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_category.
CVE-2022-36676 1 Simple Task Scheduling System Project 1 Simple Task Scheduling System 2024-11-21 7.2 High
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/view_category.php.
CVE-2022-36675 1 Simple Task Scheduling System Project 1 Simple Task Scheduling System 2024-11-21 7.2 High
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /schedules/manage_schedule.php.
CVE-2022-36674 1 Simple Task Scheduling System Project 1 Simple Task Scheduling System 2024-11-21 7.2 High
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /schedules/view_schedule.php.
CVE-2022-36669 1 Hospital Information System Project 1 Hospital Information System 2024-11-21 9.8 Critical
Hospital Information System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
CVE-2022-36642 1 Telosalliance 2 Omnia Mpx Node, Omnia Mpx Node Firmware 2024-11-21 9.8 Critical
A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive information which can be unlatched by exploiting the LFD vulnerability.
CVE-2022-36636 1 Garage Management System Project 1 Garage Management System 2024-11-21 8.8 High
Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php.
CVE-2022-36635 1 Zkteco 1 Zkbiosecurity V5000 2024-11-21 8.8 High
ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do.
CVE-2022-36634 1 Zkteco 1 Zkbiosecurity V5000 2024-11-21 8.8 High
An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request.
CVE-2022-36609 1 Oretnom23 1 Clinic\'s Patient Management System 2024-11-21 9.8 Critical
Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/update_patient.php.
CVE-2022-36606 1 Yimihome 1 Ywoa 2024-11-21 9.8 Critical
Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database.
CVE-2022-36605 1 Yimihome 1 Ywoa 2024-11-21 9.8 Critical
Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.