Export limit exceeded: 95435 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (95435 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-30517 1 Mogublog Project 1 Mogublog 2024-11-21 6.1 Medium
Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS).
CVE-2022-30514 1 School Dormitory Management System Project 1 School Dormitory Management System 2024-11-21 6.1 Medium
School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:126.
CVE-2022-30513 1 School Dormitory Management System Project 1 School Dormitory Management System 2024-11-21 6.1 Medium
School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:125
CVE-2022-30494 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2024-11-21 5.4 Medium
In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Injection Vulnerability allowing remote attackers to gain admin access and view internal IPs.
CVE-2022-30489 1 Wavlink 2 Wn535g3, Wn535g3 Firmware 2024-11-21 6.1 Medium
WAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the hostname parameter at /cgi-bin/login.cgi.
CVE-2022-30482 1 Ecommerce-project-with-php-and-mysqli-fruits-bazar Project 1 Ecommerce-project-with-php-and-mysqli-fruits-bazar 2024-11-21 4.8 Medium
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting (XSS) in \admin\add_cata.php via the ctg_name parameters.
CVE-2022-30477 1 Tenda 2 Ac18, Ac18 Firmware 2024-11-21 9.8 Critical
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request.
CVE-2022-30476 1 Tenda 2 Ac18, Ac18 Firmware 2024-11-21 9.8 Critical
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request.
CVE-2022-30475 1 Tenda 2 Ac18, Ac18 Firmware 2024-11-21 7.5 High
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request.
CVE-2022-30474 1 Tenda 2 Ac18, Ac18 Firmware 2024-11-21 9.8 Critical
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request.
CVE-2022-30473 1 Tenda 2 Ac18, Ac18 Firmware 2024-11-21 7.5 High
Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set
CVE-2022-30472 1 Tenda 2 Ac18, Ac18 Firmware 2024-11-21 9.8 Critical
Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat
CVE-2022-30464 1 Chatbot App With Suggestion Project 1 Chatbot App With Suggestion 2024-11-21 5.4 Medium
ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting (XSS) via /simple_chat_bot/classes/Master.php?f=save_response.
CVE-2022-30462 1 Water Billing System Project 1 Water Billing System 2024-11-21 5.4 Medium
Water-billing-management-system v1.0 is affected by: Cross Site Scripting (XSS) via /wbms/classes/Users.php?f=save, firstname.
CVE-2022-30460 1 Simple Social Networking Site Project 1 Simple Social Networking Site 2024-11-21 5.4 Medium
Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /sns/classes/Users.php?f=save, firstname.
CVE-2022-30458 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2024-11-21 5.4 Medium
Automotive Shop Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /asms/classes/Master.php?f=save_product, name.
CVE-2022-30456 1 Badminton Center Management System Project 1 Badminton Center Management System 2024-11-21 5.4 Medium
Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /bcms/classes/Master.php?f=save_court_rental.
CVE-2022-30429 1 Neos 1 Neos Cms 2024-11-21 5.4 Medium
Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in versions 3.3.29 and 8.0.1 and could also be present in all intermediate versions.
CVE-2022-30425 1 Tenda 2 Hg6, Hg6 Firmware 2024-11-21 8.8 High
Tenda Technology Co.,Ltd HG6 3.3.0-210926 was discovered to contain a command injection vulnerability via the pingAddr and traceAddr parameters. This vulnerability is exploited via a crafted POST request.
CVE-2022-30422 1 Proietti 1 Planet Time Enterprise 2024-11-21 9.8 Critical
Proietti Tech srl Planet Time Enterprise 4.2.0.1,4.2.0.0,4.1.0.0,4.0.0.0,3.3.1.0,3.3.0.0 is vulnerable to Remote code execution via the Viewstate parameter.