Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (30000 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2005-2467 1 Mysql 1 Eventum 2026-04-16 N/A
Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php.
CVE-2005-2468 1 Mysql 1 Eventum 2026-04-16 N/A
Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) isCorrectPassword or (2) userExist function in class.auth.php, getCustomFieldReport function in (4) custom_fields.php, (5) custom_fields_graph.php, or (6) class.report.php, or the insert function in (7) releases.php or (8) class.release.php.
CVE-2006-2831 1 Drupal 1 Drupal 2026-04-16 N/A
Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disabled within .htaccess, allows remote attackers to execute arbitrary code by uploading a file with multiple extensions, a variant of CVE-2006-2743.
CVE-2006-2836 1 Pineapple Technologies 1 Lore 2026-04-16 N/A
SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
CVE-2006-2844 1 Redaxo 1 Redaxo 2026-04-16 N/A
Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REX[INCLUDE_PATH] parameter to (1) simple_user/pages/index.inc.php and (2) stats/pages/index.inc.php.
CVE-2006-2854 1 Ibwd 1 Ibwd Guestbook 2026-04-16 N/A
SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter.
CVE-2006-2861 1 Particle Soft 1 Particle Wiki 2026-04-16 N/A
SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter.
CVE-2006-2867 1 Coolforum 1 Coolforum 2026-04-16 N/A
SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter.
CVE-1999-0123 1 Slackware 1 Slackware Linux 2026-04-16 N/A
Race condition in Linux mailx command allows local users to read user files.
CVE-1999-0133 1 Adobe 1 Framemaker 2026-04-16 N/A
fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access.
CVE-1999-0134 1 Sun 1 Sunos 2026-04-16 N/A
vold in Solaris 2.x allows local users to gain root access.
CVE-1999-0135 1 Sun 2 Solaris, Sunos 2026-04-16 N/A
admintool in Solaris allows a local user to write to arbitrary files and gain root access.
CVE-1999-0150 1 Gnu 1 Fingerd 2026-04-16 N/A
The Perl fingerd program allows arbitrary command execution from remote users.
CVE-1999-0164 1 Sun 1 Sunos 2026-04-16 N/A
A race condition in the Solaris ps command allows an attacker to overwrite critical files.
CVE-1999-0167 1 Sun 1 Sunos 2026-04-16 N/A
In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system.
CVE-1999-0165 3 Bsdi, Linux, Sun 5 Bsd Os, Linux Kernel, Nfs and 2 more 2026-04-16 N/A
NFS cache poisoning.
CVE-1999-0166 1 Sun 1 Nfs 2026-04-16 N/A
NFS allows users to use a "cd .." command to access other directories besides the exported file system.
CVE-1999-0173 1 Matt Wright 1 Formmail 2026-04-16 N/A
FormMail CGI program can be used by web servers other than the host server that the program resides on.
CVE-1999-0177 1 Oreilly 1 Website 2026-04-16 N/A
The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs.
CVE-1999-0172 1 Matt Wright 1 Formmail 2026-04-16 N/A
FormMail CGI program allows remote execution of commands.