Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (328772 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-46741 1 Paddlepaddle 1 Paddlepaddle 2025-04-22 7.1 High
Out-of-bounds read in gather_tree in PaddlePaddle before 2.4. 
CVE-2024-20031 2 Google, Mediatek 20 Android, Mt6739, Mt6757 and 17 more 2025-04-22 6.7 Medium
In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541742.
CVE-2024-20028 2 Google, Mediatek 20 Android, Mt6739, Mt6757 and 17 more 2025-04-22 6.6 Medium
In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541687.
CVE-2024-20027 2 Google, Mediatek 20 Android, Mt6739, Mt6757 and 17 more 2025-04-22 7.9 High
In da, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541633.
CVE-2024-20026 2 Google, Mediatek 20 Android, Mt6739, Mt6757 and 17 more 2025-04-22 4.2 Medium
In da, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541632.
CVE-2024-20025 2 Google, Mediatek 42 Android, Mt6739, Mt6757 and 39 more 2025-04-22 6.7 Medium
In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541686; Issue ID: ALPS08541686.
CVE-2024-20024 2 Google, Mediatek 18 Android, Mt6781, Mt6789 and 15 more 2025-04-22 6.0 Medium
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541635; Issue ID: ALPS08541635.
CVE-2024-20023 5 Google, Linuxfoundation, Mediatek and 2 more 27 Android, Yocto, Mt2713 and 24 more 2025-04-22 6.7 Medium
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541638; Issue ID: ALPS08541638.
CVE-2024-20018 1 Mediatek 2 Mt7615, Software Development Kit 2025-04-22 9.8 Critical
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00348479; Issue ID: MSV-1019.
CVE-2024-20005 2 Google, Mediatek 38 Android, Mt6761, Mt6762 and 35 more 2025-04-22 8.2 High
In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355599; Issue ID: ALPS08355599.
CVE-2022-33187 1 Broadcom 1 Brocade Sannav 2025-04-22 5.5 Medium
Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow an attacker with admin privilege to read sensitive information.
CVE-2024-48356 1 Lylme 1 Lylme Spage 2025-04-22 9.8 Critical
LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php.
CVE-2024-20038 2 Google, Mediatek 31 Android, Mt6739, Mt6761 and 28 more 2025-04-22 3.4 Low
In pq, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08495932; Issue ID: ALPS08495932.
CVE-2024-20037 2 Google, Mediatek 31 Android, Mt6739, Mt6761 and 28 more 2025-04-22 6.7 Medium
In pq, there is a possible write-what-where condition due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08495937; Issue ID: ALPS08495937.
CVE-2024-20036 2 Google, Mediatek 11 Android, Mt6835, Mt6855 and 8 more 2025-04-22 4.4 Medium
In vdec, there is a possible permission bypass due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08509508; Issue ID: ALPS08509508.
CVE-2024-48572 2 Aquila, Aquila-cms 2 Cms, Aquilacms 2025-04-22 5.3 Medium
A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to obtain email addresses via the "Add a user" feature. The vulnerability occurs due to insufficiently validated user input being processed as a regular expression, which is then matched against email addresses to find duplicate entries.
CVE-2024-20034 2 Google, Mediatek 20 Android, Mt6761, Mt6765 and 17 more 2025-04-22 7.2 High
In battery, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08488849; Issue ID: ALPS08488849.
CVE-2024-20033 2 Google, Mediatek 55 Android, Mt2713, Mt6739 and 52 more 2025-04-22 4.4 Medium
In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08499945; Issue ID: ALPS08499945.
CVE-2024-48573 2 Aquila, Aquila-cms 2 Cms, Aquilacms 2025-04-22 9.8 Critical
A NoSQL injection vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to reset user and administrator account passwords via the "Reset password" feature.
CVE-2023-5307 1 Contest-gallery 1 Contest Gallery 2025-04-22 6.1 Medium
The Photos and Files Contest Gallery WordPress plugin before 21.2.8.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks via certain headers.