Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (335232 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2024-26470 1 Fullstackhero 1 .net 9 Starter Kit 2025-04-30 8.1 High
A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request.
CVE-2024-42768 2 Jayesh, Kashipara 2 Hotel Management System, Hotel Management 2025-04-30 6.8 Medium
A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Hotel Management System v1.0 via /admin/delete_room.php.
CVE-2024-42769 2 Jayesh, Kashipara 2 Hotel Management System, Hotel Management System 2025-04-30 6.1 Medium
A Reflected Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php " of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via "user_fname" and "user_lname" parameters.
CVE-2024-42770 2 Jayesh, Kashipara 2 Hotel Management System, Hotel Management 2025-04-30 4.7 Medium
A Stored Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php" of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via the "user_email" parameter.
CVE-2024-42771 2 Jayesh, Kashipara 2 Hotel Management System, Hotel Management System 2025-04-30 4.8 Medium
A Stored Cross Site Scripting (XSS) vulnerability was found in " /admin/edit_room_controller.php" of the Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via "room_name" parameter.
CVE-2024-42772 2 Jayesh, Kashipara 2 Hotel Management System, Hotel Management System 2025-04-30 7.5 High
An Incorrect Access Control vulnerability was found in /admin/rooms.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to view valid hotel room entries in administrator section.
CVE-2024-42773 2 Jayesh, Kashipara 2 Hotel Management System, Hotel Management System 2025-04-30 9.1 Critical
An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to edit the valid hotel room entries in the administrator section.
CVE-2024-42774 2 Jayesh, Kashipara 2 Hotel Management System, Hotel Management System 2025-04-30 7.5 High
An Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to delete valid hotel room entries in the administrator section.
CVE-2024-42775 2 Jayesh, Kashipara 2 Hotel Management System, Hotel Management System 2025-04-30 9.1 Critical
An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add the valid hotel room entries in the administrator section via the direct URL access.
CVE-2024-42776 2 Jayesh, Kashipara 2 Hotel Management System, Hotel Management System 2025-04-30 7.2 High
Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php.
CVE-2024-42767 2 Jayesh, Kashipara 2 Hotel Management System, Hotel Management System 2025-04-30 7.2 High
Kashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin/add_room_controller.php.
CVE-2025-43954 1 Quasar 1 Qmarkdown 2025-04-30 4.9 Medium
QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.
CVE-2024-25388 1 Rt-thread 1 Rt-thread 2025-04-30 8.4 High
drivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow.
CVE-2024-24335 1 Rt-thread 1 Rt-thread 2025-04-30 8.4 High
A heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.
CVE-2024-24334 1 Rt-thread 1 Rt-thread 2025-04-30 8.4 High
A heap buffer overflow occurs in dfs_v2 dfs_file in RT-Thread through 5.0.2.
CVE-2024-23722 2 Fluent, Treasuredata 2 Fluent Bit, Fluent Bit 2025-04-30 7.5 High
In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly.
CVE-2024-29644 1 Dcatadmin 1 Dcat Admin 2025-04-30 6.1 Medium
Cross Site Scripting vulnerability in dcat-admin v.2.1.3 and before allows a remote attacker to execute arbitrary code via a crafted script to the user login box.
CVE-2024-32418 1 Flusity 1 Flusity 2025-04-30 9.8 Critical
An issue in flusity CMS v2.33 allows a remote attacker to execute arbitrary code via the add_addon.php component.
CVE-2024-32391 1 Maccms 1 Maccms 2025-04-30 7.3 High
Cross Site Scripting vulnerability in MacCMS v.10 v.2024.1000.3000 allows a remote attacker to execute arbitrary code via a crafted payload.
CVE-2024-29434 1 Alldata 1 Alldata 2025-04-30 8.3 High
An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file.