Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29998 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-1999-0857 1 Freebsd 1 Freebsd 2026-04-16 N/A
FreeBSD gdc program allows local users to modify files via a symlink attack.
CVE-2005-4516 1 Php Fusion 1 Php Fusion 2026-04-16 N/A
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via (1) the sortby parameter in members.php and (2) IMG tags.
CVE-2005-4518 1 Mantis 1 Mantis 2026-04-16 N/A
Mantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying the max_file_size parameter to (1) bug_file_add.php, (2) bug_report.php, (3) bug_report_advanced_page.php, and (4) proj_doc_add_page.php.
CVE-1999-0873 1 Sky Communications 1 Skyfull 2026-04-16 N/A
Buffer overflow in Skyfull mail server via MAIL FROM command.
CVE-2005-4519 1 Mantis 1 Mantis 2026-04-16 N/A
Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manage_user_page.php), or (3) the sort parameter to view_all_set.php.
CVE-2005-4520 1 Mantis 1 Mantis 2026-04-16 N/A
Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown impact and attack vectors. NOTE: due to a lack of relevant details in the vendor changelog, which is the source of this description, it is unclear whether this is a duplicate of another CVE.
CVE-2005-4523 1 Mantis 1 Mantis 2026-04-16 N/A
Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensitive information.
CVE-2005-4527 1 Direct News 1 Direct News 2026-04-16 N/A
Multiple SQL injection vulnerabilities in Direct News 4.9 allow remote attackers to execute arbitrary SQL commands via (1) the setLang parameter in index.php and (2) unspecified search module parameters.
CVE-2005-4545 1 Netdirect 1 Shopengine 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in search.asp in NetDirect ShopEngine allows remote attackers to inject arbitrary web script or HTML via the EXPS parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2005-4546 1 Epic Designs 1 Eggblog 2026-04-16 N/A
search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Keyword and Search fields, possibly due to an SQL injection vulnerability.
CVE-1999-0902 1 Linux-nis 1 Ypserv 2026-04-16 N/A
ypserv allows local administrators to modify password tables.
CVE-2005-4547 1 Epic Designs 1 Eggblog 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the q parameter, as used by the Keyword and Search fields.
CVE-1999-0919 1 Motorola 1 Motorola Cablerouter 2026-04-16 N/A
A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections.
CVE-1999-0930 1 Matt Wright 1 Wwwboard 2026-04-16 N/A
wwwboard allows a remote attacker to delete message board articles via a malformed argument.
CVE-1999-0934 2026-04-16 N/A
classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.
CVE-1999-0936 2026-04-16 N/A
BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters.
CVE-1999-0946 1 Yamaha 1 Midiplug 2026-04-16 N/A
Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag.
CVE-1999-0951 1 Omnicron 1 Omnihttpd 2026-04-16 N/A
Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.
CVE-1999-0954 1 Matt Wright 1 Wwwboard 2026-04-16 N/A
WWWBoard has a default username and default password.
CVE-1999-0955 1 Washington University 1 Wu-ftpd 2026-04-16 N/A
Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.