Search

Expected end of text, found '/' (at char 51), (line:1, col:52)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (344229 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-25204 1 Samsung Open Source 1 Escargot 2026-04-13 6.2 Medium
Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort. This issue affects escarogt prior to commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335
CVE-2026-6142 1 Tushar-2223 1 Hotel-management-system 2026-04-13 7.3 High
A vulnerability was identified in tushar-2223 Hotel Management System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. Affected by this vulnerability is an unknown functionality of the file /admin/roomdelete.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-34851 1 Huawei 1 Harmonyos 2026-04-13 2.2 Low
Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-34860 1 Huawei 1 Harmonyos 2026-04-13 4.1 Medium
Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
CVE-2026-34850 1 Huawei 1 Harmonyos 2026-04-13 1.9 Low
Race condition vulnerability in the notification service. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-34852 1 Huawei 1 Harmonyos 2026-04-13 6.1 Medium
Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-21003 2 Samsung, Samsung Mobile 2 Mobile Devices, Samsung Mobile Devices 2026-04-13 N/A
Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions.
CVE-2026-25205 1 Samsung Open Source 1 Escargot 2026-04-13 7.4 High
Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash  97e8115ab1110bc502b4b5e4a0c689a71520d335 .
CVE-2026-25207 1 Samsung Open Source 1 Escargot 2026-04-13 7.4 High
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
CVE-2026-34855 1 Huawei 2 Emui, Harmonyos 2026-04-13 5.7 Medium
Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
CVE-2026-34859 1 Huawei 2 Emui, Harmonyos 2026-04-13 5.9 Medium
UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
CVE-2026-6161 1 Code-projects 1 Simple Chatbox 2026-04-13 7.3 High
A vulnerability was determined in code-projects Simple ChatBox up to 1.0. This affects an unknown part of the file /chatbox/insert.php of the component Endpoint. Executing a manipulation of the argument msg can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-34849 1 Huawei 1 Harmonyos 2026-04-13 2.5 Low
UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-34863 1 Huawei 1 Harmonyos 2026-04-13 6.7 Medium
Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-6160 1 Code-projects 1 Simple Chatbox 2026-04-13 5.3 Medium
A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the function SimpleChatbox_PHP of the file chatbox.sql of the component Endpoint. Performing a manipulation results in file and directory information exposure. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
CVE-2019-25691 1 Faleemi 1 Faleemi Desktop Software 2026-04-13 8.4 High
Faleemi Desktop Software 1.8 contains a local buffer overflow vulnerability in the System Setup dialog that allows attackers to bypass DEP protections through structured exception handling exploitation. Attackers can inject a crafted payload into the Save Path for Snapshot and Record file field to trigger a buffer overflow and execute arbitrary code via ROP chain gadgets.
CVE-2026-36872 2026-04-13 N/A
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php.
CVE-2026-36873 2026-04-13 N/A
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php.
CVE-2026-36874 2026-04-13 N/A
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_student.php.
CVE-2019-25689 2 Bplugins, Html5videoplayer 2 Html5 Video Player, Html5 Video Player 2026-04-13 8.4 High
HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string. Attackers can craft a malicious payload exceeding 997 bytes and paste it into the KEY CODE field in the Help Register dialog to trigger code execution and spawn a calculator process.