Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (648 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-47348 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 4 Medium
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVE-2022-47345 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 5.5 Medium
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVE-2022-47344 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 5.5 Medium
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVE-2022-47343 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 5.5 Medium
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVE-2022-47342 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 5.5 Medium
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVE-2022-47347 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-25 5.5 Medium
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVE-2022-47346 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-25 4 Medium
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVE-2024-41565 1 Mezz 1 Justenoughitems 2025-03-19 4.3 Medium
JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication.
CVE-2024-42698 1 Shedaniel 1 Roughlyenoughitems 2025-03-18 4.3 Medium
Roughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items (REI) mod for Minecraft, which allows in-game item duplication.
CVE-2023-20633 2 Google, Mediatek 25 Android, Mt6580, Mt6735 and 22 more 2025-03-06 6.7 Medium
In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628508; Issue ID: ALPS07628508.
CVE-2022-33256 1 Qualcomm 130 Ar8035, Ar8035 Firmware, Qca6390 and 127 more 2025-03-05 9.8 Critical
Memory corruption due to improper validation of array index in Multi-mode call processor.
CVE-2022-33275 1 Qualcomm 518 315 5g Iot Modem, 315 5g Iot Modem Firmware, Apq5053-aa and 515 more 2025-02-27 8.4 High
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVE-2022-40534 1 Qualcomm 26 Snapdragon W5\+ Gen 1 Wearable Platform, Snapdragon W5\+ Gen 1 Wearable Platform Firmware, Sw5100 and 23 more 2025-02-27 8.4 High
Memory corruption due to improper validation of array index in Audio.
CVE-2023-28548 1 Qualcomm 366 Aqt1000, Aqt1000 Firmware, Ar8035 and 363 more 2025-02-27 7.8 High
Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.
CVE-2023-28565 1 Qualcomm 588 9205 Lte, 9205 Lte Firmware, Apq8017 and 585 more 2025-02-27 7.8 High
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2023-28567 1 Qualcomm 582 315 5g Iot, 315 5g Iot Firmware, Aqt1000 and 579 more 2025-02-27 7.8 High
Memory corruption in WLAN HAL while handling command through WMI interfaces.
CVE-2024-2214 1 Eclipse 1 Threadx 2025-02-13 7 High
In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the Xtensa port was missing an array size check causing a memory overwrite. The affected file was ports/xtensa/xcc/src/tx_clib_lock.c
CVE-2023-46724 2 Redhat, Squid-cache 6 Enterprise Linux, Rhel Aus, Rhel E4s and 3 more 2025-02-13 8.6 High
Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a server certificate chain. This attack is limited to HTTPS and SSL-Bump. This bug is fixed in Squid version 6.4. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. Those who you use a prepackaged version of Squid should refer to the package vendor for availability information on updated packages.
CVE-2024-22181 1 Libigl 1 Libigl 2025-02-13 7.8 High
An out-of-bounds write vulnerability exists in the readNODE functionality of libigl v2.5.0. A specially crafted .node file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2023-6298 1 Itextpdf 1 Itext 2025-02-13 4.3 Medium
A vulnerability classified as problematic was found in Apryse iText 8.0.2. This vulnerability affects the function main of the file PdfDocument.java. The manipulation leads to improper validation of array index. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier of this vulnerability is VDB-246124. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. A statement published afterwards explains that the exception is not a vulnerability and the identified CWEs might not apply to the software.