Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9517 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-43775 1 Deltaww 1 Diaenergie 2025-05-07 9.8 Critical
The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.
CVE-2022-43774 1 Deltaww 1 Diaenergie 2025-05-07 9.8 Critical
The HandlerPageP_KID class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.
CVE-2021-24130 1 Weplugins 1 Wp Maps 2025-05-07 7.2 High
Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page within the plugin settings was vulnerable to SQL Injection through a high privileged user (admin+).
CVE-2020-20122 1 Wuzhicms 1 Wuzhicms 2025-05-05 9.8 Critical
Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle() function in /coreframe/app/content/admin/content.php.
CVE-2018-11528 1 Wuzhicms 1 Wuzhicms 2025-05-05 N/A
WUZHI CMS 4.1.0 has SQL Injection via an api/sms_check.php?param= URI.
CVE-2020-22820 1 Mkcms Project 1 Mkcms 2025-05-05 9.8 Critical
MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter.
CVE-2020-22819 1 Mkcms Project 1 Mkcms 2025-05-05 9.8 Critical
MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter.
CVE-2020-22818 1 Mkcms Project 1 Mkcms 2025-05-05 9.8 Critical
MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter.
CVE-2020-36084 1 Jkev 1 Responsive E-learning System 2025-05-02 9.8 Critical
SQL Injection vulnerability in SourceCodester Responsive E-Learning System 1.0 allows remote attackers to inject sql query in /elearning/delete_teacher_students.php?id= parameter via id field.
CVE-2022-41259 1 Sap 1 Sql Anywhere 2025-05-02 6.5 Medium
SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use an ARRAY constructor.
CVE-2020-12507 1 Badgermeter 1 Moni\ 2025-05-01 8.8 High
In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS.
CVE-2022-43292 1 Canteen Management System Project 1 Canteen Management System 2025-05-01 7.2 High
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editfood.php.
CVE-2022-43291 1 Canteen Management System Project 1 Canteen Management System 2025-05-01 7.2 High
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editclient.php.
CVE-2022-43290 1 Canteen Management System Project 1 Canteen Management System 2025-05-01 7.2 High
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editcategory.php.
CVE-2022-43278 1 Canteen Management System Project 1 Canteen Management System 2025-05-01 7.2 High
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter at /php_action/fetchSelectedCategories.php.
CVE-2022-43058 1 Online Diagnostic Lab Management System Project 1 Online Diagnostic Lab Management System 2025-05-01 9.8 Critical
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=delete_activity.
CVE-2022-44727 1 Lineagrafica 1 Eu Cookie Law Gdpr 2025-05-01 9.1 Critical
The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).
CVE-2022-43672 1 Zohocorp 3 Manageengine Access Manager Plus, Manageengine Pam360, Manageengine Password Manager Pro 2025-05-01 9.8 Critical
Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection (in a different software component relative to CVE-2022-43671.
CVE-2022-43671 1 Zohocorp 3 Manageengine Access Manager Plus, Manageengine Pam360, Manageengine Password Manager Pro 2025-05-01 9.8 Critical
Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection.
CVE-2022-39069 1 Zte 1 Zaip-aie 2025-05-01 5.3 Medium
There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content.