Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (111308 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-63454 1 Tenda 2 Ax3, Ax3 Firmware 2025-11-05 7.5 High
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63458 1 Tenda 2 Ax1803, Ax1803 Firmware 2025-11-05 7.5 High
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-47357 1 Qualcomm 49 Qam8255p, Qam8255p Firmware, Qam8620p and 46 more 2025-11-05 8 High
Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
CVE-2025-41111 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_denuncia' in '/backend/api/buscarComentariosByDenuncia.php'.
CVE-2025-41112 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarConfiguracionParametros2.php'.
CVE-2025-41113 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_denuncia' in '/backend/api/buscarDenunciaByPin.php'.
CVE-2025-41114 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarDocumentosByIdDenunciaUsuario.php'.
CVE-2025-41335 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id' and ' 'id_sociedad' in '/api/buscarEmpresaById.php'.
CVE-2025-41337 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarSSOParametros.php'.
CVE-2025-41336 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarConfiguracionParametros.php'.
CVE-2025-41338 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarTestigoByIdDenunciaUsuario.php'.
CVE-2025-41339 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_sociedad' in '/backend/api/buscarTipoDenuncia.php'.
CVE-2025-41340 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_tp_denuncia' and 'id_sociedad' in '/backend/api/buscarTipoDenunciabyId.php'.
CVE-2025-41341 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'seguro' in '/backend/api/buscarUsuarioByDenuncia.php'.
CVE-2025-41342 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_user' in '/backend/api/buscarUsuarioId.php'.
CVE-2025-41343 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'email' in '/backend/api/users/searchUserByEmail.php'.
CVE-2025-41344 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_archivo' in '/backend/api/verArchivo.php'.
CVE-2025-41345 1 Canaldenuncia 2 Canaldenuncia.app, Canaldenuncia App 2025-11-05 7.5 High
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarDenunciasById.php'.
CVE-2025-12608 2 Angeljudesuarez, Itsourcecode 2 Online Loan Management System, Online Loan Management System 2025-11-05 7.3 High
A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. The affected element is an unknown function of the file /manage_user.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
CVE-2025-12607 2 Angeljudesuarez, Itsourcecode 2 Online Loan Management System, Online Loan Management System 2025-11-05 7.3 High
A vulnerability was identified in itsourcecode Online Loan Management System 1.0. Impacted is an unknown function of the file /manage_payment.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.