National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 39,245 matching advisories
Page 173 of 1,636
CVE-2024-56963 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in Beijing Sogou Technology Development Co., Ltd Sogou Input iOS 12.2.0 allows attackers to access sensitive user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-56962 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in Tencent Technology (Shanghai) Co., Ltd WeSing iOS v9.3.39 allows attackers to access sensitive user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-56960 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in Tianjin Xiaowu Information technology Co., Ltd BeiKe Holdings iOS 1.3.50 allows attackers to access sensitive user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-56959 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in Mashang Consumer Finance Co., Ltd Anyihua iOS 3.6.2 allows attackers to access sensitive user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-56957 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in Kingsoft Office Software Corporation Limited WPS Office iOS 12.20.0 allows attackers to access sensitive user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-56955 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in Tencent Technology (Shenzhen) Company Limited QQMail iOS 6.6.4 allows attackers to access sensitive user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-56954 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in Beijing Baidu Netcom Science & Technology Co Ltd Haokan Video iOS 7.70.0 allows attackers to access sensitive user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-56953 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in Baidu (China) Co Ltd Baidu Input Method (iOS version) v12.6.13 allows attackers to access user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-56952 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in Beijing Baidu Netcom Science & Technology Co Ltd Baidu Lite app (iOS version) 6.40.0 allows attackers to access user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-56951 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in Hangzhou Bobo Technology Co Ltd UU Game Booster iOS 10.6.13 allows attackers to access sensitive user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-56950 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in KuGou Technology Co., Ltd KuGou Concept iOS 4.0.61 allows attackers to access sensitive user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-56949 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in Guangzhou Polar Future Culture Technology Co., Ltd University Search iOS 2.27.0 allows attackers to access sensitive user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-56948 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in KuGou Technology CO. LTD KuGou Music iOS v20.0.0 allows attackers to access sensitive user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-56947 MEDIUM 6.5
CWE-601 Remote (AV:N)

An issue in Xiamen Meitu Technology Co., Ltd. BeautyCam iOS v12.3.60 allows attackers to access sensitive user information via supplying a crafted link....

📅 2025-01-27 Inspect Dossier →
CVE-2024-26317 MEDIUM 6.1
CWE-327 Remote (AV:N)

In illumos illumos-gate 2024-02-15, an error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINT_AT_INFI...

📅 2025-01-27 Inspect Dossier →

Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploit...

📅 2025-01-27 Inspect Dossier →
CWE-428

In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify the...

📅 2025-01-27 Inspect Dossier →
CVE-2024-57272 MEDIUM 6.1
CWE-79 Remote (AV:N)

SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower is vulnerable to Cross Site Scripting (XSS)....

📅 2025-01-27 Inspect Dossier →
CVE-2024-55228 CRITICAL 9.0
dolibarr/dolibarr_erp\/crm CWE-79 Remote (AV:N)

A cross-site scripting (XSS) vulnerability in the Product module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parame...

📅 2025-01-27 Inspect Dossier →
CVE-2024-55227 CRITICAL 9.0
dolibarr/dolibarr_erp\/crm CWE-79 Remote (AV:N)

A cross-site scripting (XSS) vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title ...

📅 2025-01-27 Inspect Dossier →
cacti/cacti CWE-89 Remote (AV:N)

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the template function of host_templates.php using the graph_template parameter. This vuln...

📅 2025-01-27 Inspect Dossier →
CVE-2024-54145 MEDIUM 6.3
cacti/cacti CWE-89 Remote (AV:N)

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the get_discovery_results function of automation_devices.php using the network parameter....

📅 2025-01-27 Inspect Dossier →
edimax/br-6476ac_firmware CWE-120

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/getWifiBasic....

📅 2025-01-27 Inspect Dossier →
edimax/br-6476ac_firmware CWE-77 Remote (AV:N)

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in /bin/goahead. Specifically, these issues can be triggered through /goform/tracerouteDiagnosis, /goform/pi...

📅 2025-01-27 Inspect Dossier →
Showing Page 173 of 1,636 • 39,245 matching CVEs (out of 396,747 NIST advisories)