Export limit exceeded: 425979 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 11766 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11,766

Export CSV
CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw('field(goods_id, ...)'), allowing attackers to: (a) enumerate or modify database data, including dumping admin password hashes; (b) write web-shell files or invoke xp_cmdshell, leading to remote code execution on servers configured with sufficient DB privileges.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Yiovo Yoshop
Products
Firefly Mall Yoshop
CVE-2023-36739

3D Viewer Remote Code Execution Vulnerability

3D Viewer Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
3d Viewer
CVE-2023-36740

3D Viewer Remote Code Execution Vulnerability

3D Viewer Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
3d Viewer
CVE-2023-36760

3D Viewer Remote Code Execution Vulnerability

3D Viewer Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
3d Viewer
CVE-2023-36770

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
3d Builder
CVE-2023-36771

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
3d Builder
CVE-2023-36772

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
3d Builder
CVE-2023-36773

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
3d Builder
CVE-2023-36736

Microsoft Identity Linux Broker Remote Code Execution Vulnerability

Microsoft Identity Linux Broker Remote Code Execution Vulnerability

CVSS 3.1 · 4.4 Medium EPSS 1.4% KEV · Not listed
Vendors
Microsoft
Products
Identity Linux Broker
CVE-2023-36744

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1 · 8 High EPSS 57.1% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server