Export limit exceeded: 16509 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 21746 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21,746

Export CSV
CVE-2020-22807

An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Vtiger
Products
Vtiger Crm
CVE-2020-22781

In Etherpad < 1.8.3, a specially crafted URI would raise an unhandled exception in the cache mechanism and cause a denial of service (crash the instance).

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Etherpad
Products
Etherpad
CVE-2020-22425

Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution.

CVSS 3.1 · 8.8 High EPSS 2.6% KEV · Not listed
Vendors
Centreon
Products
Centreon
CVE-2020-22226

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Phpjabbers
Products
Fundraising Script
CVE-2020-22225

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Phpjabbers
Products
Fundraising Script
CVE-2020-22223

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Phpjabbers
Products
Fundraising Script
CVE-2020-22212

SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
74cms
Products
74cms
CVE-2020-22211

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajax_street.php.

CVSS 3.1 · 9.8 Critical EPSS 7.9% KEV · Not listed
Vendors
74cms
Products
74cms
CVE-2020-22210

SQL Injection in 74cms 3.2.0 via the x parameter to ajax_officebuilding.php.

CVSS 3.1 · 9.8 Critical EPSS 8.6% KEV · Not listed
Vendors
74cms
Products
74cms
CVE-2020-22209

SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajax_common.php.

CVSS 3.1 · 9.8 Critical EPSS 8.6% KEV · Not listed
Vendors
74cms
Products
74cms
CVE-2020-22208

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajax_street.php.

CVSS 3.1 · 9.8 Critical EPSS 10.1% KEV · Not listed
Vendors
74cms
Products
74cms
CVE-2020-22206

SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliate_ck.php.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Shopex
Products
Ecshop
CVE-2020-22205

SQL Injection in ECShop 3.0 via the id parameter to admin/shophelp.php.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Shopex
Products
Ecshop
CVE-2020-22204

SQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php. .

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Shopex
Products
Ecshop
CVE-2020-22203

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Phpcms
Products
Phpcms
CVE-2020-22199

SQL Injection vulnerability in phpCMS 2007 SP6 build 0805 via the digg_mod parameter to digg_add.php.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Phpcms
Products
Phpcms
CVE-2020-22198

SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajax_membergroup.php.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2020-22175

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\betweendates-detailsreports.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Phpgurukul
Products
Hospital Management System
CVE-2020-22174

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Phpgurukul
Products
Hospital Management System
CVE-2020-22173

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Phpgurukul
Products
Hospital Management System