Export limit exceeded: 342057 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (273 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-23928 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 6.1 Medium
OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string.
CVE-2021-23927 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 6.4 Medium
OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request.
CVE-2020-9427 1 Open-xchange 1 Ox Guard 2024-11-21 5.0 Medium
OX Guard 2.10.3 and earlier allows SSRF.
CVE-2020-9426 1 Open-xchange 1 Ox Guard 2024-11-21 6.1 Medium
OX Guard 2.10.3 and earlier allows XSS.
CVE-2020-8544 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 6.5 Medium
OX App Suite through 7.10.3 allows SSRF.
CVE-2020-8543 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 7.5 High
OX App Suite through 7.10.3 has Improper Input Validation.
CVE-2020-8542 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 5.4 Medium
OX App Suite through 7.10.3 allows XSS.
CVE-2020-8541 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 6.5 Medium
OX App Suite through 7.10.3 allows XXE attacks.
CVE-2020-28945 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 6.1 Medium
OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as ![](http://onerror=Function.constructor, in a Notes item.
CVE-2020-28944 1 Open-xchange 1 Ox Guard 2024-11-21 7.5 High
OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data.
CVE-2020-28943 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 6.5 Medium
OX App Suite 7.10.4 and earlier allows SSRF via a snippet.
CVE-2020-24701 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 6.1 Medium
OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI).
CVE-2020-24700 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 5.4 Medium
OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring.
CVE-2020-15004 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 4.8 Medium
OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS.
CVE-2020-15003 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 4.3 Medium
OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user (via the session API during shared Drive access).
CVE-2020-15002 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 5.0 Medium
OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API.
CVE-2020-12646 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 5.4 Medium
OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document.
CVE-2020-12645 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 9.8 Critical
OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption.
CVE-2020-12644 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 5.0 Medium
OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API.
CVE-2020-12643 1 Open-xchange 1 Open-xchange Appsuite 2024-11-21 4.3 Medium
OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address.