CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

243 matches found

Vulnrichment•added 2026/01/21 4:26 p.m.•7 views

CVE-2026-20045 Cisco Unified Communications Products Remote Code Execution Vulnerability

A vulnerability in Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could...

8.2CVSS6.6AI score0.04307EPSS

Exploits1References1

RedhatCVE•added 2026/01/07 9:18 a.m.•7 views

CVE-2025-1946

A vulnerability was found in hzmanyun Education and Training System 2.1. It has been rated as critical. Affected by this issue is the function exportPDF of the file /user/exportPDF. The manipulation of the argument id leads to command injection. The attack may be launched remotely. The exploit ha...

6.5CVSS7.7AI score0.04688EPSS

Exploits1References1

RedhatCVE•added 2026/01/07 9:18 a.m.•17 views

CVE-2025-1964

A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been rated as critical. This issue affects some unknown processing of the file /booknow.php?roomname=Duplex. The manipulation of the argument checkin leads to sql injection. The attack may be initiated remotely. The explo...

9.8CVSS7.6AI score0.00586EPSS

Exploits1References1

RedhatCVE•added 2026/01/07 9:18 a.m.•10 views

CVE-2025-1227

A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file com/cloudweb/oa/mapper/xml/AddressDao.xml. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

8.8CVSS7.3AI score0.00484EPSS

Exploits1References1

RedhatCVE•added 2026/01/07 9:17 a.m.•21 views

CVE-2025-1903

A vulnerability was found in Codezips Online Shopping Website 1.0. It has been rated as critical. This issue affects some unknown processing of the file /cartadd.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...

9.8CVSS7.6AI score0.00611EPSS

Exploits1References1

RedhatCVE•added 2026/01/07 9:17 a.m.•15 views

CVE-2025-1840

A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched...

9.8CVSS7.2AI score0.00456EPSS

Exploits0References1

RedhatCVE•added 2026/01/07 9:9 a.m.•14 views

CVE-2024-2986

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been rated as critical. This issue affects the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speeddir leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit...

9CVSS8.8AI score0.01697EPSS

Exploits1References1