Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Explore Sources Research Browse

Production

Loading current evidence

Loading the latest cvebuzz view.

© 2026 cvebuzz. CVE data courtesy of the National Vulnerability Database.

Subscribe via Atom About Browse CVEs Research Contact Privacy Policy Terms of Service

Search the full CVE archive | cvebuzz

Trending
Browse CVEs

Historical archive search

Search the full CVE archive

Search decades of CVEs by regex, severity, date, CWE, vendor/product tags, KEV, PoC, and other evidence.

Years with data: 28
Top vendors indexed: 100

FiltersRefine the archive+

Search by CVE ID or description (supports basic regex, e.g. log4j|struts)

Quick date range

Last 7 days Last 30 days Last 90 days

Severity (select multiple)

Critical (44,422)High (128,445)Medium (163,580)Low (18,240)Unrated (2,076)

Attack vector (select multiple)

Network

Results

CVE results

6,494 results · Sorted by Highest Buzz score first

CVE-2014-100011

Published Jan 13, 2015

SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via the c parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2014-10030

Published Jan 13, 2015

Adjacent network

Local

Physical

CVSS minCVSS max

Year

CWEEnter a numeric ID such as 79 or the prefixed form CWE-79.

VendorBetaChoose an indexed vendor suggestion or enter another vendor.ProductBeta

Only show CVEs with KEV evidence

Only show CVEs with public PoC evidence

Only show CVEs with mention evidence

Only show CVEs with AlienVault OTX activity

Sort

Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishin…

CVSS 5.8 · Medium

Vendor/product tagsBeta · best-effort

fluxbb / fluxbb

CVE-2014-10029

Published Jan 13, 2015

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the req_new_email parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

fluxbb / fluxbb

CVE-2014-10028

Published Jan 13, 2015

Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the res_buf par…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

dlink / dap-1360dlink / dap-1360_firmware

CVE-2014-10027

Published Jan 13, 2015

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspeci…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

dlink / dap-1360dlink / dap-1360_firmware

CVE-2014-10026

Published Jan 13, 2015

index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie t…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

dlink / dap-1360dlink / dap-1360_firmware

CVE-2014-10025

Published Jan 13, 2015

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified us…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

dlink / dap-1360dlink / dap-1360_firmware

CVE-2014-10024

Published Jan 13, 2015

Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

divx / directshowdemuxfilterdivx / playerdivx / web_player

CVE-2014-10023

Published Jan 13, 2015

Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) edit_block.php, (2) edit_cat…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

topicsviewer / topicsviewer

CVE-2014-10022

Published Jan 13, 2015

Apache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via unspecified vectors, related to internal buffer sizing.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

apache / traffic_server

CVE-2014-10021

Published Jan 13, 2015

Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by uploading a file wi…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

wpsymposiumpro / wp_symposium

CVE-2014-10020

Published Jan 13, 2015

SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

tecorange / simple_e-document

CVE-2014-10019

Published Jan 13, 2015

Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the aut…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

teracom / t2-b-gawv1.4u10y-bi

CVE-2014-10018

Published Jan 13, 2015

Cross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

teracom / t2-b-gawv1.4u10y-bi

CVE-2014-10017

Published Jan 13, 2015

Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) changeSort or (2)…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

welcart / e-commerce

CVE-2014-10016

Published Jan 13, 2015

Multiple cross-site scripting (XSS) vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to inject arbitrary web script or HTML via (1) uns…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

welcart / e-commerce

CVE-2014-10015

Published Jan 13, 2015

SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

phpjabbers / event_booking_calendar

CVE-2014-10014

Published Jan 13, 2015

Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for reque…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

phpjabbers / event_booking_calendar

CVE-2014-10013

Published Jan 13, 2015

SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the keywordphrase parame…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

strategy11 / awp_classifieds

CVE-2014-10012

Published Jan 13, 2015

Cross-site scripting (XSS) vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the qu…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

strategy11 / awp_classifieds

CVE-2014-10011

Published Jan 13, 2015

Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView camera TV-IP422WN allows remote attackers to execute arbitrar…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

trendnet / tv-ip422wtrendnet / tv-ip422wn

CVE-2014-10010

Published Jan 13, 2015

Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter in a pjActionDownl…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

phpjabbers / appointment_scheduler

CVE-2014-10009

Published Jan 13, 2015

Multiple cross-site scripting (XSS) vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, or (3) no…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

iwcn / stark_crm

CVE-2014-10008

Published Jan 13, 2015

Multiple cross-site request forgery (CSRF) vulnerabilities in Stark CRM 1.0 allow remote attackers to hijack the authentication of administrators for requests that add (1) an admi…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

iwcn / stark_crm

CVE-2014-10007

Published Jan 13, 2015

Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, or (…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

maianscriptworld / maian_weblog

Showing 6,276-6,300 of 6,494 CVEsPage 252 of 260

Previous 1 251 252 253 260 Next

About these shareable results+

Every filter state lives in the URL so you can bookmark, share, and crawl exact historical slices instead of a client-only search session.

Buzz order uses the latest all-time evidence snapshot, refreshed every two hours. Evidence-bearing CVEs rank first; records without a snapshot continue newest-first.