Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (363781 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-34456 1 Microsoft 18 Windows 10, Windows 10 1507, Windows 10 1607 and 15 more 2024-11-21 7.8 High
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2021-34455 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2024-11-21 7.8 High
Windows File History Service Elevation of Privilege Vulnerability
CVE-2021-34454 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2024-11-21 5.5 Medium
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2021-34453 1 Microsoft 1 Exchange Server 2024-11-21 7.5 High
Microsoft Exchange Server Denial of Service Vulnerability
CVE-2021-34452 1 Microsoft 3 365 Apps, Office, Word 2024-11-21 7.8 High
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-34451 1 Microsoft 1 Office Online Server 2024-11-21 5.3 Medium
Microsoft Office Online Server Spoofing Vulnerability
CVE-2021-34450 1 Microsoft 8 Windows 10, Windows 10 1809, Windows 10 1909 and 5 more 2024-11-21 8.5 High
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2021-34449 1 Microsoft 9 Windows 10, Windows 10 1809, Windows 10 1909 and 6 more 2024-11-21 7 High
Win32k Elevation of Privilege Vulnerability
CVE-2021-34447 1 Microsoft 17 Windows 10, Windows 10 1507, Windows 10 1607 and 14 more 2024-11-21 6.8 Medium
Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-34446 1 Microsoft 17 Windows 10, Windows 10 1507, Windows 10 1607 and 14 more 2024-11-21 8 High
Windows HTML Platforms Security Feature Bypass Vulnerability
CVE-2021-34445 1 Microsoft 9 Windows 10, Windows 10 1809, Windows 10 1909 and 6 more 2024-11-21 7.8 High
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2021-34444 1 Microsoft 9 Windows Server 2004, Windows Server 2008, Windows Server 2008 R2 and 6 more 2024-11-21 6.5 Medium
Windows DNS Server Denial of Service Vulnerability
CVE-2021-34442 1 Microsoft 9 Windows Server 2004, Windows Server 2008, Windows Server 2008 R2 and 6 more 2024-11-21 8.8 High
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-34441 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2024-11-21 7.8 High
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2021-34440 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2024-11-21 5.5 Medium
GDI+ Information Disclosure Vulnerability
CVE-2021-34439 1 Microsoft 4 Windows 10, Windows 10 1507, Windows 10 1607 and 1 more 2024-11-21 7.8 High
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2021-34438 1 Microsoft 9 Windows 10, Windows 10 1809, Windows 10 1909 and 6 more 2024-11-21 7.8 High
Windows Font Driver Host Remote Code Execution Vulnerability
CVE-2021-34436 1 Eclipse 1 Theia 2024-11-21 9.8 Critical
In Eclipse Theia 0.1.1 to 0.2.0, it is possible to exploit the default build to obtain remote code execution (and XXE) via the theia-xml-extension. This extension uses lsp4xml (recently renamed to LemMinX) in order to provide language support for XML. This is installed by default.
CVE-2021-34435 1 Eclipse 1 Theia 2024-11-21 8.8 High
In Eclipse Theia 0.3.9 to 1.8.1, the "mini-browser" extension allows a user to preview HTML files in an iframe inside the IDE. But with the way it is made it is possible for a previewed HTML file to trigger an RCE. This exploit only happens if a user previews a malicious file..
CVE-2021-34434 2 Eclipse, Fedoraproject 2 Mosquitto, Fedora 2024-11-21 5.3 Medium
In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability for a client to make subscriptions on a topic is revoked when a durable client is offline, then existing subscriptions for that client are not revoked.