Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (324454 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-1073 2025-04-15 7.5 High
Panasonic IR Control Hub (IR Blaster) versions 1.17 and earlier may allow an attacker with physical access to load unauthorized firmware onto the device.
CVE-2022-46171 1 Tauri 1 Tauri 2025-04-15 6.8 Medium
Tauri is a framework for building binaries for all major desktop platforms. The filesystem glob pattern wildcards `*`, `?`, and `[...]` match file path literals and leading dots by default, which unintentionally exposes sub folder content of allowed paths. Scopes without the wildcards are not affected. As `**` allows for sub directories the behavior there is also as expected. The issue has been patched in the latest release and was backported into the currently supported 1.x branches. There are no known workarounds at the time of publication.
CVE-2025-32941 2025-04-15 N/A
Not used
CVE-2025-32940 2025-04-15 N/A
Not used
CVE-2025-32939 2025-04-15 N/A
Not used
CVE-2025-32938 2025-04-15 N/A
Not used
CVE-2025-32937 2025-04-15 N/A
Not used
CVE-2025-32936 2025-04-15 N/A
Not used
CVE-2025-32935 2025-04-15 N/A
Not used
CVE-2025-32934 2025-04-15 N/A
Not used
CVE-2025-32933 2025-04-15 N/A
Not used
CVE-2024-11071 2025-04-15 8.8 High
Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solution(versions described below) which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery (CSRF) attack, which probabilistically enables JSON Hijacking (aka JavaScript Hijacking) via forgery web page.* Due to product customization, version information may differ from the following version description. For further inquiries, please contact the vendor.
CVE-2021-42307 1 Microsoft 1 Edge Chromium 2025-04-14 4.3 Medium
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2023-29348 1 Microsoft 5 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 2 more 2025-04-14 7.5 High
Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability
CVE-2023-36409 1 Microsoft 1 Edge Chromium 2025-04-14 6.5 Medium
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2023-36416 1 Microsoft 1 Dynamics 365 2025-04-14 6.1 Medium
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-36418 1 Microsoft 1 Azure Rtos Guix Studio 2025-04-14 7.8 High
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2023-36436 1 Microsoft 11 Windows 10 1507, Windows 10 1809, Windows 10 21h1 and 8 more 2025-04-14 7.8 High
Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2023-36565 1 Microsoft 2 Office, Office Long Term Servicing Channel 2025-04-14 7 High
Microsoft Office Graphics Elevation of Privilege Vulnerability
CVE-2023-36566 1 Microsoft 1 Common Data Model Sdk 2025-04-14 6.5 Medium
Microsoft Common Data Model SDK Denial of Service Vulnerability