Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (372897 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-41039 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-01-02 8.1 High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-38015 1 Microsoft 13 Windows 10, Windows 10 1507, Windows 10 1607 and 10 more 2025-01-02 6.5 Medium
Windows Hyper-V Denial of Service Vulnerability
CVE-2022-41079 1 Microsoft 1 Exchange Server 2025-01-02 8 High
Microsoft Exchange Server Spoofing Vulnerability
CVE-2022-41123 1 Microsoft 1 Exchange Server 2025-01-02 7.8 High
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41078 1 Microsoft 1 Exchange Server 2025-01-02 8 High
Microsoft Exchange Server Spoofing Vulnerability
CVE-2022-41122 1 Microsoft 3 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Server 2025-01-02 6.5 Medium
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-41120 1 Microsoft 1 Windows Sysmon 2025-01-02 7.8 High
Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
CVE-2022-41102 1 Microsoft 14 Windows 10, Windows 10 1507, Windows 10 1607 and 11 more 2025-01-02 7.8 High
Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2022-41101 1 Microsoft 14 Windows 10, Windows 10 1507, Windows 10 1607 and 11 more 2025-01-02 7.8 High
Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2022-41058 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-01-02 7.5 High
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2022-41100 1 Microsoft 17 Windows 10, Windows 10 1507, Windows 10 1607 and 14 more 2025-01-02 7.8 High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-41085 1 Microsoft 1 Azure Cyclecloud 2025-01-02 7.5 High
Azure CycleCloud Elevation of Privilege Vulnerability
CVE-2022-37992 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-01-02 7.8 High
Windows Group Policy Elevation of Privilege Vulnerability
CVE-2022-38014 1 Microsoft 3 Azure Eflow, Azure Iot Edge For Linux, Windows Subsystem For Linux 2025-01-02 7 High
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
CVE-2024-32461 1 Librenms 1 Librenms 2025-01-02 7.1 High
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A SQL injection vulnerability in POST /search/search=packages in LibreNMS prior to version 24.4.0 allows a user with global read privileges to execute SQL commands via the package parameter. With this vulnerability, an attacker can exploit a SQL injection time based vulnerability to extract all data from the database, such as administrator credentials. Version 24.4.0 contains a patch for the vulnerability.
CVE-2022-44684 1 Microsoft 14 Windows 10 20h2, Windows 10 20h2, Windows 10 21h1 and 11 more 2025-01-02 6.5 Medium
Windows Local Session Manager (LSM) Denial of Service Vulnerability
CVE-2023-35142 1 Jenkins 1 Checkmarx 2025-01-02 8.1 High
Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.
CVE-2023-35110 1 Jjson Project 1 Jjson 2025-01-02 7.5 High
An issue was discovered jjson thru 0.1.7 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
CVE-2023-34878 1 Ujcms 1 Ujcms 2025-01-02 7.5 High
An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip.
CVE-2023-34868 1 Jerryscript 1 Jerryscript 2025-01-02 7.5 High
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start at jerry-core/parser/js/js-parser-statm.c.