Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (402955 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-32773 2025-04-11 N/A
Not used
CVE-2025-32772 2025-04-11 N/A
Not used
CVE-2025-32771 2025-04-11 N/A
Not used
CVE-2025-32770 2025-04-11 N/A
Not used
CVE-2025-32769 2025-04-11 N/A
Not used
CVE-2025-32768 2025-04-11 N/A
Not used
CVE-2025-32767 2025-04-11 N/A
Not used
CVE-2025-32765 2025-04-11 N/A
Not used
CVE-2025-32764 2025-04-11 N/A
Not used
CVE-2025-32763 2025-04-11 N/A
Not used
CVE-2025-32762 2025-04-11 N/A
Not used
CVE-2025-32761 2025-04-11 N/A
Not used
CVE-2025-32760 2025-04-11 N/A
Not used
CVE-2025-32759 2025-04-11 N/A
Not used
CVE-2025-32758 2025-04-11 N/A
Not used
CVE-2025-32757 2025-04-11 N/A
Not used
CVE-2012-1011 2 Likno, Wordpress 2 Allwebmenus Plugin, Wordpress 2025-04-11 N/A
actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a certain value, then uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.
CVE-2012-1003 1 Opera 1 Opera Browser 2025-04-11 N/A
Multiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of service (application crash) via a large integer argument to the (1) Int32Array, (2) Float32Array, (3) Float64Array, (4) Uint32Array, (5) Int16Array, or (6) ArrayBuffer function. NOTE: the vendor reportedly characterizes this as "a stability issue, not a security issue."
CVE-2011-5010 1 Ctekproducts 1 Skyrouter 2025-04-11 N/A
apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action.
CVE-2011-4461 3 Mortbay, Oracle, Redhat 5 Jetty, Sun Storage Common Array Manager, Fuse Esb Enterprise and 2 more 2025-04-11 N/A
Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.