Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (359063 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-37973 1 Microsoft 8 Windows 10, Windows 10 20h2, Windows 10 21h1 and 5 more 2025-01-02 7.7 High
Windows Local Session Manager (LSM) Denial of Service Vulnerability
CVE-2022-37971 1 Microsoft 1 Malware Protection Engine 2025-01-02 7.1 High
Microsoft Windows Defender Elevation of Privilege Vulnerability
CVE-2022-37970 1 Microsoft 10 Windows 10, Windows 10 1809, Windows 10 20h2 and 7 more 2025-01-02 7.8 High
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-37968 1 Microsoft 3 Azure Arc-enabled Kubernetes, Azure Stack Edge, Edge 2025-01-02 10 Critical
Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster. Additionally, because Azure Stack Edge allows customers to deploy Kubernetes workloads on their devices via Azure Arc, Azure Stack Edge devices are also vulnerable to this vulnerability.
CVE-2022-37967 4 Fedoraproject, Microsoft, Netapp and 1 more 12 Fedora, Windows Server 2008, Windows Server 2008 R2 and 9 more 2025-01-02 7.2 High
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-37966 4 Fedoraproject, Microsoft, Netapp and 1 more 12 Fedora, Windows Server 2008, Windows Server 2008 R2 and 9 more 2025-01-02 8.1 High
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
CVE-2022-37965 1 Microsoft 17 Windows 10, Windows 10 1507, Windows 10 1607 and 14 more 2025-01-02 5.9 Medium
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
CVE-2022-35829 1 Microsoft 1 Azure Service Fabric 2025-01-02 6.2 Medium
Service Fabric Explorer Spoofing Vulnerability
CVE-2022-35770 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-01-02 6.5 Medium
Windows NTLM Spoofing Vulnerability
CVE-2022-34689 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-01-02 7.5 High
Windows CryptoAPI Spoofing Vulnerability
CVE-2022-33645 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-01-02 7.5 High
Windows TCP/IP Driver Denial of Service Vulnerability
CVE-2022-33635 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-01-02 7.8 High
Windows GDI+ Remote Code Execution Vulnerability
CVE-2022-33634 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-01-02 8.1 High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-30198 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-01-02 8.1 High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-24504 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-01-02 8.1 High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-22035 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-01-02 8.1 High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2024-32480 1 Librenms 1 Librenms 2025-01-02 7.2 High
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Versions prior to 24.4.0 are vulnerable to SQL injection. The `order` parameter is obtained from `$request`. After performing a string check, the value is directly incorporated into an SQL statement and concatenated, resulting in a SQL injection vulnerability. An attacker may extract a whole database this way. Version 24.4.0 fixes the issue.
CVE-2024-32479 1 Librenms 1 Librenms 2025-01-02 7.1 High
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to version 24.4.0, there is improper sanitization on the `Service` template name, which can lead to stored Cross-site Scripting. Version 24.4.0 fixes this vulnerability.
CVE-2022-41119 1 Microsoft 3 Visual Studio 2017, Visual Studio 2019, Visual Studio 2022 2025-01-02 7.8 High
Visual Studio Remote Code Execution Vulnerability
CVE-2022-41118 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-01-02 7.5 High
Windows Scripting Languages Remote Code Execution Vulnerability