Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (324455 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-26871 1 Microsoft 7 Windows 10, Windows 10 1507, Windows 10 1607 and 4 more 2024-11-21 7.8 High
Windows WalletService Elevation of Privilege Vulnerability
CVE-2021-26870 1 Microsoft 10 Windows 10, Windows 10 1803, Windows 10 1809 and 7 more 2024-11-21 7.8 High
Windows Projected File System Elevation of Privilege Vulnerability
CVE-2021-26869 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2024-11-21 5.5 Medium
Windows ActiveX Installer Service Information Disclosure Vulnerability
CVE-2021-26868 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2024-11-21 7.8 High
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2021-26867 1 Microsoft 7 Windows 10, Windows 10 1809, Windows 10 1909 and 4 more 2024-11-21 9.9 Critical
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2021-26866 1 Microsoft 12 Windows 10, Windows 10 1507, Windows 10 1607 and 9 more 2024-11-21 7.1 High
Windows Update Service Elevation of Privilege Vulnerability
CVE-2021-26865 1 Microsoft 10 Windows 10, Windows 10 1607, Windows 10 1809 and 7 more 2024-11-21 8.8 High
Windows Container Execution Agent Elevation of Privilege Vulnerability
CVE-2021-26864 1 Microsoft 10 Windows 10, Windows 10 1607, Windows 10 1809 and 7 more 2024-11-21 8.4 High
Windows Virtual Registry Provider Elevation of Privilege Vulnerability
CVE-2021-26863 1 Microsoft 10 Windows 10, Windows 10 1803, Windows 10 1809 and 7 more 2024-11-21 7 High
Windows Win32k Elevation of Privilege Vulnerability
CVE-2021-26862 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7 High
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-26861 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.8 High
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2021-26860 1 Microsoft 9 Windows 10, Windows 10 1809, Windows 10 1909 and 6 more 2024-11-21 7.8 High
Windows App-V Overlay Filter Elevation of Privilege Vulnerability
CVE-2021-26859 1 Microsoft 1 Power Bi Report Server 2024-11-21 7.7 High
Microsoft Power BI Information Disclosure Vulnerability
CVE-2021-26854 1 Microsoft 1 Exchange Server 2024-11-21 6.6 Medium
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26845 1 Hitachienergy 1 Esoms 2024-11-21 7.5 High
Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access the report is discovered. This issue affects: Hitachi ABB Power Grids eSOMS 6.0 versions prior to 6.0.4.2.2; 6.1 versions prior to 6.1.4; 6.3 versions prior to 6.3.
CVE-2021-26844 1 Poweradmin 1 Pa Server Monitor 2024-11-21 5.4 Medium
A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1 allows remote attackers to inject arbitrary web script or HTML via Console.exe.
CVE-2021-26843 1 Sthttpd Project 1 Sthttpd 2024-11-21 7.5 High
An issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is implemented with memcpy, the de_dotdot function may cause a Denial-of-Service (daemon crash) due to overlapping memory ranges being passed to memcpy. This can triggered with an HTTP GET request for a crafted filename. NOTE: this is similar to CVE-2017-10671, but occurs in a different part of the de_dotdot function.
CVE-2021-26837 1 Fortra 1 Delivernow 2024-11-21 9.8 Critical
SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information.
CVE-2021-26835 1 Zettlr 1 Zettlr 2024-11-21 6.1 Medium
No filtering of cross-site scripting (XSS) payloads in the markdown-editor in Zettlr 1.8.7 allows attackers to perform remote code execution via a crafted file.
CVE-2021-26834 1 Znote 1 Znote 2024-11-21 5.4 Medium
A cross-site scripting (XSS) vulnerability exists in Znote 0.5.2. An attacker can insert payloads, and the code execution will happen immediately on markdown view mode.