Search

Expected end of text, found '.' (at char 8), (line:1, col:9)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (316060 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-38014 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-10-28 7.8 High
Windows Installer Elevation of Privilege Vulnerability
CVE-2024-38080 1 Microsoft 5 Windows 11 21h2, Windows 11 22h2, Windows 11 23h2 and 2 more 2025-10-28 7.8 High
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2024-38094 1 Microsoft 1 Sharepoint Server 2025-10-28 7.2 High
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2025-12338 2 Campcodes, Retro Basketball Shoes Online Store Project 2 Retro Basketball Shoes Online Store, Retro Basketball Shoes Online Store 2025-10-28 7.3 High
A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerability affects unknown code of the file /admin/admin_product.ph. Executing manipulation of the argument pid can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
CVE-2024-38106 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-10-28 7 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-38107 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2025-10-28 7.8 High
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
CVE-2024-38112 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2025-10-28 7.5 High
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-38178 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2025-10-28 7.5 High
Scripting Engine Memory Corruption Vulnerability
CVE-2025-60954 1 Microweber 2 Cms, Microweber 2025-10-28 8.3 High
Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak passwords, including single-character passwords, which can lead to account compromise, including administrative accounts.
CVE-2024-38189 1 Microsoft 4 365 Apps, Office 2019, Office Long Term Servicing Channel and 1 more 2025-10-28 8.8 High
Microsoft Project Remote Code Execution Vulnerability
CVE-2025-12339 2 Campcodes, Retro Basketball Shoes Online Store Project 2 Retro Basketball Shoes Online Store, Retro Basketball Shoes Online Store 2025-10-28 7.3 High
A security vulnerability has been detected in Campcodes Retro Basketball Shoes Online Store 1.0. This issue affects some unknown processing of the file /admin/admin_football.php. The manipulation of the argument pid leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
CVE-2025-12221 2 Azure Access Technology, Busybox 3 Blu-ic2, Blu-ic4, Busybox 2025-10-28 N/A
Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2024-38193 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-10-28 7.8 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2024-38213 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-10-28 6.5 Medium
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2025-12220 2 Azure Access Technology, Busybox 3 Blu-ic2, Blu-ic4, Busybox 2025-10-28 N/A
Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2024-38217 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-10-28 5.4 Medium
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2025-12219 1 Azure Access Technology 2 Blu-ic2, Blu-ic4 2025-10-28 N/A
Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-12218 1 Azure Access Technology 2 Blu-ic2, Blu-ic4 2025-10-28 N/A
Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVE-2025-62957 3 Nikanwp, Woocommerce, Wordpress 3 Woocommerce Reporting, Woocommerce, Wordpress 2025-10-28 8.8 High
Cross-Site Request Forgery (CSRF) vulnerability in NikanWP NikanWP WooCommerce Reporting wc-reports-lite allows Stored XSS.This issue affects NikanWP WooCommerce Reporting: from n/a through <= 1.0.0.
CVE-2025-62956 1 Wordpress 1 Wordpress 2025-10-28 8.8 High
Cross-Site Request Forgery (CSRF) vulnerability in iseremet Reloadly reloadly-topup-widget allows Stored XSS.This issue affects Reloadly: from n/a through <= 2.0.1.