Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (95208 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-27175 1 Fiberhome 2 Hg6245d, Hg6245d Firmware 2024-11-21 7.5 High
An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_2g.cfg has cleartext passwords and 0644 permissions.
CVE-2021-27174 1 Fiberhome 2 Hg6245d, Hg6245d Firmware 2024-11-21 7.5 High
An issue was discovered on FiberHome HG6245D devices through RP2613. wifi_custom.cfg has cleartext passwords and 0644 permissions.
CVE-2021-27173 1 Fiberhome 2 Hg6245d, Hg6245d Firmware 2024-11-21 7.5 High
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculated(BR0_MAC) backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server (used for the CLI).
CVE-2021-27142 1 Fiberhome 2 Hg6245d, Hg6245d Firmware 2024-11-21 7.5 High
An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a hardcoded private key that has 0777 permissions.
CVE-2021-27140 1 Fiberhome 2 Hg6245d, Hg6245d Firmware 2024-11-21 7.5 High
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authentication cookies stored in cleartext in the web.log HTTP logs.
CVE-2021-27139 1 Fiberhome 2 Hg6245d, Hg6245d Firmware 2024-11-21 7.5 High
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to extract information from the device without authentication by disabling JavaScript and visiting /info.asp.
CVE-2021-27117 1 Beego 1 Beego 2024-11-21 7.8 High
An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks locally.
CVE-2021-27116 1 Beego 1 Beego 2024-11-21 7.8 High
An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally.
CVE-2021-27098 1 Cncf 1 Spire 2024-11-21 8.1 High
In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Server’s Legacy Node API can result in the possible issuance of an X.509 certificate with a URI SAN for a SPIFFE ID that the agent is not authorized to distribute. Proper controls are in place to require that the caller presents a valid agent certificate that is already authorized to issue at least one SPIFFE ID, and the requested SPIFFE ID belongs to the same trust domain, prior to being able to trigger this vulnerability. This issue has been fixed in SPIRE versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1.
CVE-2021-27096 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2024-11-21 7.8 High
NTFS Elevation of Privilege Vulnerability
CVE-2021-27095 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.8 High
Windows Media Video Decoder Remote Code Execution Vulnerability
CVE-2021-27091 1 Microsoft 4 Windows 7, Windows Server 2008, Windows Server 2008 R2 and 1 more 2024-11-21 7.8 High
RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
CVE-2021-27090 1 Microsoft 6 Windows 10, Windows 10 1809, Windows 10 20h2 and 3 more 2024-11-21 7.8 High
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2021-27089 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.8 High
Microsoft Internet Messaging API Remote Code Execution Vulnerability
CVE-2021-27088 1 Microsoft 10 Windows 10, Windows 10 1803, Windows 10 1809 and 7 more 2024-11-21 7.8 High
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-27086 1 Microsoft 10 Windows 10, Windows 10 1803, Windows 10 1809 and 7 more 2024-11-21 7.8 High
Windows Services and Controller App Elevation of Privilege Vulnerability
CVE-2021-27072 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2024-11-21 7 High
Win32k Elevation of Privilege Vulnerability
CVE-2021-27068 1 Microsoft 1 Visual Studio 2019 2024-11-21 8.8 High
Visual Studio Remote Code Execution Vulnerability
CVE-2021-27046 1 Autodesk 1 Navisworks 2024-11-21 7.8 High
A Memory Corruption vulnerability for PDF files in Autodesk Navisworks 2019, 2020, 2021, 2022 may lead to code execution through maliciously crafted DLL files.
CVE-2021-27045 1 Autodesk 1 Navisworks 2024-11-21 7.8 High
A maliciously crafted PDF file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the PDF file. This vulnerability can be exploited to execute arbitrary code.