Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (311910 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-7738 1 Yzane 2 Markdown Pdf, Vscode Markdown Pdf 2025-09-02 3.3 Low
A vulnerability, which was classified as problematic, has been found in yzane vscode-markdown-pdf 1.5.0. Affected by this issue is some unknown functionality of the component Markdown File Handler. The manipulation leads to pathname traversal. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
CVE-2024-7739 1 Yzane 2 Markdown Pdf, Vscode Markdown Pdf 2025-09-02 4.3 Medium
A vulnerability, which was classified as problematic, was found in yzane vscode-markdown-pdf 1.5.0. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-44271 1 Apple 2 Macos, Macos Sequoia 2025-09-02 3.3 Low
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator.
CVE-2024-54554 1 Apple 2 Macos, Macos Sequoia 2025-09-02 5.5 Medium
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data.
CVE-2025-43187 1 Apple 4 Macos, Macos Sequoia, Macos Sonoma and 1 more 2025-09-02 7.8 High
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. Running an hdiutil command may unexpectedly execute arbitrary code.
CVE-2025-43284 1 Apple 4 Macos, Macos Sequoia, Macos Sonoma and 1 more 2025-09-02 5.5 Medium
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. An app may be able to cause unexpected system termination.
CVE-2025-58421 2025-09-02 N/A
Not used
CVE-2025-58420 2025-09-02 N/A
Not used
CVE-2025-58419 2025-09-02 N/A
Not used
CVE-2025-58418 2025-09-02 N/A
Not used
CVE-2025-58417 2025-09-02 N/A
Not used
CVE-2025-58416 2025-09-02 N/A
Not used
CVE-2025-58415 2025-09-02 N/A
Not used
CVE-2025-58414 2025-09-02 N/A
Not used
CVE-2025-4373 1 Redhat 8 Enterprise Linux, Insights Proxy, Openshift Distributed Tracing and 5 more 2025-09-02 4.8 Medium
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.
CVE-2025-55622 1 Reolink 1 Reolink 2025-09-01 6.5 Medium
Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience.
CVE-2025-7969 1 Markdown-it Project 1 Markdown-it 2025-09-01 6.3 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in markdown-it allows Cross-Site Scripting (XSS). This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not consider this issue to be a vulnerability.
CVE-2025-1500 1 Ibm 1 Maximo Application Suite 2025-09-01 5.5 Medium
IBM Maximo Application Suite 9.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.
CVE-2025-3423 2 Ibm, Linux 2 Aspera Faspex, Linux Kernel 2025-09-01 5.4 Medium
IBM Aspera Faspex 5.0.0 through 5.0.11 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2025-27696 1 Apache 1 Superset 2025-09-01 8.8 High
Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions. This issue affects Apache Superset: through 4.1.1. Users are recommended to upgrade to version 4.1.2 or above, which fixes the issue.