Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (106624 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-28458 1 Microsoft 1 Ms-rest-nodeauth 2024-11-21 7.8 High
Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability
CVE-2021-28457 1 Microsoft 1 Visual Studio Code 2024-11-21 7.8 High
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28455 1 Microsoft 23 365 Apps, Access, Office and 20 more 2024-11-21 8.8 High
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability
CVE-2021-28454 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2024-11-21 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-28453 1 Microsoft 8 365 Apps, Excel, Office and 5 more 2024-11-21 7.8 High
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-28452 1 Microsoft 3 365 Apps, Office, Outlook 2024-11-21 7.1 High
Microsoft Outlook Memory Corruption Vulnerability
CVE-2021-28451 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2024-11-21 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-28449 1 Microsoft 3 365 Apps, Excel, Office 2024-11-21 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-28448 1 Microsoft 2 Kubernetes Tools, Visual Studio Code Kubernetes Tools 2024-11-21 7.8 High
Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability
CVE-2021-28445 1 Microsoft 18 Windows 10, Windows 10 1607, Windows 10 1809 and 15 more 2024-11-21 8.1 High
Windows Network File System Remote Code Execution Vulnerability
CVE-2021-28440 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7 High
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-28439 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.5 High
Windows TCP/IP Driver Denial of Service Vulnerability
CVE-2021-28436 1 Microsoft 12 Windows 10, Windows 10 1507, Windows 10 1607 and 9 more 2024-11-21 7.8 High
Windows Speech Runtime Elevation of Privilege Vulnerability
CVE-2021-28434 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 8.8 High
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28427 1 Xnview 1 Xnview 2024-11-21 7.8 High
Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.
CVE-2021-28419 1 Seopanel 1 Seo Panel 2024-11-21 7.2 High
The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases.
CVE-2021-28398 1 Osgeo 1 Geonetwork 2024-11-21 7.2 High
A privileged attacker in GeoNetwork before 3.12.0 and 4.x before 4.0.4 can use the directory harvester before-script to execute arbitrary OS commands remotely on the hosting infrastructure. A User Administrator or Administrator account is required to perform this. This occurs in the runBeforeScript method in harvesters/src/main/java/org/fao/geonet/kernel/harvest/harvester/localfilesystem/LocalFilesystemHarvester.java. The earliest affected version is 3.4.0.
CVE-2021-28379 2 Myvestacp, Vestacp 2 Myvesta, Vesta Control Panel 2024-11-21 8.8 High
web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin.
CVE-2021-28375 3 Fedoraproject, Linux, Netapp 4 Fedora, Linux Kernel, Cloud Backup and 1 more 2024-11-21 7.8 High
An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308.
CVE-2021-28374 1 Debian 2 Courier-authlib, Debian Linux 2024-11-21 7.5 High
The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).