Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (12744 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2024-27937 1 Glpi-project 1 Glpi 2025-01-02 6.5 Medium
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authenticated user can obtain the email address of all GLPI users. This issue has been patched in version 10.0.13.
CVE-2024-27930 1 Glpi-project 1 Glpi 2025-01-02 6.5 Medium
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authenticated user can access sensitive fields data from items on which he has read access. This issue has been patched in version 10.0.13.
CVE-2024-13110 2025-01-02 4.3 Medium
A vulnerability classified as problematic has been found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected is an unknown function of the file src/main/java/com/yf/exam/modules/paper/controller/PaperController.java， of the component Exam Answer Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2023-21751 1 Microsoft 1 Azure Devops Server 2025-01-01 6.5 Medium
Azure DevOps Server Spoofing Vulnerability
CVE-2023-36004 1 Microsoft 22 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 19 more 2025-01-01 7.5 High
Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability
CVE-2023-36889 1 Microsoft 19 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 16 more 2025-01-01 5.5 Medium
Windows Group Policy Security Feature Bypass Vulnerability
CVE-2023-33155 1 Microsoft 11 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 8 more 2025-01-01 7.8 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-32022 1 Microsoft 5 Windows Server 2012, Windows Server 2012 R2, Windows Server 2016 and 2 more 2025-01-01 7.6 High
Windows Server Service Security Feature Bypass Vulnerability
CVE-2023-32009 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2025-01-01 8.8 High
Windows Collaborative Translation Framework Elevation of Privilege Vulnerability
CVE-2023-21721 1 Microsoft 2 Onenote, Onenote For Android 2025-01-01 6.5 Medium
Microsoft OneNote Elevation of Privilege Vulnerability
CVE-2023-21817 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-01-01 7.8 High
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2023-21777 1 Microsoft 2 Azure App Service On Azure Stack, Azure Stack Hub 2025-01-01 8.7 High
Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
CVE-2023-21752 1 Microsoft 11 Windows 10, Windows 10 1507, Windows 10 1607 and 8 more 2025-01-01 7.1 High
Windows Backup Service Elevation of Privilege Vulnerability
CVE-2023-21750 1 Microsoft 24 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 21 more 2025-01-01 7.1 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21549 1 Microsoft 21 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 18 more 2025-01-01 8.8 High
Windows SMB Witness Service Elevation of Privilege Vulnerability
CVE-2023-21531 1 Microsoft 1 Azure Service Fabric 2025-01-01 7 High
Azure Service Fabric Container Elevation of Privilege Vulnerability
CVE-2024-38016 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2024-12-31 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2024-43460 1 Microsoft 2 .dynamics 365 Business Central Online, Dynamics 365 Business Central 2024-12-31 8.1 High
Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network.
CVE-2024-43479 1 Microsoft 2 Power Automate, Power Automate For Desktop 2024-12-31 8.5 High
Microsoft Power Automate Desktop Remote Code Execution Vulnerability
CVE-2024-38231 1 Microsoft 10 Windows Server 2008, Windows Server 2008 R2, Windows Server 2008 Sp2 and 7 more 2024-12-31 6.5 Medium
Windows Remote Desktop Licensing Service Denial of Service Vulnerability