Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9602 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-23418 1 Microsoft 2 Windows 11 22h2, Windows 11 22h2 2025-01-01 7.8 High
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2023-23399 1 Microsoft 6 365 Apps, Excel, Office and 3 more 2025-01-01 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-21714 1 Microsoft 2 365 Apps, Office Long Term Servicing Channel 2025-01-01 5.5 Medium
Microsoft Office Information Disclosure Vulnerability
CVE-2023-21702 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-01-01 7.5 High
Windows iSCSI Service Denial of Service Vulnerability
CVE-2023-21699 1 Microsoft 17 Windows 10, Windows 10 1507, Windows 10 1607 and 14 more 2025-01-01 5.3 Medium
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
CVE-2023-21693 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-01-01 5.7 Medium
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-21691 1 Microsoft 21 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 18 more 2025-01-01 7.5 High
Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
CVE-2023-21687 1 Microsoft 5 Windows 11 21h2, Windows 11 21h2, Windows 11 22h2 and 2 more 2025-01-01 5.5 Medium
HTTP.sys Information Disclosure Vulnerability
CVE-2023-21819 1 Microsoft 11 Windows 10 1809, Windows 10 20h2, Windows 10 20h2 and 8 more 2025-01-01 7.5 High
Windows Secure Channel Denial of Service Vulnerability
CVE-2023-21798 1 Microsoft 21 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 18 more 2025-01-01 8.8 High
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2023-21536 1 Microsoft 13 Windows 10 1809, Windows 10 20h2, Windows 10 20h2 and 10 more 2025-01-01 4.7 Medium
Event Tracing for Windows Information Disclosure Vulnerability
CVE-2023-21772 1 Microsoft 24 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 21 more 2025-01-01 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21741 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-01-01 7.1 High
Microsoft Office Visio Information Disclosure Vulnerability
CVE-2023-21682 1 Microsoft 24 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 21 more 2025-01-01 5.3 Medium
Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
CVE-2023-21539 1 Microsoft 11 Windows 10 20h2, Windows 10 20h2, Windows 10 21h2 and 8 more 2025-01-01 7.5 High
Windows Authentication Remote Code Execution Vulnerability
CVE-2024-38240 1 Microsoft 22 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 19 more 2024-12-31 8.1 High
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2024-37342 1 Microsoft 6 Sql 2016 Azure Connect Feature Pack, Sql Server, Sql Server 2016 and 3 more 2024-12-31 7.1 High
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
CVE-2024-37338 1 Microsoft 6 Sql 2016 Azure Connect Feature Pack, Sql Server, Sql Server 2016 and 3 more 2024-12-31 8.8 High
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
CVE-2023-34101 1 Contiki-ng 1 Contiki-ng 2024-12-30 7.3 High
Contiki-NG is an operating system for internet of things devices. In version 4.8 and prior, when processing ICMP DAO packets in the `dao_input_storing` function, the Contiki-NG OS does not verify that the packet buffer is big enough to contain the bytes it needs before accessing them. Up to 16 bytes can be read out of bounds in the `dao_input_storing` function. An attacker can truncate an ICMP packet so that it does not contain enough data, leading to an out-of-bounds read on these lines. The problem has been patched in the "develop" branch of Contiki-NG, and is expected to be included in release 4.9. As a workaround, one can apply the changes in Contiki-NG pull request #2435 to patch the system.
CVE-2023-32288 1 Fujielectric 2 Tellus, Tellus Lite 2024-12-23 7.8 High
Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM file may lead to information disclosure and/or arbitrary code execution.