Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9522 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2024-13171 1 Ivanti 1 Endpoint Manager 2026-02-26 7.8 High
Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.
CVE-2024-13163 1 Ivanti 1 Endpoint Manager 2026-02-26 7.8 High
Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.
CVE-2024-13162 1 Ivanti 1 Endpoint Manager 2026-02-26 7.2 High
SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. This CVE addresses incomplete fixes from CVE-2024-32848.
CVE-2025-21171 4 Apple, Linux, Microsoft and 1 more 7 Macos, Linux Kernel, .net and 4 more 2026-02-26 7.5 High
.NET Remote Code Execution Vulnerability
CVE-2025-21291 1 Microsoft 13 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 10 more 2026-02-26 8.8 High
Windows Direct Show Remote Code Execution Vulnerability
CVE-2025-21297 1 Microsoft 10 Windows Server 2008, Windows Server 2008 R2, Windows Server 2012 and 7 more 2026-02-26 8.1 High
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2025-21298 1 Microsoft 24 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 21 more 2026-02-26 9.8 Critical
Windows OLE Remote Code Execution Vulnerability
CVE-2025-21309 1 Microsoft 8 Windows Server 2012, Windows Server 2012 R2, Windows Server 2016 and 5 more 2026-02-26 8.1 High
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2025-21279 1 Microsoft 1 Edge Chromium 2026-02-26 6.5 Medium
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2025-21283 1 Microsoft 1 Edge Chromium 2026-02-26 6.5 Medium
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2025-21176 4 Apple, Linux, Microsoft and 1 more 25 Macos, Linux Kernel, .net and 22 more 2026-02-26 8.8 High
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2025-21342 1 Microsoft 1 Edge Chromium 2026-02-26 8.8 High
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2025-21178 1 Microsoft 4 Visual Studio 2015, Visual Studio 2017, Visual Studio 2019 and 1 more 2026-02-26 8.8 High
Visual Studio Remote Code Execution Vulnerability
CVE-2025-21344 1 Microsoft 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 2026-02-26 7.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2025-24016 1 Wazuh 1 Wazuh 2026-02-26 9.9 Critical
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and deserialized using `as_wazuh_object` (in `framework/wazuh/core/cluster/common.py`). If an attacker manages to inject an unsanitized dictionary in DAPI request/response, they can forge an unhandled exception (`__unhandled_exc__`) to evaluate arbitrary python code. The vulnerability can be triggered by anybody with API access (compromised dashboard or Wazuh servers in the cluster) or, in certain configurations, even by a compromised agent. Version 4.9.1 contains a fix.
CVE-2025-21345 1 Microsoft 6 365 Apps, Office, Office 2019 and 3 more 2026-02-26 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2025-21348 1 Microsoft 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 2026-02-26 7.2 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2024-47908 1 Ivanti 1 Cloud Services Appliance 2026-02-26 9.1 Critical
OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
CVE-2025-21354 1 Microsoft 9 365 Apps, Office, Office 2019 and 6 more 2026-02-26 8.4 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-22467 1 Ivanti 1 Connect Secure 2026-02-26 9.9 Critical
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution.