Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (8076 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2024-28238 1 Monospace 1 Directus 2025-01-03 2.3 Low
Directus is a real-time API and App dashboard for managing SQL database content. When reaching the /files page, a JWT is passed via GET request. Inclusion of session tokens in URLs poses a security risk as URLs are often logged in various places (e.g., web server logs, browser history). Attackers gaining access to these logs may hijack active user sessions, leading to unauthorized access to sensitive information or actions on behalf of the user. This issue has been addressed in version 10.10.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2023-3050 1 Tmtmakine 2 Lockcell, Lockcell Firmware 2025-01-03 9.8 Critical
Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypass.This issue affects Lockcell: before 15.
CVE-2023-33568 1 Dolibarr 1 Dolibarr Erp\/crm 2025-01-03 7.5 High
An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.
CVE-2023-33620 1 Gl-inet 2 Gl-ar750s, Gl-ar750s Firmware 2025-01-03 5.9 Medium
GL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure protocol in its communications which allows attackers to eavesdrop via a man-in-the-middle attack.
CVE-2022-30148 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2025-01-02 5.5 Medium
Windows Desired State Configuration (DSC) Information Disclosure Vulnerability
CVE-2022-29145 3 Fedoraproject, Microsoft, Redhat 7 Fedora, .net, .net Core and 4 more 2025-01-02 7.5 High
.NET and Visual Studio Denial of Service Vulnerability
CVE-2022-29117 3 Fedoraproject, Microsoft, Redhat 7 Fedora, .net, .net Core and 4 more 2025-01-02 7.5 High
.NET and Visual Studio Denial of Service Vulnerability
CVE-2022-26907 1 Microsoft 1 Azure Sdk For .net 2025-01-02 5.3 Medium
Azure SDK for .NET Information Disclosure Vulnerability
CVE-2024-56354 1 Jetbrains 1 Teamcity 2025-01-02 5.5 Medium
In JetBrains TeamCity before 2024.12 password field value were accessible to users with view settings permission
CVE-2022-22005 1 Microsoft 3 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Server 2025-01-02 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-21997 1 Microsoft 23 Windows 10, Windows 10 1507, Windows 10 1607 and 20 more 2025-01-02 7.1 High
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21838 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-01-02 5.5 Medium
Windows Cleanup Manager Elevation of Privilege Vulnerability
CVE-2022-21895 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2025-01-02 7.8 High
Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2023-35633 1 Microsoft 6 Windows 10 1507, Windows Server 2008, Windows Server 2008 R2 and 3 more 2025-01-01 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-35624 1 Microsoft 1 Azure Connected Machine Agent 2025-01-01 7.3 High
Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2023-36005 1 Microsoft 22 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 19 more 2025-01-01 7.5 High
Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2023-36391 1 Microsoft 2 Windows 11 23h2, Windows 11 23h2 2025-01-01 7.8 High
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
CVE-2023-35379 1 Microsoft 2 Windows Server 2008, Windows Server 2008 R2 2025-01-01 7.8 High
Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability
CVE-2023-36903 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2025-01-01 7.8 High
Windows System Assessment Tool Elevation of Privilege Vulnerability
CVE-2023-36876 1 Microsoft 2 Windows Server 2008, Windows Server 2008 R2 2025-01-01 7.1 High
Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability