Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (80735 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-28495 1 Arista 2 7130, Metamako Operating System 2024-11-21 7.2 High
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train
CVE-2021-28493 1 Arista 2 7130, Metamako Operating System 2024-11-21 8.4 High
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to do so. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.32.0 and prior releases
CVE-2021-28490 1 Owasp 1 Csrfguard 2024-11-21 8.8 High
In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token.
CVE-2021-28484 2 Fedoraproject, Yubico 2 Fedora, Yubihsm Connector 2024-11-21 7.5 High
An issue was discovered in the /api/connector endpoint handler in Yubico yubihsm-connector before 3.0.1 (in YubiHSM SDK before 2021.04). The handler did not validate the length of the request, which can lead to a state where yubihsm-connector becomes stuck in a loop waiting for the YubiHSM to send it data, preventing any further operations until the yubihsm-connector is restarted. An attacker can send 0, 1, or 2 bytes to trigger this.
CVE-2021-28482 1 Microsoft 1 Exchange Server 2024-11-21 8.8 High
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28477 1 Microsoft 1 Visual Studio Code 2024-11-21 7 High
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28475 1 Microsoft 1 Visual Studio Code 2024-11-21 7.8 High
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28474 1 Microsoft 2 Sharepoint Foundation, Sharepoint Server 2024-11-21 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-28473 1 Microsoft 1 Visual Studio Code 2024-11-21 7.8 High
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28472 1 Microsoft 1 Vscode-maven 2024-11-21 7.8 High
Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability
CVE-2021-28471 1 Microsoft 1 Visual Studio Code 2024-11-21 7.8 High
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28470 1 Microsoft 2 Visual Studio Code Github Pull Requests And Issues, Visual Studio Code Github Pull Requests And Issues Extension 2024-11-21 7.8 High
Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability
CVE-2021-28469 1 Microsoft 1 Visual Studio Code 2024-11-21 7.8 High
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28468 1 Microsoft 1 Raw Image Extension 2024-11-21 7.8 High
Raw Image Extension Remote Code Execution Vulnerability
CVE-2021-28466 1 Microsoft 1 Raw Image Extension 2024-11-21 7.8 High
Raw Image Extension Remote Code Execution Vulnerability
CVE-2021-28465 1 Microsoft 1 Web Media Extensions 2024-11-21 7.8 High
Web Media Extensions Remote Code Execution Vulnerability
CVE-2021-28464 1 Microsoft 1 Vp9 Video Extensions 2024-11-21 7.8 High
VP9 Video Extensions Remote Code Execution Vulnerability
CVE-2021-28460 1 Microsoft 1 Azure Sphere 2024-11-21 8.1 High
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-28458 1 Microsoft 1 Ms-rest-nodeauth 2024-11-21 7.8 High
Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability
CVE-2021-28457 1 Microsoft 1 Visual Studio Code 2024-11-21 7.8 High
Visual Studio Code Remote Code Execution Vulnerability