Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10413 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-24473 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-24510 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-29109 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2026-05-19 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41061 1 Microsoft 8 365 Apps, Office, Office Long Term Servicing Channel and 5 more 2026-05-19 7.8 High
Microsoft Word Remote Code Execution Vulnerability
CVE-2022-41063 1 Microsoft 6 365 Apps, Excel, Office and 3 more 2026-05-19 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41106 1 Microsoft 6 365 Apps, Excel, Office and 3 more 2026-05-19 8.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-44696 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2024-20673 1 Microsoft 8 Excel, Office, Office Long Term Servicing Channel and 5 more 2026-05-19 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2024-26257 1 Microsoft 2 365 Apps, Office Long Term Servicing Channel 2026-05-19 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-30101 1 Microsoft 6 365 Apps, Office, Office 2016 and 3 more 2026-05-19 7.5 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-43256 1 Microsoft 8 365 Apps, Excel, Excel Rt and 5 more 2026-05-19 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41107 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-44695 1 Microsoft 8 365 Apps, Office, Office 2019 and 5 more 2026-05-19 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-44694 1 Microsoft 5 365 Apps, Office, Office 2019 and 2 more 2026-05-19 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-33153 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 6.8 Medium
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-33158 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33161 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-30104 1 Microsoft 6 365 Apps, Office, Office 2016 and 3 more 2026-05-19 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2023-33149 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2026-27891 1 Neorazorx 1 Facturascripts 2026-05-19 7.2 High
FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerability in the Plugins::add() function. The system fails to properly validate the file paths within uploaded ZIP archives. This allows an attacker to perform a Zip Slip attack, leading to Arbitrary File Write and Remote Code Execution (RCE) by overwriting sensitive .php files outside the designated plugins directory. The vulnerability is located in Plugins.php. While the testZipFile function attempts to validate that the ZIP contains only one root folder, it does not sanitize or validate the individual file paths within that folder. An attacker can bypass this check by naming a file ValidPluginName/../../shell.php. The explode function will see ValidPluginName as the root folder, satisfying the count($folders) != 1 check. However, during extraction, the ../../ sequence triggers a path traversal, allowing the file to be written anywhere the web server has permissions the root directory. This issue is fixed in version 2026.1.