Export limit exceeded: 344007 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (344007 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-58041 2025-08-23 N/A
Not used
CVE-2025-58040 2025-08-23 N/A
Not used
CVE-2025-58039 2025-08-23 N/A
Not used
CVE-2025-58038 2025-08-23 N/A
Not used
CVE-2025-58037 2025-08-23 N/A
Not used
CVE-2025-58036 2025-08-23 N/A
Not used
CVE-2025-58035 2025-08-23 N/A
Not used
CVE-2025-24469 2025-08-23 N/A
Not used
CVE-2025-24468 2025-08-23 N/A
Not used
CVE-2025-22864 2025-08-23 N/A
Not used
CVE-2025-22863 2025-08-23 N/A
Not used
CVE-2025-22861 2025-08-23 N/A
Not used
CVE-2025-22860 2025-08-23 N/A
Not used
CVE-2025-8193 2025-08-22 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2014-0758 1 Iconics 1 Genesis32 2025-08-22 N/A
An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via a crafted HTML document.
CVE-2014-0757 1 3s-software 1 Codesys Runtime Toolkit 2025-08-22 N/A
Smart Software Solutions (3S) CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.
CVE-2014-0752 1 Ecava 1 Integraxor 2025-08-22 N/A
The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL.
CVE-2014-0751 1 Ge 3 Intelligent Platforms Proficy Hmi\%2fscada Cimplicity, Intelligent Platforms Proficy Hmi\/scada Cimplicity, Intelligent Platforms Proficy Process Systems With Cimplicity 2025-08-22 N/A
The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project. This could allow the attacker to execute arbitrary code.
CVE-2014-0750 1 Ge 3 Intelligent Platforms Proficy Hmi\%2fscada Cimplicity, Intelligent Platforms Proficy Hmi\/scada Cimplicity, Intelligent Platforms Proficy Process Systems With Cimplicity 2025-08-22 N/A
Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.
CVE-2025-57764 1 Wegia 1 Wegia 2025-08-22 6.5 Medium
WeGIA is a Web manager for charitable institutions. Prior to 3.4.7, a Reflected Cross-Site Scripting (XSS) vulnerability was identified in the cargos.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msg_e parameter. This vulnerability is fixed in 3.4.7.