Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10086 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-32027 1 Microsoft 2 Odbc Driver For Sql Server, Sql Server 2025-02-28 7.8 High
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-29349 1 Microsoft 3 Odbc Driver For Sql Server, Ole Db Driver For Sql Server, Sql Server 2025-02-28 7.8 High
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
CVE-2023-28287 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-02-28 7.8 High
Microsoft Publisher Remote Code Execution Vulnerability
CVE-2023-28295 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-02-28 7.8 High
Microsoft Publisher Remote Code Execution Vulnerability
CVE-2023-33149 1 Microsoft 2 365 Apps, Office 2025-02-28 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2023-33152 1 Microsoft 2 365 Apps, Office 2025-02-28 7 High
Microsoft ActiveX Remote Code Execution Vulnerability
CVE-2023-32033 1 Microsoft 5 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 2 more 2025-02-28 6.6 Medium
Microsoft Failover Cluster Remote Code Execution Vulnerability
CVE-2023-32038 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2025-02-28 8.8 High
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2023-33134 1 Microsoft 1 Sharepoint Server 2025-02-28 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-33158 1 Microsoft 2 365 Apps, Office 2025-02-28 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33160 1 Microsoft 1 Sharepoint Server 2025-02-28 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-33161 1 Microsoft 2 365 Apps, Office 2025-02-28 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-32057 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2025-02-28 9.8 Critical
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-35302 1 Microsoft 11 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 8 more 2025-02-28 8.8 High
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-35309 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2025-02-28 7.5 High
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2021-31195 1 Microsoft 1 Exchange Server 2025-02-28 6.5 Medium
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-33153 1 Microsoft 2 365 Apps, Office 2025-02-28 6.8 Medium
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-23760 1 Github 1 Enterprise Server 2025-02-28 4.9 Medium
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to versions 3.8 and was fixed in versions 3.7.7, 3.6.10, 3.5.14, and 3.4.17. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2023-1287 1 3ds 1 Enovia Live Collaboration 2025-02-28 9 Critical
An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution.
CVE-2024-8425 2025-02-28 9.8 Critical
The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwb_wgm_preview_mail' and 'mwb_wgm_woocommerce_add_cart_item_data' functions in all versions up to, and including, 2.6.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.