Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9990 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-31324 1 Control-webpanel 1 Webpanel 2024-11-21 9.8 Critical
The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution.
CVE-2021-31215 3 Debian, Fedoraproject, Schedmd 3 Debian Linux, Fedora, Slurm 2024-11-21 8.8 High
SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling.
CVE-2021-31214 1 Microsoft 1 Visual Studio Code 2024-11-21 7.8 High
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-31213 1 Microsoft 2 Remote, Remote Development 2024-11-21 7.8 High
Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability
CVE-2021-31211 1 Microsoft 1 Visual Studio Code 2024-11-21 7.8 High
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-31206 1 Microsoft 1 Exchange Server 2024-11-21 7.6 High
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-31200 1 Microsoft 1 Neural Network Intelligence 2024-11-21 7.2 High
Common Utilities Remote Code Execution Vulnerability
CVE-2021-31194 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 8.8 High
OLE Automation Remote Code Execution Vulnerability
CVE-2021-31192 1 Microsoft 3 Windows 10, Windows 10 1809, Windows 10 20h2 2024-11-21 7.8 High
Windows Media Foundation Core Remote Code Execution Vulnerability
CVE-2021-31180 1 Microsoft 3 365 Apps, Office, Word 2024-11-21 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2021-31179 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2024-11-21 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-31177 1 Microsoft 6 365 Apps, Excel, Office and 3 more 2024-11-21 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-31176 1 Microsoft 4 365 Apps, Office, Office Online Server and 1 more 2024-11-21 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-31175 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2024-11-21 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-30503 1 Glsl Linting Project 1 Glsl Linting 2024-11-21 9.8 Critical
The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration.
CVE-2021-30502 1 Simple Glasgow Haskell Compiler Project 1 Simple Glasgow Haskell Compiler 2024-11-21 9.8 Critical
The unofficial vscode-ghc-simple (aka Simple Glasgow Haskell Compiler) extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand.
CVE-2021-30461 1 Voipmonitor 1 Voipmonitor 2024-11-21 9.8 Critical
A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value (which might contain PHP code) is injected into config/configuration.php.
CVE-2021-30177 1 Phpnuke 1 Php-nuke 2024-11-21 9.8 Critical
There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution. This occurs because the U.S. state is not validated to be two letters, and the OrderBy field is not validated to be one of LASTNAME, CITY, or STATE.
CVE-2021-30123 1 Ffmpeg 1 Ffmpeg 2024-11-21 8.8 High
FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution.
CVE-2021-29996 1 Marktext 1 Marktext 2024-11-21 9.6 Critical
Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by opening .md files containing a mutation Cross Site Scripting (XSS) payload.