Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9963 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-24376 1 Autoptimize 1 Autoptimize 2024-11-21 9.8 Critical
The Autoptimize WordPress plugin before 2.7.8 attempts to delete malicious files (such as .php) form the uploaded archive via the "Import Settings" feature, after its extraction. However, the extracted folders are not checked and it is possible to upload a zip which contained a directory with PHP file in it and then it is not removed from the disk. It is a bypass of CVE-2020-24948 which allows sending a PHP file via the "Import Settings" functionality to achieve Remote Code Execution.
CVE-2021-24370 1 Radykal 1 Fancy Product Designer 2024-11-21 9.8 Critical
The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution.
CVE-2021-24240 1 Aivahthemes 1 Business Hours Pro 2024-11-21 9.8 Critical
The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.
CVE-2021-24217 1 Facebook 1 Facebook 2024-11-21 8.1 High
The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it possible for PHP objects to be supplied creating an Object Injection vulnerability. There was also a useable magic method in the plugin that could be used to achieve remote code execution.
CVE-2021-24161 1 Expresstech 1 Responsive Menu 2024-11-21 8.8 High
In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive containing malicious PHP files. The attacker could then access those files to achieve remote code execution and further infect the targeted site.
CVE-2021-24160 1 Expresstech 1 Responsive Menu 2024-11-21 8.8 High
In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the /rmp-menu/ directory. These files could then be accessed via the front end of the site to trigger remote code execution and ultimately allow an attacker to execute commands to further infect a WordPress site.
CVE-2021-24112 1 Microsoft 4 .net, .net Core, Mono and 1 more 2024-11-21 8.1 High
.NET Core Remote Code Execution Vulnerability
CVE-2021-24110 1 Microsoft 1 High Efficiency Video Coding 2024-11-21 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-24108 1 Microsoft 3 365 Apps, Excel, Office 2024-11-21 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-24094 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 9.8 Critical
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2021-24093 1 Microsoft 11 Windows 10, Windows 10 1607, Windows 10 1803 and 8 more 2024-11-21 8.8 High
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2021-24091 1 Microsoft 11 Windows 10, Windows 10 1507, Windows 10 1607 and 8 more 2024-11-21 7.8 High
Windows Camera Codec Pack Remote Code Execution Vulnerability
CVE-2021-24089 1 Microsoft 1 High Efficiency Video Coding 2024-11-21 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-24088 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 8.8 High
Windows Local Spooler Remote Code Execution Vulnerability
CVE-2021-24083 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2024-11-21 7.8 High
Windows Address Book Remote Code Execution Vulnerability
CVE-2021-24081 1 Microsoft 11 Windows 10, Windows 10 1507, Windows 10 1607 and 8 more 2024-11-21 7.8 High
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
CVE-2021-24078 1 Microsoft 10 Windows Server 1909, Windows Server 2004, Windows Server 2008 and 7 more 2024-11-21 9.8 Critical
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-24077 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 9.8 Critical
Windows Fax Service Remote Code Execution Vulnerability
CVE-2021-24074 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 9.8 Critical
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2021-24072 1 Microsoft 3 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Server 2024-11-21 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability