Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
916 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2024-28987 |
— | — | 0.9330 | — | KEV | SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, un |
CVE-2017-0143 |
— | — | 0.9331 | — | KEV | Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows |
CVE-2025-4008 |
— | — | 0.9332 | — | KEV | Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthent |
CVE-2025-54309 |
— | — | 0.9347 | — | KEV | CrushFTP contains an unprotected alternate channel vulnerability. When the DMZ proxy feature is not |
CVE-2023-36846 |
— | — | 0.9347 | — | KEV | Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability |
CVE-2012-1723 |
— | — | 0.9357 | — | KEV | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows r |
CVE-2020-7796 |
— | — | 0.9359 | — | KEV | Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery vulnerability if Web |
CVE-2021-26858 |
— | — | 0.9365 | — | KEV | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code executio |
CVE-2024-9474 |
— | — | 0.9375 | — | KEV | Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege e |
CVE-2013-0625 |
— | — | 0.9376 | — | KEV | Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthori |
CVE-2025-24016 |
— | — | 0.9384 | — | KEV | Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code executi |
CVE-2025-47812 |
— | — | 0.9388 | — | KEV | Wing FTP Server contains an improper neutralization of null byte or NUL character vulnerability that |
CVE-2022-27924 |
— | — | 0.9391 | — | KEV | Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targe |
CVE-2024-55956 |
— | — | 0.9397 | — | KEV | Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestrict |
CVE-2025-11953 |
— | — | 0.9398 | — | KEV | React Native Community CLI contains an OS command injection vulnerability which could allow unauthen |
CVE-2026-35616 |
— | — | 0.9398 | — | KEV | Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthe |
CVE-2025-8088 |
— | — | 0.9401 | — | KEV | RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This |
CVE-2016-0189 |
— | — | 0.9406 | — | KEV | The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow at |
CVE-2017-1000486 |
— | — | 0.9410 | — | KEV | Primetek Primefaces is vulnerable to a weak encryption flaw resulting in remote code execution |
CVE-2016-4117 |
— | — | 0.9427 | — | KEV | An access of resource using incompatible type vulnerability exists within Adobe Flash Player that al |
CVE-2025-30406 |
— | — | 0.9434 | — | KEV | Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the |
CVE-2024-55591 |
— | — | 0.9435 | — | KEV | Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an una |
CVE-2024-48248 |
— | — | 0.9436 | — | KEV | NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an atta |
CVE-2023-7028 |
— | — | 0.9446 | — | KEV | GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allo |
CVE-2017-18368 |
— | — | 0.9451 | — | KEV | Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote System Log forwardi |
CVE-2020-14644 |
— | — | 0.9455 | — | KEV | Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vul |
CVE-2020-2883 |
— | — | 0.9458 | — | KEV | Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulner |
CVE-2024-21413 |
— | — | 0.9466 | — | KEV | Microsoft Outlook contains an improper input validation vulnerability that allows for remote code ex |
CVE-2020-6287 |
— | — | 0.9472 | — | KEV | SAP NetWeaver Application Server Java Platforms contains a missing authentication for critical funct |
CVE-2024-51378 |
— | — | 0.9475 | — | KEV | CyberPanel contains an incorrect default permissions vulnerability that allows for authentication by |
CVE-2018-14933 |
— | — | 0.9476 | — | KEV | NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote |
CVE-2024-47575 |
— | — | 0.9477 | — | KEV | Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allow |
CVE-2017-9822 |
— | — | 0.9479 | — | KEV | DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deseri |
CVE-2014-6332 |
— | — | 0.9492 | — | KEV | OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a craf |
CVE-2021-4034 |
— | — | 0.9492 | — | KEV | The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows |
CVE-2019-12989 |
— | — | 0.9496 | — | KEV | Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection. |
CVE-2015-4852 |
— | — | 0.9499 | — | KEV | Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Comm |
CVE-2023-36845 |
— | — | 0.9507 | — | KEV | Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerabi |
CVE-2019-10068 |
— | — | 0.9507 | — | KEV | Kentico contains a failure to validate security headers. This deserialization can led to unauthentic |
CVE-2017-12637 |
— | — | 0.9511 | — | KEV | SAP NetWeaver Application Server (AS) Java contains a directory traversal vulnerability in scheduler |
CVE-2018-0798 |
— | — | 0.9512 | — | KEV | Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in me |
CVE-2025-57819 |
— | — | 0.9521 | — | KEV | Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user |
CVE-2022-23134 |
— | — | 0.9526 | — | KEV | Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend. |
CVE-2024-53704 |
— | — | 0.9531 | — | KEV | SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mec |
CVE-2019-7609 |
— | — | 0.9534 | — | KEV | Kibana contain an arbitrary code execution flaw in the Timelion visualizer. |
CVE-2015-0313 |
— | — | 0.9534 | — | KEV | Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code. |
CVE-2025-54236 |
— | — | 0.9535 | — | KEV | Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could |
CVE-2019-11580 |
— | — | 0.9536 | — | KEV | Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a |
CVE-2024-1212 |
— | — | 0.9539 | — | KEV | Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticat |
CVE-2022-36537 |
— | — | 0.9540 | — | KEV | ZK Framework AuUploader servlets contain an unspecified vulnerability that could allow an attacker t |