Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
916 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2024-20439 |
— | — | 0.9709 | — | KEV | Cisco Smart Licensing Utility contains a static credential vulnerability that allows an unauthentica |
CVE-2015-2051 |
— | — | 0.9710 | — | KEV | D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a Get |
CVE-2020-2555 |
— | — | 0.9712 | — | KEV | Multiple Oracle products contain a remote code execution vulnerability that allows an unauthenticate |
CVE-2017-17562 |
— | — | 0.9713 | — | KEV | Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is d |
CVE-2023-23397 |
— | — | 0.9716 | — | KEV | Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay |
CVE-2025-2747 |
— | — | 0.9717 | — | KEV | Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerabi |
CVE-2021-41277 |
— | — | 0.9718 | — | KEV | Metabase contains a local file inclusion vulnerability in the custom map support in the API to read |
CVE-2024-41713 |
— | — | 0.9721 | — | KEV | Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthor |
CVE-2020-14864 |
— | — | 0.9723 | — | KEV | Path traversal vulnerability, where an attacker can target the preview FilePath parameter of the get |
CVE-2015-1641 |
— | — | 0.9725 | — | KEV | Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich t |
CVE-2020-25213 |
— | — | 0.9733 | — | KEV | WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthentic |
CVE-2023-26360 |
— | — | 0.9734 | — | KEV | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote c |
CVE-2023-24489 |
— | — | 0.9734 | — | KEV | Citrix Content Collaboration contains an improper access control vulnerability that could allow an u |
CVE-2026-85706 |
— | — | 0.9736 | — | KEV | GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows |
CVE-2007-3010 |
— | — | 0.9738 | — | KEV | masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows |
CVE-2020-1956 |
— | — | 0.9739 | — | KEV | Apache Kylin contains an OS command injection vulnerability which could permit an attacker to perfor |
CVE-2024-56145 |
— | — | 0.9740 | — | KEV | Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to re |
CVE-2019-9082 |
— | — | 0.9742 | — | KEV | ThinkPHP contains an unspecified vulnerability that allows for remote code execution via public//?s= |
CVE-2024-4358 |
— | — | 0.9748 | — | KEV | Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allow |
CVE-2016-3714 |
— | — | 0.9748 | — | KEV | ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, M |
CVE-2020-25078 |
— | — | 0.9751 | — | KEV | D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could allow for re |
CVE-2021-42237 |
— | — | 0.9757 | — | KEV | Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execut |
CVE-2025-20281 |
— | — | 0.9760 | — | KEV | Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE an |
CVE-2025-34028 |
— | — | 0.9760 | — | KEV | Commvault Command Center contains a path traversal vulnerability that allows a remote, unauthenticat |
CVE-2022-43769 |
— | — | 0.9767 | — | KEV | Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an |
CVE-2020-14883 |
— | — | 0.9773 | — | KEV | Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impa |
CVE-2026-21643 |
— | — | 0.9774 | — | KEV | Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated at |
CVE-2015-7450 |
— | — | 0.9776 | — | KEV | Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastruct |
CVE-2020-11738 |
— | — | 0.9782 | — | KEV | WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator |
CVE-2021-36380 |
— | — | 0.9783 | — | KEV | Sunhillo SureLine contains an OS command injection vulnerability that allows an attacker to cause a |
CVE-2021-45382 |
— | — | 0.9784 | — | KEV | A remote code execution vulnerability exists in all series H/W revisions routers via the DDNS functi |
CVE-2021-40444 |
— | — | 0.9784 | — | KEV | Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution. |
CVE-2023-25280 |
— | — | 0.9786 | — | KEV | D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthent |
CVE-2018-19410 |
— | — | 0.9794 | — | KEV | Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, un |
CVE-2022-22536 |
— | — | 0.9795 | — | KEV | SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Con |
CVE-2020-17519 |
— | — | 0.9800 | — | KEV | Apache Flink contains an improper access control vulnerability that allows an attacker to read any f |
CVE-2022-29303 |
— | — | 0.9804 | — | KEV | SolarView Compact contains a command injection vulnerability due to improper validation of input val |
CVE-2023-25717 |
— | — | 0.9807 | — | KEV | Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services |
CVE-2021-35395 |
— | — | 0.9810 | — | KEV | Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe cop |
CVE-2024-3272 |
— | — | 0.9811 | — | KEV | D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an att |
CVE-2026-31431 |
— | — | 0.9811 | — | KEV | Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow |
CVE-2021-39144 |
— | — | 0.9812 | — | KEV | XStream contains a remote code execution vulnerability that allows an attacker to manipulate the pro |
CVE-2019-5544 |
— | — | 0.9813 | — | KEV | VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vu |
CVE-2020-6207 |
— | — | 0.9813 | — | KEV | SAP Solution Manager User Experience Monitoring contains a missing authentication for critical funct |
CVE-2025-0108 |
— | — | 0.9814 | — | KEV | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web inte |
CVE-2023-27524 |
— | — | 0.9815 | — | KEV | Apache Superset contains an insecure default initialization of a resource vulnerability that allows |
CVE-2024-12987 |
— | — | 0.9816 | — | KEV | DrayTek Vigor2960, Vigor300B, and Vigor3900 routers contain an OS command injection vulnerability du |
CVE-2021-33766 |
— | — | 0.9818 | — | KEV | Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauth |
CVE-2012-0507 |
— | — | 0.9819 | — | KEV | An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environ |
CVE-2022-26138 |
— | — | 0.9824 | — | KEV | Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and passwor |