Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
915 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2010-2861 |
— | — | 0.9975 | — | KEV | A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which al |
CVE-2023-3519 |
— | — | 0.9975 | — | KEV | Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for u |
CVE-2022-47966 |
— | — | 0.9975 | — | KEV | Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability d |
CVE-2023-38205 |
— | — | 0.9976 | — | KEV | Adobe ColdFusion contains an improper access control vulnerability that allows for a security featur |
CVE-2020-13927 |
— | — | 0.9978 | — | KEV | The previous default setting for Airflow's Experimental API was to allow all API requests without au |
CVE-2021-31207 |
— | — | 0.9978 | — | KEV | Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature byp |
CVE-2019-11043 |
— | — | 0.9978 | — | KEV | In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module t |
CVE-2024-0012 |
— | — | 0.9979 | — | KEV | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based managemen |
CVE-2023-29298 |
— | — | 0.9979 | — | KEV | Adobe ColdFusion contains an improper access control vulnerability that allows for a security featur |
CVE-2025-32432 |
— | — | 0.9979 | — | KEV | Craft CMS contains a code injection vulnerability that allows a remote attacker to execute arbitrary |
CVE-2021-34527 |
— | — | 0.9979 | — | KEV | Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spool |
CVE-2008-2992 |
— | — | 0.9979 | — | KEV | Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potenti |
CVE-2022-1040 |
— | — | 0.9980 | — | KEV | An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for rem |
CVE-2025-55182 |
— | — | 0.9980 | — | KEV | Meta React Server Components contains a remote code execution vulnerability that could allow unauthe |
CVE-2016-6277 |
— | — | 0.9980 | — | KEV | NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to th |
CVE-2023-23752 |
— | — | 0.9981 | — | KEV | Joomla! contains an improper access control vulnerability that allows unauthorized access to webserv |
CVE-2020-0796 |
— | — | 0.9981 | — | KEV | A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1. |
CVE-2015-3113 |
— | — | 0.9981 | — | KEV | Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute co |
CVE-2024-36401 |
— | — | 0.9981 | — | KEV | OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated |
CVE-2023-38831 |
— | — | 0.9981 | — | KEV | RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a u |
CVE-2025-10035 |
— | — | 0.9982 | — | KEV | Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an actor wit |
CVE-2017-7269 |
— | — | 0.9982 | — | KEV | Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Se |
CVE-2021-37415 |
— | — | 0.9982 | — | KEV | Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a |
CVE-2022-46169 |
— | — | 0.9983 | — | KEV | Cacti contains a command injection vulnerability that allows an unauthenticated user to execute code |
CVE-2026-8037 |
— | — | 0.9984 | — | KEV | Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attac |
CVE-2022-35914 |
— | — | 0.9985 | — | KEV | Teclib GLPI contains a remote code execution vulnerability in the third-party library, htmlawed. |
CVE-2021-21972 |
— | — | 0.9987 | — | KEV | VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Ser |
CVE-2021-31166 |
— | — | 0.9987 | — | KEV | Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execu |
CVE-2021-36260 |
— | — | 0.9987 | — | KEV | A command injection vulnerability in the web server of some Hikvision product. Due to the insufficie |
CVE-2021-44515 |
— | — | 0.9987 | — | KEV | Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to |
CVE-2022-35405 |
— | — | 0.9987 | — | KEV | Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulne |
CVE-2021-27065 |
— | — | 0.9988 | — | KEV | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code executio |
CVE-2019-1653 |
— | — | 0.9988 | — | KEV | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls f |
CVE-2021-35394 |
— | — | 0.9988 | — | KEV | RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker t |
CVE-2014-0497 |
— | — | 0.9988 | — | KEV | Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to exec |
CVE-2021-22986 |
— | — | 0.9990 | — | KEV | F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iCo |
CVE-2018-0296 |
— | — | 0.9990 | — | KEV | Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTT |
CVE-2023-21839 |
— | — | 0.9990 | — | KEV | Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker |
CVE-2020-7961 |
— | — | 0.9990 | — | KEV | Liferay Portal contains a deserialization of untrusted data vulnerability that allows remote attacke |
CVE-2019-7481 |
— | — | 0.9991 | — | KEV | SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain rea |
CVE-2015-1427 |
— | — | 0.9991 | — | KEV | The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protectio |
CVE-2024-45519 |
— | — | 0.9991 | — | KEV | Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal se |
CVE-2021-20038 |
— | — | 0.9991 | — | KEV | SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerabil |
CVE-2019-3396 |
— | — | 0.9991 | — | KEV | Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability t |
CVE-2019-0604 |
— | — | 0.9991 | — | KEV | Microsoft SharePoint fails to check the source markup of an application package. An attacker who suc |
CVE-2026-10520 |
— | — | 0.9991 | — | KEV | Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability w |
CVE-2024-32113 |
— | — | 0.9992 | — | KEV | Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution. |
CVE-2025-25257 |
— | — | 0.9992 | — | KEV | Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker |
CVE-2025-4427 |
— | — | 0.9993 | — | KEV | Ivanti Endpoint Manager Mobile (EPMM) contains an authentication bypass vulnerability in the API com |
CVE-2022-24816 |
— | — | 0.9993 | — | KEV | OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle an |