Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
913 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2023-42793 |
— | — | 0.9999 | — | KEV | JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execu |
CVE-2020-9054 |
— | — | 0.9999 | — | KEV | Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection |
CVE-2021-33044 |
— | — | 0.9999 | — | KEV | Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKey |
CVE-2021-34523 |
— | — | 0.9999 | — | KEV | Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation |
CVE-2024-27199 |
— | — | 0.9999 | — | KEV | JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin a |
CVE-2023-29300 |
— | — | 0.9999 | — | KEV | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code exe |
CVE-2018-7600 |
— | — | 0.9999 | — | KEV | Drupal Core contains a remote code execution vulnerability that could allow an attacker to exploit m |
CVE-2023-46604 |
— | — | 0.9999 | — | KEV | Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote a |
CVE-2021-41773 |
— | — | 0.9999 | — | KEV | Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote |
CVE-2020-3452 |
— | — | 0.9999 | — | KEV | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input |
CVE-2025-3248 |
— | — | 0.9999 | — | KEV | Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that |
CVE-2024-13159 |
— | — | 0.9999 | — | KEV | Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote |
CVE-2020-8515 |
— | — | 0.9999 | — | KEV | DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows |
CVE-2024-34102 |
— | — | 0.9999 | — | KEV | Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity refere |
CVE-2017-10271 |
— | — | 0.9999 | — | KEV | Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution. |
CVE-2025-49704 |
— | — | 1.0000 | — | KEV | Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker |
CVE-2024-3273 |
— | — | 1.0000 | — | KEV | D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When com |
CVE-2022-44877 |
— | — | 1.0000 | — | KEV | CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability tha |
CVE-2021-26855 |
— | — | 1.0000 | — | KEV | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code executio |
CVE-2019-16920 |
— | — | 1.0000 | — | KEV | Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achie |
CVE-2018-11776 |
— | — | 1.0000 | — | KEV | Apache Struts contains a vulnerability that allows for remote code execution under two circumstances |
CVE-2020-14882 |
— | — | 1.0000 | — | KEV | Oracle WebLogic Server contains an unspecified vulnerability, which is assessed to allow for remote |
CVE-2022-22954 |
— | — | 1.0000 | — | KEV | VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side |
CVE-2017-7921 |
— | — | 1.0000 | — | KEV | Multiple Hikvision products contain an improper authentication vulnerability that could allow a mali |
CVE-2013-2251 |
— | — | 1.0000 | — | KEV | Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) e |
CVE-2012-1823 |
— | — | 1.0000 | — | KEV | sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, |
CVE-2025-53770 |
— | — | 1.0000 | — | KEV | Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability t |
CVE-2024-7593 |
— | — | 1.0000 | — | KEV | Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, |
CVE-2024-3400 |
— | — | 1.0000 | — | KEV | Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allo |
CVE-2024-23897 |
— | — | 1.0000 | — | KEV | Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers l |
CVE-2024-21893 |
— | — | 1.0000 | — | KEV | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivant |
CVE-2024-21887 |
— | — | 1.0000 | — | KEV | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain |
CVE-2023-4966 |
— | — | 1.0000 | — | KEV | Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for s |
CVE-2023-44487 |
— | — | 1.0000 | — | KEV | HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack ( |
CVE-2023-35082 |
— | — | 1.0000 | — | KEV | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerabi |
CVE-2023-35078 |
— | — | 1.0000 | — | KEV | Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication |
CVE-2023-32315 |
— | — | 1.0000 | — | KEV | Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated atta |
CVE-2023-27350 |
— | — | 1.0000 | — | KEV | PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class tha |
CVE-2023-22518 |
— | — | 1.0000 | — | KEV | Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can |
CVE-2023-1671 |
— | — | 1.0000 | — | KEV | Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that all |
CVE-2023-1389 |
— | — | 1.0000 | — | KEV | TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code executio |
CVE-2023-0669 |
— | — | 1.0000 | — | KEV | Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vu |
CVE-2022-29464 |
— | — | 1.0000 | — | KEV | Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution. |
CVE-2022-26134 |
— | — | 1.0000 | — | KEV | Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allow |
CVE-2021-44228 |
— | — | 1.0000 | — | KEV | Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlle |
CVE-2021-40438 |
— | — | 1.0000 | — | KEV | A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by |
CVE-2021-35464 |
— | — | 1.0000 | — | KEV | ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP r |
CVE-2021-34473 |
— | — | 1.0000 | — | KEV | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code executio |
CVE-2021-26086 |
— | — | 1.0000 | — | KEV | Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote at |
CVE-2021-26084 |
— | — | 1.0000 | — | KEV | Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injec |