KEV + Critical EPSS ≥ 50% Critical + PoC No Auth + Critical XSS (CWE-79) SQLi (CWE-89) Code Injection KEV + Has PoC

Filtered Results

913 found Export CSV
CVE Severity CVSS EPSS Published Flags Description
CVE-2021-22005 — — 1.0000 — KEV VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a us
CVE-2021-21985 — — 1.0000 — KEV VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health
CVE-2021-1498 — — 1.0000 — KEV Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability
CVE-2020-5902 — — 1.0000 — KEV F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in
CVE-2019-19781 — — 1.0000 — KEV Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified
CVE-2019-11510 — — 1.0000 — KEV Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthentic
CVE-2019-0708 — — 1.0000 — KEV Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulne
CVE-2018-13379 — — 1.0000 — KEV Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauth
CVE-2017-9841 — — 1.0000 — KEV PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<
CVE-2017-5638 — — 1.0000 — KEV Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value
CVE-2015-1635 — — 1.0000 — KEV Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execut
CVE-2014-6271 — — 1.0000 — KEV GNU Bash through 4.3 processes trailing strings after function definitions in the values of environm
CVE-2014-0160 — — 1.0000 — KEV The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, whic