Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
371 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2024-21338 |
— | — | 0.5981 | — | KEV | Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability wi |
CVE-2025-62593 |
— | — | 0.6015 | — | KEV | Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Deve |
CVE-2025-53690 |
— | — | 0.6060 | — | KEV | Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cl |
CVE-2024-54085 |
— | — | 0.6075 | — | KEV | AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Inte |
CVE-2026-82078 |
— | — | 0.6089 | — | KEV | PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate sys |
CVE-2025-58360 |
— | — | 0.6117 | — | KEV | OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerability that |
CVE-2026-21510 |
— | — | 0.6124 | — | KEV | Microsoft Windows Shell contains a protection mechanism failure vulnerability that could allow an un |
CVE-2024-23113 |
— | — | 0.6172 | — | KEV | Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allo |
CVE-2025-24054 |
— | — | 0.6227 | — | KEV | Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows a |
CVE-2025-47813 |
— | — | 0.6251 | — | KEV | Wing FTP Server contains a generation of error message containing sensitive information vulnerabilit |
CVE-2026-0770 |
— | — | 0.6256 | — | KEV | Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that all |
CVE-2026-45498 |
— | — | 0.6308 | — | KEV | Microsoft Defender contains an unspecified vulnerability that allows for denial of service. |
CVE-2023-35081 |
— | — | 0.6358 | — | KEV | Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authen |
CVE-2023-43770 |
— | — | 0.6366 | — | KEV | Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to in |
CVE-2023-4911 |
— | — | 0.6377 | — | KEV | GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GL |
CVE-2023-29552 |
— | — | 0.6398 | — | KEV | The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allo |
CVE-2024-57728 |
— | — | 0.6447 | — | KEV | SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files |
CVE-2025-2776 |
— | — | 0.6473 | — | KEV | SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in th |
CVE-2025-43300 |
— | — | 0.6516 | — | KEV | Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework |
CVE-2025-31125 |
— | — | 0.6576 | — | KEV | Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed fi |
CVE-2024-57726 |
— | — | 0.6641 | — | KEV | SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technician |
CVE-2024-43572 |
— | — | 0.6670 | — | KEV | Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code |
CVE-2025-0411 |
— | — | 0.6707 | — | KEV | 7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass t |
CVE-2022-34713 |
— | — | 0.6776 | — | KEV | A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL pro |
CVE-2026-34909 |
— | — | 0.6803 | — | KEV | Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with a |
CVE-2023-28461 |
— | — | 0.6808 | — | KEV | Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerabil |
CVE-2024-30088 |
— | — | 0.6820 | — | KEV | Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerabili |
CVE-2025-59718 |
— | — | 0.6829 | — | KEV | Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cr |
CVE-2024-20353 |
— | — | 0.6982 | — | KEV | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop |
CVE-2026-48710 |
— | — | 0.7029 | — | KEV | Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers |
CVE-2026-21509 |
— | — | 0.7079 | — | KEV | Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inp |
CVE-2022-28810 |
— | — | 0.7097 | — | KEV | Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code |
CVE-2025-20333 |
— | — | 0.7121 | — | KEV | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Sof |
CVE-2026-73570 |
— | — | 0.7166 | — | KEV | Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an |
CVE-2025-30066 |
— | — | 0.7209 | — | KEV | tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows |
CVE-2026-21962 |
— | — | 0.7319 | — | KEV | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulne |
CVE-2023-47565 |
— | — | 0.7328 | — | KEV | QNAP VioStar NVR contains an OS command injection vulnerability that allows authenticated users to e |
CVE-2025-40536 |
— | — | 0.7356 | — | KEV | SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauth |
CVE-2025-6205 |
— | — | 0.7367 | — | KEV | Dassault Systèmes DELMIA Apriso contains a missing authorization vulnerability that could allow an a |
CVE-2024-37383 |
— | — | 0.7399 | — | KEV | RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate |
CVE-2025-2746 |
— | — | 0.7406 | — | KEV | Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerabi |
CVE-2024-21182 |
— | — | 0.7416 | — | KEV | Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker w |
CVE-2025-1316 |
— | — | 0.7448 | — | KEV | Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input saniti |
CVE-2025-20337 |
— | — | 0.7450 | — | KEV | Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE an |
CVE-2026-76460 |
— | — | 0.7560 | — | KEV | Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an i |
CVE-2026-25089 |
— | — | 0.7611 | — | KEV | Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vul |
CVE-2023-44221 |
— | — | 0.7625 | — | KEV | SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management |
CVE-2022-44698 |
— | — | 0.7627 | — | KEV | Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an |
CVE-2023-5631 |
— | — | 0.7634 | — | KEV | Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remot |
CVE-2026-33824 |
— | — | 0.7705 | — | KEV | Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that c |