Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
371 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2023-34192 |
— | — | 0.7727 | — | KEV | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that al |
CVE-2022-41080 |
— | — | 0.7733 | — | KEV | Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation |
CVE-2026-48558 |
— | — | 0.7766 | — | KEV | SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OID |
CVE-2023-49103 |
— | — | 0.7775 | — | KEV | ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data st |
CVE-2023-24880 |
— | — | 0.7801 | — | KEV | Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an a |
CVE-2023-27351 |
— | — | 0.7805 | — | KEV | PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers t |
CVE-2022-26318 |
— | — | 0.7816 | — | KEV | On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code. |
CVE-2026-88772 |
— | — | 0.7816 | — | KEV | Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the |
CVE-2025-6204 |
— | — | 0.7955 | — | KEV | Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker |
CVE-2024-8957 |
— | — | 0.7984 | — | KEV | PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, |
CVE-2023-22952 |
— | — | 0.8014 | — | KEV | Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Usin |
CVE-2026-45659 |
— | — | 0.8024 | — | KEV | Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows |
CVE-2023-27532 |
— | — | 0.8060 | — | KEV | Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical fu |
CVE-2024-43468 |
— | — | 0.8104 | — | KEV | Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker |
CVE-2025-34026 |
— | — | 0.8178 | — | KEV | Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in th |
CVE-2026-88771 |
— | — | 0.8216 | — | KEV | Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that c |
CVE-2023-27992 |
— | — | 0.8226 | — | KEV | Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection |
CVE-2025-33073 |
— | — | 0.8270 | — | KEV | Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for |
CVE-2024-0769 |
— | — | 0.8271 | — | KEV | D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the compone |
CVE-2024-42009 |
— | — | 0.8288 | — | KEV | RoundCube Webmail contains a cross-site scripting vulnerability. This vulnerability could allow a re |
CVE-2025-14847 |
— | — | 0.8322 | — | KEV | MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib |
CVE-2023-36847 |
— | — | 0.8346 | — | KEV | Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability |
CVE-2022-26923 |
— | — | 0.8350 | — | KEV | An authenticated user could manipulate attributes on computer accounts they own or manage, and acqui |
CVE-2026-81578 |
— | — | 0.8373 | — | KEV | PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an |
CVE-2023-28432 |
— | — | 0.8396 | — | KEV | MinIO contains a vulnerability in a cluster deployment where MinIO returns all environment variables |
CVE-2025-40551 |
— | — | 0.8418 | — | KEV | SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead |
CVE-2024-38112 |
— | — | 0.8423 | — | KEV | Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confid |
CVE-2024-43451 |
— | — | 0.8427 | — | KEV | Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a u |
CVE-2024-51567 |
— | — | 0.8440 | — | KEV | CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthentic |
CVE-2025-64328 |
— | — | 0.8462 | — | KEV | Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for |
CVE-2024-28986 |
— | — | 0.8463 | — | KEV | SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow |
CVE-2023-41266 |
— | — | 0.8484 | — | KEV | Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to |
CVE-2023-24955 |
— | — | 0.8497 | — | KEV | Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated att |
CVE-2025-8110 |
— | — | 0.8520 | — | KEV | Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutCon |
CVE-2026-50751 |
— | — | 0.8534 | — | KEV | Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange |
CVE-2023-43208 |
— | — | 0.8542 | — | KEV | NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that all |
CVE-2026-48907 |
— | — | 0.8544 | — | KEV | Widget Factory Joomla Content Editor contains an improper access control vulnerability which could a |
CVE-2025-52691 |
— | — | 0.8566 | — | KEV | SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability t |
CVE-2023-27997 |
— | — | 0.8569 | — | KEV | Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can |
CVE-2026-24858 |
— | — | 0.8659 | — | KEV | Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using |
CVE-2026-104935 |
— | — | 0.8677 | — | KEV | Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remo |
CVE-2023-2868 |
— | — | 0.8684 | — | KEV | Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability |
CVE-2025-33053 |
— | — | 0.8701 | — | KEV | Microsoft Windows contains an external control of file name or path vulnerability that could allow a |
CVE-2025-20362 |
— | — | 0.8709 | — | KEV | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Sof |
CVE-2024-12356 |
— | — | 0.8726 | — | KEV | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulne |
CVE-2022-26143 |
— | — | 0.8732 | — | KEV | A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malici |
CVE-2024-58136 |
— | — | 0.8776 | — | KEV | Yii Framework contains an improper protection of alternate path vulnerability that may allow a remot |
CVE-2022-27593 |
— | — | 0.8791 | — | KEV | Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled refer |
CVE-2025-29635 |
— | — | 0.8794 | — | KEV | D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to exe |
CVE-2025-4428 |
— | — | 0.8800 | — | KEV | Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the API component t |