Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
913 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2023-47565 |
— | — | 0.7328 | — | KEV | QNAP VioStar NVR contains an OS command injection vulnerability that allows authenticated users to e |
CVE-2018-8120 |
— | — | 0.7329 | — | KEV | A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly h |
CVE-2021-42278 |
— | — | 0.7330 | — | KEV | Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for pri |
CVE-2025-40536 |
— | — | 0.7356 | — | KEV | SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauth |
CVE-2021-25298 |
— | — | 0.7364 | — | KEV | Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server. |
CVE-2025-6205 |
— | — | 0.7367 | — | KEV | Dassault Systèmes DELMIA Apriso contains a missing authorization vulnerability that could allow an a |
CVE-2013-3918 |
— | — | 0.7369 | — | KEV | Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper C |
CVE-2010-0738 |
— | — | 0.7381 | — | KEV | The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs |
CVE-2015-3043 |
— | — | 0.7386 | — | KEV | A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform re |
CVE-2013-2551 |
— | — | 0.7392 | — | KEV | Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remot |
CVE-2024-37383 |
— | — | 0.7399 | — | KEV | RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate |
CVE-2018-18325 |
— | — | 0.7405 | — | KEV | DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of |
CVE-2025-2746 |
— | — | 0.7406 | — | KEV | Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerabi |
CVE-2024-21182 |
— | — | 0.7416 | — | KEV | Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker w |
CVE-2018-14667 |
— | — | 0.7420 | — | KEV | Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the Us |
CVE-2017-8543 |
— | — | 0.7439 | — | KEV | Microsoft Windows allows an attacker to take control of the affected system when Windows Search fail |
CVE-2019-1458 |
— | — | 0.7444 | — | KEV | A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly h |
CVE-2019-1003029 |
— | — | 0.7444 | — | KEV | Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypa |
CVE-2019-12991 |
— | — | 0.7446 | — | KEV | Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance. |
CVE-2025-1316 |
— | — | 0.7448 | — | KEV | Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input saniti |
CVE-2025-20337 |
— | — | 0.7450 | — | KEV | Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE an |
CVE-2005-2773 |
— | — | 0.7459 | — | KEV | HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the |
CVE-2014-0780 |
— | — | 0.7468 | — | KEV | InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote atta |
CVE-2018-8298 |
— | — | 0.7469 | — | KEV | The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote c |
CVE-2025-31125 |
— | — | 0.7494 | — | KEV | Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed fi |
CVE-2017-9248 |
— | — | 0.7510 | — | KEV | Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI. |
CVE-2021-42258 |
— | — | 0.7518 | — | KEV | BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username paramete |
CVE-2016-3715 |
— | — | 0.7531 | — | KEV | ImageMagick contains an unspecified vulnerability that could allow users to delete files by using Im |
CVE-2026-76460 |
— | — | 0.7560 | — | KEV | Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an i |
CVE-2012-0391 |
— | — | 0.7560 | — | KEV | The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input valida |
CVE-2016-3718 |
— | — | 0.7565 | — | KEV | ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side reque |
CVE-2015-0016 |
— | — | 0.7578 | — | KEV | Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allow |
CVE-2021-30860 |
— | — | 0.7599 | — | KEV | Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which m |
CVE-2026-25089 |
— | — | 0.7611 | — | KEV | Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vul |
CVE-2023-44221 |
— | — | 0.7625 | — | KEV | SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management |
CVE-2022-44698 |
— | — | 0.7627 | — | KEV | Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an |
CVE-2018-15811 |
— | — | 0.7630 | — | KEV | DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of |
CVE-2023-5631 |
— | — | 0.7634 | — | KEV | Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remot |
CVE-2021-38406 |
— | — | 0.7643 | — | KEV | Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific proj |
CVE-2018-15133 |
— | — | 0.7657 | — | KEV | Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote co |
CVE-2008-0015 |
— | — | 0.7658 | — | KEV | Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker |
CVE-2020-13965 |
— | — | 0.7660 | — | KEV | Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker |
CVE-2019-7238 |
— | — | 0.7663 | — | KEV | Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Explo |
CVE-2019-15949 |
— | — | 0.7704 | — | KEV | Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin |
CVE-2026-33824 |
— | — | 0.7705 | — | KEV | Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that c |
CVE-2020-10221 |
— | — | 0.7712 | — | KEV | rConfig lib/ajaxHandlers/ajaxAddTemplate.php contains an OS command injection vulnerability that all |
CVE-2021-42287 |
— | — | 0.7717 | — | KEV | Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for pri |
CVE-2023-34192 |
— | — | 0.7727 | — | KEV | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that al |
CVE-2019-1429 |
— | — | 0.7729 | — | KEV | Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote co |
CVE-2013-3897 |
— | — | 0.7731 | — | KEV | A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that all |