Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
371 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-49704 |
— | — | 1.0000 | — | KEV | Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker |
CVE-2024-3273 |
— | — | 1.0000 | — | KEV | D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When com |
CVE-2022-44877 |
— | — | 1.0000 | — | KEV | CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability tha |
CVE-2025-53770 |
— | — | 1.0000 | — | KEV | Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability t |
CVE-2024-7593 |
— | — | 1.0000 | — | KEV | Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, |
CVE-2024-3400 |
— | — | 1.0000 | — | KEV | Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allo |
CVE-2024-23897 |
— | — | 1.0000 | — | KEV | Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers l |
CVE-2024-21893 |
— | — | 1.0000 | — | KEV | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivant |
CVE-2024-21887 |
— | — | 1.0000 | — | KEV | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain |
CVE-2023-4966 |
— | — | 1.0000 | — | KEV | Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for s |
CVE-2023-44487 |
— | — | 1.0000 | — | KEV | HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack ( |
CVE-2023-35082 |
— | — | 1.0000 | — | KEV | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerabi |
CVE-2023-35078 |
— | — | 1.0000 | — | KEV | Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication |
CVE-2023-32315 |
— | — | 1.0000 | — | KEV | Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated atta |
CVE-2023-27350 |
— | — | 1.0000 | — | KEV | PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class tha |
CVE-2023-22518 |
— | — | 1.0000 | — | KEV | Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can |
CVE-2023-1671 |
— | — | 1.0000 | — | KEV | Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that all |
CVE-2023-1389 |
— | — | 1.0000 | — | KEV | TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code executio |
CVE-2023-0669 |
— | — | 1.0000 | — | KEV | Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vu |
CVE-2022-29464 |
— | — | 1.0000 | — | KEV | Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution. |
CVE-2022-26134 |
— | — | 1.0000 | — | KEV | Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allow |