Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (473 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-33172 1 Microsoft 19 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 16 more 2025-01-01 6.5 Medium
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33169 1 Microsoft 19 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 16 more 2025-01-01 6.5 Medium
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33168 1 Microsoft 19 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 16 more 2025-01-01 6.5 Medium
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33167 1 Microsoft 19 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 16 more 2025-01-01 6.5 Medium
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33166 1 Microsoft 19 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 16 more 2025-01-01 6.5 Medium
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-21697 1 Microsoft 17 Windows 10, Windows 10 1507, Windows 10 1607 and 14 more 2025-01-01 6.2 Medium
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
CVE-2023-21820 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-01-01 7.4 High
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
CVE-2023-21813 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-01-01 7.5 High
Windows Secure Channel Denial of Service Vulnerability
CVE-2023-21811 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-01-01 7.5 High
Windows iSCSI Service Denial of Service Vulnerability
CVE-2023-21701 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-01-01 7.5 High
Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability
CVE-2024-43475 1 Microsoft 2 Windows Server 2008, Windows Server 2008 Sp2 2024-12-31 7.3 High
Microsoft Windows Admin Center Information Disclosure Vulnerability
CVE-2024-38250 1 Microsoft 25 Office, Office Long Term Servicing Channel, Windows 10 1507 and 22 more 2024-12-31 7.8 High
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-33043 1 Qualcomm 406 205 Mobile Platform, 205 Mobile Platform Firmware, 215 Mobile Platform and 403 more 2024-12-20 5.5 Medium
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
CVE-2024-28326 1 Asus 1 Rt-n12\+ B1 Firmware 2024-12-16 6.8 Medium
Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface.
CVE-2024-33056 1 Qualcomm 662 205 Mobile Platform, 205 Mobile Platform Firmware, 315 5g Iot Modem and 659 more 2024-12-12 8.4 High
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
CVE-2024-33037 1 Qualcomm 104 C-v2x 9150, C-v2x 9150 Firmware, Fastconnect 6800 and 101 more 2024-12-11 6.1 Medium
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.
CVE-2024-33013 1 Qualcomm 342 Ar8035, Ar8035 Firmware, Csr8811 and 339 more 2024-11-26 7.5 High
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.
CVE-2024-33011 1 Qualcomm 501 Ar8035, Ar8035 Firmware, Ar9380 and 498 more 2024-11-26 7.5 High
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
CVE-2024-38373 1 Amazon 1 Freertos-plus-tcp 2024-11-21 9.6 Critical
FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Response Parser when parsing domain names in a DNS response. A carefully crafted DNS response with domain name length value greater than the actual domain name length, could cause the parser to read beyond the DNS response buffer. This issue affects applications using DNS functionality of the FreeRTOS-Plus-TCP stack. Applications that do not use DNS functionality are not affected, even when the DNS functionality is enabled. This vulnerability has been patched in version 4.1.1.
CVE-2024-36438 1 Elinksmart 1 Smart Cabinet Lock 2024-11-21 7.3 High
eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks.