Export limit exceeded: 334719 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (631 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-37594 2 Freerdp, Microsoft 2 Freerdp, Windows 2024-11-21 9.8 Critical
In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_SIZE File Contents Request PDU.
CVE-2021-34690 2 Idrive, Microsoft 2 Remotepc, Windows 2024-11-21 9.8 Critical
iDrive RemotePC before 7.6.48 on Windows allows authentication bypass. A remote and unauthenticated attacker can bypass cloud authentication to connect and control a system via TCP port 5970 and 5980.
CVE-2021-34458 1 Microsoft 4 Windows Server 2004, Windows Server 2016, Windows Server 2019 and 1 more 2024-11-21 9.9 Critical
Windows Kernel Remote Code Execution Vulnerability
CVE-2021-34423 5 Apple, Google, Linux and 2 more 31 Iphone Os, Macos, Android and 28 more 2024-11-21 9.8 Critical
A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS, and Windows) before version 5.8.3, Zoom VDI Windows Meeting Client before version 5.8.4, Zoom VDI Azure Virtual Desktop Plugins (for Windows x86 or x64, IGEL x64, Ubuntu x64, HP ThinPro OS x64) before version 5.8.4.21112, Zoom VDI Citrix Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom VDI VMware Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom Meeting SDK for Android before version 5.7.6.1922, Zoom Meeting SDK for iOS before version 5.7.6.1082, Zoom Meeting SDK for macOS before version 5.7.6.1340, Zoom Meeting SDK for Windows before version 5.7.6.1081, Zoom Video SDK (for Android, iOS, macOS, and Windows) before version 1.1.2, Zoom On-Premise Meeting Connector Controller before version 4.8.12.20211115, Zoom On-Premise Meeting Connector MMR before version 4.8.12.20211115, Zoom On-Premise Recording Connector before version 5.1.0.65.20211116, Zoom On-Premise Virtual Room Connector before version 4.4.7266.20211117, Zoom On-Premise Virtual Room Connector Load Balancer before version 2.5.5692.20211117, Zoom Hybrid Zproxy before version 1.0.1058.20211116, and Zoom Hybrid MMR before version 4.6.20211116.131_x86-64. This can potentially allow a malicious actor to crash the service or application, or leverage this vulnerability to execute arbitrary code.
CVE-2021-33055 2 Microsoft, Zohocorp 2 Windows, Manageengine Adselfservice Plus 2024-11-21 9.8 Critical
Zoho ManageEngine ADSelfService Plus through 6102 allows unauthenticated remote code execution in non-English editions.
CVE-2021-31962 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2024-11-21 9.4 Critical
Kerberos AppContainer Security Feature Bypass Vulnerability
CVE-2021-31914 2 Jetbrains, Microsoft 2 Teamcity, Windows 2024-11-21 9.8 Critical
In JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible.
CVE-2021-29798 3 Ibm, Linux, Microsoft 4 Aix, Sterling B2b Integrator, Linux Kernel and 1 more 2024-11-21 9.8 Critical
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 203734.
CVE-2021-28483 1 Microsoft 1 Exchange Server 2024-11-21 9 Critical
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28481 1 Microsoft 1 Exchange Server 2024-11-21 9.8 Critical
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28480 1 Microsoft 1 Exchange Server 2024-11-21 9.8 Critical
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28476 1 Microsoft 18 Windows 10, Windows 10 1507, Windows 10 1607 and 15 more 2024-11-21 9.9 Critical
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2021-27193 2 Microsoft, Netop 2 Windows, Vision Pro 2024-11-21 9.8 Critical
Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system privileges resulting in a privilege escalation.
CVE-2021-27080 1 Microsoft 1 Azure Sphere 2024-11-21 9.3 Critical
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-27078 1 Microsoft 1 Exchange Server 2024-11-21 9.1 Critical
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26897 1 Microsoft 10 Windows Server 1909, Windows Server 2004, Windows Server 2008 and 7 more 2024-11-21 9.8 Critical
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-26895 1 Microsoft 10 Windows Server 1909, Windows Server 2004, Windows Server 2008 and 7 more 2024-11-21 9.8 Critical
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-26894 1 Microsoft 10 Windows Server 1909, Windows Server 2004, Windows Server 2008 and 7 more 2024-11-21 9.8 Critical
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-26893 1 Microsoft 10 Windows Server 1909, Windows Server 2004, Windows Server 2008 and 7 more 2024-11-21 9.8 Critical
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-26877 1 Microsoft 10 Windows Server 1909, Windows Server 2004, Windows Server 2008 and 7 more 2024-11-21 9.8 Critical
Windows DNS Server Remote Code Execution Vulnerability