Search

Expected end of text, found '/' (at char 33), (line:1, col:34)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (37231 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2023-50943 1 Apache 1 Airflow 2025-05-30 7.5 High
Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of "enable_xcom_pickling=False" configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.
CVE-2024-23646 1 Pimcore 1 Admin Classic Bundle 2025-05-30 8.8 High
Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. The application allows users to create zip files from available files on the site. In the 1.x branch prior to version 1.3.2, parameter `selectedIds` is susceptible to SQL Injection. Any backend user with very basic permissions can execute arbitrary SQL statements and thus alter any data or escalate their privileges to at least admin level. Version 1.3.2 contains a fix for this issue.
CVE-2025-4226 1 Phpgurukul 1 Cyber Cafe Management System 2025-05-30 7.3 High
A vulnerability classified as critical has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. This affects an unknown part of the file /add-computer.php. The manipulation of the argument compname/comploc leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2022-34715 1 Microsoft 1 Windows Server 2022 2025-05-29 9.8 Critical
Windows Network File System Remote Code Execution Vulnerability
CVE-2022-34714 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-05-29 8.1 High
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-34712 1 Microsoft 4 Windows 10, Windows 11, Windows Server 2016 and 1 more 2025-05-29 5.5 Medium
Windows Defender Credential Guard Information Disclosure Vulnerability
CVE-2022-34710 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2025-05-29 5.5 Medium
Windows Defender Credential Guard Information Disclosure Vulnerability
CVE-2022-34709 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2025-05-29 6 Medium
Windows Defender Credential Guard Security Feature Bypass Vulnerability
CVE-2022-34708 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-05-29 5.5 Medium
Windows Kernel Information Disclosure Vulnerability
CVE-2022-35772 1 Microsoft 1 Azure Site Recovery Vmware To Azure 2025-05-29 7.2 High
Azure Site Recovery Remote Code Execution Vulnerability
CVE-2022-35771 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2025-05-29 7.8 High
Windows Defender Credential Guard Elevation of Privilege Vulnerability
CVE-2022-35769 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-05-29 7.5 High
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
CVE-2022-35767 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-05-29 8.1 High
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-35766 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2025-05-29 8.1 High
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-35765 1 Microsoft 4 Windows 10, Windows Server 2016, Windows Server 2019 and 1 more 2025-05-29 7.8 High
Storage Spaces Direct Elevation of Privilege Vulnerability
CVE-2022-35764 1 Microsoft 4 Windows 10, Windows Server 2016, Windows Server 2019 and 1 more 2025-05-29 7.8 High
Storage Spaces Direct Elevation of Privilege Vulnerability
CVE-2022-35763 1 Microsoft 4 Windows 10, Windows Server 2016, Windows Server 2019 and 1 more 2025-05-29 7.8 High
Storage Spaces Direct Elevation of Privilege Vulnerability
CVE-2022-35762 1 Microsoft 4 Windows 10, Windows Server 2016, Windows Server 2019 and 1 more 2025-05-29 7.8 High
Storage Spaces Direct Elevation of Privilege Vulnerability
CVE-2022-34716 2 Microsoft, Redhat 5 .net, .net Core, Powershell and 2 more 2025-05-29 5.9 Medium
.NET Spoofing Vulnerability
CVE-2025-29690 1 Hailey888 1 Oa System 2025-05-29 6.1 Medium
A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the outtype parameter at /address/AddrController.java.