Search

Expected end of text, found 'é' (at char 38), (line:1, col:39)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (43062 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-40467 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2024-11-21 7.8 High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-40466 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2024-11-21 7.8 High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-40465 1 Microsoft 23 Windows 10, Windows 10 1507, Windows 10 1607 and 20 more 2024-11-21 7.8 High
Windows Text Shaping Remote Code Execution Vulnerability
CVE-2021-40464 1 Microsoft 13 Windows 10, Windows 10 1809, Windows 10 1909 and 10 more 2024-11-21 8 High
Windows Nearby Sharing Elevation of Privilege Vulnerability
CVE-2021-40463 1 Microsoft 18 Windows 10, Windows 10 1507, Windows 10 1607 and 15 more 2024-11-21 7.7 High
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2021-40462 1 Microsoft 14 Windows 10, Windows 10 1809, Windows 10 1909 and 11 more 2024-11-21 7.8 High
Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
CVE-2021-40461 1 Microsoft 12 Windows 10, Windows 10 1809, Windows 10 1909 and 9 more 2024-11-21 8 High
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2021-40460 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2024-11-21 6.5 Medium
Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability
CVE-2021-40457 1 Microsoft 1 Dynamics 365 2024-11-21 7.4 High
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
CVE-2021-40456 1 Microsoft 5 Windows Server, Windows Server 2004, Windows Server 2019 and 2 more 2024-11-21 5.3 Medium
Windows AD FS Security Feature Bypass Vulnerability
CVE-2021-40455 1 Microsoft 23 Windows 10, Windows 10 1507, Windows 10 1607 and 20 more 2024-11-21 5.5 Medium
Windows Installer Spoofing Vulnerability
CVE-2021-40454 1 Microsoft 22 365 Apps, Office, Office Long Term Servicing Channel and 19 more 2024-11-21 5.5 Medium
Rich Text Edit Control Information Disclosure Vulnerability
CVE-2021-40443 1 Microsoft 23 Windows 10, Windows 10 1507, Windows 10 1607 and 20 more 2024-11-21 7.8 High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-40347 1 Postorius Project 1 Postorius 2024-11-21 5.4 Medium
An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request to unsubscribe any user from a mailing list, also revealing whether that address was subscribed in the first place.
CVE-2021-40326 2 Foxit, Microsoft 4 Pdf Editor, Pdf Reader, Phantompdf and 1 more 2024-11-21 5.5 Medium
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker can write to an arbitrary file, and display controlled contents, during signature verification.
CVE-2021-40292 1 Dzzoffice 1 Dzzoffice 2024-11-21 5.4 Medium
A Stored Cross Site Sripting (XSS) vulnerability exists in DzzOffice 2.02.1 via the settingnew parameter.
CVE-2021-40285 1 Htmly 1 Htmly 2024-11-21 8.1 High
htmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component \views\backup.html.php.
CVE-2021-40239 1 Miniftpd Project 1 Miniftpd 2024-11-21 9.8 Critical
A Buffer Overflow vulnerability exists in the latest version of Miniftpd in the do_retr function in ftpproto.c
CVE-2021-40212 1 Daum 1 Potplayer 2024-11-21 9.8 Critical
An exploitable out-of-bounds write vulnerability in PotPlayer 1.7.21523 build 210729 may lead to code execution, information disclosure, and denial of service.
CVE-2021-40191 1 Dzzoffice 1 Dzzoffice 2024-11-21 5.4 Medium
Dzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization of input data at all upload functions in webroot/dzz/attach/Uploader.class.php and return a wrong response in content-type of output data in webroot/dzz/attach/controller.php.