Export limit exceeded: 16223 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 34), (line:1, col:35)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (16223 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2024-43534 1 Microsoft 25 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 22 more 2026-06-09 6.5 Medium
Windows Graphics Component Information Disclosure Vulnerability
CVE-2024-43532 1 Microsoft 25 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 22 more 2026-06-09 8.8 High
Remote Registry Service Elevation of Privilege Vulnerability
CVE-2024-43529 1 Microsoft 15 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 12 more 2026-06-09 7.3 High
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2024-43526 1 Microsoft 16 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 13 more 2026-06-09 6.8 Medium
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-43525 1 Microsoft 16 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 13 more 2026-06-09 6.8 Medium
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-43519 1 Microsoft 25 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 22 more 2026-06-09 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-43518 1 Microsoft 25 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 22 more 2026-06-09 8.8 High
Windows Telephony Server Remote Code Execution Vulnerability
CVE-2024-43515 1 Microsoft 25 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 22 more 2026-06-09 7.5 High
Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
CVE-2024-43508 1 Microsoft 8 Windows 11 22h2, Windows 11 22h2, Windows 11 23h2 and 5 more 2026-06-09 5.5 Medium
Windows Graphics Component Information Disclosure Vulnerability
CVE-2024-43506 1 Microsoft 24 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 21 more 2026-06-09 7.5 High
BranchCache Denial of Service Vulnerability
CVE-2024-43505 1 Microsoft 6 365 Apps, Office, Office 2019 and 3 more 2026-06-09 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2024-43504 1 Microsoft 8 365 Apps, Excel, Excel 2016 and 5 more 2026-06-09 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-43503 1 Microsoft 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 2026-06-09 7.8 High
Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2024-43502 1 Microsoft 6 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 3 more 2026-06-09 7.1 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-43480 2 Linux, Microsoft 2 Linux Kernel, Azure Service Fabric 2026-06-09 6.6 Medium
Azure Service Fabric for Linux Remote Code Execution Vulnerability
CVE-2024-38261 1 Microsoft 10 Windows Server 2008, Windows Server 2008 R2, Windows Server 2008 Sp2 and 7 more 2026-06-09 7.8 High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2026-50635 1 Limesurvey 1 Limesurvey 2026-06-09 8.8 High
LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The optional allowedHosts allowlist that would constrain this is undefined in the default (and documented) configuration, so LSHttpRequest::checkIsAllowedHost() results in no operation. A remote, unauthenticated attacker who submits a forgotten-password request for a known account (requiring only the target's username and email) with a spoofed Host header causes LimeSurvey to email that account a reset link whose hostname is attacker-controlled while embedding the genuine validation_key. When the recipient or an automated inbound mail-security link scanner dereferences the link, the valid reset token is disclosed to the attacker, who replays it against the legitimate host's newPassword endpoint to set a new password and take over the account.
CVE-2025-10263 1 Arm 20 C1-premium, C1-ultra, Cortex-a710 and 17 more 2026-06-09 9.1 Critical
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.
CVE-2026-29167 1 Apache 1 Http Server 2026-06-09 9.8 Critical
Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
CVE-2026-29170 2 Apache, Apache Software Foundation 2 Http Server, Apache Http Server 2026-06-09 6.1 Medium
A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration. Users are recommended to upgrade to version 2.4.68, which fixes this issue.