Export limit exceeded: 23489 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 30), (line:1, col:31)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (23489 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2020-16964 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16963 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16962 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16961 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16960 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16959 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16958 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2025-1333 1 Ibm 1 Mq Operator 2025-08-28 6 Medium
IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 and configured with Cloud Pak for Integration Keycloak could disclose sensitive information to a privileged user.
CVE-2025-27365 1 Ibm 1 Mq Operator 2025-08-28 6.5 Medium
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10  Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.
CVE-2024-55910 2 Ibm, Linux 2 Concert, Linux Kernel 2025-08-28 6.5 Medium
IBM Concert Software 1.0.0 through 1.0.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVE-2024-55913 2 Ibm, Linux 2 Concert, Linux Kernel 2025-08-28 5.3 Medium
IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
CVE-2024-13262 1 View Password Project 1 View Password 2025-08-28 4.8 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal View Password allows Cross-Site Scripting (XSS).This issue affects View Password: from 0.0.0 before 6.0.4.
CVE-2024-55912 2 Ibm, Linux 2 Concert, Linux Kernel 2025-08-28 5.9 Medium
IBM Concert Software 1.0.0 through 1.0.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVE-2024-55909 2 Ibm, Linux 2 Concert, Linux Kernel 2025-08-28 6.5 Medium
IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumption.
CVE-2025-1838 1 Ibm 1 Cloud Pak For Business Automation 2025-08-28 6.5 Medium
IBM Cloud Pak for Business Automation 24.0.0 and 24.0.1 through 24.0.1 IF001 Authoring allows an authenticated user to bypass client-side data validation in an authoring user interface which could cause a denial of service.
CVE-2025-1495 1 Ibm 2 Business Automation Workflow, Cloud Pak For Business Automation 2025-08-28 4.3 Medium
IBM Business Automation Workflow 24.0.0 and 24.0.1 through 24.0.1 IF001 Center may leak sensitive information due to missing authorization validation.
CVE-2024-41753 1 Ibm 1 Cloud Pak For Business Automation 2025-08-28 6.1 Medium
IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF004 and 24.0.1 through 24.0.1 IF001 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2025-3632 1 Ibm 2 4769 Developers Toolkit, Common Cryptographic Architecture 2025-08-28 7.5 High
IBM 4769 Developers Toolkit 7.0.0 through 7.5.52 could allow a remote attacker to cause a denial of service in the Hardware Security Module (HSM) due to improper memory allocation of an excessive size.
CVE-2025-2900 2 Ibm, Redhat 2 Semeru Runtime, Enterprise Linux 2025-08-28 7.5 High
IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow and subsequent crash, due to a defect in its native AES/CBC encryption implementation.
CVE-2024-13273 1 Getopensocial 1 Open Social 2025-08-28 5.4 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11.