Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (11656 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-53475 1 Advantech 1 Iview 2025-07-23 8.8 High
A vulnerability exists in Advantech iView that could allow for SQL injection and remote code execution through NetworkServlet.getNextTrapPage(). This issue requires an authenticated attacker with at least user-level privileges. Certain parameters in this function are not properly sanitized, allowing an attacker to perform SQL injection and potentially execute code in the context of the 'nt authority\local service' account.
CVE-2024-32925 1 Google 1 Android 2025-07-22 8.8 High
In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2022-47213 1 Microsoft 1 365 Apps 2025-07-22 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-47212 1 Microsoft 1 365 Apps 2025-07-22 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-47211 1 Microsoft 1 365 Apps 2025-07-22 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-44687 1 Microsoft 3 Raw Image Extension, Windows 10, Windows 11 2025-07-22 7.8 High
Raw Image Extension Remote Code Execution Vulnerability
CVE-2022-44670 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-07-22 8.1 High
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-41076 1 Microsoft 23 Powershell, Windows 10, Windows 10 1507 and 20 more 2025-07-22 8.5 High
PowerShell Remote Code Execution Vulnerability
CVE-2022-26806 1 Microsoft 1 365 Apps 2025-07-22 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-26805 1 Microsoft 1 365 Apps 2025-07-22 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-26804 1 Microsoft 1 365 Apps 2025-07-22 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-44702 1 Microsoft 3 Terminal, Windows 10, Windows 11 2025-07-22 7.8 High
Windows Terminal Remote Code Execution Vulnerability
CVE-2022-44693 1 Microsoft 7 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Foundation 2013 and 4 more 2025-07-22 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-44692 1 Microsoft 6 365 Apps, Office, Office 2019 and 3 more 2025-07-22 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-44690 1 Microsoft 6 Sharepoint Foundation, Sharepoint Foundation 2013, Sharepoint Server and 3 more 2025-07-22 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-44676 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-07-22 8.1 High
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-44668 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-07-22 7.8 High
Windows Media Remote Code Execution Vulnerability
CVE-2022-44667 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-07-22 7.8 High
Windows Media Remote Code Execution Vulnerability
CVE-2022-41127 1 Microsoft 11 Dynamics 365 Business Central, Dynamics 365 Business Central 2019, Dynamics 365 Business Central 2020 and 8 more 2025-07-22 8.5 High
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
CVE-2024-7760 1 Aimstack 1 Aim 2025-07-21 9.6 Critical
aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the tracking server. The vulnerability is due to overly permissive CORS settings, allowing cross-origin requests from all origins. This enables CSRF attacks on all endpoints of the tracking server, which can be chained with other existing vulnerabilities such as remote code execution, denial of service, and arbitrary file read/write.