Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (4479 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-34447 1 Microsoft 17 Windows 10, Windows 10 1507, Windows 10 1607 and 14 more 2026-08-10 6.8 Medium
Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-34494 1 Microsoft 9 Windows Server 2004, Windows Server 2008, Windows Server 2008 R2 and 6 more 2026-08-10 8.8 High
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-34442 1 Microsoft 9 Windows Server 2004, Windows Server 2008, Windows Server 2008 R2 and 6 more 2026-08-10 8.8 High
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-34441 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-10 7.8 High
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2021-33780 1 Microsoft 9 Windows Server 2004, Windows Server 2008, Windows Server 2008 R2 and 6 more 2026-08-10 8.8 High
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-33740 1 Microsoft 6 Windows 10, Windows 10 1507, Windows 10 1809 and 3 more 2026-08-10 7.8 High
Windows Media Remote Code Execution Vulnerability
CVE-2021-31947 1 Microsoft 1 Hevc Video Extensions 2026-08-10 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-31984 1 Microsoft 1 Power Bi Report Server 2026-08-10 7.6 High
Power BI Remote Code Execution Vulnerability
CVE-2021-31196 1 Microsoft 1 Exchange Server 2026-08-10 7.2 High
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26432 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2026-08-10 9.8 Critical
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
CVE-2021-34535 1 Microsoft 18 Remote Desktop, Remote Desktop Client, Windows 10 and 15 more 2026-08-10 8.8 High
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2021-34533 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-10 7.8 High
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
CVE-2021-34530 1 Microsoft 11 Windows 10, Windows 10 1507, Windows 10 1607 and 8 more 2026-08-10 7.8 High
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2021-26424 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-10 9.9 Critical
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2021-34534 1 Microsoft 9 Windows 10, Windows 10 1507, Windows 10 1607 and 6 more 2026-08-10 6.8 Medium
Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-34524 1 Microsoft 1 Dynamics 365 2026-08-10 8.1 High
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2021-34478 1 Microsoft 3 365 Apps, Office, Office 2019 2026-08-10 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2026-3843 3 Bukts, Linux, Nefteprodukttekhnika Llc 3 Buk Ts-g Gas Station Automation System, Linux Kernel, Buk Ts-g Gas Station Automation System 2026-08-10 9.8 Critical
Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 on Linux contains a SQL Injection vulnerability (CWE-89) in the system configuration module. A remote attacker can send specially crafted HTTP POST requests to the /php/request.php endpoint via the sql parameter in application/x-www-form-urlencoded data (e.g., action=do&sql=<query_here>&reload_driver=0) to execute arbitrary SQL commands and potentially achieve remote code execution.
CVE-2020-37121 1 Codeblocks 2 Code::blocks, Code\\ 2026-08-06 5.5 Medium
CODE::BLOCKS 16.01 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler with crafted Unicode characters. Attackers can create a malicious text file with 1982 bytes of buffer and shellcode to trigger remote code execution.
CVE-2026-66066 1 Rails 1 Rails 2026-08-04 8.9 High
Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are affected when configured to use libvips and accept image uploads from untrusted users. An unauthenticated attacker may exploit this behavior to read arbitrary files accessible to the Rails process, including environment variables and application secrets. Exposure of credentials such as secret_key_base or external-service tokens may enable remote code execution or lateral movement. This issue has been fixed in versions 7.2.3.2, 8.0.5.1 and 8.1.3.1.