Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (6 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123839 1 Jetbrains 1 Intellij Idea 2026-11-06 4.7 Medium
In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model
CVE-2026-123320 1 Jetbrains 1 Toolbox 2026-11-06 3.1 Low
In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server
CVE-2024-43505 1 Microsoft 6 365 Apps, Office, Office 2019 and 3 more 2026-06-09 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2024-43580 1 Microsoft 1 Edge Chromium 2025-07-08 5.4 Medium
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2019-13521 1 Rockwellautomation 1 Arena 2024-12-17 7.8 High
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities.
CVE-2021-22645 2 Luxion, Siemens 8 Keyshot, Keyshot Network Rendering, Keyshot Viewer and 5 more 2024-11-21 7.8 High
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an attack because the .bip documents display a “load” command, which can be pointed to a .dll from a remote network share. As a result, the .dll entry point can be executed without sufficient UI warning.