Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (35013 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-41351 1 Microsoft 4 Edge, Windows 10, Windows 11 and 1 more 2024-11-21 4.3 Medium
Microsoft Edge (Chrome based) Spoofing on IE Mode
CVE-2021-41350 1 Microsoft 1 Exchange Server 2024-11-21 6.5 Medium
Microsoft Exchange Server Spoofing Vulnerability
CVE-2021-41349 1 Microsoft 1 Exchange Server 2024-11-21 6.5 Medium
Microsoft Exchange Server Spoofing Vulnerability
CVE-2021-41346 1 Microsoft 7 Windows 10, Windows 10 1809, Windows 10 20h2 and 4 more 2024-11-21 5.3 Medium
Console Window Host Security Feature Bypass Vulnerability
CVE-2021-41344 1 Microsoft 3 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Server 2024-11-21 8.1 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-41343 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2024-11-21 5.5 Medium
Windows Fast FAT File System Driver Information Disclosure Vulnerability
CVE-2021-41342 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 6.8 Medium
Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-41340 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2024-11-21 7.8 High
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2021-41338 1 Microsoft 14 Windows 10, Windows 10 1507, Windows 10 1607 and 11 more 2024-11-21 5.5 Medium
Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability
CVE-2021-41337 1 Microsoft 5 Windows Server 2004, Windows Server 2016, Windows Server 2019 and 2 more 2024-11-21 4.9 Medium
Active Directory Security Feature Bypass Vulnerability
CVE-2021-41336 1 Microsoft 3 Windows 11, Windows 11 21h2, Windows Server 2022 2024-11-21 5.5 Medium
Windows Kernel Information Disclosure Vulnerability
CVE-2021-41333 1 Microsoft 23 Windows 10, Windows 10 1507, Windows 10 1607 and 20 more 2024-11-21 7.8 High
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-41332 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2024-11-21 6.5 Medium
Windows Print Spooler Information Disclosure Vulnerability
CVE-2021-41331 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2024-11-21 7.8 High
Windows Media Audio Decoder Remote Code Execution Vulnerability
CVE-2021-41330 1 Microsoft 9 Windows 10, Windows 10 1809, Windows 10 1909 and 6 more 2024-11-21 7.8 High
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2021-41326 1 Misp 1 Misp 2024-11-21 9.8 Critical
In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shell_exec call.
CVE-2021-41303 2 Apache, Oracle 2 Shiro, Financial Services Crime And Compliance Management Studio 2024-11-21 9.8 Critical
Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update to Apache Shiro 1.8.0.
CVE-2021-41222 1 Google 1 Tensorflow 2024-11-21 5.5 Medium
TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SplitV` can trigger a segfault is an attacker supplies negative arguments. This occurs whenever `size_splits` contains more than one value and at least one value is negative. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.
CVE-2021-41194 1 Jupyterhub 1 First Use Authenticator 2024-11-21 9.1 Critical
FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with FirstUseAuthenticator, a vulnerability in versions prior to 1.0.0 allows unauthorized access to any user's account if `create_users=True` and the username is known or guessed. One may upgrade to version 1.0.0 or apply a patch manually to mitigate the vulnerability. For those who cannot upgrade, there is no complete workaround, but a partial mitigation exists. One can disable user creation with `c.FirstUseAuthenticator.create_users = False`, which will only allow login with fully normalized usernames for already existing users prior to jupyterhub-firstuserauthenticator 1.0.0. If any users have never logged in with their normalized username (i.e. lowercase), they will still be vulnerable until a patch or upgrade occurs.
CVE-2021-41173 1 Ethereum 1 Go Ethereum 2024-11-21 5.7 Medium
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside from upgrading.