Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29160 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-100219 1 Microsoft 13 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 10 more 2026-11-04 9.8 Critical
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
CVE-2025-0966 3 Ibm, Linux, Microsoft 4 Aix, Infosphere Information Server, Linux Kernel and 1 more 2026-11-04 7.6 High
IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
CVE-2024-49541 3 Adobe, Apple, Microsoft 3 Illustrator, Macos, Windows 2026-11-04 5.5 Medium
Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2024-49114 1 Microsoft 15 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 12 more 2026-11-04 7.8 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2024-49113 1 Microsoft 23 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 20 more 2026-11-04 7.5 High
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVE-2024-49112 1 Microsoft 23 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 20 more 2026-11-04 9.8 Critical
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2024-49068 1 Microsoft 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 2026-11-04 8.2 High
Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2024-49065 1 Microsoft 7 365 Apps, Office, Office Long Term Servicing Channel and 4 more 2026-11-04 5.5 Medium
Microsoft Office Remote Code Execution Vulnerability
CVE-2024-49019 1 Microsoft 11 Windows Server 2008, Windows Server 2008 R2, Windows Server 2008 Sp2 and 8 more 2026-11-04 7.8 High
Active Directory Certificate Services Elevation of Privilege Vulnerability
CVE-2024-43598 1 Microsoft 1 Lightgbm 2026-11-04 8.1 High
LightGBM Remote Code Execution Vulnerability
CVE-2024-38200 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-11-04 6.5 Medium
Microsoft Office Spoofing Vulnerability
CVE-2024-38100 1 Microsoft 5 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 2 more 2026-11-04 7.8 High
Windows File Explorer Elevation of Privilege Vulnerability
CVE-2024-37385 2 Microsoft, Roundcube 3 Windows, Roundcube Webmail, Webmail 2026-11-04 9.8 Critical
Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection via im_convert_path and im_identify_path. NOTE: this issue exists because of an incomplete fix for CVE-2020-12641.
CVE-2024-35248 1 Microsoft 3 Dynamics 365 Business Central, Dynamics 365 Business Central 2023, Dynamics 365 Business Central 2024 2026-11-03 7.3 High
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVE-2024-30104 1 Microsoft 6 365 Apps, Office, Office 2016 and 3 more 2026-11-03 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2024-30103 1 Microsoft 7 365 Apps, Office, Office 2019 and 4 more 2026-11-03 8.8 High
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-30090 1 Microsoft 23 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 20 more 2026-11-03 7 High
Microsoft Streaming Service Elevation of Privilege Vulnerability
CVE-2024-26230 1 Microsoft 23 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 20 more 2026-11-03 7.8 High
Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2024-12108 2 Microsoft, Progress 2 Windows, Whatsup Gold 2026-11-03 9.6 Critical
In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API.
CVE-2023-29348 1 Microsoft 7 Windows Server 2008, Windows Server 2008 R2, Windows Server 2012 and 4 more 2026-11-03 7.5 High
Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability