Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (93005 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-19346 1 Tenda 2 Ch22, Ch22 Firmware 2026-08-10 8.8 High
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2024-20667 1 Microsoft 1 Azure Devops Server 2026-08-10 7.5 High
Azure DevOps Server Remote Code Execution Vulnerability
CVE-2023-35390 2 Microsoft, Redhat 5 .net, Visual Studio 2022, Enterprise Linux and 2 more 2026-08-10 7.8 High
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-36892 1 Microsoft 2 Sharepoint Server, Sharepoint Server 2019 2026-08-10 8 High
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-36891 1 Microsoft 2 Sharepoint Server, Sharepoint Server 2019 2026-08-10 8 High
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-36869 1 Microsoft 4 Azure Devops Server, Azure Devops Server 2019, Azure Devops Server 2020 and 1 more 2026-08-10 6.3 Medium
Azure DevOps Server Spoofing Vulnerability
CVE-2023-35384 1 Microsoft 17 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 14 more 2026-08-10 5.4 Medium
Windows HTML Platforms Security Feature Bypass Vulnerability
CVE-2021-34448 1 Microsoft 18 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 15 more 2026-08-10 6.8 Medium
Scripting Engine Memory Corruption Vulnerability
CVE-2021-40440 1 Microsoft 3 Dynamics 365 Business Central, Dynamics 365 Business Central 2020, Dynamics 365 Business Central 2021 2026-08-10 5.4 Medium
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVE-2021-38653 1 Microsoft 3 365 Apps, Office, Office 2019 2026-08-10 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2021-26434 1 Microsoft 2 Visual Studio 2017, Visual Studio 2019 2026-08-10 7.8 High
Visual Studio Elevation of Privilege Vulnerability
CVE-2021-26435 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2026-08-10 8.1 High
Windows Scripting Engine Memory Corruption Vulnerability
CVE-2021-36952 1 Microsoft 2 Visual Studio 2017, Visual Studio 2019 2026-08-10 7.8 High
Visual Studio Remote Code Execution Vulnerability
CVE-2021-36950 1 Microsoft 1 Dynamics 365 2026-08-10 5.4 Medium
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2021-36946 1 Microsoft 6 Dynamics 365 Business Central, Dynamics 365 Business Central 2019, Dynamics 365 Business Central 2020 and 3 more 2026-08-10 5.4 Medium
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVE-2021-34480 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2026-08-10 6.8 Medium
Scripting Engine Memory Corruption Vulnerability
CVE-2026-19279 1 Mimiclab 1 Mcp-pdf-vision 2026-08-10 5.3 Medium
A vulnerability was identified in MIMICLab mcp-pdf-vision 1.1.0. The impacted element is the function load_pdf of the file src/index.ts. Such manipulation of the argument pdfPath/sessionId leads to command injection. The attack can only be performed from a local environment. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-72594 1 Lobehub 1 Lobe Chat 2026-08-10 7.6 High
A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar.
CVE-2026-19355 1 Mingsoft 1 Mcms 2026-08-10 7.3 High
A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function ModelDataImpl.queryDiyFormData of the file /mdiy/form/data/list.do of the component ms-mdiy. Executing a manipulation of the argument formFields can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-19344 1 Code-projects 1 Task Management System 2026-08-10 7.3 High
A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/comment_count_user.php. The manipulation of the argument task_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.