Browse vulnerabilities
377,708 results
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2017-6077 | Act now | 68.7% | — | ● | NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execu… |
| CVE-2020-4430 | Act now | 68.5% | — | ● | IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remo… |
| CVE-2021-30657 | Act now | 68.5% | — | ● | Apple macOS contains an unspecified logic issue in System Preferences that may allow a mal… |
| CVE-2016-3393 | Act now | 68.5% | — | ● | A remote code execution vulnerability exists due to the way the Windows GDI component hand… |
| CVE-2025-59718 | Act now | 68.3% | — | ● | Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verifica… |
| CVE-2024-30088 | Act now | 68.2% | 7.0 | ● | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2023-28461 | Act now | 68.1% | 9.8 | ● | Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code executio… |
| CVE-2019-18426 | Act now | 67.9% | — | ● | A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site… |
| CVE-2022-34713 | Act now | 67.8% | — | ● | A remote code execution vulnerability exists when Microsoft Windows MSDT is called using t… |
| CVE-2015-8651 | Act now | 67.7% | — | ● | Integer overflow in Adobe Flash Player allows attackers to execute code. |
| CVE-2025-20337 | Act now | 67.6% | — | ● | Cisco Identity Services Engine contains an injection vulnerability in a specific API of Ci… |
| CVE-2009-0556 | Act now | 67.3% | — | ● | Microsoft Office PowerPoint contains a code injection vulnerability that allows remote att… |
| CVE-2021-36934 | Act now | 67.3% | 7.8 | ● | An elevation of privilege vulnerability exists because of overly permissive Access Control… |
| CVE-2025-0411 | Act now | 67.1% | — | ● | 7-Zip contains a protection mechanism failure vulnerability that allows remote attackers t… |
| CVE-2011-0609 | Act now | 66.8% | — | ● | Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to e… |
| CVE-2016-4657 | Act now | 66.8% | — | ● | Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execu… |
| CVE-2024-43572 | Act now | 66.7% | — | ● | Microsoft Windows Management Console contains unspecified vulnerability that allows for re… |
| CVE-2024-57726 | Act now | 66.6% | — | ● | SimpleHelp contains a missing authorization vulnerability that could allow low-privileged … |
| CVE-2013-2729 | Act now | 66.6% | — | ● | Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute rem… |
| CVE-2013-0631 | Act now | 66.4% | — | ● | Adobe Coldfusion contains an unspecified vulnerability, which could result in information … |
| CVE-2021-36942 | Act now | 66.0% | 7.5 | ● | Windows LSA Spoofing Vulnerability |
| CVE-2023-29552 | Act now | 65.9% | — | ● | The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that … |
| CVE-2013-0629 | Act now | 65.8% | — | ● | Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unaut… |
| CVE-2015-7645 | Act now | 65.3% | — | ● | Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF fil… |
| CVE-2016-20017 | Act now | 65.2% | — | ● | D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, una… |
| CVE-2026-34909 | Act now | 65.0% | 10.0 | ● | A malicious actor with access to the network could exploit a Path Traversal vulnerability … |
| CVE-2020-1020 | Act now | 65.0% | — | ● | Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when ha… |
| CVE-2019-0211 | Act now | 65.0% | — | ● | Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged c… |
| CVE-2021-27877 | Act now | 64.9% | — | ● | Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that coul… |
| CVE-2014-1812 | Act now | 64.9% | — | ● | Microsoft Windows Active Directory contains a privilege escalation vulnerability due to th… |
| CVE-2025-58360 | Act now | 64.9% | — | ● | OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerab… |
| CVE-2021-30551 | Act now | 64.7% | — | ● | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote att… |
| CVE-2016-7256 | Act now | 64.6% | — | ● | A remote code execution vulnerability exists when the Windows font library improperly hand… |
| CVE-2025-2776 | Act now | 64.4% | — | ● | SysAid On-Prem contains an improper restriction of XML external entity reference vulnerabi… |
| CVE-2026-48558 | Act now | 64.3% | — | ● | SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow… |
| CVE-2026-32202 | Act now | 63.7% | 4.3 | ● | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform s… |
| CVE-2015-4068 | Act now | 63.6% | — | ● | Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensit… |
| CVE-2021-22681 | Act now | 63.6% | — | ● | Multiple Rockwell products contain an insufficient protected credentials vulnerability. St… |
| CVE-2023-35081 | Act now | 63.6% | — | ● | Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables… |
| CVE-2026-0770 | Act now | 63.4% | 9.8 | ● | Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code… |
| CVE-2019-8394 | Act now | 63.3% | — | ● | Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows… |
| CVE-2021-30632 | Act now | 63.2% | — | ● | Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remo… |
| CVE-2024-9380 | Act now | 63.2% | — | ● | Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in th… |
| CVE-2026-45498 | Act now | 63.1% | 4.0 | ● | Microsoft Defender Denial of Service Vulnerability |
| CVE-2025-47813 | Act now | 63.0% | — | ● | Wing FTP Server contains a generation of error message containing sensitive information vu… |
| CVE-2016-0151 | Act now | 62.9% | — | ● | The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which… |
| CVE-2009-0563 | Act now | 62.8% | — | ● | Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to … |
| CVE-2010-2572 | Act now | 62.5% | — | ● | Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code… |
| CVE-2022-21445 | Act now | 62.5% | — | ● | Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deseria… |
| CVE-2023-21529 | Act now | 62.1% | 8.8 | ● | Microsoft Exchange Server Remote Code Execution Vulnerability |