Export limit exceeded: 23475 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 10053 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10053 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-34727 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-03-11 8.8 High
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-34726 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-03-11 8.8 High
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-34722 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-03-11 9.8 Critical
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVE-2022-34721 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-03-11 9.8 Critical
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVE-2022-34718 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-03-11 9.8 Critical
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2022-35841 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2025-03-11 8.8 High
Windows Enterprise App Management Service Remote Code Execution Vulnerability
CVE-2022-35840 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2022-35836 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-03-11 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2022-35835 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-03-11 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2022-35834 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2022-35830 1 Microsoft 5 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 2 more 2025-03-11 8.1 High
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2022-34700 1 Microsoft 1 Dynamics 365 2025-03-11 8.8 High
Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability
CVE-2022-35805 1 Microsoft 1 Dynamics 365 2025-03-11 8.8 High
Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability
CVE-2022-30200 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-03-11 7.8 High
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-37961 1 Microsoft 3 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Server 2025-03-11 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-38009 1 Microsoft 3 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Server 2025-03-11 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-38008 1 Microsoft 3 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Server 2025-03-11 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-35823 1 Microsoft 3 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Server 2025-03-11 8.8 High
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2022-26929 1 Microsoft 12 .net, .net Framework, Windows 10 and 9 more 2025-03-11 7.8 High
.NET Framework Remote Code Execution Vulnerability
CVE-2025-1307 2025-03-11 9.8 Critical
The Newscrunch theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check in the newscrunch_install_and_activate_plugin() function in all versions up to, and including, 1.8.4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.