Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (11732 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2024-26174 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2025-05-03 5.5 Medium
Windows Kernel Information Disclosure Vulnerability
CVE-2024-21430 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-05-03 5.7 Medium
Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
CVE-2024-28938 1 Microsoft 5 Odbc Driver For Sql Server, Sql Server 2019, Sql Server 2022 and 2 more 2025-05-03 8.8 High
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28900 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-05-03 5.5 Medium
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-26226 1 Microsoft 6 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 3 more 2025-05-03 6.5 Medium
Windows Distributed File System (DFS) Information Disclosure Vulnerability
CVE-2024-26217 1 Microsoft 10 Windows 10 1507, Windows 10 1607, Windows 10 21h2 and 7 more 2025-05-03 5.5 Medium
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-26207 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-05-03 5.5 Medium
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-26245 1 Microsoft 1 Windows 10 1507 2025-05-03 7.8 High
Windows SMB Elevation of Privilege Vulnerability
CVE-2024-26175 1 Microsoft 10 Windows 10 1507, Windows 10 1607, Windows 10 21h2 and 7 more 2025-05-03 7.8 High
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-28902 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-05-03 5.5 Medium
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-28901 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-05-03 5.5 Medium
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-26172 1 Microsoft 9 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 6 more 2025-05-03 5.5 Medium
Windows DWM Core Library Information Disclosure Vulnerability
CVE-2024-26255 1 Microsoft 9 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 6 more 2025-05-03 5.5 Medium
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-30037 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2025-05-03 5.5 Medium
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-29994 1 Microsoft 9 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 6 more 2025-05-03 7.8 High
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
CVE-2024-30016 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2025-05-03 5.5 Medium
Windows Cryptographic Services Information Disclosure Vulnerability
CVE-2024-29996 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2025-05-03 7.8 High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-37789 2 Debian, Stb Project 2 Debian Linux, Stb 2025-05-02 8.1 High
stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information Disclosure or Denial of Service.
CVE-2022-42905 1 Wolfssl 1 Wolfssl 2025-05-02 9.1 Critical
In wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS 1.3 client or network attacker can trigger a buffer over-read on the heap of 5 bytes. (WOLFSSL_CALLBACKS is only intended for debugging.)
CVE-2025-3301 2025-05-02 N/A
DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and software support. A successful DPA attack may result in exposure of confidential information. The best practice is to use the impacted crypto curves and operations with ephemeral keys to reduce the number of DPA traces that can be collected.