Export limit exceeded: 370452 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 36), (line:1, col:37)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (370452 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2020-17115 1 Microsoft 5 Sharepoint Foundation, Sharepoint Foundation 2013, Sharepoint Server and 2 more 2025-08-28 8 High
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2020-17099 1 Microsoft 6 Windows 10, Windows 10 1507, Windows 10 1607 and 3 more 2025-08-28 6.8 Medium
Windows Lock Screen Security Feature Bypass Vulnerability
CVE-2020-17098 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-08-28 5.5 Medium
Windows GDI+ Information Disclosure Vulnerability
CVE-2020-17097 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2025-08-28 3.3 Low
Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVE-2020-17096 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2025-08-28 7.5 High
Windows NTFS Remote Code Execution Vulnerability
CVE-2020-17095 1 Microsoft 11 Windows 10, Windows 10 1607, Windows 10 1803 and 8 more 2025-08-28 8.5 High
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2020-17094 1 Microsoft 10 Windows 10, Windows 10 1809, Windows 10 1909 and 7 more 2025-08-28 5.5 Medium
Windows Error Reporting Information Disclosure Vulnerability
CVE-2020-17092 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2025-08-28 7.8 High
Windows Network Connections Service Elevation of Privilege Vulnerability
CVE-2020-17089 1 Microsoft 5 Sharepoint Foundation, Sharepoint Foundation 2013, Sharepoint Server and 2 more 2025-08-28 7.1 High
Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2020-17002 1 Microsoft 6 Azure C Shared Utility, Azure Uamqp C, Azure Uhttp C and 3 more 2025-08-28 7.4 High
Azure SDK for C Security Feature Bypass Vulnerability
CVE-2020-16996 1 Microsoft 8 Windows Server 1903, Windows Server 1909, Windows Server 2004 and 5 more 2025-08-28 6.5 Medium
Kerberos Security Feature Bypass Vulnerability
CVE-2020-16964 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16963 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16962 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16961 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16960 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16959 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16958 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2025-08-28 7.8 High
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16971 1 Microsoft 2 Azure Core Amqp, Azure Sdk For Java 2025-08-28 7.4 High
Azure SDK for Java Security Feature Bypass Vulnerability
CVE-2025-9140 2 51mis, Shanghai Lingdang Information Technology 2 Lingdang Crm, Lingdang Crm 2025-08-28 6.3 Medium
A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this issue is some unknown functionality of the file /crm/crmapi/erp/tabdetail_moduleSave.php. The manipulation of the argument getvaluestring leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Upgrading to version 8.6.5.4 can resolve this issue. The affected component should be upgraded. The vendor explains: "All SQL injection vectors were patched via parameterized queries and input sanitization in v8.6.5+."