SEARCH
CVEs, Fix available
301–325 of 114,361 matches, best first.
- CVE-2015-1427The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection me
- CVE-2013-2251Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:,
- CVE-2012-0391The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception ha
- CVE-2023-35081A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticat
- CVE-2021-26858Microsoft Exchange Server Remote Code Execution Vulnerability
- CVE-2023-1671A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution
- CVE-2025-13223Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted
- CVE-2023-36025Windows SmartScreen Security Feature Bypass Vulnerability
- CVE-2023-23397Microsoft Outlook Elevation of Privilege Vulnerability
- CVE-2024-38178Scripting Engine Memory Corruption Vulnerability
- CVE-2024-49039Windows Task Scheduler Elevation of Privilege Vulnerability
- CVE-2025-10585Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted
- CVE-2023-41993The issue was addressed with improved checks.
- CVE-2024-38112Windows MSHTML Platform Spoofing Vulnerability
- CVE-2023-2868Remote Code injection in Barracuda Email Security Gateway
- CVE-2023-35311Microsoft Outlook Security Feature Bypass Vulnerability
- CVE-2024-21412Internet Shortcut Files Security Feature Bypass Vulnerability
- CVE-2020-5410Directory Traversal with spring-cloud-config-server
- CVE-2016-0752Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, an
- CVE-2014-0130Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails befor
- CVE-2022-46169Unauthenticated Command Injection
- CVE-2026-66066Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
- CVE-2025-29824Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2023-37450The issue was addressed with improved checks.
- CVE-2010-0738The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 a