SEARCH
CVEs, Fix available
501–525 of 114,375 matches, best first.
- CVE-2025-22224VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write.
- CVE-2025-53521BigIP APM Vulnerability
- CVE-2023-41763Skype for Business Elevation of Privilege Vulnerability
- CVE-2023-23376Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2019-18426A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-s
- CVE-2024-8069Limited remote code execution with privilege of a NetworkService Account access
- CVE-2012-4969Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attacker
- CVE-2025-1974ingress-nginx admission controller RCE escalation
- CVE-2020-11652An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.
- CVE-2024-53197ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- CVE-2022-3075Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer pro
- CVE-2023-36846Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
- CVE-2023-36844Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
- CVE-2023-36847Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
- CVE-2025-29927Authorization Bypass in Next.js Middleware
- CVE-2021-34527Windows Print Spooler Remote Code Execution Vulnerability
- CVE-2019-3398Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource.
- CVE-2026-42018Anonymous user token generation exposure in JFrog Artifactory
- CVE-2025-54313eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise.
- CVE-2024-53104media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- CVE-2025-59528Flowise has Remote Code Execution vulnerability
- CVE-2021-21315Command Injection Vulnerability
- CVE-2022-38028Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2021-36942Windows LSA Spoofing Vulnerability
- CVE-2021-33742Windows MSHTML Platform Remote Code Execution Vulnerability