SEARCH
CVEs, Fix available
201–225 of 114,353 matches, best first.
- CVE-2023-45249Remote command execution due to use of default passwords.
- CVE-2024-7399Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attack
- CVE-2024-57968Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible
- CVE-2025-64328FreePBX Administration GUI is Vulnerable to Authenticated Command Injection
- CVE-2026-81963Windows Update Stack Elevation of Privilege Vulnerability
- CVE-2024-4885WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-9474PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
- CVE-2024-37079vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol.
- CVE-2025-30066tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs.
- CVE-2024-48248NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may l
- CVE-2018-1273Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerabilit
- CVE-2024-4358Registration Authentication Bypass Vulnerability
- CVE-2021-30563Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a…
- CVE-2024-9465Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
- CVE-2025-9377Authenticated RCE via Parental Control command injection
- CVE-2024-4040Unauthenticated arbitrary file read and remote code execution in CrushFTP
- CVE-2025-49704Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2025-66376Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets (CSS) @import d
- CVE-2021-38003Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption v
- CVE-2024-1212LoadMaster Pre-Authenticated OS Command Injection
- CVE-2024-44308The issue was addressed with improved checks.
- CVE-2021-30632Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a craf
- CVE-2021-37975Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted H
- CVE-2021-30551Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted
- CVE-2021-21224Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a craft