Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9160 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-1686 1 Microsoft 7 Windows 10, Windows 10 1507, Windows 10 1607 and 4 more 2024-11-21 7.8 High
Windows WalletService Elevation of Privilege Vulnerability
CVE-2021-1685 1 Microsoft 12 Windows 10, Windows 10 1507, Windows 10 1607 and 9 more 2024-11-21 7.3 High
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
CVE-2021-1682 1 Microsoft 10 Windows 10, Windows 10 1803, Windows 10 1809 and 7 more 2024-11-21 7 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-1681 1 Microsoft 7 Windows 10, Windows 10 1507, Windows 10 1607 and 4 more 2024-11-21 7.8 High
Windows WalletService Elevation of Privilege Vulnerability
CVE-2021-1680 1 Microsoft 15 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 12 more 2024-11-21 7.8 High
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2021-1662 1 Microsoft 10 Windows 10, Windows 10 1803, Windows 10 1809 and 7 more 2024-11-21 7.8 High
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-1659 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.8 High
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1657 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.8 High
Windows Fax Compose Form Remote Code Execution Vulnerability
CVE-2021-1655 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.8 High
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1654 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.8 High
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1653 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.8 High
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1652 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.8 High
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1651 1 Microsoft 14 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 11 more 2024-11-21 7.8 High
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2021-1650 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2024-11-21 7.8 High
Windows Runtime C++ Template Library Elevation of Privilege Vulnerability
CVE-2021-1649 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.8 High
Active Template Library Elevation of Privilege Vulnerability
CVE-2021-1648 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2024-11-21 7.8 High
Microsoft splwow64 Elevation of Privilege Vulnerability
CVE-2021-1646 1 Microsoft 10 Windows 10, Windows 10 1803, Windows 10 1809 and 7 more 2024-11-21 6.6 Medium
Windows WLAN Service Elevation of Privilege Vulnerability
CVE-2021-1642 1 Microsoft 11 Windows 10, Windows 10 1607, Windows 10 1803 and 8 more 2024-11-21 7.8 High
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
CVE-2021-1640 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.8 High
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-1594 1 Cisco 1 Identity Services Engine 2024-11-21 7.5 High
A vulnerability in the REST API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a command injection attack and elevate privileges to root. This vulnerability is due to insufficient input validation for specific API endpoints. An attacker in a man-in-the-middle position could exploit this vulnerability by intercepting and modifying specific internode communications from one ISE persona to another ISE persona. A successful exploit could allow the attacker to run arbitrary commands with root privileges on the underlying operating system. To exploit this vulnerability, the attacker would need to decrypt HTTPS traffic between two ISE personas that are located on separate nodes.