Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (7023 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2004-0978 1 Microsoft 7 Internet Explorer, Windows 2000, Windows 98se and 4 more 2025-04-03 N/A
Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter.
CVE-2006-0005 1 Microsoft 7 Windows-nt, Windows 2000, Windows 2000 Advanced Server and 4 more 2025-04-03 N/A
Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.
CVE-2006-2373 1 Microsoft 3 Windows 2000, Windows Server 2003, Windows Xp 2025-04-03 N/A
The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."
CVE-2003-1048 1 Microsoft 8 Internet Explorer, Outlook, Windows 98 and 5 more 2025-04-03 7.8 High
Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.
CVE-2004-0119 1 Microsoft 3 Windows 2000, Windows Server 2003, Windows Xp 2025-04-03 7.5 High
The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from null dereference) or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selection.
CVE-2003-0813 1 Microsoft 5 Windows 2000, Windows 98, Windows Nt and 2 more 2025-04-03 N/A
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.
CVE-2004-0840 1 Microsoft 3 Exchange Server, Windows Server 2003, Windows Xp 2025-04-03 N/A
The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.
CVE-2004-0574 1 Microsoft 4 Exchange Server, Windows 2000, Windows Nt and 1 more 2025-04-03 N/A
The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.
CVE-2022-41054 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2025-04-02 7.8 High
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2022-30170 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-03-11 7.3 High
Windows Credential Roaming Service Elevation of Privilege Vulnerability
CVE-2022-37958 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 8.1 High
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
CVE-2022-37959 1 Microsoft 4 Windows Server 2012, Windows Server 2016, Windows Server 2019 and 1 more 2025-03-11 6.5 Medium
Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability
CVE-2022-38006 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 6.5 Medium
Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-38005 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 7.8 High
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-37957 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2025-03-11 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-38004 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 7.8 High
Windows Fax Service Remote Code Execution Vulnerability
CVE-2022-37956 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-37955 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-03-11 7.8 High
Windows Group Policy Elevation of Privilege Vulnerability
CVE-2022-37954 1 Microsoft 4 Windows 10, Windows 11, Windows Server 2019 and 1 more 2025-03-11 7.8 High
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2022-34734 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-03-11 8.8 High
Microsoft ODBC Driver Remote Code Execution Vulnerability