Export limit exceeded: 28283 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 10977 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (402 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2018-16463 1 Nextcloud 1 Nextcloud Server 2024-11-21 N/A
A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares.
CVE-2017-0936 1 Nextcloud 1 Nextcloud Server 2024-11-21 N/A
Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to change the scope of app passwords of other users. Note that the app passwords themselves where neither disclosed nor could the error be misused to identify as another user.