Export limit exceeded: 11117 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (11117 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-43221 1 Microsoft 1 Edge Chromium 2026-08-19 4.2 Medium
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2023-21710 1 Microsoft 1 Exchange Server 2026-08-19 7.2 High
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-42321 1 Microsoft 1 Exchange Server 2026-08-19 8.8 High
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-43209 1 Microsoft 1 3d Viewer 2026-08-19 7.8 High
3D Viewer Remote Code Execution Vulnerability
CVE-2021-43208 1 Microsoft 1 3d Viewer 2026-08-19 7.8 High
3D Viewer Remote Code Execution Vulnerability
CVE-2021-42316 1 Microsoft 1 Dynamics 365 2026-08-19 8.8 High
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2021-42276 1 Microsoft 14 Windows 10, Windows 10 1507, Windows 10 1607 and 11 more 2026-08-19 7.8 High
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2021-42275 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2026-08-19 8.8 High
Microsoft COM for Windows Remote Code Execution Vulnerability
CVE-2021-26443 1 Microsoft 11 Windows 10, Windows 10 1809, Windows 10 1909 and 8 more 2026-08-19 9 Critical
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
CVE-2021-41378 1 Microsoft 12 Windows 10, Windows 10 1809, Windows 10 1909 and 9 more 2026-08-19 7.8 High
Windows NTFS Remote Code Execution Vulnerability
CVE-2021-41368 1 Microsoft 7 365 Apps, Office, Office 2013 and 4 more 2026-08-19 6.1 Medium
Microsoft Access Remote Code Execution Vulnerability
CVE-2023-21808 1 Microsoft 27 .net, .net Framework, Powershell and 24 more 2026-08-19 7.8 High
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-21801 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2026-08-19 7.8 High
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-21718 1 Microsoft 1 Sql Server 2026-08-19 7.8 High
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-21707 1 Microsoft 1 Exchange Server 2026-08-19 8.8 High
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-21684 1 Microsoft 21 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 18 more 2026-08-19 8.8 High
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2026-75827 1 Getgrav 1 Grav 2026-08-19 8.8 High
Grav before 2.0.15 contains an arbitrary file write vulnerability in the Blueprint dynamic-data bare-function validation that uses an incomplete denylist instead of a positive allowlist. Attackers with page-edit or blueprint-config access can invoke the error_log function through a data directive to append PHP payloads to web-accessible files, achieving remote code execution.
CVE-2026-56684 1 Valkey-io 1 Valkey 2026-08-19 7.5 High
Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pending_list while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a use-after-free that can crash the server or potentially allow remote code execution when TLS is enabled. This issue is fixed in versions 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1.
CVE-2026-73343 2 Aresit, Wordpress 2 Wp Compress, Wordpress 2026-08-18 10 Critical
Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.
CVE-2026-16098 2 Prosolution, Wordpress 2 Prosolution Wp Client, Wordpress 2026-08-18 9.8 Critical
The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.0.10 via the proSol_handleFileUpload function. This is due to missing validation of the attacker-controlled Content-Disposition header filename, which overrides the allow-listed multipart filename before the file is saved, and a post-save extension check that fails to delete the already-written file. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible. The nonce required to reach the upload handler is publicly exposed via wp_localize_script on any front-end page rendering the job portal shortcode, allowing unauthenticated visitors to obtain a valid nonce and bypass that gating check entirely.