CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2021-24069 | ALTO7.8 | Microsoft Excel Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-24068 | ALTO7.8 | Microsoft Excel Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-24067 | ALTO7.8 | Microsoft Excel Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-24066 | ALTO8.8 | Microsoft SharePoint Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-1730 | MEDIO5.4 | <p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.</p>
<p>This update addresses this vulnerability.</p>
<p>To prevent these types of attacks, Microsoft recommends customers to download inline images from different D | 25/02/2021 |
| CVE-2021-1728 | ALTO8.8 | System Center Operations Manager Elevation of Privilege Vulnerability | 25/02/2021 |
| CVE-2021-1726 | ALTO8.0 | Microsoft SharePoint Server Spoofing Vulnerability | 25/02/2021 |
| CVE-2021-1724 | MEDIO6.1 | Microsoft Dynamics Business Central Cross-site Scripting Vulnerability | 25/02/2021 |
| CVE-2021-1721 | MEDIO6.5 | .NET Core and Visual Studio Denial of Service Vulnerability | 25/02/2021 |
| CVE-2021-1639 | ALTO7.0 | Visual Studio Code Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-21157 | ALTO8.8 | Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 22/02/2021 |
| CVE-2021-3339 | MEDIO4.3 | ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen. | 19/02/2021 |
| CVE-2021-21141 | MEDIO6.5 | Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page. | 09/02/2021 |
| CVE-2021-21140 | MEDIO6.8 | Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device. | 09/02/2021 |
| CVE-2021-21139 | MEDIO6.5 | Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. | 09/02/2021 |