VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

CritiqueÉlevéeMoyenneFaibleExploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

microsoftoracleibmgoogleadobemozillaciscoapacheappleredhatjenkinshpAll vendors →

microsoft products

internet explorer 1600office 1020sharepoint server 630excel 493office long term servicing channel 366edge chromium 323word 312exchange server 257sharepoint enterprise server 256sharepoint foundation 226.net framework 207sql server 2019 207ie 200

404 592 vulnerabilities · 1 769 actively exploited (CISA KEV)

microsoft ✕Clear filters

6 985 results

ID	Severity	Summary	Published
CVE-2025-24049	ÉLEVÉE8.4	Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized attacker to elevate privileges locally.	11/03/2025
CVE-2025-24043	ÉLEVÉE7.5	Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network.	11/03/2025
CVE-2025-21199	MOYENNE6.7	Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally.	11/03/2025
CVE-2025-26643	MOYENNE5.4	The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.