VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

CriticoAltoMedioBassoExploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

microsoftoracleibmgoogleadobemozillaciscoapacheappleredhatjenkinshpAll vendors →

microsoft products

internet explorer 1600office 1020sharepoint server 630excel 493office long term servicing channel 366edge chromium 323word 312exchange server 257sharepoint enterprise server 256sharepoint foundation 226.net framework 207sql server 2019 207ie 200

405.103 vulnerabilities · 1769 actively exploited (CISA KEV)

microsoft ✕Clear filters

6985 results

ID	Severity	Summary	Published
CVE-2020-35609	MEDIO5.5	A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability.	22/12/2020
CVE-2020-35608	ALTO7.8	A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses the PACKET_MMAP functi	22/12/2020
CVE-2020-17158	ALTO8.8	Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability