CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 高7.8 |
Microsoft Excel Remote Code Execution Vulnerability |
| 25/02/2021 |
| CVE-2021-24068 | 高7.8 | Microsoft Excel Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-24067 | 高7.8 | Microsoft Excel Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-24066 | 高8.8 | Microsoft SharePoint Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-1730 | 中5.4 | <p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.</p>
<p>This update addresses this vulnerability.</p>
<p>To prevent these types of attacks, Microsoft recommends customers to download inline images from different D | 25/02/2021 |
| CVE-2021-1728 | 高8.8 | System Center Operations Manager Elevation of Privilege Vulnerability | 25/02/2021 |
| CVE-2021-1726 | 高8.0 | Microsoft SharePoint Server Spoofing Vulnerability | 25/02/2021 |
| CVE-2021-1724 | 中6.1 | Microsoft Dynamics Business Central Cross-site Scripting Vulnerability | 25/02/2021 |
| CVE-2021-1721 | 中6.5 | .NET Core and Visual Studio Denial of Service Vulnerability | 25/02/2021 |
| CVE-2021-1639 | 高7.0 | Visual Studio Code Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-21157 | 高8.8 | Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 22/02/2021 |
| CVE-2021-3339 | 中4.3 | ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen. | 19/02/2021 |
| CVE-2021-21141 | 中6.5 | Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page. | 09/02/2021 |
| CVE-2021-21140 | 中6.8 | Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device. | 09/02/2021 |
| CVE-2021-21139 | 中6.5 | Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. | 09/02/2021 |