CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2021-24069 | 高危7.8 | Microsoft Excel Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-24068 | 高危7.8 | Microsoft Excel Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-24067 | 高危7.8 | Microsoft Excel Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-24066 | 高危8.8 | Microsoft SharePoint Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-1730 | 中危5.4 | <p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.</p>
<p>This update addresses this vulnerability.</p>
<p>To prevent these types of attacks, Microsoft recommends customers to download inline images from different D | 25/02/2021 |
| CVE-2021-1728 | 高危8.8 | System Center Operations Manager Elevation of Privilege Vulnerability | 25/02/2021 |
| CVE-2021-1726 | 高危8.0 | Microsoft SharePoint Server Spoofing Vulnerability | 25/02/2021 |
| CVE-2021-1724 | 中危6.1 | Microsoft Dynamics Business Central Cross-site Scripting Vulnerability | 25/02/2021 |
| CVE-2021-1721 | 中危6.5 | .NET Core and Visual Studio Denial of Service Vulnerability | 25/02/2021 |
| CVE-2021-1639 | 高危7.0 | Visual Studio Code Remote Code Execution Vulnerability | 25/02/2021 |
| CVE-2021-21157 | 高危8.8 | Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 22/02/2021 |
| CVE-2021-3339 | 中危4.3 | ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen. | 19/02/2021 |
| CVE-2021-21141 | 中危6.5 | Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page. | 09/02/2021 |
| CVE-2021-21140 | 中危6.8 | Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device. | 09/02/2021 |
| CVE-2021-21139 | 中危6.5 | Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. | 09/02/2021 |