Export limit exceeded: 424793 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 30000 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (30000 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2006-2536 1 Greg Donald 1 Destiney Links Script 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in Destiney Links Script 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) "Search" (term parameter in index.php) and (2) "Add a Site" (add.php) fields.
CVE-1999-0522 2026-04-16 N/A
The permissions for a system-critical NIS+ table (e.g. passwd) are inappropriate.
CVE-1999-0526 1 X.org 1 X11 2026-04-16 N/A
An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.
CVE-1999-0525 2026-04-16 N/A
IP traceroute is allowed from arbitrary hosts.
CVE-1999-0523 2026-04-16 N/A
ICMP echo (ping) is allowed from arbitrary hosts.
CVE-1999-0528 2026-04-16 N/A
A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.
CVE-1999-0529 2026-04-16 N/A
A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc.
CVE-1999-0530 2026-04-16 N/A
A system is operating in "promiscuous" mode which allows it to perform packet sniffing.
CVE-1999-0532 2026-04-16 N/A
A DNS server allows zone transfers.
CVE-1999-0533 2026-04-16 N/A
A DNS server allows inverse queries.
CVE-1999-0537 2 Microsoft, Netscape 2 Internet Explorer, Communicator 2026-04-16 N/A
A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.
CVE-1999-0541 2026-04-16 N/A
A password for accessing a WWW URL is guessable.
CVE-1999-0546 1 Microsoft 1 Windows Nt 2026-04-16 N/A
The Windows NT guest account is enabled.
CVE-1999-0535 1 Microsoft 2 Windows 2000, Windows Nt 2026-04-16 N/A
A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness.
CVE-1999-0539 2026-04-16 N/A
A trust relationship exists between two Unix hosts.
CVE-1999-0547 2026-04-16 N/A
An SSH server allows authentication through the .rhosts file.
CVE-1999-0549 1 Microsoft 1 Windows Nt 2026-04-16 N/A
Windows NT automatically logs in an administrator upon rebooting.
CVE-1999-0551 1 Hp 1 Openmail 2026-04-16 N/A
HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests.
CVE-1999-0554 2026-04-16 N/A
NFS exports system-critical data to the world, e.g. / or a password file.
CVE-1999-0555 2026-04-16 N/A
A Unix account with a name other than "root" has UID 0, i.e. root privileges.