CVE Reference Lookup

Log4Shell: Remote code execution via JNDI lookup in Apache Log4j 2.x

Heartbleed: Buffer over-read in OpenSSL TLS heartbeat extension leaks memory contents

Apache Struts 2 RCE via Content-Type header manipulation

Shellshock: Arbitrary code execution via crafted environment variables in Bash

EternalBlue: SMBv1 remote code execution in Windows (used by WannaCry)

BlueKeep: Remote code execution via Remote Desktop Services

PrintNightmare: Remote code execution via Windows Print Spooler

Apache Struts RCE via namespace, wildcard, or URL tag without value/action

ProxyLogon: Server-side request forgery in Microsoft Exchange Server

Zerologon: Privilege escalation via Netlogon authentication bypass

HTTP/2 Rapid Reset: DDoS attack exploiting HTTP/2 stream cancellation

Heap buffer overflow in WebP image processing (libwebp)

OpenSSL infinite loop when parsing crafted certificates (BN_mod_sqrt)

Spring4Shell: RCE via data binding in Spring Framework on JDK 9+

Baron Samedit: Heap buffer overflow in sudo leading to local privilege escalation

Drupalgeddon 2: Remote code execution via Drupal Form API

Dirty COW: Race condition in Linux kernel memory management allows local privilege escalation

Pulse Secure VPN arbitrary file read allowing credential theft

Microsoft Outlook NTLM credential theft via crafted calendar invite

XZ Utils backdoor: Malicious code in xz/liblzma enabling SSH auth bypass

WinVerifyTrust signature validation vulnerability allows code injection into signed executables

CurveBall: Windows CryptoAPI spoofing of ECC certificates

Atlassian Confluence OGNL injection RCE

glibc getaddrinfo stack-based buffer overflow via crafted DNS responses

MSHTML RCE via crafted ActiveX control in Office documents