58.015 CVE tracked
788 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
58.015 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sorted ascending |
|---|---|---|---|---|
| CVE-2021-33900 | HIGH 7.5 | apache directory_studio While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAPI) was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidentiali | 0.8% | — |
| CVE-2021-33850 | MED 5.4 | microsoft clarity There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. The XSS payload executes whenever the user changes the clarity configuration in Microsoft Clarity version 0.3. The payload is stored on the configuring project Id page. | 1.6% | — |
| CVE-2021-33813 | HIGH 7.5 | apache solr An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. | 19.4% | — |
| CVE-2021-33788 | HIGH 7.5 | microsoft windows_10 Windows LSA Denial of Service Vulnerability | 3.3% | — |
| CVE-2021-33786 | HIGH 8.1 | microsoft windows_server_2008 Windows LSA Security Feature Bypass Vulnerability | 2.1% | — |
| CVE-2021-33785 | HIGH 7.5 | microsoft windows_10 Windows AF_UNIX Socket Provider Denial of Service Vulnerability | 3.3% | — |
| CVE-2021-33784 | HIGH 7.8 | microsoft windows_10 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2021-33783 | MED 6.5 | microsoft windows_10 Windows SMB Information Disclosure Vulnerability | 2.8% | — |
| CVE-2021-33782 | MED 5.5 | microsoft windows_10 Windows Authenticode Spoofing Vulnerability | 2.2% | — |
| CVE-2021-33781 | HIGH 8.1 | microsoft windows_10 Azure AD Security Feature Bypass Vulnerability | 2.4% | — |
| CVE-2021-33780 | HIGH 8.8 | microsoft windows_server_2008 Windows DNS Server Remote Code Execution Vulnerability | 2.7% | — |
| CVE-2021-33779 | HIGH 8.1 | microsoft windows_server_2016 Windows AD FS Security Feature Bypass Vulnerability | 2.4% | — |
| CVE-2021-33778 | HIGH 7.8 | microsoft hevc_video_extensions HEVC Video Extensions Remote Code Execution Vulnerability | 2.4% | — |
| CVE-2021-33777 | HIGH 7.8 | microsoft hevc_video_extensions HEVC Video Extensions Remote Code Execution Vulnerability | 2.4% | — |
| CVE-2021-33776 | HIGH 7.8 | microsoft hevc_video_extensions HEVC Video Extensions Remote Code Execution Vulnerability | 2.4% | — |
| CVE-2021-33775 | HIGH 7.8 | microsoft hevc_video_extensions HEVC Video Extensions Remote Code Execution Vulnerability | 2.4% | — |
| CVE-2021-33774 | HIGH 7.0 | microsoft windows_10 Windows Event Tracing Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2021-33773 | HIGH 7.8 | microsoft windows_10 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2021-33772 | HIGH 7.5 | microsoft windows_10 Windows TCP/IP Driver Denial of Service Vulnerability | 3.3% | — |
| CVE-2021-33768 | HIGH 8.0 | microsoft exchange_server Microsoft Exchange Server Elevation of Privilege Vulnerability | 1.2% | — |
| CVE-2021-33767 | HIGH 8.2 | microsoft open_enclave_software_development_kit Open Enclave SDK Elevation of Privilege Vulnerability | 0.9% | — |
| CVE-2021-33765 | MED 6.2 | microsoft windows_10 Windows Installer Spoofing Vulnerability | 0.7% | — |
| CVE-2021-33764 | MED 5.9 | microsoft windows_server_2008 Windows Key Distribution Center Information Disclosure Vulnerability | 3.5% | — |
| CVE-2021-33763 | MED 5.5 | microsoft windows_10 Windows Remote Access Connection Manager Information Disclosure Vulnerability | 0.9% | — |
| CVE-2021-33762 | HIGH 7.0 | microsoft azure_cyclecloud Azure CycleCloud Elevation of Privilege Vulnerability | 0.6% | — |