57.970 CVE tracked
784 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
57.970 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2022-30131 | HIGH 7.8 | microsoft windows_server_2016 Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability | 0.8% | — |
| CVE-2021-33900 | HIGH 7.5 | apache directory_studio While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAPI) was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidentiali | 0.8% | — |
| CVE-2021-26115 | HIGH 7.8 | fortinet fortiwan An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command in | 0.8% | — |
| CVE-2020-3954 | MED 6.1 | vmware vrealize_log_insight Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. | 0.8% | — |
| CVE-2020-1488 | HIGH 7.0 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially cra | 0.8% | — |
| CVE-2020-1272 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system p | 0.8% | — |
| CVE-2019-6626 | MED 6.1 | f5 big-ip_advanced_firewall_manager On BIG-IP (AFM, Analytics, ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.3.4, A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface (TMUI), al | 0.8% | — |
| CVE-2019-6589 | MED 6.1 | f5 big-ip_access_policy_manager On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, and 11.6.0-11.6.3.2, a reflected Cross Site Scripting (XSS) vulnerability is present in an undisclosed page of the BIG-IP TMUI (Traffic Management User Interface) also known as the BIG-IP configurati | 0.8% | — |
| CVE-2018-0102 | HIGH 7.4 | cisco nx-os A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software attempt | 0.8% | — |
| CVE-2026-42914 | MED 5.3 | microsoft windows_10_1607 Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network. | 0.8% | — |
| CVE-2024-41145 | HIGH 7.1 | microsoft teams A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious applicati | 0.8% | — |
| CVE-2024-35878 | MED 5.3 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: of: module: prevent NULL pointer dereference in vsnprintf() In of_modalias(), we can get passed the str and len parameters which would cause a kernel oops in vsnprintf() since it only allows | 0.8% | — |
| CVE-2024-26811 | CRIT 9.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate payload size in ipc response If installing malicious ksmbd-tools, ksmbd.mountd can return invalid ipc response to ksmbd kernel server. ksmbd should validate payload size of i | 0.8% | — |
| CVE-2023-39196 | MED 5.3 | apache ozone Improper Authentication vulnerability in Apache Ozone. The vulnerability allows an attacker to download metadata internal to the Storage Container Manager service without proper authentication. The attacker is not allowed to do any modification within the Ozo | 0.8% | — |
| CVE-2022-26928 | HIGH 7.0 | microsoft windows_10 Windows Photo Import API Elevation of Privilege Vulnerability | 0.8% | — |
| CVE-2021-0215 | MED 6.5 | juniper junos On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every time the 802.1X authenticator port interface flaps which can lead to other processes, such as the pfex process, responsible for packet forwardi | 0.8% | — |
| CVE-2020-1204 | HIGH 7.1 | microsoft windows_10 An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. | 0.8% | — |
| CVE-2015-0749 | MED 4.3 | cisco unified_communications_manager A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on the affected software. The vulnerabilities is due to improper input validation of certain parameters passe | 0.8% | — |
| CVE-2026-68839 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2024-56128 | MED 5.3 | apache kafka Incorrect Implementation of Authentication Algorithm in Apache Kafka's SCRAM implementation. Issue Summary: Apache Kafka's implementation of the Salted Challenge Response Authentication Mechanism (SCRAM) did not fully adhere to the requirements of RFC 5802 [1 | 0.8% | — |
| CVE-2023-35392 | MED 4.7 | microsoft edge_chromium Microsoft Edge (Chromium-based) Spoofing Vulnerability | 0.8% | — |
| CVE-2023-33848 | MED 4.9 | ibm cics_tx IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could allow a privileged user to obtain highly sensitive information by enabling debug mode. IBM X-Force ID: 257104. | 0.8% | — |
| CVE-2023-20088 | MED 5.3 | cisco finesse A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for new and existing users who are connected thr | 0.8% | — |
| CVE-2022-41218 | MED 5.5 | debian debian_linux In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release. | 0.8% | — |
| CVE-2022-35846 | HIGH 8.1 | fortinet fortitester An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to guess the credentials of an admin user via a | 0.8% | — |