59.223 CVE tracked
800 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.223 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2021-39823 | HIGH 7.8 | adobe svg-native-viewer Adobe svg-native-viewer 8182d14dfad5d1e10f53ed830328d7d9a3cfa96d and earlier versions are affected by a heap buffer overflow vulnerability due to insecure handling of a malicious .svg file, potentially resulting in arbitrary code execution in the context of th | 4.2% | — |
| CVE-2023-5528 | HIGH 7.2 | fedoraproject fedora A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugi | 4.3% | — |
| CVE-2023-41179 | HIGH 7.2 | trendmicro apex_one A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands o | 4.3% | |
| CVE-2019-7039 | CRIT 9.8 | adobe acrobat_dc Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code executi | 4.3% | — |
| CVE-2021-27270 | HIGH 7.8 | foxitsoftware foxit_reader This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. | 4.3% | — |
| CVE-2020-9746 | HIGH 7.0 | adobe flash_player Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in | 4.3% | — |
| CVE-2009-2299 | MED 5.0 | hyperguard_web_application_firewall_project hyperguard_web_application_firewall The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP | 4.3% | — |
| CVE-2020-17061 | HIGH 8.8 | microsoft sharepoint_foundation Microsoft SharePoint Remote Code Execution Vulnerability | 4.3% | — |
| CVE-2020-1303 | MED 5.5 | microsoft windows_10 <p>An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context.</p> <p>An attacker could exploit this vu | 4.3% | — |
| CVE-1999-0986 | MED 5.0 | debian debian_linux The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option. | 4.3% | — |
| CVE-2024-30284 | HIGH 7.8 | adobe acrobat Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victi | 4.3% | — |
| CVE-2017-7618 | HIGH 7.5 | linux linux_kernel crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion) by triggering EBUSY on a full queue. | 4.3% | — |
| CVE-2023-36400 | HIGH 8.8 | microsoft windows_10_1507 Windows HMAC Key Derivation Elevation of Privilege Vulnerability | 4.3% | — |
| CVE-2007-5560 | HIGH 10.0 | juniper http_service Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a w | 4.3% | — |
| CVE-2024-30091 | HIGH 7.8 | microsoft windows_10_1507 Win32k Elevation of Privilege Vulnerability | 4.3% | — |
| CVE-2021-23937 | HIGH 7.5 | apache wicket A DNS proxy and possible amplification attack vulnerability in WebClientInfo of Apache Wicket allows an attacker to trigger arbitrary DNS lookups from the server when the X-Forwarded-For header is not properly sanitized. This DNS lookup can be engineered to ov | 4.3% | — |
| CVE-2019-8199 | CRIT 9.8 | adobe acrobat_dc Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to | 4.3% | — |
| CVE-2020-1561 | HIGH 8.8 | microsoft windows_10 A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user | 4.3% | — |
| CVE-2020-17109 | HIGH 7.8 | microsoft hevc_video_extensions HEVC Video Extensions Remote Code Execution Vulnerability | 4.3% | — |
| CVE-2020-16971 | HIGH 7.4 | microsoft azure_sdk_for_java Azure SDK for Java Security Feature Bypass Vulnerability | 4.3% | — |
| CVE-2020-1039 | HIGH 7.8 | microsoft windows_10 <p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.</p> <p>An attacker could explo | 4.3% | — |
| CVE-2016-2166 | MED 6.5 | apache qpid_proton The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might al | 4.3% | — |
| CVE-2010-0684 | LOW 3.5 | apache activemq Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action. | 4.3% | — |
| CVE-2009-1439 | HIGH 7.8 | linux linux_kernel Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request. | 4.3% | — |
| CVE-2002-2208 | HIGH 7.8 | cisco ios Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results | 4.3% | — |