57.056 CVE tracked
777 Exploited now
184 Used by ransomware
Last sync
CVE Tracker
57.056 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-65665 | HIGH 8.8 | microsoft sharepoint_server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 2.8% | — |
| CVE-2021-30612 | HIGH 8.8 | fedoraproject fedora Chromium: CVE-2021-30612 Use after free in WebRTC | 2.8% | — |
| CVE-2021-24084 | MED 5.5 | microsoft windows_10 Windows Mobile Device Management Information Disclosure Vulnerability | 2.8% | — |
| CVE-2018-8622 | MED 5.5 | microsoft windows_7 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows | 2.8% | — |
| CVE-2018-8621 | MED 5.5 | microsoft windows_7 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012, Windows 7, Windows Server 2008 R2. This CVE ID is unique f | 2.8% | — |
| CVE-2018-15443 | MED 5.8 | cisco firepower_system_software A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured Intrusion Prevention System (IPS) rule that inspects certain types of TCP traffic. The vulnerability is due to inc | 2.8% | — |
| CVE-2021-33783 | MED 6.5 | microsoft windows_10 Windows SMB Information Disclosure Vulnerability | 2.8% | — |
| CVE-2020-4468 | HIGH 7.8 | ibm i2_analysts_notebook IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by memory corruption. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to exe | 2.8% | — |
| CVE-2020-4467 | HIGH 7.8 | ibm i2_analysts_notebook IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by memory corruption. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to exe | 2.8% | — |
| CVE-2020-4422 | HIGH 7.8 | ibm i2_analysts_notebook IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially crafted file, a remote attacker could exploit this vulnerability to execu | 2.8% | — |
| CVE-2020-4288 | HIGH 7.8 | ibm i2_analysts_notebook IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerabilit | 2.8% | — |
| CVE-2020-4287 | HIGH 7.8 | ibm i2_analysts_notebook IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerabilit | 2.8% | — |
| CVE-2020-4285 | HIGH 7.8 | ibm i2_analysts_notebook IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerabilit | 2.8% | — |
| CVE-2018-15504 | HIGH 7.5 | embedthis appweb An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as demonstrated by If-Modified-Since or If-Unmodified-Since wit | 2.8% | — |
| CVE-2023-28706 | CRIT 9.8 | apache airflow_hive_provider Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 6.0.0. | 2.8% | — |
| CVE-2021-43225 | HIGH 7.5 | microsoft bot_framework_software_development_kit Bot Framework SDK Remote Code Execution Vulnerability | 2.8% | — |
| CVE-2019-1741 | HIGH 7.5 | cisco ios_xe A vulnerability in the Cisco Encrypted Traffic Analytics (ETA) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to a logic error that exists when handling a | 2.8% | — |
| CVE-2015-6321 | HIGH 7.8 | cisco content_security_management_appliance Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032, 9.1.1 before 9.1.1-005, and 9.5.x before 9.5.0-025 on Content Security Management Ap | 2.8% | — |
| CVE-2013-5058 | MED 6.9 | microsoft windows_7 Integer overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows local users to ga | 2.8% | — |
| CVE-2024-39383 | HIGH 7.8 | adobe acrobat Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user | 2.8% | — |
| CVE-2022-36947 | CRIT 9.8 | faststone image_viewer Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow. | 2.8% | — |
| CVE-2021-35990 | HIGH 7.8 | adobe bridge Adobe Bridge version 11.0.2 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current | 2.8% | — |
| CVE-2021-35989 | HIGH 7.8 | adobe bridge Adobe Bridge version 11.0.2 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current | 2.8% | — |
| CVE-2022-35804 | HIGH 8.8 | microsoft windows_11 SMB Client and Server Remote Code Execution Vulnerability | 2.8% | — |
| CVE-2021-31455 | HIGH 7.8 | foxitsoftware foxit_reader This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The | 2.8% | — |