57.808 CVE tracked
783 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
57.808 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2023-22400 | HIGH 7.5 | juniper junos_os_evolved An Uncontrolled Resource Consumption vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause an FPC crash leading to a Denial of Service (DoS). When a specific SNM | 0.6% | — |
| CVE-2023-22399 | HIGH 7.5 | juniper junos When sFlow is enabled and it monitors a packet forwarded via ECMP, a buffer management vulnerability in the dcpfe process of Juniper Networks Junos OS on QFX10K Series systems allows an attacker to cause the Packet Forwarding Engine (PFE) to crash and restart | 0.6% | — |
| CVE-2023-22396 | HIGH 7.5 | juniper junos An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine (RE) of Juniper Networks Junos OS allows an unauthenticated network-based attacker to send crafted TCP packets destined to the device, resulting in an MBUF leak that ult | 0.6% | — |
| CVE-2023-22394 | HIGH 7.5 | juniper junos An Improper Handling of Unexpected Data Type vulnerability in the handling of SIP calls in Juniper Networks Junos OS on SRX Series and MX Series platforms allows an attacker to cause a memory leak leading to Denial of Services (DoS). This issue occurs on all M | 0.6% | — |
| CVE-2023-22393 | HIGH 7.5 | juniper junos An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing Protocol Daemon (RPD) crash by sending a BGP route with invalid next-hop resulti | 0.6% | — |
| CVE-2023-22391 | HIGH 7.5 | juniper junos A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Specific packets are being incorrectly routed to a queue us | 0.6% | — |
| CVE-2023-22341 | HIGH 7.5 | f5 big-ip_access_policy_manager On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the following elements, undisclosed requests may cause the Traffic Management Microkernel (TMM) to terminate: * An OAuth Server that references | 0.6% | — |
| CVE-2023-22340 | HIGH 7.5 | f5 big-ip_access_policy_manager On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate. Note: Software vers | 0.6% | — |
| CVE-2023-22337 | HIGH 7.5 | intel unison_software Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. | 0.7% | — |
| CVE-2023-22323 | HIGH 7.5 | f5 big-ip_access_policy_manager In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when OCSP authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU | 0.7% | — |
| CVE-2023-22285 | HIGH 7.5 | intel unison_software Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. | 0.7% | — |
| CVE-2023-22281 | HIGH 7.5 | f5 big-ip_advanced_firewall_manager On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP AFM NAT policy with a destination NAT rule is configured on a FastL4 virtual server, undisclosed traffic can cau | 0.6% | — |
| CVE-2023-22275 | HIGH 7.5 | adobe robohelp_server Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this | 1.3% | — |
| CVE-2023-22274 | HIGH 7.5 | adobe robohelp_server Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require | 1.5% | — |
| CVE-2023-22272 | HIGH 7.5 | adobe robohelp_server Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to information disclosure by an unauthenticated attacker. Exploitation of this issue does not require user interaction. | 1.4% | — |
| CVE-2023-21819 | HIGH 7.5 | microsoft windows_10_1809 Windows Secure Channel Denial of Service Vulnerability | 30.8% | — |
| CVE-2023-21818 | HIGH 7.5 | microsoft windows_10 Windows Secure Channel Denial of Service Vulnerability | 43.2% | — |
| CVE-2023-21816 | HIGH 7.5 | microsoft windows_10 Windows Active Directory Domain Services API Denial of Service Vulnerability | 1.7% | — |
| CVE-2023-21813 | HIGH 7.5 | microsoft windows_10 Windows Secure Channel Denial of Service Vulnerability | 1.7% | — |
| CVE-2023-21811 | HIGH 7.5 | microsoft windows_10 Windows iSCSI Service Denial of Service Vulnerability | 1.7% | — |
| CVE-2023-21769 | HIGH 7.5 | microsoft windows_10_1607 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability | 88.7% | — |
| CVE-2023-21761 | HIGH 7.5 | microsoft exchange_server Microsoft Exchange Server Information Disclosure Vulnerability | 1.6% | — |
| CVE-2023-21758 | HIGH 7.5 | microsoft windows_10 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 92.5% | — |
| CVE-2023-21757 | HIGH 7.5 | microsoft windows_10 Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability | 2.0% | — |
| CVE-2023-21728 | HIGH 7.5 | microsoft windows_10_1607 Windows Netlogon Denial of Service Vulnerability | 2.0% | — |