56.855 CVE tracked
777 Exploited now
183 Used by ransomware
Last sync
CVE Tracker
56.855 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2021-1728 | HIGH 8.8 | microsoft system_center_operations_manager System Center Operations Manager Elevation of Privilege Vulnerability | 1.8% | — |
| CVE-2021-1707 | HIGH 8.8 | microsoft sharepoint_enterprise_server Microsoft SharePoint Server Remote Code Execution Vulnerability | 3.6% | — |
| CVE-2021-1701 | HIGH 8.8 | microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability | 3.6% | — |
| CVE-2021-1700 | HIGH 8.8 | microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability | 3.6% | — |
| CVE-2021-1678 | HIGH 8.8 | microsoft windows_10 Windows Print Spooler Spoofing Vulnerability | 9.4% | — |
| CVE-2021-1674 | HIGH 8.8 | microsoft windows_10 Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability | 3.0% | — |
| CVE-2021-1673 | HIGH 8.8 | microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability | 3.0% | — |
| CVE-2021-1671 | HIGH 8.8 | microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability | 3.0% | — |
| CVE-2021-1669 | HIGH 8.8 | microsoft remote_desktop Windows Remote Desktop Security Feature Bypass Vulnerability | 3.0% | — |
| CVE-2021-1667 | HIGH 8.8 | microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability | 3.6% | — |
| CVE-2021-1666 | HIGH 8.8 | microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability | 3.0% | — |
| CVE-2021-1664 | HIGH 8.8 | microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability | 3.0% | — |
| CVE-2021-1660 | HIGH 8.8 | microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability | 3.0% | — |
| CVE-2021-1658 | HIGH 8.8 | microsoft windows_10 Remote Procedure Call Runtime Remote Code Execution Vulnerability | 3.0% | — |
| CVE-2021-1636 | HIGH 8.8 | microsoft sql_server Microsoft SQL Elevation of Privilege Vulnerability | 6.2% | — |
| CVE-2021-1578 | HIGH 8.8 | cisco application_policy_infrastructure_controller A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker to elevate privileges to Administrator on an | 2.0% | — |
| CVE-2021-1576 | HIGH 8.8 | cisco business_process_automation Multiple vulnerabilities in the web-based management interface of Cisco Business Process Automation (BPA) could allow an authenticated, remote attacker to elevate privileges to Administrator. These vulnerabilities are due to improper authorization enforcement | 1.1% | — |
| CVE-2021-1574 | HIGH 8.8 | cisco business_process_automation Multiple vulnerabilities in the web-based management interface of Cisco Business Process Automation (BPA) could allow an authenticated, remote attacker to elevate privileges to Administrator. These vulnerabilities are due to improper authorization enforcement | 1.7% | — |
| CVE-2021-1531 | HIGH 8.8 | cisco modeling_labs A vulnerability in the web UI of Cisco Modeling Labs could allow an authenticated, remote attacker to execute arbitrary commands with the privileges of the web application on the underlying operating system of an affected Cisco Modeling Labs server. This vulne | 30.5% | — |
| CVE-2021-1487 | HIGH 8.8 | cisco evolved_programmable_network_manager A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to in | 2.1% | — |
| CVE-2021-1401 | HIGH 8.8 | cisco wap125_firmware Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an | 2.0% | — |
| CVE-2021-1400 | HIGH 8.8 | cisco wap125_firmware Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an | 1.3% | — |
| CVE-2021-1368 | HIGH 8.8 | cisco firepower_extensible_operating_system A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileges or cause a denial of service (DoS) co | 0.4% | — |
| CVE-2021-1362 | HIGH 8.8 | cisco prime_license_manager A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, and Cisco Prime License M | 2.7% | — |
| CVE-2021-1305 | HIGH 8.8 | cisco ios_xe_sd-wan Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and | 1.3% | — |