60.583 CVE seguite
812 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
60.583 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più basso |
|---|---|---|---|---|
| CVE-2021-43999 | HIGH 8.8 | apache guacamole Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user. | 1,8% | — |
| CVE-2021-43980 | LOW 3.7 | apache tomcat The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwards exposed a long standing (but extremely hard to trigger) concurrency bug in Apache Tomcat 10.1.0 to 10.1.0-M12, 10.0.0-M1 to 10.0.18, 9.0 | 2,4% | — |
| CVE-2021-43976 | MED 4.6 | debian debian_linux In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic). | 0,7% | — |
| CVE-2021-43975 | MED 6.7 | debian debian_linux In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. | 0,6% | — |
| CVE-2021-43940 | HIGH 7.8 | atlassian confluence_data_center Affected versions of Atlassian Confluence Server and Data Center allow authenticated local attackers to achieve elevated privileges on the local system via a DLL Hijacking vulnerability in the Confluence installer. This vulnerability only affects installations | 0,3% | — |
| CVE-2021-43908 | MED 4.3 | microsoft visual_studio_code Visual Studio Code Spoofing Vulnerability | 2,8% | — |
| CVE-2021-43907 | CRIT 9.8 | microsoft windows_subsystem_for_linux Visual Studio Code WSL Extension Remote Code Execution Vulnerability | 4,0% | — |
| CVE-2021-43905 | CRIT 9.6 | microsoft 365_copilot Microsoft Office app Remote Code Execution Vulnerability | 3,1% | — |
| CVE-2021-43899 | CRIT 9.8 | microsoft wireless_display_adapter_firmware Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability | 2,6% | — |
| CVE-2021-43896 | MED 5.5 | microsoft powershell Microsoft PowerShell Spoofing Vulnerability | 2,5% | — |
| CVE-2021-43893 | HIGH 7.5 | microsoft windows_10 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | 6,7% | — |
| CVE-2021-43892 | HIGH 7.4 | microsoft biztalk_esb_toolkit Microsoft BizTalk ESB Toolkit Spoofing Vulnerability | 3,0% | — |
| CVE-2021-43891 | HIGH 7.8 | microsoft visual_studio_code Visual Studio Code Remote Code Execution Vulnerability | 11,7% | — |
| CVE-2021-43889 | HIGH 7.2 | microsoft defender_for_iot Microsoft Defender for IoT Remote Code Execution Vulnerability | 2,4% | — |
| CVE-2021-43888 | HIGH 7.5 | microsoft defender_for_iot Microsoft Defender for IoT Information Disclosure Vulnerability | 3,2% | — |
| CVE-2021-43883 | HIGH 7.8 | microsoft windows_10 Windows Installer Elevation of Privilege Vulnerability | 12,1% | — |
| CVE-2021-43882 | CRIT 9.0 | microsoft defender_for_iot Microsoft Defender for IoT Remote Code Execution Vulnerability | 2,6% | — |
| CVE-2021-43880 | MED 5.5 | microsoft windows_11 Windows Mobile Device Management Elevation of Privilege Vulnerability | 0,7% | — |
| CVE-2021-43877 | HIGH 8.8 | microsoft asp.net_core ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability | 0,7% | — |
| CVE-2021-43876 | HIGH 8.8 | microsoft sharepoint_enterprise_server Microsoft SharePoint Elevation of Privilege Vulnerability | 2,0% | — |
| CVE-2021-43875 | HIGH 7.8 | microsoft 365_apps Microsoft Office Graphics Remote Code Execution Vulnerability | 5,4% | — |
| CVE-2021-43800 | HIGH 7.5 | requarks wiki.js Wiki.js is a wiki app built on Node.js. Prior to version 2.5.254, directory traversal outside of Wiki.js context is possible when a storage module with local asset cache fetching is enabled on a Windows host. A malicious user can potentially read any file on t | 1,8% | — |
| CVE-2021-43772 | MED 5.5 | trendmicro antivirus\+_security Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected folder to be modified without any detection. | 0,2% | — |
| CVE-2021-43763 | LOW 3.3 | adobe dimension Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue req | 1,8% | — |
| CVE-2021-43760 | LOW 3.3 | adobe media_encoder Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of thi | 0,3% | — |