58.650 CVE seguite
799 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
58.650 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-1999-0999 | MED 4.3 | microsoft sql_server Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet. | 21,7% | — |
| CVE-2019-1373 | CRIT 9.8 | microsoft exchange_server A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'. | 21,7% | — |
| CVE-2003-0353 | HIGH 7.5 | microsoft data_access_components Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434. | 21,7% | — |
| CVE-2010-3338 | HIGH 7.2 | microsoft windows_7 The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, | 21,7% | — |
| CVE-2006-3915 | MED 5.0 | microsoft internet_explorer Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iterating over any native function, as demonstrated with the window.alert function, which triggers a null dereference. | 21,6% | — |
| CVE-2006-3511 | MED 5.0 | microsoft internet_explorer Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the fonts property of the HtmlDlgSafeHelper object, which triggers a null dereference. | 21,6% | — |
| CVE-2011-0222 | HIGH 9.3 | apple safari WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2 | 21,6% | — |
| CVE-2010-3946 | HIGH 9.3 | microsoft office Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Conver | 21,6% | — |
| CVE-2010-3639 | HIGH 9.3 | adobe flash_player Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vector | 21,6% | — |
| CVE-2012-0142 | HIGH 9.3 | microsoft excel Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code v | 21,6% | — |
| CVE-2011-3305 | HIGH 7.8 | cisco nac_manager Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755. | 21,6% | — |
| CVE-2016-0187 | HIGH 7.5 | microsoft jscript The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting E | 21,6% | — |
| CVE-2021-27078 | CRIT 9.1 | microsoft exchange_server Microsoft Exchange Server Remote Code Execution Vulnerability | 21,6% | — |
| CVE-2011-1250 | HIGH 9.3 | microsoft internet_explorer Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Link Properties Handling Memory Cor | 21,6% | — |
| CVE-1999-1105 | MED 5.0 | microsoft windows_95 Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive. | 21,6% | — |
| CVE-2018-8540 | CRIT 9.8 | microsoft .net_framework A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET F | 21,6% | — |
| CVE-1999-0886 | HIGH 9.0 | microsoft windows_nt The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager. | 21,6% | — |
| CVE-2014-2776 | HIGH 9.3 | microsoft internet_explorer Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE | 21,6% | — |
| CVE-2016-7217 | HIGH 8.8 | microsoft windows_10 Media Foundation in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Media Foundation Memory Corrupti | 21,5% | — |
| CVE-2016-7205 | HIGH 8.8 | microsoft windows_10 Animation Manager in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web | 21,5% | — |
| CVE-2013-3863 | HIGH 9.3 | microsoft windows_server_2003 Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via a crafted OLE object in a file, aka "OLE Property Vulnerability." | 21,5% | — |
| CVE-2012-1524 | HIGH 9.3 | microsoft internet_explorer Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Attribute Remove Remote Code Execution Vulnerability." | 21,5% | — |
| CVE-2017-8737 | HIGH 7.5 | microsoft edge Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way th | 21,5% | — |
| CVE-2017-8728 | HIGH 7.5 | microsoft edge Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way th | 21,5% | — |
| CVE-1999-0867 | MED 5.0 | microsoft commercial_internet_system Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers. | 21,5% | — |