EN
59.967 CVE seguite
805 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia

CVE Tracker

59.967 CVE

Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.

CVE Tracker
Identificativo Gravità, ordina dal più alto Prodotto e difetto EPSS, ordina dal più alto In KEV dal, ordina dal più alto
CVE-2025-21231 HIGH 7.5 microsoft windows_10_1507 IP Helper Denial of Service Vulnerability 2,6% —
CVE-2021-27092 MED 6.8 microsoft windows_10 Azure AD Web Sign-in Security Feature Bypass Vulnerability 2,6% —
CVE-2016-3310 HIGH 7.8 microsoft windows_10 The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted appl 2,6% —
CVE-2010-2249 MED 6.5 apple iphone_os Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks. 2,6% —
CVE-2023-29331 HIGH 7.5 microsoft .net .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability 2,6% —
CVE-2022-22010 MED 4.4 microsoft windows_10 Media Foundation Information Disclosure Vulnerability 2,6% —
CVE-2021-31209 MED 6.5 microsoft exchange_server Microsoft Exchange Server Spoofing Vulnerability 2,6% —
CVE-2025-21218 HIGH 7.5 microsoft windows_server_2012 Windows Kerberos Denial of Service Vulnerability 2,6% —
CVE-2019-0866 MED 6.1 microsoft azure_devops_server A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique f 2,6% —
CVE-2005-2827 HIGH 7.2 microsoft windows_2000 The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call (APC) entries to free the wrong dat 2,6% —
CVE-2005-3273 MED 5.0 linux linux_kernel The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.4.29, does not properly verify the ndigis argument for a new route, which allows attackers to trigger array out-of-bound 2,6% —
CVE-2004-0949 MED 6.4 linux linux_kernel The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise 2,6% —
CVE-2021-34458 CRIT 9.9 microsoft windows_server_2016 Windows Kernel Remote Code Execution Vulnerability 2,6% —
CVE-2018-0403 CRIT 9.8 cisco unified_contact_center_express Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to retrieve a cleartext password. Cisco Bug IDs: CSCvg71040. 2,6% —
CVE-2024-49075 HIGH 7.5 microsoft windows_10_1809 Windows Remote Desktop Services Denial of Service Vulnerability 2,6% —
CVE-2007-3843 MED 4.3 linux linux_kernel The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite s 2,6% —
CVE-2020-17414 HIGH 7.8 foxitsoftware foxit_reader This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The s 2,6% —
CVE-1999-0216 MED 5.0 gnu inet Denial of service of inetd on Linux through SYN and RST packets. 2,6% —
CVE-2024-30019 MED 6.5 microsoft windows_server_2008 DHCP Server Service Denial of Service Vulnerability 2,6% —
CVE-2024-30011 MED 6.5 microsoft windows_server_2012 Windows Hyper-V Denial of Service Vulnerability 2,6% —
CVE-2018-0377 CRIT 9.8 cisco mobility_services_engine A vulnerability in the Open Systems Gateway initiative (OSGi) interface of Cisco Policy Suite before 18.1.0 could allow an unauthenticated, remote attacker to directly connect to the OSGi interface. The vulnerability is due to a lack of authentication. An atta 2,6% —
CVE-2018-0376 CRIT 9.8 cisco mobility_services_engine A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to access the Policy Builder interface. The vulnerability is due to a lack of authentication. An attacker could exploit this vul 2,6% —
CVE-2018-0374 CRIT 9.8 cisco mobility_services_engine A vulnerability in the Policy Builder database of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to connect directly to the Policy Builder database. The vulnerability is due to a lack of authentication. An attacker could explo 2,6% —
CVE-2020-3440 MED 6.5 cisco webex_meetings A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website t 2,6% —
CVE-2016-6811 HIGH 8.8 apache hadoop In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user. 2,6% —