57.056 CVE seguite
777 Sfruttate ora
184 Usate dai ransomware
Ultima sincronia
CVE Tracker
57.056 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2023-38432 | CRIT 9.1 | linux linux_kernel An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read. | 2,5% | — |
| CVE-2021-1312 | MED 5.3 | cisco elastic_services_controller A vulnerability in the system resource management of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) to the health monitor API on an affected device. The vulnerability is due to inadequ | 2,5% | — |
| CVE-2017-17835 | HIGH 8.8 | apache airflow In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow. | 2,5% | — |
| CVE-2020-19316 | HIGH 8.8 | laravel framework OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17. | 2,5% | — |
| CVE-2018-0322 | HIGH 8.8 | cisco prime_collaboration A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to modify sensitive data that is associated with arbitrary accounts on an affected device. The vulnerability is due to | 2,5% | — |
| CVE-2010-4526 | HIGH 7.1 | linux linux_kernel Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, | 2,5% | — |
| CVE-2020-1067 | HIGH 7.8 | microsoft windows_10 A remote code execution vulnerability exists in the way that Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system. To exploit the vulnerability, an | 2,5% | — |
| CVE-2010-1570 | HIGH 7.8 | cisco customer_response_solution The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server and Node M | 2,5% | — |
| CVE-2009-2871 | HIGH 7.8 | cisco ios Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002. | 2,5% | — |
| CVE-2009-2870 | HIGH 7.8 | cisco ios Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service (device reload) via crafted SIP messages, aka Bug ID CSCsx25880. | 2,5% | — |
| CVE-2018-1457 | CRIT 9.8 | ibm engineering_requirements_management_doors An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges. IBM X-Force ID: 140208. | 2,5% | — |
| CVE-2010-4368 | HIGH 7.5 | awstats awstats awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname. | 2,5% | — |
| CVE-2021-37147 | HIGH 7.5 | apache traffic_server Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0. | 2,5% | — |
| CVE-2021-40462 | HIGH 7.8 | microsoft windows_10 Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability | 2,5% | — |
| CVE-2021-31211 | HIGH 7.8 | microsoft visual_studio_code Visual Studio Code Remote Code Execution Vulnerability | 2,5% | — |
| CVE-2021-28311 | MED 6.5 | microsoft windows_10 Windows Application Compatibility Cache Denial of Service Vulnerability | 2,5% | — |
| CVE-2024-38068 | HIGH 7.5 | microsoft windows_10_1507 Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability | 2,5% | — |
| CVE-2024-38067 | HIGH 7.5 | microsoft windows_server_2008 Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability | 2,5% | — |
| CVE-2024-38031 | HIGH 7.5 | microsoft windows_server_2008 Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability | 2,5% | — |
| CVE-2024-20678 | HIGH 8.8 | microsoft windows_10_1507 Remote Procedure Call Runtime Remote Code Execution Vulnerability | 2,5% | — |
| CVE-2010-2817 | HIGH 7.8 | cisco adaptive_security_appliance Unspecified vulnerability in the IKE implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.10), and 8.3 before | 2,5% | — |
| CVE-2010-2816 | HIGH 7.8 | cisco adaptive_security_appliance Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.17), 8.1 before 8.1(2.45), and 8.2 before 8.2(2.13) allows remote attackers to cause a denial of service (dev | 2,5% | — |
| CVE-2010-2815 | HIGH 7.8 | cisco adaptive_security_appliance Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3 | 2,5% | — |
| CVE-2010-2814 | HIGH 7.8 | cisco adaptive_security_appliance Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3 | 2,5% | — |
| CVE-2010-1581 | HIGH 7.8 | cisco adaptive_security_appliance Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3 | 2,5% | — |