57.479 CVE seguite
782 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
57.479 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2020-17045 | MED 5.5 | microsoft windows_10 Windows KernelStream Information Disclosure Vulnerability | 1,4% | — |
| CVE-2020-17036 | MED 5.5 | microsoft windows_10 Windows Function Discovery SSDP Provider Information Disclosure Vulnerability | 1,4% | — |
| CVE-2020-17030 | MED 5.5 | microsoft windows_10 Windows MSCTF Server Information Disclosure Vulnerability | 1,4% | — |
| CVE-2020-17029 | MED 5.5 | microsoft windows_10 Windows Canonical Display Driver Information Disclosure Vulnerability | 1,4% | — |
| CVE-2020-1640 | HIGH 7.5 | juniper junos An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD (routing protocols process) daemon allows an attacker to crash RPD thereby causing a Denial of Service (DoS) condition. This framework requires t | 1,4% | — |
| CVE-2020-3808 | MED 5.9 | adobe creative_cloud Creative Cloud Desktop Application versions 5.0 and earlier have a time-of-check to time-of-use (toctou) race condition vulnerability. Successful exploitation could lead to arbitrary file deletion. | 1,4% | — |
| CVE-2020-0874 | MED 5.5 | microsoft windows_10 An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. T | 1,4% | — |
| CVE-2011-3297 | HIGH 7.8 | cisco catalyst_6500 Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when certain authentication configurations are used, allows remote attackers to cause a denial of service (module crash) by making many | 1,4% | — |
| CVE-2009-4923 | HIGH 7.8 | cisco asa_5580 Unspecified vulnerability in the DTLS implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (traceback) via TLS fragments, aka Bug ID CSCso53162. | 1,4% | — |
| CVE-2009-4920 | HIGH 7.8 | cisco asa_5580 Unspecified vulnerability in CTM on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software 8.1(2) allows remote attackers to cause a denial of service (watchdog traceback) via a large amount of small-packet data, aka Bug ID CSCsu11412. | 1,4% | — |
| CVE-2009-4918 | HIGH 7.8 | cisco asa_5580 Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (IKE process hang) via malformed NAT-T packets, aka Bug ID CSCsr74439. | 1,4% | — |
| CVE-2009-4917 | HIGH 7.8 | cisco asa_5580 Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device reload) via a high volume of SIP traffic, aka Bug ID CSCsr65901. | 1,4% | — |
| CVE-2002-1557 | MED 5.0 | cisco optical_networking_systems_software Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character. | 1,4% | — |
| CVE-2002-1556 | MED 5.0 | cisco optical_networking_systems_software Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Reference (IOR). | 1,4% | — |
| CVE-2021-1542 | HIGH 7.2 | cisco sf220-24_firmware Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Con | 1,4% | — |
| CVE-2021-22116 | HIGH 7.5 | debian debian_linux RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target Rabbit | 1,4% | — |
| CVE-2017-11589 | CRIT 9.8 | cisco residential_gateway_firmware On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is no access control for info.html, wancfg.cmd, rtroutecfg.cmd, arpview.cmd, cpuvi | 1,4% | — |
| CVE-2013-2263 | MED 5.0 | citrix access_gateway Unspecified vulnerability in Citrix Access Gateway Standard Edition 5.0.x before 5.0.4.223524 allows remote attackers to access network resources via unknown attack vectors. | 1,4% | — |
| CVE-2005-3175 | HIGH 7.2 | microsoft windows_2000 Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a domain administrator, which allows the local administrator to access the session as the domain administrator. | 1,4% | — |
| CVE-2001-0056 | HIGH 7.5 | cisco broadband_operating_system The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection. | 1,4% | — |
| CVE-1999-1362 | LOW 2.1 | microsoft windows_nt Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters. | 1,4% | — |
| CVE-1999-0415 | HIGH 7.5 | cisco cisco_7xx_routers The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration. | 1,4% | — |
| CVE-2026-25181 | HIGH 7.5 | microsoft windows_10_1607 Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network. | 1,4% | — |
| CVE-2024-31860 | MED 6.5 | apache zeppelin Improper Input Validation vulnerability in Apache Zeppelin. By adding relative path indicators(E.g ..), attackers can see the contents for any files in the filesystem that the server account can access. This issue affects Apache Zeppelin: from 0.9.0 before 0 | 1,4% | — |
| CVE-2023-35322 | HIGH 8.8 | microsoft windows_server_2008 Windows Deployment Services Remote Code Execution Vulnerability | 1,4% | — |