58.849 CVE tracked
800 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
58.849 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-69372 | MED 5.7 | microsoft windows_10_1607 Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network. | 0.9% | — |
| CVE-2026-55993 | HIGH 7.5 | apache camel Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel in Atmosphere Websocket Component. The camel-atmosphere-websocket consumer mapped inbound WebSocket query p | 0.9% | — |
| CVE-2026-46726 | HIGH 7.5 | apache camel Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel in Vertx Websocket component. The camel-vertx-websocket consumer mapped inbound WebSocket query and path pa | 0.9% | — |
| CVE-2026-20931 | HIGH 8.0 | microsoft windows_10_1607 External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network. | 0.9% | — |
| CVE-2023-52776 | HIGH 8.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dfs-radar and temperature event locking The ath12k active pdevs are protected by RCU but the DFS-radar and temperature event handling code calling ath12k_mac_get_ar_by_pdev | 0.9% | — |
| CVE-2022-20863 | MED 4.3 | cisco webex_teams A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software do | 0.9% | — |
| CVE-2021-39532 | MED 6.5 | juniper libslax An issue was discovered in libslax through v0.22.1. A NULL pointer dereference exists in the function slaxLexer() located in slaxlexer.c. It allows an attacker to cause Denial of Service. | 0.9% | — |
| CVE-2020-9288 | MED 5.4 | fortinet fortiwlc An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the ESS profile or the Radius Profile. | 0.9% | — |
| CVE-2020-8022 | HIGH 7.7 | apache tomcat A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-S | 0.9% | — |
| CVE-2020-6640 | MED 5.4 | fortinet fortianalyzer An improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Description Area. | 0.9% | — |
| CVE-2020-1077 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerabilit | 0.9% | — |
| CVE-2024-31487 | MED 5.9 | fortinet fortisandbox A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all ve | 0.9% | — |
| CVE-2023-36728 | MED 5.5 | microsoft odbc_driver_for_sql_server Microsoft SQL Server Denial of Service Vulnerability | 0.9% | — |
| CVE-2021-26891 | HIGH 7.8 | microsoft windows_10 Windows Container Execution Agent Elevation of Privilege Vulnerability | 0.9% | — |
| CVE-2021-26875 | HIGH 7.8 | microsoft windows_10 Windows Win32k Elevation of Privilege Vulnerability | 0.9% | — |
| CVE-2015-6434 | MED 6.1 | cisco prime_infrastructure Cisco Prime Infrastructure does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka | 0.9% | — |
| CVE-2012-5375 | MED 4.0 | linux linux_kernel The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (prevention of file creation) by leveraging the ability to write to a directory important to the victim, and creating a file with | 0.9% | — |
| CVE-2011-2054 | MED 4.3 | cisco asa_5500_firmware A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authentication type is LDAP and the password is left blank, providing the primary credentials are correct. T | 0.9% | — |
| CVE-2026-78518 | HIGH 8.8 | microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-69614 | HIGH 8.8 | microsoft 365_apps Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.9% | — |
| CVE-2025-20165 | HIGH 7.5 | cisco broadworks_network_server A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to halt the processing of incoming SIP requests, resulting in a denial of service (DoS) condition. This vulnerability is due to improper memo | 0.9% | — |
| CVE-2024-38261 | HIGH 7.8 | microsoft windows_server_2008 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 0.9% | — |
| CVE-2024-38066 | HIGH 7.8 | microsoft windows_10_1507 Windows Win32k Elevation of Privilege Vulnerability | 0.9% | — |
| CVE-2023-37139 | MED 5.5 | microsoft chakracore ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray(). | 0.9% | — |
| CVE-2021-38936 | MED 4.9 | ibm qradar_security_information_and_event_manager IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user. IBM X-Force ID: 210893. | 0.9% | — |