58.912 CVE tracked
800 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
58.912 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2022-38650 | CRIT 10.0 | vmware hyperic_server A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the pr | 0.9% | — |
| CVE-2022-24550 | HIGH 7.8 | microsoft windows_10 Windows Telephony Server Elevation of Privilege Vulnerability | 0.9% | — |
| CVE-2022-20937 | MED 5.3 | cisco identity_services_engine A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to negatively affect the performance of an affected device. This vulnerability is due to insufficient | 0.9% | — |
| CVE-2021-38637 | MED 5.5 | microsoft windows_10 Windows Storage Information Disclosure Vulnerability | 0.9% | — |
| CVE-2021-38636 | MED 5.5 | microsoft windows_10 Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability | 0.9% | — |
| CVE-2021-38635 | MED 5.5 | microsoft windows_10 Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability | 0.9% | — |
| CVE-2021-36972 | MED 5.5 | microsoft windows_10 Windows SMB Information Disclosure Vulnerability | 0.9% | — |
| CVE-2021-36969 | MED 5.5 | microsoft windows_10 Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability | 0.9% | — |
| CVE-2021-0226 | HIGH 7.1 | juniper junos_os_evolved On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Service (DoS) condition. Continued receipt and processing of this packet will create a sustained Denial | 0.9% | — |
| CVE-2020-1254 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Modules Installer Service Elev | 0.9% | — |
| CVE-2020-1201 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory, aka 'Windows Now Playing Session Manager Elevation of Privilege Vulnerability'. | 0.9% | — |
| CVE-2020-1199 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Feedback Hub improperly handles objects in memory, aka 'Windows Feedback Hub Elevation of Privilege Vulnerability'. | 0.9% | — |
| CVE-2020-1197 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. | 0.9% | — |
| CVE-2020-0916 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0915. | 0.9% | — |
| CVE-2020-0915 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0916. | 0.9% | — |
| CVE-2020-0898 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0791. | 0.9% | — |
| CVE-2020-0849 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-2020-0841, CVE-2020-0896. | 0.9% | — |
| CVE-2020-0841 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-2020-0849, CVE-2020-0896. | 0.9% | — |
| CVE-2020-0840 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0841, CVE-2020-0849, CVE-2020-0896. | 0.9% | — |
| CVE-2020-0834 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Wi | 0.9% | — |
| CVE-2020-0819 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations, aka 'Windows Device Setup Manager Elevation of Privilege Vulnerability'. | 0.9% | — |
| CVE-2019-1882 | MED 5.4 | cisco industrial_network_director A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attack | 0.9% | — |
| CVE-2019-1777 | MED 5.4 | cisco registered_envelope_service A vulnerability in the web-based interface of the Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against another user of the service. The vulnerability is due to insufficient valid | 0.9% | — |
| CVE-2019-1707 | MED 5.4 | cisco catalyst_center A vulnerability in the web-based management interface of Cisco DNA Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability | 0.9% | — |
| CVE-2018-7824 | MED 4.9 | schneider-electric driver_suite An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.1 | 0.9% | — |