59.389 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.389 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2015-0703 | MED 4.3 | cisco unified_meetingplace Cross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus95857. | 1.1% | — |
| CVE-2013-1209 | MED 5.0 | cisco nx-os The encryption functionality in the Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level | 1.1% | — |
| CVE-2010-4487 | HIGH 7.5 | google chrome Incomplete blacklist vulnerability in Google Chrome before 8.0.552.215 on Linux and Mac OS X allows remote attackers to have an unspecified impact via a "dangerous file." | 1.1% | — |
| CVE-2026-88130 | MED 6.5 | microsoft windows_server_2012 Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | 1.1% | — |
| CVE-2026-88129 | MED 6.5 | microsoft windows_server_2012 Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | 1.1% | — |
| CVE-2026-88125 | MED 6.5 | microsoft windows_server_2012 Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | 1.1% | — |
| CVE-2026-88123 | MED 6.5 | microsoft windows_server_2012 Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | 1.1% | — |
| CVE-2023-46167 | MED 5.9 | ibm db2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 269367. | 1.1% | — |
| CVE-2022-37991 | HIGH 7.8 | microsoft windows_10 Windows Kernel Elevation of Privilege Vulnerability | 1.1% | — |
| CVE-2022-37988 | HIGH 7.8 | microsoft windows_10 Windows Kernel Elevation of Privilege Vulnerability | 1.1% | — |
| CVE-2022-21918 | MED 6.5 | microsoft windows_10 DirectX Graphics Kernel File Denial of Service Vulnerability | 1.1% | — |
| CVE-2021-34483 | HIGH 7.8 | microsoft windows_10 Windows Print Spooler Elevation of Privilege Vulnerability | 1.1% | — |
| CVE-2018-6979 | HIGH 7.4 | vmware airwatch_console The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9.5.0.16, 9.4.x prior to 9.4.0.22, 9.3.x prior to 9.3.0.25, 9.2.x prior to 9.2.3.27, and 9.1.x prior to 9.1.5.6 contains a | 1.1% | — |
| CVE-2018-0060 | MED 5.3 | juniper junos An improper input validation weakness in the device control daemon process (dcd) of Juniper Networks Junos OS allows an attacker to cause a Denial of Service to the dcd process and interfaces and connected clients when the Junos device is requesting an IP addr | 1.1% | — |
| CVE-2012-1338 | MED 6.3 | cisco catalyst_3560 Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service (device reload) by completing local web authentication quickly, aka Bug ID CSCts88664. | 1.1% | — |
| CVE-2011-1478 | MED 5.7 | linux linux_kernel The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel before 2.6.38 does not reset the values of certain structure members, which might allow remote attackers to cause a denial of service (NULL po | 1.1% | — |
| CVE-2026-70298 | MED 6.5 | microsoft sharepoint_server Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 1.1% | — |
| CVE-2023-4967 | HIGH 8.2 | citrix netscaler_application_delivery_controller Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server | 1.1% | — |
| CVE-2023-29334 | MED 4.3 | microsoft edge_chromium Microsoft Edge (Chromium-based) Spoofing Vulnerability | 1.1% | — |
| CVE-2022-37964 | HIGH 7.8 | microsoft windows_7 Windows Kernel Elevation of Privilege Vulnerability | 1.1% | — |
| CVE-2021-38919 | HIGH 7.5 | ibm qradar_security_information_and_event_manager IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-Force ID: 210021 | 1.1% | — |
| CVE-2021-38672 | HIGH 8.0 | microsoft windows_11 Windows Hyper-V Remote Code Execution Vulnerability | 1.1% | — |
| CVE-2020-5976 | HIGH 7.5 | nvidia games NVIDIA GeForce NOW, versions prior to 2.0.23 (Windows, macOS) and versions prior to 5.31 (Android, Shield TV), contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to i | 1.1% | — |
| CVE-2020-5975 | HIGH 7.5 | nvidia geforce_now NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application software that includes sensitive information as part of a URL, which may lead to information disclosure. | 1.1% | — |
| CVE-2018-5507 | HIGH 7.5 | f5 big-ip_access_policy_manager On F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5, vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correctly decrypt ciphertext from established SSL sessions with small MTU. | 1.1% | — |