60.375 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.375 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2021-38660 | HIGH 7.8 | microsoft excel Microsoft Office Graphics Remote Code Execution Vulnerability | 2.3% | — |
| CVE-2021-38644 | HIGH 7.8 | microsoft mpeg-2_video_extension Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability | 2.3% | — |
| CVE-2016-8438 | CRIT 9.8 | linux linux_kernel Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may be used to bypass (Peripheral Image Loader) PIL authentication. Product: Android. Versions: Kernel 3.18. Android ID: A-31624565. References: | 2.3% | — |
| CVE-2013-5664 | MED 4.3 | paloaltonetworks pan-os Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908. | 2.3% | — |
| CVE-2025-53521 | CRIT 9.8 | f5 big-ip_access_policy_manager When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE). Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | 2.3% | |
| CVE-2021-28477 | HIGH 7.0 | microsoft visual_studio_code Visual Studio Code Remote Code Execution Vulnerability | 2.3% | — |
| CVE-2016-1265 | CRIT 9.8 | juniper junos_space A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery (CSRF), default authentication credentials, information leak | 2.3% | — |
| CVE-2022-38006 | MED 6.5 | microsoft windows_10 Windows Graphics Component Information Disclosure Vulnerability | 2.3% | — |
| CVE-2022-23294 | HIGH 8.8 | microsoft windows_10 Windows Event Tracing Remote Code Execution Vulnerability | 2.3% | — |
| CVE-2021-42314 | HIGH 8.8 | microsoft defender_for_iot Microsoft Defender for IoT Remote Code Execution Vulnerability | 2.3% | — |
| CVE-2020-3382 | CRIT 9.8 | cisco data_center_network_manager A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability exists be | 2.3% | — |
| CVE-2022-20704 | CRIT 10.0 | cisco rv160_firmware Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot | 2.3% | — |
| CVE-2018-0132 | HIGH 8.6 | cisco carrier_routing_system A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base (RIB) and the FIB, resulting in a denial of service (DoS) conditi | 2.3% | — |
| CVE-2018-0094 | HIGH 7.5 | cisco unified_computing_system_central_software A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization on the targeted device. The vulnerability is due to insuff | 2.3% | — |
| CVE-2018-0086 | HIGH 8.6 | cisco unified_customer_voice_portal A vulnerability in the application server of the Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to malformed SIP INVITE tra | 2.3% | — |
| CVE-2017-6729 | HIGH 7.5 | cisco asr_5000_software A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the B | 2.3% | — |
| CVE-2017-12293 | HIGH 8.6 | cisco webex_meetings_server A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient limitations on the number of connections that can be made to the affected soft | 2.3% | — |
| CVE-2017-12270 | HIGH 7.5 | cisco ios_xr A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition when the emsd service stops. The vulnerability | 2.3% | — |
| CVE-2017-12260 | HIGH 7.5 | cisco spa_501g_firmware A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, res | 2.3% | — |
| CVE-2017-12259 | HIGH 7.5 | cisco small_business_ip_phone_firmware A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial o | 2.3% | — |
| CVE-2014-3526 | HIGH 7.5 | apache wicket Apache Wicket before 1.5.12, 6.x before 6.17.0, and 7.x before 7.0.0-M3 might allow remote attackers to obtain sensitive information via vectors involving identifiers for storing page markup for temporary user sessions. | 2.3% | — |
| CVE-2013-5511 | HIGH 10.0 | cisco adaptive_security_appliance_software The Adaptive Security Device Management (ASDM) remote-management feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1 | 2.3% | — |
| CVE-2006-1670 | HIGH 7.8 | cisco ons_15310-cl_series Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID | 2.3% | — |
| CVE-2023-49898 | HIGH 7.2 | apache streampark In streampark, there is a project module that integrates Maven's compilation capability. However, there is no check on the compilation parameters of Maven. allowing attackers to insert commands for remote command execution, The prerequisite for a successful at | 2.3% | — |
| CVE-2019-1711 | MED 5.3 | cisco ios_xr A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of gRPC req | 2.3% | — |