60.375 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.375 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2017-3850 | MED 5.9 | cisco ios A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE Software (3.7 through 3.18, and 16) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition | 2.5% | — |
| CVE-2010-1567 | HIGH 7.8 | cisco pgw_2200_softswitch The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.8(1)S5 allows remote attackers to cause a denial of service (device crash) via a malformed header, aka Bug ID CSCsz13590. | 2.5% | — |
| CVE-2010-1565 | HIGH 7.8 | cisco pgw_2200_softswitch Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote attackers to cause a denial of service (TCP socket exhaustion) via unknown vectors, aka Bug ID | 2.5% | — |
| CVE-2010-1563 | HIGH 7.8 | cisco pgw_2200_softswitch The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote attackers to cause a denial of service (device crash) via a malformed header, aka Bug ID CSCsk04588. | 2.5% | — |
| CVE-2010-1561 | HIGH 7.8 | cisco pgw_2200_softswitch The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S11 and 9.7(3)P before 9.7(3)P11 allows remote attackers to cause a denial of service (device crash) via a long message, aka Bug ID CSCsk44115. | 2.5% | — |
| CVE-2010-0604 | HIGH 7.8 | cisco pgw_2200_softswitch Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S10 allows remote attackers to cause a denial of service (device crash) via unknown SIP traffic, as demonstrated by "SIP testing," aka Bug ID CSCsk3 | 2.5% | — |
| CVE-2010-0602 | HIGH 7.8 | cisco pgw_2200_softswitch The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S11 allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug ID CSCsk32606. | 2.5% | — |
| CVE-2010-0601 | HIGH 7.8 | cisco pgw_2200_softswitch The MGCP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S11 allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug ID CSCsl39126. | 2.5% | — |
| CVE-2007-4017 | HIGH 7.6 | citrix access_gateway Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators. | 2.5% | — |
| CVE-2002-2185 | MED 4.9 | debian debian_linux The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and | 2.5% | — |
| CVE-2021-28328 | MED 6.5 | microsoft windows_10 Windows DNS Information Disclosure Vulnerability | 2.5% | — |
| CVE-2023-32258 | HIGH 8.1 | linux linux_kernel A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_CLOSE commands. The issue results from the lack of proper locking when performing operations on an obj | 2.5% | — |
| CVE-2022-35769 | HIGH 7.5 | microsoft windows_10 Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability | 2.5% | — |
| CVE-2018-15383 | HIGH 7.5 | cisco adaptive_security_appliance_software A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, result | 2.5% | — |
| CVE-2013-6707 | MED 4.3 | cisco adaptive_security_appliance_software Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to cause a denial of service (multi-protocol management outage) by making multiple management session requests, | 2.5% | — |
| CVE-2010-1888 | MED 6.8 | microsoft windows_xp Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thread creation, aka "Windows Kernel Data Initialization Vulnerability." | 2.5% | — |
| CVE-2005-3804 | MED 6.4 | cisco 7920_wireless_ip_phone Cisco IP Phone (VoIP) 7920 1.0(8) listens to UDP port 17185 to support a VxWorks debugger, which allows remote attackers to obtain sensitive information and cause a denial of service. | 2.5% | — |
| CVE-2022-21992 | HIGH 7.8 | microsoft windows_10 Windows Mobile Device Management Remote Code Execution Vulnerability | 2.5% | — |
| CVE-2022-21857 | HIGH 8.8 | microsoft windows_10 Active Directory Domain Services Elevation of Privilege Vulnerability | 2.5% | — |
| CVE-2022-21221 | MED 5.9 | fasthttp_project fasthttp The package github.com/valyala/fasthttp before 1.34.0 are vulnerable to Directory Traversal via the ServeFile function, due to improper sanitization. It is possible to be exploited by using a backslash %5c character in the path. **Note:** This security issue i | 2.5% | — |
| CVE-2017-15712 | MED 6.5 | apache oozie Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process. The malicious user can construct a workflow XML file containing XML directives and configuration that reference sensitive | 2.5% | — |
| CVE-2012-0367 | HIGH 7.8 | cisco unity_connection Cisco Unity Connection before 7.1.5b(Su5), 8.0 and 8.5 before 8.5.1(Su3), and 8.6 before 8.6.2 allows remote attackers to cause a denial of service (services crash) via a series of crafted TCP segments, aka Bug ID CSCtq67899. | 2.5% | — |
| CVE-2021-40119 | CRIT 9.8 | cisco policy_suite A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user. This vulnerability is due to the re-use of static SSH keys across installation | 2.5% | — |
| CVE-2018-3962 | HIGH 7.3 | foxitsoftware phantompdf A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the CreationDate property of the this.info object. An attacker needs to trick the user t | 2.5% | — |
| CVE-2022-34716 | MED 5.9 | microsoft .net .NET Spoofing Vulnerability | 2.5% | — |