58.412 CVE tracked
792 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
58.412 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2022-22175 | HIGH 7.5 | juniper junos An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt of th | 0.7% | — |
| CVE-2022-22174 | HIGH 7.5 | juniper junos A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series and EX4600 switches may cause the memory to not be freed, leading to a packet DMA memory leak, and eventual Denial of Service (DoS) condition. Once the con | 0.9% | — |
| CVE-2022-22173 | HIGH 7.5 | juniper junos A Missing Release of Memory after Effective Lifetime vulnerability in the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause Denial of Service (DoS). In a scenario where Public Key Infrast | 0.6% | — |
| CVE-2022-22171 | HIGH 7.5 | juniper junos An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN whic | 0.9% | — |
| CVE-2022-22170 | HIGH 7.5 | juniper junos A Missing Release of Resource after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN which | 0.9% | — |
| CVE-2022-22161 | HIGH 7.5 | juniper junos An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by sending a flood of traffic to the out-of-band managem | 1.0% | — |
| CVE-2022-22159 | HIGH 7.5 | juniper junos A vulnerability in the NETISR network queue functionality of Juniper Networks Junos OS kernel allows an attacker to cause a Denial of Service (DoS) by sending crafted genuine packets to a device. During an attack, the routing protocol daemon (rpd) CPU may reac | 1.1% | — |
| CVE-2022-22153 | HIGH 7.5 | juniper junos An Insufficient Algorithmic Complexity combined with an Allocation of Resources Without Limits or Throttling vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series and MX Series with SPC3 allows an unauthenticated networ | 0.9% | — |
| CVE-2022-22039 | HIGH 7.5 | microsoft windows_server_2008 Windows Network File System Remote Code Execution Vulnerability | 2.3% | — |
| CVE-2022-22037 | HIGH 7.5 | microsoft windows_10 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 2.4% | — |
| CVE-2022-22025 | HIGH 7.5 | microsoft windows_10 Windows Internet Information Services Cachuri Module Denial of Service Vulnerability | 31.9% | — |
| CVE-2022-21993 | HIGH 7.5 | microsoft windows_10 Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | 43.6% | — |
| CVE-2022-21986 | HIGH 7.5 | fedoraproject fedora .NET Denial of Service Vulnerability | 3.7% | — |
| CVE-2022-21983 | HIGH 7.5 | microsoft windows_10 Win32 Stream Enumeration Remote Code Execution Vulnerability | 2.1% | — |
| CVE-2022-21965 | HIGH 7.5 | microsoft teams Microsoft Teams Denial of Service Vulnerability | 3.0% | — |
| CVE-2022-21911 | HIGH 7.5 | microsoft .net_framework .NET Framework Denial of Service Vulnerability | 3.1% | — |
| CVE-2022-21904 | HIGH 7.5 | microsoft windows_10 Windows GDI Information Disclosure Vulnerability | 3.5% | — |
| CVE-2022-21890 | HIGH 7.5 | microsoft windows_10 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 3.0% | — |
| CVE-2022-21889 | HIGH 7.5 | microsoft windows_10 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 3.0% | — |
| CVE-2022-21883 | HIGH 7.5 | microsoft windows_10 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 4.4% | — |
| CVE-2022-21880 | HIGH 7.5 | microsoft windows_10 Windows GDI+ Information Disclosure Vulnerability | 3.9% | — |
| CVE-2022-21848 | HIGH 7.5 | microsoft windows_10 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 4.2% | — |
| CVE-2022-21843 | HIGH 7.5 | microsoft windows_10 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | 3.4% | — |
| CVE-2022-21546 | HIGH 7.5 | debian debian_linux In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITE_SAME No Data Buffer crash In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using | 0.4% | — |
| CVE-2022-21155 | HIGH 7.5 | fernhillsoftware scada_server A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing the server process (FHSvrService.exe) to exit. | 1.1% | — |