59.497 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.497 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-1999-1352 | MED 4.6 | linux linux_kernel mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges. | 0.4% | — |
| CVE-1999-1341 | MED 4.6 | linux linux_kernel Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices. | 0.4% | — |
| CVE-1999-1322 | MED 4.6 | broadcom arcserve_backup The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext. | 1.5% | — |
| CVE-1999-1317 | MED 4.6 | microsoft windows_nt Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device. | 1.8% | — |
| CVE-1999-1235 | MED 4.6 | microsoft internet_explorer Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to | 2.7% | — |
| CVE-1999-1217 | MED 4.6 | microsoft windows_nt The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories. | 2.2% | — |
| CVE-1999-1104 | MED 4.6 | microsoft windows_95 Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords. | 1.0% | — |
| CVE-1999-1084 | MED 4.6 | microsoft windows_nt The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash. | 3.5% | — |
| CVE-1999-0975 | MED 4.6 | microsoft windows_95 The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed. | 2.7% | — |
| CVE-1999-0824 | MED 4.6 | microsoft windows_nt A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users. | 1.2% | — |
| CVE-1999-0794 | MED 4.6 | microsoft excel Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file. | 1.5% | — |
| CVE-1999-0780 | MED 4.6 | freebsd freebsd KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file. | 0.3% | — |
| CVE-1999-0720 | MED 4.6 | linux linux_kernel The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users. | 0.8% | — |
| CVE-1999-0716 | MED 4.6 | microsoft windows_2000 Buffer overflow in Windows NT 4.0 help file utility via a malformed help file. | 3.1% | — |
| CVE-1999-0715 | MED 4.6 | microsoft windows_2000 Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry. | 3.1% | — |
| CVE-1999-0578 | MED 4.6 | microsoft windows_nt A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys. | 1.5% | — |
| CVE-1999-0546 | MED 4.6 | microsoft windows_nt The Windows NT guest account is enabled. | 1.7% | — |
| CVE-1999-0534 | MED 4.6 | microsoft windows_2000 A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driv | 1.5% | — |
| CVE-1999-0400 | MED 4.6 | linux linux_kernel Denial of service in Linux 2.2.0 running the ldd command on a core file. | 1.0% | — |
| CVE-1999-0384 | MED 4.6 | microsoft office The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content. | 1.2% | — |
| CVE-1999-0376 | MED 4.6 | microsoft windows_nt Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs. | 2.4% | — |
| CVE-1999-0245 | MED 4.6 | linux linux_kernel Some configurations of NIS+ in Linux allowed attackers to log in as the user "+". | 0.4% | — |
| CVE-2026-98109 | MED 4.7 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix race condition during device registration In hci_register_dev(), the power_on work item is queued to hdev->req_workqueue before initializing hdev->adv_monitors_idr a | 0.1% | — |
| CVE-2026-96853 | MED 4.7 | microsoft windows_10_1607 Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.2% | — |
| CVE-2026-87602 | MED 4.7 | google chrome Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low) | 0.3% | — |