58.650 CVE seguite
799 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
58.650 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordinato dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2024-43525 | MED 6.8 | microsoft windows_10_1809 Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 0,7% | — |
| CVE-2024-30092 | HIGH 8.0 | microsoft windows_10_1507 Windows Hyper-V Remote Code Execution Vulnerability | 0,7% | — |
| CVE-2024-26237 | HIGH 7.8 | microsoft windows_10_1809 Windows Defender Credential Guard Elevation of Privilege Vulnerability | 0,7% | — |
| CVE-2023-40185 | MED 6.5 | shescape_project shescape shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability can result in Shescape escaping (or quoting) for the wrong shell, thus allowing attackers to bypass protections | 0,7% | — |
| CVE-2023-20007 | MED 4.7 | cisco rv340_firmware A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code or cause the web-based management process on the | 0,7% | — |
| CVE-2022-41552 | CRIT 9.8 | hitachi infrastructure_analytics_advisor Server-Side Request Forgery (SSRF) vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Data Center Analytics, Analytics probe components), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyze | 0,7% | — |
| CVE-2022-3113 | MED 5.5 | linux linux_kernel An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c lacks check of the return value of devm_kzalloc() and will cause the null pointer dereference. | 0,7% | — |
| CVE-2020-3329 | MED 4.3 | cisco integrated_management_controller_supervisor A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow a read-only authenticated, remote attacker to disable user accounts on an affec | 0,7% | — |
| CVE-2014-0131 | LOW 2.9 | linux linux_kernel Use-after-free vulnerability in the skb_segment function in net/core/skbuff.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. | 0,7% | — |
| CVE-2026-65113 | CRIT 9.8 | nvidia infra_controller NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and informati | 0,7% | — |
| CVE-2026-33791 | MED 6.7 | juniper junos An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executing specific, crafted CLI commands to inject arbitrary shell commands as root, leading to a complete co | 0,7% | — |
| CVE-2026-24713 | CRIT 9.8 | apache iotdb Improper Input Validation vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue. | 0,7% | — |
| CVE-2025-53763 | CRIT 9.8 | microsoft purview_data_governance Improper access control in Azure Databricks allows an unauthorized attacker to elevate privileges over a network. | 0,7% | — |
| CVE-2025-30675 | MED 4.7 | apache cloudstack In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs. A malicious Domain Admin or Resource Admin can exploit this issue by intentionally specifying the 'domainid' parameter along with the 'filter=self' or 'filter=selfexecu | 0,7% | — |
| CVE-2025-26634 | HIGH 7.5 | microsoft windows_10_1507 Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network. | 0,7% | — |
| CVE-2024-29994 | HIGH 7.8 | microsoft windows_10_1809 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability | 0,7% | — |
| CVE-2024-28901 | MED 5.5 | microsoft windows_10_1507 Windows Remote Access Connection Manager Information Disclosure Vulnerability | 0,7% | — |
| CVE-2024-28900 | MED 5.5 | microsoft windows_10_1507 Windows Remote Access Connection Manager Information Disclosure Vulnerability | 0,7% | — |
| CVE-2023-44159 | HIGH 7.5 | acronis cyber_protect Sensitive information disclosure due to cleartext storage of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. | 0,7% | — |
| CVE-2023-3389 | HIGH 7.8 | canonical ubuntu_linux A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer. We recommend upgrading past commit ef7dfac | 0,7% | — |
| CVE-2023-23421 | HIGH 7.8 | microsoft windows_10 Windows Kernel Elevation of Privilege Vulnerability | 0,7% | — |
| CVE-2022-49075 | HIGH 8.1 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve overflow the qgroup limit We use extent_changeset->bytes_changed in qgroup_reserve_data() to record how many bytes we set for EXTENT_QGROUP_RESERVED state. Currentl | 0,7% | — |
| CVE-2021-36188 | MED 6.1 | fortinet fortiweb A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted GET parameters in requests to login and e | 0,7% | — |
| CVE-2018-10649 | MED 6.1 | citrix xenmobile_server There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3. | 0,7% | — |
| CVE-2013-1212 | MED 5.8 | cisco nexus_1000v The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or modify Virtual Supervisor Module (VSM) to VMware vCenter communication, via a craft | 0,7% | — |