60.368 CVE seguite
809 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
60.368 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordinato dal più alto | In KEV dal, ordina dal più alto |
|---|---|---|---|---|
| CVE-2021-0072 | MED 5.5 | intel amt_ac_8260_firmware Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable information disclosure via local access. | 0,3% | — |
| CVE-2020-3253 | MED 6.7 | cisco secure_firewall_threat_defense A vulnerability in the support tunnel feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access the shell of an affected device even though expert mode is disabled. The vulnerability is due to improper conf | 0,3% | — |
| CVE-2020-2020 | MED 5.5 | paloaltonetworks cortex_xdr_agent An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program directory that prevents the Cortex XDR Agent from starting. The exceptional condition | 0,3% | — |
| CVE-2020-1978 | MED 5.8 | paloaltonetworks pan-os TechSupport files generated on Palo Alto Networks VM Series firewalls for Microsoft Azure platform configured with high availability (HA) inadvertently collect Azure dashboard service account credentials. These credentials are equivalent to the credentials ass | 0,3% | — |
| CVE-2017-6696 | MED 5.5 | cisco elastic_services_controller A vulnerability in the file system of Cisco Elastic Services Controllers could allow an authenticated, local attacker to gain access to sensitive user credentials that are stored in an affected system. More Information: CSCvd73677. Known Affected Releases: 2.3 | 0,3% | — |
| CVE-2017-6695 | MED 5.5 | cisco ultra_services_platform A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive information. More Information: CSCvd29398. Known Affected Releases: 21.0.v0.65839. | 0,3% | — |
| CVE-2017-10613 | MED 5.5 | juniper junos A vulnerability in a specific loopback filter action command, processed in a specific logical order of operation, in a running configuration of Juniper Networks Junos OS, allows an attacker with CLI access and the ability to initiate remote sessions to the loo | 0,3% | — |
| CVE-2016-8967 | MED 5.5 | ibm bigfix_inventory IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user. | 0,3% | — |
| CVE-2016-8963 | MED 5.5 | ibm bigfix_inventory IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user. | 0,3% | — |
| CVE-2016-8223 | HIGH 7.8 | lenovo system_interface_foundation During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with local privileges could run arbitrary code with administrator leve | 0,3% | — |
| CVE-2014-0686 | MED 6.0 | cisco unified_communications_manager Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privileges by leveraging incorrect file permissions, aka Bug IDs CSCul24917 and CSCul24908. | 0,3% | — |
| CVE-2007-1066 | MED 6.8 | cisco secure_services_client Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lis | 0,3% | — |
| CVE-2007-1065 | MED 6.8 | cisco secure_services_client Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspeci | 0,3% | — |
| CVE-2007-1064 | MED 6.8 | cisco secure_services_client Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the sup | 0,3% | — |
| CVE-2026-96108 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-85320 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | 0,3% | — |
| CVE-2026-7345 | HIGH 8.3 | google chrome Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Hig | 0,3% | — |
| CVE-2026-70273 | HIGH 7.0 | microsoft windows_11_24h2 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-70236 | HIGH 7.0 | microsoft windows_10_1607 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 0,3% | — |
| CVE-2026-48441 | HIGH 8.6 | adobe lightroom Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directori | 0,3% | — |
| CVE-2026-47850 | MED 4.3 | vmware spring_data_rest Spring Data REST does not preserve the persisted version (@Version) property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST | 0,3% | — |
| CVE-2026-41728 | HIGH 7.5 | vmware spring_data_rest Spring Data REST's JSON Patch (application/json-patch+json) implementation does not apply the write-access filter to intermediate path segments when resolving a multi-segment JSON Pointer. Affected versions: Spring Data REST 3.7.0 through 3.7.19; 4.3.0 throug | 0,3% | — |
| CVE-2026-1561 | MED 5.4 | ibm websphere_application_server IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF). This may allow remote attacker to send unauthorized requests from the system, potentially leading | 0,3% | — |
| CVE-2026-14113 | CRIT 9.6 | google chrome Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low) | 0,3% | — |
| CVE-2026-13861 | CRIT 9.6 | google chrome Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) | 0,3% | — |