Lucene search
+L
Cisa KevMost viewed

1652 matches found

CISA KEV Catalog
CISA KEV Catalog
•added 2025/05/13 12:0 a.m.•44 views

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Microsoft Windows Common Log File System CLFS Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.01291EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2025/01/14 12:0 a.m.•44 views

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges...

7.8CVSS6.8AI score0.01363EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2024/10/23 12:0 a.m.•44 views

Fortinet FortiManager Missing Authentication Vulnerability

Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests...

9.8CVSS8.3AI score0.94761EPSS
Exploits7
CISA KEV Catalog
CISA KEV Catalog
•added 2024/08/21 12:0 a.m.•44 views

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution...

7.2CVSS7.4AI score0.4638EPSS
Exploits3
CISA KEV Catalog
CISA KEV Catalog
•added 2024/07/15 12:0 a.m.•44 views

OSGeo GeoServer GeoTools Eval Injection Vulnerability

OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evaluating property names as XPath expressions. This allows unauthenticated attackers to conduct remote code execution via specially crafted input...

9.8CVSS8.2AI score0.99813EPSS
Exploits25
CISA KEV Catalog
CISA KEV Catalog
•added 2023/11/13 12:0 a.m.•44 views

Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the P...

9.8CVSS7.6AI score0.93546EPSS
Exploits25
CISA KEV Catalog
CISA KEV Catalog
•added 2023/10/04 12:0 a.m.•44 views

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Microsoft Windows Cryptographic Next Generation CNG Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges...

7CVSS7.1AI score0.01872EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2023/03/30 12:0 a.m.•44 views

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information...

8.8CVSS8.8AI score0.12588EPSS
Exploits4
CISA KEV Catalog
CISA KEV Catalog
•added 2023/03/30 12:0 a.m.•44 views

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of service via a crafted website...

9.3CVSS6.7AI score0.70676EPSS
Exploits6
CISA KEV Catalog
CISA KEV Catalog
•added 2022/06/27 12:0 a.m.•44 views

Mitel MiVoice Connect Data Validation Vulnerability

The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation...

10CVSS4.7AI score0.56556EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/06/08 12:0 a.m.•44 views

Adobe Flash Player Integer Overflow Vulnerability

Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments...

9.3CVSS7.1AI score0.21194EPSS
Exploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2022/04/19 12:0 a.m.•44 views

WhatsApp VOIP Stack Buffer Overflow Vulnerability

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number...

9.8CVSS4.8AI score0.39166EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/04/04 12:0 a.m.•44 views

Apple macOS Out-of-Bounds Read Vulnerability

macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory...

5.5CVSS3.2AI score0.01132EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/28 12:0 a.m.•44 views

Microsoft Office Uninitialized Memory Use Vulnerability

Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document...

9.3CVSS7.2AI score0.35105EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/25 12:0 a.m.•44 views

Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability

Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service...

9.4CVSS6.1AI score0.63643EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/15 12:0 a.m.•44 views

Microsoft Windows Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context...

7.8CVSS3.4AI score0.04679EPSS
Exploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/07 12:0 a.m.•44 views

Adobe ColdFusion Directory Traversal Vulnerability

Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories...

7.5CVSS3.8AI score0.65902EPSS
Exploits4
CISA KEV Catalog
CISA KEV Catalog
•added 2022/01/28 12:0 a.m.•44 views

Grandstream Networks UCM6200 Series SQL Injection Vulnerability

Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root...

10CVSS3AI score0.83926EPSS
Exploits8
CISA KEV Catalog
CISA KEV Catalog
•added 2022/01/28 12:0 a.m.•44 views

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user...

10CVSS6.7AI score0.88013EPSS
Exploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/01/28 12:0 a.m.•44 views

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271...

10CVSS9.5AI score0.99999EPSS
Exploits141
CISA KEV Catalog
CISA KEV Catalog
•added 2022/01/21 12:0 a.m.•44 views

Apache Struts 1 ActionForm Denial-of-Service Vulnerability

ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for denial-of-service DoS...

7.8CVSS9.2AI score0.54635EPSS
Exploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:0 a.m.•44 views

SonicWall SMA100 SQL Injection Vulnerability

SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources...

7.5CVSS8.4AI score0.99906EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2025/03/19 12:0 a.m.•43 views

NAKIVO Backup and Replication Absolute Path Traversal Vulnerability

NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitrary files...

8.6CVSS6.9AI score0.9408EPSS
Exploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2024/09/18 12:0 a.m.•43 views

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution...

9.8CVSS7.5AI score0.94465EPSS
Exploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2024/08/07 12:0 a.m.•43 views

Apache OFBiz Path Traversal Vulnerability

Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution...

9.8CVSS8.2AI score0.99426EPSS
Exploits7
CISA KEV Catalog
CISA KEV Catalog
•added 2024/06/26 12:0 a.m.•43 views

Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

Roundcube Webmail contains a cross-site scripting XSS vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment...

6.3CVSS6AI score0.76596EPSS
Exploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2024/05/14 12:0 a.m.•43 views

Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass...

8.8CVSS7.3AI score0.03939EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2024/05/13 12:0 a.m.•43 views

Google Chromium Visuals Use-After-Free Vulnerability

Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera...

9.6CVSS7.2AI score0.08348EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2023/05/26 12:0 a.m.•43 views

Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

Barracuda Email Security Gateway ESG appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection...

9.8CVSS7.6AI score0.86956EPSS
Exploits3
CISA KEV Catalog
CISA KEV Catalog
•added 2023/03/30 12:0 a.m.•43 views

Linux Kernel Use-After-Free Vulnerability

Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user...

7.9CVSS8AI score0.03702EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/09/08 12:0 a.m.•43 views

Apple iOS, iPadOS, and macOS Input Validation Vulnerability

Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information...

5.5CVSS3.4AI score0.03208EPSS
Exploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/06/08 12:0 a.m.•43 views

Adobe Acrobat and Reader Unspecified Vulnerability

Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times...

9.3CVSS4AI score0.36844EPSS
Exploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2022/05/25 12:0 a.m.•43 views

Oracle Solaris Privilege Escalation Vulnerability

Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation...

8.8CVSS8.3AI score0.13399EPSS
Exploits8
CISA KEV Catalog
CISA KEV Catalog
•added 2022/05/24 12:0 a.m.•43 views

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer...

6.5CVSS2AI score0.26286EPSS
Exploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/05/24 12:0 a.m.•43 views

Microsoft Internet Explorer Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information...

8.8CVSS4.1AI score0.19522EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/05/23 12:0 a.m.•43 views

Microsoft Windows SMB Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server...

6.5CVSS0.6AI score0.0964EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/28 12:0 a.m.•43 views

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word allows attackers to execute remote code or cause a denial-of-service DoS via crafted RTF data...

9.3CVSS7.2AI score0.53159EPSS
Exploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:0 a.m.•43 views

Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP over an Ethernet Virtual Private Network EVPN for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service DoS condition, or potentially corrupt the BGP routing table,...

7.1CVSS3.6AI score0.05347EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:0 a.m.•43 views

Adobe Reader and Acrobat Use-After-Free Vulnerability

Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution...

10CVSS6.8AI score0.40243EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/02/25 12:0 a.m.•43 views

Microsoft Internet Explorer Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory...

8.8CVSS3.4AI score0.29645EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:0 a.m.•43 views

Oracle WebLogic Server Unspecified Vulnerability

Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and availability...

9CVSS7.9AI score0.97929EPSS
Exploits8
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:0 a.m.•43 views

Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability

Microsoft Windows Server Message Block 1.0 SMBv1 contains an unspecified vulnerability that allows for remote code execution...

9.3CVSS8.4AI score0.93307EPSS
Exploits47
CISA KEV Catalog
CISA KEV Catalog
•added 2024/10/09 12:0 a.m.•42 views

Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

Ivanti Cloud Services Appliance CSA contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements...

7.2CVSS7.7AI score0.43364EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2024/07/09 12:0 a.m.•42 views

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability...

7.5CVSS6.7AI score0.84345EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2024/01/08 12:0 a.m.•42 views

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution...

9.8CVSS7.7AI score0.96534EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2023/11/13 12:0 a.m.•42 views

SysAid Server Path Traversal Vulnerability

SysAid Server on-premises version contains a path traversal vulnerability that leads to code execution...

9.8CVSS7.7AI score0.98851EPSS
Exploits3
CISA KEV Catalog
CISA KEV Catalog
•added 2023/01/17 12:0 a.m.•42 views

CWP Control Web Panel OS Command Injection Vulnerability

CWP Control Web Panel formerly CentOS Web Panel contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter...

9.8CVSS6.7AI score0.99995EPSS
Exploits12
CISA KEV Catalog
CISA KEV Catalog
•added 2022/06/08 12:0 a.m.•42 views

Microsoft Office Buffer Overflow Vulnerability

Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field...

9.3CVSS6.8AI score0.63081EPSS
Exploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/05/24 12:0 a.m.•42 views

QNAP NAS File Station Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code...

6.1CVSS4.8AI score0.23894EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/04/25 12:0 a.m.•42 views

Jenkins Script Security Plugin Sandbox Bypass Vulnerability

Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox...

9.9CVSS2.8AI score0.73854EPSS
Exploits3
Total number of security vulnerabilities1652