Lucene search
+L
Cisa KevMost viewed

1652 matches found

CISA KEV Catalog
CISA KEV Catalog
•added 2023/02/02 12:0 a.m.•45 views

Multiple SugarCRM Products Remote Code Execution Vulnerability

Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates...

8.8CVSS8.9AI score0.80274EPSS
Exploits4
CISA KEV Catalog
CISA KEV Catalog
•added 2023/01/23 12:0 a.m.•45 views

Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario...

9.8CVSS2.6AI score0.99753EPSS
Exploits15
CISA KEV Catalog
CISA KEV Catalog
•added 2022/06/27 12:0 a.m.•45 views

Mitel MiVoice Connect Data Validation Vulnerability

The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation...

10CVSS4.7AI score0.56556EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/05/25 12:0 a.m.•45 views

Oracle Solaris Privilege Escalation Vulnerability

Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation...

8.8CVSS8.3AI score0.13399EPSS
Exploits8
CISA KEV Catalog
CISA KEV Catalog
•added 2022/05/24 12:0 a.m.•45 views

Microsoft Internet Explorer Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information...

8.8CVSS4.1AI score0.19522EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/04/13 12:0 a.m.•45 views

Adobe Flash Player Use-After-Free Vulnerability

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 AS3 implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service DoS...

10CVSS7AI score0.93688EPSS
Exploits5
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/28 12:0 a.m.•45 views

Microsoft Office Uninitialized Memory Use Vulnerability

Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document...

9.3CVSS7.2AI score0.35105EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/25 12:0 a.m.•45 views

Jenkins Matrix Project Plugin Remote Code Execution Vulnerability

Jenkins Matrix Project plugin contains a vulnerability which can allow users to escape the sandbox, opening opportunity to perform remote code execution...

9.9CVSS5.2AI score0.75594EPSS
Exploits4
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/25 12:0 a.m.•45 views

NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability

The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution...

10CVSS5AI score0.8345EPSS
Exploits6
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/25 12:0 a.m.•45 views

Cisco VPN Routers Remote Code Execution Vulnerability

A vulnerability in the web interface of the Cisco VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as root and gain full control of an affected system...

10CVSS7.4AI score0.55409EPSS
Exploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/15 12:0 a.m.•45 views

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context...

7.8CVSS2.9AI score0.06886EPSS
Exploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:0 a.m.•45 views

Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial-of-service DoS condition...

7.8CVSS4.1AI score0.08302EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:0 a.m.•45 views

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user...

9.3CVSS4AI score0.81454EPSS
Exploits3
CISA KEV Catalog
CISA KEV Catalog
•added 2021/12/01 12:0 a.m.•45 views

MikroTik Router OS Directory Traversal Vulnerability

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface...

9.1CVSS5.7AI score0.96087EPSS
Exploits24
CISA KEV Catalog
CISA KEV Catalog
•added 2025/01/14 12:0 a.m.•44 views

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges...

7.8CVSS6.8AI score0.01363EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2024/10/23 12:0 a.m.•44 views

Fortinet FortiManager Missing Authentication Vulnerability

Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests...

9.8CVSS8.3AI score0.94761EPSS
Exploits7
CISA KEV Catalog
CISA KEV Catalog
•added 2024/08/21 12:0 a.m.•44 views

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution...

7.2CVSS7.4AI score0.4638EPSS
Exploits3
CISA KEV Catalog
CISA KEV Catalog
•added 2024/07/15 12:0 a.m.•44 views

OSGeo GeoServer GeoTools Eval Injection Vulnerability

OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evaluating property names as XPath expressions. This allows unauthenticated attackers to conduct remote code execution via specially crafted input...

9.8CVSS8.2AI score0.99813EPSS
Exploits25
CISA KEV Catalog
CISA KEV Catalog
•added 2023/12/11 12:0 a.m.•44 views

Unitronics Vision PLC and HMI Insecure Default Password Vulnerability

Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands...

9.8CVSS7.4AI score0.02089EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2023/11/13 12:0 a.m.•44 views

Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the P...

9.8CVSS7.6AI score0.93546EPSS
Exploits25
CISA KEV Catalog
CISA KEV Catalog
•added 2023/10/04 12:0 a.m.•44 views

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Microsoft Windows Cryptographic Next Generation CNG Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges...

7CVSS7.1AI score0.01872EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2023/03/30 12:0 a.m.•44 views

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information...

8.8CVSS8.8AI score0.12588EPSS
Exploits4
CISA KEV Catalog
CISA KEV Catalog
•added 2022/06/08 12:0 a.m.•44 views

Adobe Flash Player Integer Overflow Vulnerability

Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments...

9.3CVSS7.1AI score0.21194EPSS
Exploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2022/05/25 12:0 a.m.•44 views

Microsoft Internet Explorer Privilege Escalation Vulnerability

Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site...

8.8CVSS6.5AI score0.40289EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/04/04 12:0 a.m.•44 views

Apple macOS Out-of-Bounds Read Vulnerability

macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory...

5.5CVSS3.2AI score0.01132EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/25 12:0 a.m.•44 views

Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability

Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service...

9.4CVSS6.1AI score0.63643EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/07 12:0 a.m.•44 views

Adobe ColdFusion Directory Traversal Vulnerability

Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories...

7.5CVSS3.8AI score0.65902EPSS
Exploits4
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:0 a.m.•44 views

Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP over an Ethernet Virtual Private Network EVPN for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service DoS condition, or potentially corrupt the BGP routing table,...

7.1CVSS3.6AI score0.05347EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:0 a.m.•44 views

Microsoft PowerPoint Memory Corruption Vulnerability

Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document...

9.3CVSS7.2AI score0.38497EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:0 a.m.•44 views

Adobe Reader and Acrobat Use-After-Free Vulnerability

Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution...

10CVSS6.8AI score0.40243EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/01/28 12:0 a.m.•44 views

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271...

10CVSS9.5AI score0.99999EPSS
Exploits141
CISA KEV Catalog
CISA KEV Catalog
•added 2022/01/28 12:0 a.m.•44 views

Grandstream Networks UCM6200 Series SQL Injection Vulnerability

Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root...

10CVSS3AI score0.83926EPSS
Exploits8
CISA KEV Catalog
CISA KEV Catalog
•added 2022/01/28 12:0 a.m.•44 views

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user...

10CVSS6.7AI score0.88013EPSS
Exploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/01/10 12:0 a.m.•44 views

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

Synacor Zimbra Collaboration Suite ZCS contains an improper restriction of XML external entity XXE vulnerability in the mailboxd component...

9.8CVSS9.6AI score0.99986EPSS
Exploits4
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:0 a.m.•44 views

SonicWall SMA100 SQL Injection Vulnerability

SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources...

7.5CVSS8.4AI score0.99906EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2026/04/14 12:0 a.m.•43 views

Microsoft Office Remote Code Execution

Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object...

9.3CVSS6.4AI score0.43063EPSS
Exploits4
CISA KEV Catalog
CISA KEV Catalog
•added 2025/03/19 12:0 a.m.•43 views

NAKIVO Backup and Replication Absolute Path Traversal Vulnerability

NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitrary files...

8.6CVSS6.9AI score0.9408EPSS
Exploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2024/09/18 12:0 a.m.•43 views

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution...

9.8CVSS7.5AI score0.94465EPSS
Exploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2024/08/07 12:0 a.m.•43 views

Apache OFBiz Path Traversal Vulnerability

Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution...

9.8CVSS8.2AI score0.99426EPSS
Exploits7
CISA KEV Catalog
CISA KEV Catalog
•added 2024/06/26 12:0 a.m.•43 views

Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

Roundcube Webmail contains a cross-site scripting XSS vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment...

6.3CVSS6AI score0.76596EPSS
Exploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2024/05/14 12:0 a.m.•43 views

Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass...

8.8CVSS7.3AI score0.03939EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2024/05/13 12:0 a.m.•43 views

Google Chromium Visuals Use-After-Free Vulnerability

Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera...

9.6CVSS7.2AI score0.08348EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2023/12/07 12:0 a.m.•43 views

Qlik Sense HTTP Tunneling Vulnerability

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software...

9.9CVSS7.6AI score0.84967EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2023/05/26 12:0 a.m.•43 views

Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

Barracuda Email Security Gateway ESG appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection...

9.8CVSS7.6AI score0.86956EPSS
Exploits3
CISA KEV Catalog
CISA KEV Catalog
•added 2023/03/30 12:0 a.m.•43 views

Linux Kernel Use-After-Free Vulnerability

Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user...

7.9CVSS8AI score0.03702EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/09/08 12:0 a.m.•43 views

Apple iOS, iPadOS, and macOS Input Validation Vulnerability

Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information...

5.5CVSS3.4AI score0.03208EPSS
Exploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/09/08 12:0 a.m.•43 views

D-Link DIR-820L Remote Code Execution Vulnerability

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution...

9.8CVSS4.4AI score0.81099EPSS
Exploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/06/08 12:0 a.m.•43 views

Adobe Acrobat and Reader Unspecified Vulnerability

Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times...

9.3CVSS4AI score0.36844EPSS
Exploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2022/05/24 12:0 a.m.•43 views

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer...

6.5CVSS2AI score0.26286EPSS
Exploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/28 12:0 a.m.•43 views

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word allows attackers to execute remote code or cause a denial-of-service DoS via crafted RTF data...

9.3CVSS7.2AI score0.53159EPSS
Exploits1
Total number of security vulnerabilities1652