Lucene search
+L
Cisa KevRecent

1732 matches found

CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•49 views

Cisco IOS Software Denial-of-Service Vulnerability

A vulnerability in the Login Enhancements Login Block feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service DoS condition...

7.1CVSS4.5AI score0.04935EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•58 views

Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability

A vulnerability in the UDP processing code of Cisco IOS and IOS XE could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and denial of service...

7.5CVSS7.3AI score0.06158EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•67 views

Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability

A vulnerability in the Virtual Private LAN Service VPLS code of Cisco IOS for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a denial of service...

6.5CVSS3.5AI score0.02017EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•43 views

Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability

A vulnerability in the implementation of Network Address Translation NAT functionality in Cisco IOS could allow an unauthenticated, remote attacker to cause a denial of service...

7.8CVSS4.3AI score0.0707EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•57 views

Microsoft Office Memory Corruption Vulnerability

Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution...

9.3CVSS4AI score0.57582EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•36 views

Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator...

7.8CVSS3.1AI score0.36794EPSS
SaveExploits17
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•92 views

Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted 1 document or 2 web page that triggers system-state corruption...

9.3CVSS8.3AI score0.72032EPSS
SaveExploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•59 views

Microsoft Forefront TMG Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the Forefront Threat Management Gateway TMG Firewall Client Winsock provider that could allow code execution in the security context of the client application...

10CVSS3.4AI score0.4902EPSS
SaveExploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•58 views

Cisco IOS Software Denial-of-Service Vulnerability

A vulnerability in the Login Enhancements Login Block feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service DoS condition...

7.1CVSS4.5AI score0.04935EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•30 views

Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

There is a vulnerability in the implementation of the Common Industrial Protocol CIP feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service...

7.8CVSS5AI score0.0707EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•45 views

Cisco IOS Software Resource Management Errors Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service DoS condition...

6.3CVSS5AI score0.04116EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•41 views

Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability

A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN ISM-VPN running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial-of-service DoS condition...

7.8CVSS4.4AI score0.0707EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•46 views

Cisco IOS Software SNMP Remote Code Execution Vulnerability

The Simple Network Management Protocol SNMP subsystem of Cisco IOS 1 contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a craft...

9CVSS3.8AI score0.07292EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•64 views

Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP over an Ethernet Virtual Private Network EVPN for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service DoS condition, or potentially corrupt the BGP routing table,...

7.1CVSS3.6AI score0.05243EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•34 views

Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco IOS and Cisco IOS XE could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service...

7.8CVSS5.3AI score0.0707EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•44 views

Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 ISR G2 Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service...

6.5CVSS5.7AI score0.02153EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•69 views

Microsoft Office Use-After-Free Vulnerability

Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution...

9.3CVSS3.8AI score0.7813EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•60 views

Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

The Graphics Device Interface GDI in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges...

7.8CVSS5.2AI score0.03114EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•25 views

Linux Kernel Race Condition Vulnerability

Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges...

7.2CVSS4.7AI score0.83524EPSS
SaveExploits92
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•22 views

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code...

10CVSS7.5AI score0.22316EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•53 views

Microsoft ATM Font Driver Privilege Escalation Vulnerability

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application...

7.8CVSS6.1AI score0.34878EPSS
SaveExploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•94 views

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges...

7.8CVSS4.1AI score0.34651EPSS
SaveExploits16
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•28 views

Adobe Reader and Acrobat Memory Corruption Vulnerability

An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution...

9.3CVSS4.5AI score0.86927EPSS
SaveExploits4
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•34 views

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code...

10CVSS4.6AI score0.96714EPSS
SaveExploits13
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•118 views

Microsoft Office Stack-based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution...

9.3CVSS6.8AI score0.89497EPSS
SaveExploits16
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•57 views

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or...

10CVSS7.3AI score0.09203EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•68 views

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or...

10CVSS7.3AI score0.14863EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•68 views

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or...

10CVSS7.3AI score0.05655EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•77 views

Microsoft Windows Installer Privilege Escalation Vulnerability

Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.5AI score0.19452EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•30 views

Exim Out-of-bounds Write Vulnerability

Exim contains an out-of-bounds write vulnerability which can allow for remote code execution...

9.8CVSS4AI score0.41638EPSS
SaveExploits3
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•46 views

Microsoft Exchange Server Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server...

7.4CVSS4AI score0.27355EPSS
SaveExploits7
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•50 views

Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 DHCPv4 packets can allow for denial-of-service DoS...

8.6CVSS8.4AI score0.07608EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•25 views

Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service DoS...

8.6CVSS8.5AI score0.0782EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•40 views

Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

There is a buffer overflow vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition or execute arbitrary code...

8.8CVSS8.9AI score0.03354EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•63 views

Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability

A vulnerability in the quality of service QoS subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code with elevated privileges...

10CVSS5.6AI score0.14197EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•71 views

Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft...

9.3CVSS2.9AI score0.71874EPSS
SaveExploits3
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•42 views

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

The Simple Network Management Protocol SNMP subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code...

9CVSS4.3AI score0.10855EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•29 views

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

The Simple Network Management Protocol SNMP subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code...

9CVSS4.3AI score0.70354EPSS
SaveExploits8
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•56 views

Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

The Dynamic Host Configuration Protocol DHCP relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system...

10CVSS3.4AI score0.13773EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•46 views

Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability

A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol PN-DCP for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service...

7.8CVSS4.5AI score0.0707EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•55 views

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user...

9.3CVSS4AI score0.81158EPSS
SaveExploits3
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•57 views

Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability

An improper privilege management vulnerability exists within the Siemens SIMATIC Communication Processor CP that allows a privileged attacker to remotely cause a denial of service...

7.5CVSS5.9AI score0.0361EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•39 views

Adobe Flash Player Use-After-Free Vulnerability

A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution...

10CVSS7AI score0.99326EPSS
SaveExploits7
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•33 views

Oracle Java SE Integrity Check Vulnerability

Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment...

5.3CVSS6.6AI score0.13603EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•60 views

Microsoft PowerPoint Memory Corruption Vulnerability

Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document...

9.3CVSS7.2AI score0.40388EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•65 views

Microsoft Office Memory Corruption Vulnerability

Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document...

9.3CVSS7.3AI score0.53087EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•42 views

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot...

10CVSS8.6AI score0.93688EPSS
SaveExploits9
CISA KEV Catalog
CISA KEV Catalog
•added 2022/03/03 12:00 a.m.•37 views

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code...

10CVSS5.5AI score0.98113EPSS
SaveExploits13
CISA KEV Catalog
CISA KEV Catalog
•added 2022/02/25 12:00 a.m.•89 views

Microsoft Windows Code Injection Vulnerability

Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object...

9.3CVSS7.2AI score0.77485EPSS
SaveExploits14
CISA KEV Catalog
CISA KEV Catalog
•added 2022/02/25 12:00 a.m.•72 views

Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

Synacor Zimbra Collaboration Suite ZCS contains a cross-site scripting XSS vulnerability in the Calendar feature that allows an attacker to execute arbitrary code...

6.1CVSS6.3AI score0.30931EPSS
SaveExploits2
Total number of security vulnerabilities1732