Lucene search
+L
Cisa KevRecent

1700 matches found

CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•73 views

Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Microsoft Desktop Window Manager DWM Core Library contains an unspecified vulnerability that allows for privilege escalation...

8.4CVSS7.6AI score0.06555EPSS
SaveExploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•86 views

Microsoft Windows Installer Privilege Escalation Vulnerability

Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers to bypass access restrictions to add or remove files...

7.8CVSS7.6AI score0.07667EPSS
SaveExploits5
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•79 views

Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution...

8.8CVSS9.2AI score0.59139EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•56 views

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution...

8.8CVSS8.4AI score0.36514EPSS
SaveExploits4
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•53 views

Microsoft Windows Server Buffer Overflow Vulnerability

Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services IIS 6.0 which allows remote attackers to execute code via a long header beginning with "If: http://" in a PROPFIND request...

10CVSS9.3AI score0.99823EPSS
SaveExploits41
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•27 views

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode...

7.8CVSS7.3AI score0.80968EPSS
SaveExploits24
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•61 views

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.5AI score0.0833EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•55 views

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode...

7.8CVSS7.6AI score0.0189EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•45 views

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office contains an unspecified vulnerability that allows for remote code execution...

8.5CVSS7.7AI score0.06076EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•90 views

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user...

8.8CVSS8.1AI score0.24188EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•36 views

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain...

7.8CVSS8.8AI score0.95762EPSS
SaveExploits5
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•53 views

Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability

Microsoft Windows Common Log File System CLFS driver improperly handles objects in memory which can allow for privilege escalation...

7.8CVSS7.4AI score0.01419EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•45 views

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain...

7.8CVSS8.8AI score0.99876EPSS
SaveExploits31
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•76 views

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft Windows Common Log File System CLFS driver contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.5AI score0.04037EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•24 views

Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts...

8.1CVSS8AI score0.02965EPSS
SaveExploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•27 views

Mozilla Firefox And Thunderbird Type Confusion Vulnerability

Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements...

8.8CVSS8.3AI score0.46589EPSS
SaveExploits7
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•26 views

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle WebLogic Server contains an unspecified vulnerability allowing an unauthenticated attacker to perform remote code execution. This vulnerability is related to CVE-2020-14882...

10CVSS9.4AI score0.99997EPSS
SaveExploits44
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•96 views

PlaySMS Server-Side Template Injection Vulnerability

PlaySMS contains a server-side template injection vulnerability that allows for remote code execution...

9.8CVSS9.8AI score0.86689EPSS
SaveExploits6
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•52 views

Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room...

9CVSS9.5AI score0.41284EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•69 views

Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands...

8CVSS8.3AI score0.98544EPSS
SaveExploits12
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•43 views

Realtek AP-Router SDK Buffer Overflow Vulnerability

Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submitted in the form that lead to denial-of-service DoS...

10CVSS9.6AI score0.97961EPSS
SaveExploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•36 views

SaltStack Salt Authentication Bypass Vulnerability

SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method calls. The vulnerability allows a remote user to access some methods without authentication, which can be used to retrieve user tokens from the salt master and/...

9.8CVSS9.1AI score0.96614EPSS
SaveExploits22
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•66 views

SAP NetWeaver Missing Authentication for Critical Function Vulnerability

SAP NetWeaver Application Server Java Platforms contains a missing authentication for critical function vulnerability allowing unauthenticated access to execute configuration tasks and create administrative users...

10CVSS9.4AI score0.94719EPSS
SaveExploits6
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•93 views

SAP Solution Manager Missing Authentication for Critical Function Vulnerability

SAP Solution Manager User Experience Monitoring contains a missing authentication for critical function vulnerability which results in complete compromise of all SMDAgents connected to the Solution Manager...

10CVSS9AI score0.98266EPSS
SaveExploits7
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•64 views

Tenda AC11 Router Stack Buffer Overflow Vulnerability

Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request...

10CVSS9.4AI score0.86777EPSS
SaveExploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•62 views

Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability

Trend Micro Apex One and OfficeScan server contain a vulnerable EXE file that could allow a remote attacker to write data to a path on affected installations and bypass root login...

10CVSS8.9AI score0.11858EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•84 views

Unraid Remote Code Execution Vulnerability

Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This CVE is chainable with CVE-2020-5849 for initial access...

10CVSS9.4AI score0.95844EPSS
SaveExploits9
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•87 views

VMware ESXi OpenSLP Use-After-Free Vulnerability

VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution...

10CVSS9.3AI score0.83015EPSS
SaveExploits3
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•61 views

Multiple VMware Products Command Injection Vulnerability

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute...

9.1CVSS8.8AI score0.17302EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•111 views

Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability

Zyxel firewalls ATP, USG, VM and AP Controllers NXC2500 and NXC5500 contain a use of hard-coded credentials vulnerability in an undocumented account "zyfwp" with an unchangeable password...

10CVSS8.9AI score0.90155EPSS
SaveExploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•72 views

Oracle Fusion Middleware Unspecified Vulnerability

Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and integrity of affected systems...

9.1CVSS6.2AI score0.98793EPSS
SaveExploits11
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•60 views

Oracle WebLogic Server Unspecified Vulnerability

Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and availability...

9CVSS7.9AI score0.97929EPSS
SaveExploits8
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•46 views

Ivanti Pulse Connect Secure Command Injection Vulnerability

Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles...

8.8CVSS9.6AI score0.22915EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•69 views

rConfig OS Command Injection Vulnerability

rConfig lib/ajaxHandlers/ajaxAddTemplate.php contains an OS command injection vulnerability that allows remote attackers to execute OS commands via shell metacharacters in the fileName POST parameter...

9CVSS9.2AI score0.80221EPSS
SaveExploits5
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•151 views

SIMalliance Toolbox Browser Command Injection Vulnerability

SIMalliance Toolbox Browser contains an command injection vulnerability that could allow remote attackers to retrieve location and IMEI information or execute a range of other attacks by modifying the attack message...

9.8CVSS9.4AI score0.04949EPSS
SaveExploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•53 views

SonicWall SMA100 SQL Injection Vulnerability

SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources...

7.5CVSS8.4AI score0.99906EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•62 views

SonicWall Email Security Unrestricted Upload of File Vulnerability

SonicWall Email Security contains an unrestricted upload of file with dangerous type vulnerability that allows a post-authenticated attacker to upload a file to the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and...

7.5CVSS8.2AI score0.16509EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•90 views

Symantec Messaging Gateway Remote Code Execution Vulnerability

Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remote code execution, an attacker may also desire to perform privilege escalating actions...

8.8CVSS8.9AI score0.35341EPSS
SaveExploits7
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•291 views

Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability

Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted goform/setUsbUnload request...

10CVSS9.6AI score0.08672EPSS
SaveExploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•42 views

Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability

Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution...

8.8CVSS8.9AI score0.10793EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•44 views

Trend Micro Multiple Products Content Validation Escape Vulnerability

Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components...

8.8CVSS8.3AI score0.05754EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•30 views

Trend Micro Multiple Products Improper Access Control Vulnerability

Trend Micro Apex One, OfficeScan, and Worry-Free Business Security on Microsoft Windows contain an improper access control vulnerability that may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function, and attain privileg...

7.8CVSS7.2AI score0.02639EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•51 views

Trend Micro Multiple Products Improper Input Validation Vulnerability

Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files...

8.8CVSS8.4AI score0.04951EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•96 views

Unraid Authentication Bypass Vulnerability

Unraid contains an authentication bypass vulnerability that allows attackers to gain access to the administrative interface. This CVE is chainable with CVE-2020-5847 for remote code execution...

10CVSS9.5AI score0.95844EPSS
SaveExploits9
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•61 views

VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

VMware ESXi and Horizon Desktop as a Service DaaS OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution...

9.8CVSS9.7AI score0.97258EPSS
SaveExploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•25 views

WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability

WordPress Social Warfare plugin contains a cross-site scripting XSS vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro...

6.1CVSS6.3AI score0.72946EPSS
SaveExploits20
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•61 views

Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability

Yealink Device Management contains a server-side request forgery SSRF vulnerability that allows for unauthenticated remote code execution...

10CVSS9.7AI score0.82865EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•52 views

Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability

Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution...

9.8CVSS9.7AI score0.9896EPSS
SaveExploits8
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•62 views

Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability

Zoho ManageEngine ServiceDesk Plus SDP contains an unspecified vulnerability that allows remote users to upload files via login page customization...

7.5CVSS6.4AI score0.63336EPSS
SaveExploits6
CISA KEV Catalog
CISA KEV Catalog
•added 1970/01/01 12:00 a.m.•24 views

?

?...

7.2AI score
SaveExploits0
Total number of security vulnerabilities1700