Lucene search
+L
Vulncheck KevMost viewed

5118 matches found

VulnCheck KEV
VulnCheck KEV
•added 2021/09/24 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-37975

Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...

8.8CVSS7.3AI score0.34887EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/09/21 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-37973

Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and...

9.6CVSS7.3AI score0.11641EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/09/17 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-38645

Microsoft Open Management Infrastructure OMI within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.3AI score0.02727EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/08/17 12:00 a.m.•9 views

VulnCheck KEV: CVE-2016-3199

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3214...

9.3CVSS7.7AI score0.2659EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/08/17 12:00 a.m.•9 views

VulnCheck KEV: CVE-2017-8601

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory...

7.6CVSS7.5AI score0.66911EPSS
SaveExploits6References1
VulnCheck KEV
VulnCheck KEV
•added 2021/08/17 12:00 a.m.•9 views

VulnCheck KEV: CVE-2013-2460

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from...

9.3CVSS7.5AI score0.70248EPSS
SaveExploits9References1
VulnCheck KEV
VulnCheck KEV
•added 2021/08/04 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-14750

Oracle WebLogic Server contains an unspecified vulnerability allowing an unauthenticated attacker to perform remote code execution. This vulnerability is related to CVE-2020-14882...

10CVSS7.7AI score0.99997EPSS
SaveExploits43References1
VulnCheck KEV
VulnCheck KEV
•added 2021/08/04 12:00 a.m.•9 views

VulnCheck KEV: CVE-2016-0545

Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-0551,...

6.4CVSS7.5AI score0.02272EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/07/13 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-33771

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.3AI score0.10172EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/06/04 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-21985

VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution...

10CVSS7.7AI score0.99999EPSS
SaveExploits12References1
VulnCheck KEV
VulnCheck KEV
•added 2021/06/01 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-29557

D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution...

10CVSS7.9AI score0.5432EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2021/06/01 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-22986

F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services...

10CVSS8AI score0.99898EPSS
SaveExploits20References1
VulnCheck KEV
VulnCheck KEV
•added 2021/06/01 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-25298

Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server...

9CVSS7.3AI score0.74979EPSS
SaveExploits6References1
VulnCheck KEV
VulnCheck KEV
•added 2021/04/13 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-27103

Accellion FTA contains a server-side request forgery SSRF vulnerability exploited via a crafted POST request to wmProgressstat.html...

9.8CVSS7.5AI score0.11315EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/04/12 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-17519

Apache Flink contains an improper access control vulnerability that allows an attacker to read any file on the local filesystem of the JobManager through its REST interface...

9.1CVSS7.3AI score0.97856EPSS
SaveExploits14References1
VulnCheck KEV
VulnCheck KEV
•added 2021/04/08 12:00 a.m.•9 views

VulnCheck KEV: CVE-2016-9563

SAP NetWeaver Application Server Java Platforms contains an unspecified vulnerability in BC-BMT-BPM-DSK which allows remote, authenticated users to conduct XML External Entity XXE attacks...

6.5CVSS6.9AI score0.23805EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/03/26 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-1879

Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting XSS when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple...

6.1CVSS6.8AI score0.06845EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/03/12 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-27059

Microsoft Office contains an unspecified vulnerability that allows for remote code execution...

8.5CVSS7.4AI score0.06076EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/03/02 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-26858

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain...

7.8CVSS7.6AI score0.93651EPSS
SaveExploits3References1
VulnCheck KEV
VulnCheck KEV
•added 2021/01/26 12:00 a.m.•9 views

VulnCheck KEV: CVE-2019-13608

Citrix StoreFront Server contains an XML External Entity XXE processing vulnerability that may allow an unauthenticated attacker to retrieve potentially sensitive information...

7.5CVSS7.1AI score0.30041EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/01/26 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-1782

Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges...

7CVSS7.3AI score0.02222EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2021/01/21 12:00 a.m.•9 views

VulnCheck KEV: CVE-2018-8595

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019,...

6.5CVSS6.7AI score0.06923EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/01/21 12:00 a.m.•9 views

VulnCheck KEV: CVE-2018-8580

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks a variant of cross-site request forgery, CSRF, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects...

4.3CVSS6.6AI score0.04425EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/01/14 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-35665

An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event parameter in include/makecvs.php during CSV creation...

10CVSS7.3AI score0.7848EPSS
SaveExploits4References1
VulnCheck KEV
VulnCheck KEV
•added 2021/01/12 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-1647

Microsoft Defender contains an unspecified vulnerability that allows for remote code execution...

7.8CVSS7.5AI score0.39392EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2020/12/23 12:00 a.m.•9 views

VulnCheck KEV: CVE-2019-8394

Zoho ManageEngine ServiceDesk Plus SDP contains an unspecified vulnerability that allows remote users to upload files via login page customization...

7.5CVSS6.8AI score0.63336EPSS
SaveExploits6References1
VulnCheck KEV
VulnCheck KEV
•added 2020/12/14 12:00 a.m.•9 views

VulnCheck KEV: CVE-2019-19509

An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution...

9CVSS7.4AI score0.71635EPSS
SaveExploits13References1
VulnCheck KEV
VulnCheck KEV
•added 2020/12/14 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-17496

The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. This CVE ID resolves an incomplete patch for CVE-2019-16759...

9.8CVSS8AI score0.99728EPSS
SaveExploits29References1
VulnCheck KEV
VulnCheck KEV
•added 2020/12/06 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-13640

A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the order parameter of a wpdLoadMoreComments request. No 7.x versions are affected...

9.8CVSS7.7AI score0.12605EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2020/12/01 12:00 a.m.•9 views

VulnCheck KEV: CVE-2005-2773

HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system...

9.8CVSS7.6AI score0.7409EPSS
SaveExploits10References1
VulnCheck KEV
VulnCheck KEV
•added 2020/11/22 12:00 a.m.•9 views

VulnCheck KEV: CVE-2019-9194

elFinder before 2.1.48 has a command injection vulnerability in the PHP connector...

9.8CVSS7.3AI score0.96669EPSS
SaveExploits11References1
VulnCheck KEV
VulnCheck KEV
•added 2020/11/11 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-3992

VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution...

10CVSS7.6AI score0.83015EPSS
SaveExploits3References1
VulnCheck KEV
VulnCheck KEV
•added 2020/10/22 12:00 a.m.•9 views

VulnCheck KEV: CVE-2025-34054

An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgiquery. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root. Exploitation evidence...

10CVSS5.8AI score0.02731EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2020/10/20 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-3118

Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause a reload on an affected device...

8.8CVSS7.5AI score0.11685EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2020/07/07 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-36705

The Adning Advertising plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ninguploadimage function in versions up to, and including, 1.5.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

9.8CVSS7.4AI score0.06944EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2020/04/14 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-1020

Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts Adobe Type 1 PostScript format that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who...

8.8CVSS7.5AI score0.65037EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2020/04/03 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-8515

DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows for remote code execution...

10CVSS7.6AI score0.99993EPSS
SaveExploits7References1
VulnCheck KEV
VulnCheck KEV
•added 2020/03/20 12:00 a.m.•9 views

VulnCheck KEV: CVE-2025-34130

An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder DVR devices prior to firmware version 2.0b6020200207 via the /z/zbin/nethtml.cgi endpoint. This vulnerability allows attackers to read sensitive configuration files, such as /zconf/service.xml, which can then be...

8.7CVSS5.9AI score0.01149EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2020/01/22 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-0650

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0651, CVE-2020-0653...

9.3CVSS7.8AI score0.20398EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2020/01/08 12:00 a.m.•9 views

VulnCheck KEV: CVE-2017-6077

NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution...

10CVSS7.5AI score0.68201EPSS
SaveExploits6References1
VulnCheck KEV
VulnCheck KEV
•added 2019/12/17 12:00 a.m.•9 views

VulnCheck KEV: CVE-2019-14927

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote configuration download vulnerability allows an attacker to download the smartRTU's configuration file which contains data such as usernames,...

7.5CVSS7.1AI score0.41847EPSS
SaveExploits3References1
VulnCheck KEV
VulnCheck KEV
•added 2019/12/17 12:00 a.m.•9 views

VulnCheck KEV: CVE-2017-16608

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within exec.jsp. The issue results from the lack of proper validation of a...

9.8CVSS7.7AI score0.04232EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2019/08/28 12:00 a.m.•9 views

VulnCheck KEV: CVE-2005-0862

Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter to 1 pocloginform.php or 2 phpbb/poc.php, the pocrootpath parameter to 3 phpbb/poc.php, 4...

7.5CVSS6.1AI score0.10918EPSS
SaveExploits4References1
VulnCheck KEV
VulnCheck KEV
•added 2019/06/18 12:00 a.m.•9 views

VulnCheck KEV: CVE-2019-11707

Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash...

8.8CVSS7AI score0.37696EPSS
SaveExploits8References1
VulnCheck KEV
VulnCheck KEV
•added 2019/06/13 12:00 a.m.•9 views

VulnCheck KEV: CVE-2017-18377

An issue was discovered on Wireless IP Camera P2P WIFICAM cameras. There is Command Injection in the setftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a setftp.cgi?svr=192.168.1.1&port=21&user=ftp URI...

10CVSS7.3AI score0.06797EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2019/06/13 12:00 a.m.•9 views

VulnCheck KEV: CVE-2013-7471

An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injection via shell metacharacters in the NewInternalClient, NewExternalPort, or NewInternalPort...

9.8CVSS7AI score0.23983EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2019/06/13 12:00 a.m.•9 views

VulnCheck KEV: CVE-2009-5157

On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c4pingipaddr variable...

9CVSS7.3AI score0.05825EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2019/06/13 12:00 a.m.•9 views

VulnCheck KEV: CVE-2016-6255

Portable UPnP SDK aka libupnp before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler...

7.5CVSS7.3AI score0.2662EPSS
SaveExploits4References1
VulnCheck KEV
VulnCheck KEV
•added 2019/06/13 12:00 a.m.•9 views

VulnCheck KEV: CVE-2018-14933

NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command...

10CVSS7.5AI score0.94884EPSS
SaveExploits5References1
VulnCheck KEV
VulnCheck KEV
•added 2019/06/12 12:00 a.m.•9 views

VulnCheck KEV: CVE-2019-7238

Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution...

9.8CVSS7.7AI score0.77146EPSS
SaveExploits4References1
Total number of security vulnerabilities5000