Lucene search
+L
Vulncheck KevMost viewed

5118 matches found

VulnCheck KEV
VulnCheck KEV
•added 2023/07/19 12:00 a.m.•9 views

VulnCheck KEV: CVE-2011-0105

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data...

9.3CVSS6.5AI score0.70166EPSS
SaveExploits10References1
VulnCheck KEV
VulnCheck KEV
•added 2023/06/03 12:00 a.m.•9 views

VulnCheck KEV: CVE-2023-35036

In Progress MOVEit Transfer before 2021.0.7 13.0.7, 2021.1.5 13.1.5, 2022.0.5 14.0.5, 2022.1.6 14.1.6, and 2023.0.2 15.0.2, SQL injection vulnerabilities have been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to...

9.1CVSS7.5AI score0.12808EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2022/10/27 12:00 a.m.•9 views

VulnCheck KEV: CVE-2016-5680

Stack-based buffer overflow in cgi-bin/cgimain in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary code via the sn parameter to the transferlicense command...

9CVSS7.9AI score0.16752EPSS
SaveExploits5References1
VulnCheck KEV
VulnCheck KEV
•added 2022/09/14 12:00 a.m.•9 views

VulnCheck KEV: CVE-2022-40734

UniSharp laravel-filemanager aka Laravel Filemanager before 2.6.4 allows download?workingdir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0...

6.5CVSS6.7AI score0.04197EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2022/08/19 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-24762

The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the questionid GET parameter before using it in a SQL statement in the getquestion AJAX action, allowing unauthenticated users to perform SQL injection...

9.8CVSS7.3AI score0.86782EPSS
SaveExploits7References1
VulnCheck KEV
VulnCheck KEV
•added 2022/03/15 12:00 a.m.•9 views

VulnCheck KEV: CVE-2017-0101

A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory...

7.8CVSS7.1AI score0.57482EPSS
SaveExploits3References1
VulnCheck KEV
VulnCheck KEV
•added 2022/03/03 12:00 a.m.•9 views

VulnCheck KEV: CVE-2017-6744

The Simple Network Management Protocol SNMP subsystem of Cisco IOS 1 contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a...

9CVSS7.4AI score0.07158EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2022/03/03 12:00 a.m.•9 views

VulnCheck KEV: CVE-2017-8540

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft...

9.3CVSS7.1AI score0.71961EPSS
SaveExploits3References1
VulnCheck KEV
VulnCheck KEV
•added 2022/03/03 12:00 a.m.•9 views

VulnCheck KEV: CVE-2016-8562

An improper privilege management vulnerability exists within the Siemens SIMATIC Communication Processor CP that allows a privileged attacker to remotely cause a denial of service...

7.5CVSS6.6AI score0.03624EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2022/01/05 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-24878

The SupportCandy WordPress plugin before 2.2.7 does not sanitise and escape the query string before outputting it back in pages with the wpsccreateticket shortcode embed, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS6.4AI score0.01165EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
•added 2021/12/22 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-45461

FreePBX, when restapps aka Rest Phone Apps 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19...

9.8CVSS7.7AI score0.19746EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2021/12/16 12:00 a.m.•9 views

VulnCheck KEV: CVE-2022-24682

Synacor Zimbra Collaboration Suite ZCS contains a cross-site scripting XSS vulnerability in the Calendar feature that allows an attacker to execute arbitrary code...

6.1CVSS7AI score0.30931EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
•added 2021/12/15 12:00 a.m.•9 views

VulnCheck KEV: CVE-2010-3338

The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, aka "Task Scheduler Vulnerability."...

7.2CVSS5.8AI score0.21651EPSS
SaveExploits7References1
VulnCheck KEV
VulnCheck KEV
•added 2021/12/13 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-30983

Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges...

9.3CVSS7.7AI score0.02923EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/12/06 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-45046

Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations...

10CVSS7.5AI score0.99999EPSS
SaveExploits363References1
VulnCheck KEV
VulnCheck KEV
•added 2021/11/03 12:00 a.m.•9 views

VulnCheck KEV: CVE-2019-17558

The Apache Solr VelocityResponseWriter plug-in contains an unspecified vulnerability which can allow for remote code execution...

7.5CVSS7.4AI score0.98567EPSS
SaveExploits14References1
VulnCheck KEV
VulnCheck KEV
•added 2021/11/03 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-23874

McAfee Total Protection MTP contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense...

8.2CVSS7.1AI score0.01026EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/11/03 12:00 a.m.•9 views

VulnCheck KEV: CVE-2019-7481

SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources...

7.5CVSS7.4AI score0.99906EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/11/03 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-8644

PlaySMS contains a server-side template injection vulnerability that allows for remote code execution...

9.8CVSS7.5AI score0.86689EPSS
SaveExploits6References1
VulnCheck KEV
VulnCheck KEV
•added 2021/10/27 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-24876

The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not escape the v parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.01165EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
•added 2021/10/27 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-39341

The OptinMonster WordPress plugin is vulnerable to sensitive information disclosure and unauthorized setting updates due to insufficient authorization validation via the loggedinorhasapikey function in the /OMAPI/RestApi.php file that can used to exploit inject malicious web scripts on...

8.2CVSS7.2AI score0.21929EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2021/10/21 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-36901

Unauthenticated Stored Cross-Site Scripting XSS vulnerability in Phil Baker's Age Gate plugin = 2.17.0 at WordPress...

6.1CVSS6.4AI score0.0078EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2021/10/19 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-24644

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include function, which could lead to a Local File Inclusion issue...

7.5CVSS7.1AI score0.05028EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
•added 2021/10/07 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-2135

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Coherence Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

9.8CVSS7.1AI score0.0837EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2021/09/24 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-37975

Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...

8.8CVSS7.3AI score0.34887EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/09/21 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-37973

Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and...

9.6CVSS7.3AI score0.11641EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/09/17 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-38645

Microsoft Open Management Infrastructure OMI within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.3AI score0.02727EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/08/17 12:00 a.m.•9 views

VulnCheck KEV: CVE-2016-3199

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3214...

9.3CVSS7.7AI score0.2659EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/08/17 12:00 a.m.•9 views

VulnCheck KEV: CVE-2017-8601

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory...

7.6CVSS7.5AI score0.66911EPSS
SaveExploits6References1
VulnCheck KEV
VulnCheck KEV
•added 2021/08/17 12:00 a.m.•9 views

VulnCheck KEV: CVE-2013-2460

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from...

9.3CVSS7.5AI score0.70248EPSS
SaveExploits9References1
VulnCheck KEV
VulnCheck KEV
•added 2021/08/17 12:00 a.m.•9 views

VulnCheck KEV: CVE-2016-5165

Cross-site scripting XSS vulnerability in the Developer Tools aka DevTools subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the settings parameter in a...

6.1CVSS7AI score0.01246EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/08/04 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-14750

Oracle WebLogic Server contains an unspecified vulnerability allowing an unauthenticated attacker to perform remote code execution. This vulnerability is related to CVE-2020-14882...

10CVSS7.7AI score0.99997EPSS
SaveExploits43References1
VulnCheck KEV
VulnCheck KEV
•added 2021/08/04 12:00 a.m.•9 views

VulnCheck KEV: CVE-2016-0545

Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-0551,...

6.4CVSS7.5AI score0.02272EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/07/13 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-33771

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.3AI score0.10172EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/06/04 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-21985

VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution...

10CVSS7.7AI score0.99999EPSS
SaveExploits12References1
VulnCheck KEV
VulnCheck KEV
•added 2021/06/01 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-29557

D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution...

10CVSS7.9AI score0.5432EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2021/06/01 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-22986

F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services...

10CVSS8AI score0.99898EPSS
SaveExploits20References1
VulnCheck KEV
VulnCheck KEV
•added 2021/06/01 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-25298

Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server...

9CVSS7.3AI score0.74979EPSS
SaveExploits6References1
VulnCheck KEV
VulnCheck KEV
•added 2021/04/13 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-27103

Accellion FTA contains a server-side request forgery SSRF vulnerability exploited via a crafted POST request to wmProgressstat.html...

9.8CVSS7.5AI score0.11315EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/04/12 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-17519

Apache Flink contains an improper access control vulnerability that allows an attacker to read any file on the local filesystem of the JobManager through its REST interface...

9.1CVSS7.3AI score0.97856EPSS
SaveExploits14References1
VulnCheck KEV
VulnCheck KEV
•added 2021/04/08 12:00 a.m.•9 views

VulnCheck KEV: CVE-2016-9563

SAP NetWeaver Application Server Java Platforms contains an unspecified vulnerability in BC-BMT-BPM-DSK which allows remote, authenticated users to conduct XML External Entity XXE attacks...

6.5CVSS6.9AI score0.23805EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/03/26 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-1879

Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting XSS when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple...

6.1CVSS6.8AI score0.06845EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/03/12 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-27059

Microsoft Office contains an unspecified vulnerability that allows for remote code execution...

8.5CVSS7.4AI score0.06076EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/03/02 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-26858

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain...

7.8CVSS7.6AI score0.93651EPSS
SaveExploits3References1
VulnCheck KEV
VulnCheck KEV
•added 2021/01/26 12:00 a.m.•9 views

VulnCheck KEV: CVE-2019-13608

Citrix StoreFront Server contains an XML External Entity XXE processing vulnerability that may allow an unauthenticated attacker to retrieve potentially sensitive information...

7.5CVSS7.1AI score0.30041EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/01/26 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-1782

Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges...

7CVSS7.3AI score0.02222EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2021/01/21 12:00 a.m.•9 views

VulnCheck KEV: CVE-2018-8595

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019,...

6.5CVSS6.7AI score0.06923EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/01/21 12:00 a.m.•9 views

VulnCheck KEV: CVE-2018-8580

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks a variant of cross-site request forgery, CSRF, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects...

4.3CVSS6.6AI score0.04425EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/01/14 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-35665

An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event parameter in include/makecvs.php during CSV creation...

10CVSS7.3AI score0.7848EPSS
SaveExploits4References1
VulnCheck KEV
VulnCheck KEV
•added 2021/01/12 12:00 a.m.•9 views

VulnCheck KEV: CVE-2021-1647

Microsoft Defender contains an unspecified vulnerability that allows for remote code execution...

7.8CVSS7.5AI score0.39392EPSS
SaveExploits0References1
Total number of security vulnerabilities5000