CISA Known Exploited Vulnerabilities catalog (page 10)
Page 10 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 10 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2023-23529 | Apple iOS And Ipados +4 | High 8.8 | — | 0 | — | 0.094 (95.5th percentile) | A type confusion issue was addressed with improved checks. | ||
CVE-2023-23376 | Microsoft Windows 10 1507 +34 | High 7.8 | Known | 0 | — | 0.109 (95.9th percentile) | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
CVE-2023-21823 | Microsoft Microsoft Office For Android +37 | High 7.8 | — | 1 | — | 0.056 (92.9th percentile) | Windows Graphics Component Remote Code Execution Vulnerability | ||
CVE-2023-21715 | Microsoft 365 Apps +1 | High 7.3 | — | 0 | — | 0.120 (96.2th percentile) | Microsoft Publisher Security Feature Bypass Vulnerability | ||
CVE-2023-0669 | Fortra Goanywhere Managed File Transfer +1 | High 7.2 | Known | 9 | Yes | 1.000 (100.0th percentile) | Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled o… | ||
CVE-2022-24990 | — | High 7.5 | Known | 7 | Yes | 0.832 (99.7th percentile) | TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in t… | ||
CVE-2015-2291 | Intel Ethernet Diagnostics Driver Iqvw32.sys +2 | High 7.8 | Known | 6 | — | 0.157 (96.9th percentile) | (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code… | ||
CVE-2023-22952 | — | High 8.8 | — | 0 | Yes | 0.801 (99.6th percentile) | In SugarCRM before 12.0. | ||
CVE-2022-21587 | Oracle E-Business Suite +1 | Critical 9.8 | Known | 4 | Yes | 0.983 (99.9th percentile) | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). | ||
CVE-2017-11357 | — | Critical 9.8 | Known | 1 | — | 0.777 (99.6th percentile) | Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary c… | ||
CVE-2022-47966 | — | Critical 9.8 | Known | 8 | Yes | 0.998 (100.0th percentile) | Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because th… | ||
CVE-2022-44877 | Control-Webpanel Webpanel +1 | Critical 9.8 | — | 9 | Yes | 1.000 (100.0th percentile) | login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter. | ||
CVE-2023-21674 | Microsoft Windows 10 1507 +28 | High 8.8 | — | 1 | — | 0.342 (98.4th percentile) | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | ||
CVE-2022-41080 | Microsoft Exchange Server +5 | High 8.8 | Known | 1 | — | 0.773 (99.6th percentile) | Microsoft Exchange Server Elevation of Privilege Vulnerability | ||
CVE-2018-5430 | Tibco Jasperreports Server +7 | High 8.8 | — | 0 | — | 0.481 (98.9th percentile) | The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with… | ||
CVE-2018-18809 | Tibco Jasperreports Library +11 | Medium 6.5 | — | 0 | — | 0.791 (99.6th percentile) | The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperRe… | ||
CVE-2022-42856 | Apple Ipados +4 | High 8.8 | — | 0 | — | 0.085 (95.1th percentile) | A type confusion issue was addressed with improved state handling. | ||
CVE-2022-44698 | Microsoft Windows 10 1607 +19 | Medium 5.4 | Known | 0 | — | 0.750 (99.5th percentile) | Windows SmartScreen Security Feature Bypass Vulnerability | ||
CVE-2022-42475 | Fortinet Fortios +1 | Critical 9.8 | Known | 12 | — | 0.995 (99.9th percentile) | A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VP… | ||
CVE-2022-27518 | Citrix Application Delivery Controller Firmware +2 | Critical 9.8 | — | 1 | — | 0.069 (94.1th percentile) | Unauthenticated remote arbitrary code execution | ||
CVE-2022-26501 | — | Critical 9.8 | Known | 0 | — | 0.041 (90.8th percentile) | Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2). | ||
CVE-2022-26500 | — | High 8.8 | Known | 1 | — | 0.058 (93.2th percentile) | Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and exec… | ||
CVE-2022-4262 | Google Chrome | High 8.8 | — | 3 | — | 0.235 (97.8th percentile) | Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2022-4135 | Google Chrome +2 | Critical 9.6 | — | 0 | — | 0.319 (98.3th percentile) | Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. | ||
CVE-2021-35587 | Oracle Access Manager +1 | Critical 9.8 | — | 3 | Yes | 0.963 (99.9th percentile) | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). | ||
CVE-2022-41049 | Microsoft Windows 10 1507 +25 | Medium 5.4 | — | 3 | — | 0.033 (88.5th percentile) | Windows Mark of the Web Security Feature Bypass Vulnerability | ||
CVE-2022-41128 | Microsoft Windows 10 1507 +33 | High 8.8 | — | 0 | — | 0.246 (97.9th percentile) | Windows Scripting Languages Remote Code Execution Vulnerability | ||
CVE-2022-41125 | Microsoft Windows 10 1507 +32 | High 7.8 | — | 0 | — | 0.030 (87.6th percentile) | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability | ||
CVE-2022-41091 | Microsoft Windows 10 1507 +25 | Medium 5.4 | Known | 0 | — | 0.023 (83.1th percentile) | Windows Mark of the Web Security Feature Bypass Vulnerability | ||
CVE-2022-41073 | Microsoft Windows 10 1507 +41 | High 7.8 | Known | 0 | — | 0.026 (85.6th percentile) | Windows Print Spooler Elevation of Privilege Vulnerability | ||
CVE-2021-25370 | Samsung Android +1 | Medium 6.1 | — | 0 | — | 0.009 (59.7th percentile) | An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic. | ||
CVE-2021-25369 | Samsung Android +1 | Medium 6.2 | — | 0 | — | 0.011 (65.3th percentile) | An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace. | ||
CVE-2021-25337 | Samsung Android +1 | Medium 4.4 | — | 1 | — | 0.028 (86.6th percentile) | Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files. | ||
CVE-2022-3723 | Google Chrome | High 8.8 | — | 0 | — | 0.079 (94.8th percentile) | Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2022-42827 | Apple iOS And Ipados +2 | High 7.8 | — | 0 | — | 0.011 (64.9th percentile) | An out-of-bounds write issue was addressed with improved bounds checking. | ||
CVE-2020-3433 | Cisco Anyconnect Secure Mobility Client +1 | High 7.8 | Known | 1 | Yes | 0.100 (95.7th percentile) | A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. | ||
CVE-2020-3153 | Cisco Anyconnect Secure Mobility Client +1 | Medium 6.5 | Known | 3 | Yes | 0.285 (98.1th percentile) | A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories w… | ||
CVE-2018-19323 | Gigabyte Aorus Graphics Engine +4 | Critical 9.8 | Known | 3 | — | 0.084 (95.0th percentile) | The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and writ… | ||
CVE-2018-19322 | Gigabyte Aorus Graphics Engine +4 | High 7.8 | Known | 0 | — | 0.018 (78.9th percentile) | The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to r… | ||
CVE-2018-19321 | Gigabyte Aorus Graphics Engine +4 | High 7.8 | Known | 2 | — | 0.037 (89.8th percentile) | The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to r… | ||
CVE-2018-19320 | Gigabyte Aorus Graphics Engine +4 | High 7.8 | Known | 6 | — | 0.046 (91.7th percentile) | The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionalit… | ||
CVE-2022-41352 | — | Critical 9.8 | Known | 8 | Yes | 0.955 (99.9th percentile) | An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. | ||
CVE-2021-3493 | Canonical Ubuntu Linux +1 | High 8.8 | — | 26 | Yes | 0.492 (98.9th percentile) | The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. | ||
CVE-2022-41033 | Microsoft Windows 10 1507 +40 | High 7.8 | — | 0 | — | 0.019 (79.7th percentile) | Windows COM+ Event System Service Elevation of Privilege Vulnerability | ||
CVE-2022-40684 | Fortinet Fortinet Fortios, Fortiproxy, Fortiswitchmanager +3 | Critical 9.8 | Known | 35 | Yes | 1.000 (100.0th percentile) | An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6… | ||
CVE-2022-41082 | Microsoft Exchange Server +5 | High 8.0 | Known | 10 | Yes | 1.000 (100.0th percentile) | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
CVE-2022-41040 | Microsoft Exchange Server +5 | High 8.8 | Known | 10 | Yes | 1.000 (100.0th percentile) | Microsoft Exchange Server Elevation of Privilege Vulnerability | ||
CVE-2022-36804 | Atlassian Bitbucket +2 | High 8.8 | — | 28 | Yes | 0.991 (99.9th percentile) | Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8… | ||
CVE-2022-3236 | Sophos Firewall +1 | Critical 9.8 | — | 0 | — | 0.989 (99.9th percentile) | A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older. | ||
CVE-2022-35405 | — | Critical 9.8 | — | 1 | Yes | 0.999 (100.0th percentile) | Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. | ||
CVE-2022-40139 | Trend Micro Trend Micro Apex One +1 | High 7.2 | — | 0 | — | 0.034 (89.1th percentile) | Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex One server administrator to instruct aff… | ||
CVE-2013-6282 | Linux Linux Kernel +1 | High 8.8 | — | 4 | Yes | 0.397 (98.6th percentile) | The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the conten… | ||
CVE-2013-2597 | Codeaurora Android-Msm +1 | High 8.4 | — | 1 | — | 0.015 (74.5th percentile) | Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions… | ||
CVE-2013-2596 | Linux Linux Kernel +2 | High 7.8 | — | 1 | — | 0.032 (88.3th percentile) | Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to crea… | ||
CVE-2013-2094 | Linux Linux Kernel +1 | High 8.4 | — | 7 | — | 0.477 (98.9th percentile) | The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open… | ||
CVE-2010-2568 | Microsoft Windows 7 +5 | High 7.8 | — | 0 | Yes | 0.896 (99.8th percentile) | Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1)… | ||
CVE-2022-37969 | Microsoft Windows 10 1507 +38 | High 7.8 | Known | 6 | — | 0.285 (98.1th percentile) | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
CVE-2022-32917 | Apple iOS +3 | High 7.8 | — | 0 | — | 0.056 (92.9th percentile) | The issue was addressed with improved bounds checks. | ||
CVE-2022-3075 | Fedoraproject Fedora +1 | Critical 9.6 | — | 0 | — | 0.058 (93.1th percentile) | Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted… | ||
CVE-2022-27593 | QNAP Photo Station +1 | Critical 10.0 | Known | 0 | — | 0.879 (99.8th percentile) | An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. | ||
CVE-2022-26258 | Dlink Dir-820l Firmware +1 | Critical 9.8 | — | 0 | — | 0.916 (99.8th percentile) | D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp. | ||
CVE-2020-9934 | Apple iOS +4 | Medium 5.5 | — | 1 | Yes | 0.032 (88.3th percentile) | An issue existed in the handling of environment variables. | ||
CVE-2018-7445 | Mikrotik Routeros +1 | Critical 9.8 | — | 0 | — | 0.658 (99.3th percentile) | A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. | ||
CVE-2018-6530 | Dlink Dir-860l Firmware +4 | Critical 9.8 | Known | 0 | — | 0.967 (99.9th percentile) | OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous version… | ||
CVE-2018-2628 | Oracle Weblogic Server +1 | Critical 9.8 | — | 26 | Yes | 1.000 (100.0th percentile) | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). | ||
CVE-2018-13374 | Fortinet Fortiadc +2 | Medium 4.3 | Known | 1 | — | 0.381 (98.6th percentile) | A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGa… | ||
CVE-2017-5521 | — | High 8.1 | — | 0 | Yes | 0.894 (99.8th percentile) | An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. | ||
CVE-2011-4723 | Dlink Dir-300 Firmware +1 | Medium 5.7 | — | 0 | — | 0.031 (87.7th percentile) | The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors. | ||
CVE-2011-1823 | Google Android +1 | High 7.8 | — | 0 | — | 0.414 (98.7th percentile) | The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privile… | ||
CVE-2022-26352 | Dotcms Dotcms +1 | Critical 9.8 | Known | 0 | Yes | 0.912 (99.8th percentile) | An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. | ||
CVE-2022-24706 | Apache Couchdb +1 | Critical 9.8 | — | 7 | Yes | 0.925 (99.8th percentile) | In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. | ||
CVE-2022-24112 | Apache Apisix +1 | Critical 9.8 | — | 14 | Yes | 0.961 (99.9th percentile) | An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. | ||
CVE-2022-22963 | Spring Cloud Function +28 | Critical 9.8 | — | 39 | Yes | 0.999 (100.0th percentile) | In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression t… | ||
CVE-2022-2294 | Apple Ipados +11 | High 8.8 | Known | 0 | — | 0.708 (99.4th percentile) | Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2021-39226 | Fedoraproject Fedora +1 | Critical 9.8 | — | 0 | — | 0.999 (100.0th percentile) | Grafana is an open source data visualization platform. | ||
CVE-2021-38406 | Delta Electronics Dopsoft 2 +1 | High 7.8 | — | 0 | — | 0.764 (99.5th percentile) | Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. | ||
CVE-2021-31010 | Apple Ipados +4 | High 7.5 | — | 0 | — | 0.037 (89.8th percentile) | A deserialization issue was addressed through improved validation. | ||
CVE-2020-36193 | Debian Debian Linux +4 | High 7.5 | — | 0 | — | 0.706 (99.4th percentile) | Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. | ||
CVE-2020-28949 | Debian Debian Linux +4 | High 7.8 | — | 2 | Yes | 0.846 (99.7th percentile) | Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed. | ||
CVE-2022-0028 | Palo Alto Networks Pan-Os +1 | High 8.6 | — | 0 | — | 0.027 (86.0th percentile) | A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. | ||
CVE-2022-32894 | Apple iOS And Ipados +4 | High 7.8 | — | 0 | — | 0.033 (88.6th percentile) | An out-of-bounds write issue was addressed with improved bounds checking. | ||
CVE-2022-32893 | Apple iOS And Ipados +8 | High 8.8 | — | 0 | — | 0.105 (95.8th percentile) | An out-of-bounds write issue was addressed with improved bounds checking. | ||
CVE-2022-2856 | Fedoraproject Fedora +1 | Medium 6.5 | — | 0 | — | 0.046 (91.7th percentile) | Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML pag… | ||
CVE-2022-26923 | Microsoft Windows 10 1507 +30 | High 8.8 | — | 10 | Yes | 0.835 (99.7th percentile) | Active Directory Domain Services Elevation of Privilege Vulnerability | ||
CVE-2022-22536 | SAP Content Server +5 | Critical 10.0 | — | 7 | — | 0.979 (99.9th percentile) | SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenat… | ||
CVE-2022-21971 | Microsoft Windows 10 1809 +18 | High 7.8 | — | 4 | — | 0.539 (99.0th percentile) | Windows Runtime Remote Code Execution Vulnerability | ||
CVE-2017-15944 | — | Critical 9.8 | — | 4 | Yes | 0.983 (99.9th percentile) | Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interf… | ||
CVE-2022-37042 | — | Critical 9.8 | Known | 3 | Yes | 0.921 (99.8th percentile) | Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. | ||
CVE-2022-27925 | — | High 7.2 | Known | 17 | Yes | 0.987 (99.9th percentile) | Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. | ||
CVE-2022-34713 | Microsoft Windows 10 1507 +37 | High 7.8 | — | 0 | — | 0.678 (99.3th percentile) | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | ||
CVE-2022-30333 | Debian Debian Linux +2 | High 7.5 | Known | 7 | Yes | 0.992 (99.9th percentile) | RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. | ||
CVE-2022-27924 | — | High 7.5 | Known | 0 | — | 0.939 (99.8th percentile) | Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. | ||
CVE-2022-26138 | Atlassian Questions For Confluence +1 | Critical 9.8 | — | 5 | — | 0.982 (99.9th percentile) | The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded p… | ||
CVE-2022-22047 | Microsoft Windows 10 1507 +40 | High 7.8 | — | 0 | — | 0.183 (97.2th percentile) | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | ||
CVE-2022-26925 | Microsoft Windows 10 1507 +42 | High 8.1 | — | 0 | — | 0.105 (95.8th percentile) | Windows LSA Spoofing Vulnerability | ||
CVE-2022-29499 | Mitel Mivoice Connect +1 | Critical 9.8 | Known | 0 | — | 0.552 (99.0th percentile) | The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. | ||
CVE-2021-4034 | Canonical Ubuntu Linux +30 | High 7.8 | Known | 218 | Yes | 0.949 (99.9th percentile) | A local privilege escalation vulnerability was found on polkit's pkexec utility. | ||
CVE-2021-30983 | Apple iOS And Ipados +2 | High 7.8 | — | 0 | — | 0.029 (87.2th percentile) | A buffer overflow issue was addressed with improved memory handling. | ||
CVE-2021-30533 | Fedoraproject Fedora +1 | Medium 6.5 | — | 0 | — | 0.167 (97.1th percentile) | Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe. | ||
CVE-2020-9907 | Apple iOS +3 | High 7.8 | — | 0 | — | 0.032 (88.2th percentile) | A memory corruption issue was addressed by removing the vulnerable code. |