CISA Known Exploited Vulnerabilities catalog (page 13)
Page 13 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 13 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2013-2729 | Adobe Acrobat +8 | Critical 9.8 | — | 1 | — | 0.666 (99.3th percentile) | Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerabilit… | ||
CVE-2013-2551 | Microsoft Internet Explorer +1 | High 8.8 | Known | 0 | Yes | 0.741 (99.5th percentile) | Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstr… | ||
CVE-2013-2465 | — | Critical 9.8 | Known | 0 | Yes | 0.988 (99.9th percentile) | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remo… | ||
CVE-2013-1690 | Canonical Ubuntu Linux +15 | High 8.8 | — | 2 | Yes | 0.690 (99.4th percentile) | Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with pag… | ||
CVE-2012-5076 | — | Critical 9.8 | — | 0 | Yes | 0.912 (99.8th percentile) | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, rela… | ||
CVE-2012-2539 | Microsoft Office Compatibility Pack +5 | High 7.8 | — | 0 | — | 0.530 (99.0th percentile) | Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a d… | ||
CVE-2012-2034 | Adobe Air +9 | High 7.5 | — | 0 | — | 0.077 (94.7th percentile) | Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and be… | ||
CVE-2012-0518 | — | Medium 4.7 | — | 0 | — | 0.047 (91.9th percentile) | Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to R… | ||
CVE-2011-2005 | Microsoft Windows Server 2003 +2 | High 7.8 | — | 0 | Yes | 0.318 (98.3th percentile) | afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain pri… | ||
CVE-2010-4398 | Microsoft Windows 7 +5 | High 7.8 | — | 0 | — | 0.087 (95.2th percentile) | Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2… | ||
CVE-2022-26318 | — | Critical 9.8 | — | 5 | Yes | 0.782 (99.6th percentile) | On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. | ||
CVE-2022-26143 | Mitel Micollab +2 | Critical 9.8 | — | 0 | — | 0.873 (99.8th percentile) | The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service… | ||
CVE-2022-21999 | Microsoft Windows 10 1507 +42 | High 7.8 | Known | 1 | Yes | 0.410 (98.7th percentile) | Windows Print Spooler Elevation of Privilege Vulnerability | ||
CVE-2021-42237 | — | Critical 9.8 | Known | 4 | Yes | 0.976 (99.9th percentile) | Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. | ||
CVE-2021-22941 | Citrix Sharefile Storagezones Controller +1 | Critical 9.8 | Known | 4 | — | 0.536 (99.0th percentile) | Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller. | ||
CVE-2020-9377 | Dlink Dir-610 Firmware +1 | High 8.8 | — | 0 | — | 0.219 (97.7th percentile) | D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. | ||
CVE-2020-9054 | Zyxel Atp100 Firmware +39 | Critical 9.8 | — | 1 | — | 1.000 (100.0th percentile) | Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to… | ||
CVE-2020-7247 | Canonical Ubuntu Linux +4 | Critical 9.8 | — | 12 | Yes | 0.990 (99.9th percentile) | smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated… | ||
CVE-2020-5410 | Spring By VMware Spring Cloud Config +1 | High 7.5 | — | 5 | Yes | 0.956 (99.9th percentile) | Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-co… | ||
CVE-2020-25223 | — | Critical 9.8 | — | 4 | Yes | 0.968 (99.9th percentile) | A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11 | ||
CVE-2020-2506 | QNAP Helpdesk +1 | High 7.3 | — | 0 | — | 0.020 (81.0th percentile) | The vulnerability have been reported to affect earlier versions of QTS. | ||
CVE-2020-2021 | Palo Alto Networks Pan-Os +1 | Critical 10.0 | Known | 2 | — | 0.044 (91.3th percentile) | When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled (unchecked), improper verification of signatures in PAN-OS… | ||
CVE-2020-1956 | Apache Kylin | High 8.8 | — | 1 | — | 0.974 (99.9th percentile) | Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command withou… | ||
CVE-2020-1631 | Juniper Junos +1 | High 8.8 | — | 0 | — | 0.049 (92.1th percentile) | A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an un… | ||
CVE-2019-6340 | Drupal Drupal +1 | High 8.1 | — | 13 | Yes | 0.920 (99.8th percentile) | Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. | ||
CVE-2019-2616 | Oracle Business Intelligence Publisher +1 | High 7.2 | — | 0 | — | 0.922 (99.8th percentile) | Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). | ||
CVE-2019-16920 | Dlink Dap-1533 Firmware +10 | Critical 9.8 | — | 2 | — | 1.000 (100.0th percentile) | Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. | ||
CVE-2019-15107 | — | Critical 9.8 | Known | 53 | Yes | 0.997 (100.0th percentile) | An issue was discovered in Webmin <=1.920. | ||
CVE-2019-12991 | Citrix Netscaler Sd-Wan +2 | High 8.8 | — | 0 | — | 0.741 (99.5th percentile) | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6). | ||
CVE-2019-12989 | Citrix Netscaler Sd-Wan +2 | Critical 9.8 | — | 0 | — | 0.950 (99.9th percentile) | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection. | ||
CVE-2019-11043 | Canonical Ubuntu Linux +22 | High 8.7 | Known | 32 | Yes | 0.998 (100.0th percentile) | In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space… | ||
CVE-2019-10068 | Kentico Xperience +1 | Critical 9.8 | — | 3 | Yes | 0.951 (99.9th percentile) | An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. | ||
CVE-2019-1003030 | Jenkins Pipeline\: Groovy +2 | Critical 9.9 | — | 2 | — | 0.971 (99.9th percentile) | A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able t… | ||
CVE-2019-0903 | Microsoft Windows +21 | High 8.8 | — | 0 | — | 0.217 (97.7th percentile) | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. | ||
CVE-2018-8414 | Microsoft Windows 10 +6 | High 8.8 | — | 1 | — | 0.726 (99.4th percentile) | A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Wi… | ||
CVE-2018-8373 | Microsoft Internet Explorer +3 | High 7.5 | — | 0 | — | 0.618 (99.2th percentile) | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects… | ||
CVE-2018-6961 | VMware Nsx Sd-Wan By Velocloud +1 | High 8.1 | — | 2 | — | 0.855 (99.7th percentile) | VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. | ||
CVE-2018-14839 | LG N1a1 Firmware +1 | Critical 9.8 | — | 0 | — | 0.892 (99.8th percentile) | LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. | ||
CVE-2018-1273 | Apache Ignite +5 | Critical 9.8 | Known | 7 | — | 0.970 (99.9th percentile) | Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. | ||
CVE-2018-11138 | — | Critical 9.8 | Known | 0 | Yes | 0.916 (99.8th percentile) | The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system. | ||
CVE-2018-0147 | Cisco Secure Access Control System +1 | Critical 9.8 | — | 0 | — | 0.182 (97.2th percentile) | A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands on… | ||
CVE-2018-0125 | Cisco Rv132w Firmware +2 | Critical 9.8 | — | 0 | — | 0.552 (99.0th percentile) | A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and g… | ||
CVE-2017-6334 | — | High 8.8 | — | 0 | Yes | 0.726 (99.4th percentile) | dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP… | ||
CVE-2017-6316 | Citrix Netscaler Sd-Wan +1 | Critical 9.8 | — | 0 | — | 0.730 (99.5th percentile) | Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. | ||
CVE-2017-3881 | Cisco iOS +2 | Critical 9.8 | — | 5 | Yes | 0.990 (99.9th percentile) | A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected… | ||
CVE-2017-12617 | Apache Tomcat +58 | High 8.1 | — | 13 | Yes | 1.000 (100.0th percentile) | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. | ||
CVE-2017-12615 | Apache Tomcat +22 | High 8.1 | Known | 21 | — | 0.997 (100.0th percentile) | When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. | ||
CVE-2017-0146 | Microsoft Server Message Block +9 | High 8.8 | Known | 0 | Yes | 0.899 (99.8th percentile) | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607… | ||
CVE-2016-7892 | Adobe Flash Player +2 | High 8.8 | — | 0 | — | 0.191 (97.3th percentile) | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. | ||
CVE-2016-4171 | Adobe Flash Player +7 | Critical 9.8 | — | 0 | — | 0.201 (97.5th percentile) | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016. | ||
CVE-2016-1555 | — | Critical 9.8 | — | 1 | Yes | 0.983 (99.9th percentile) | (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and W… | ||
CVE-2016-11021 | Dlink Dcs-930l Firmware +1 | High 7.2 | — | 0 | Yes | 0.696 (99.4th percentile) | setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter. | ||
CVE-2016-10174 | — | Critical 9.8 | — | 0 | Yes | 0.833 (99.7th percentile) | The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. | ||
CVE-2016-0752 | Debian Debian Linux +6 | High 7.5 | — | 2 | Yes | 0.955 (99.9th percentile) | Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read… | ||
CVE-2015-4068 | Arcserve Udp +1 | Critical 9.1 | — | 0 | — | 0.636 (99.2th percentile) | Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFil… | ||
CVE-2015-3035 | — | High 7.5 | — | 0 | Yes | 0.839 (99.7th percentile) | Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (… | ||
CVE-2015-1427 | Elastic Elasticsearch +2 | Critical 9.8 | — | 6 | Yes | 0.999 (100.0th percentile) | The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted… | ||
CVE-2015-1187 | Dlink Dir-626l Firmware +15 | Critical 9.8 | — | 3 | Yes | 0.827 (99.7th percentile) | The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp. | ||
CVE-2015-0666 | Cisco Prime Data Center Network Manager +1 | High 7.5 | — | 0 | — | 0.404 (98.7th percentile) | Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka B… | ||
CVE-2014-6332 | Microsoft Windows 7 +9 | High 8.8 | — | 3 | Yes | 0.949 (99.9th percentile) | OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT… | ||
CVE-2014-6324 | Microsoft Windows 7 +6 | High 8.8 | — | 0 | Yes | 0.873 (99.8th percentile) | The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012… | ||
CVE-2014-6287 | — | Critical 9.8 | — | 18 | Yes | 0.993 (99.9th percentile) | The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a se… | ||
CVE-2014-3120 | Elastic Elasticsearch +1 | High 8.1 | — | 5 | Yes | 0.886 (99.8th percentile) | The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. | ||
CVE-2014-0130 | — | High 7.5 | — | 1 | — | 0.537 (99.0th percentile) | Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when… | ||
CVE-2013-5223 | Dlink Dsl-2760u Firmware +1 | Medium 5.4 | — | 0 | — | 0.508 (98.9th percentile) | Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. | ||
CVE-2013-4810 | HP Application Lifecycle Management +2 | Critical 9.8 | — | 0 | — | 0.795 (99.6th percentile) | HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled ob… | ||
CVE-2013-2251 | Apache Archiva +4 | Critical 9.8 | — | 2 | Yes | 1.000 (100.0th percentile) | Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix. | ||
CVE-2012-1823 | Apple Mac OS X +17 | Critical 9.8 | — | 23 | Yes | 1.000 (100.0th percentile) | sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which al… | ||
CVE-2010-4345 | Canonical Ubuntu Linux +4 | High 7.8 | — | 0 | Yes | 0.180 (97.2th percentile) | Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary comm… | ||
CVE-2010-4344 | Canonical Ubuntu Linux +4 | Critical 9.8 | — | 0 | Yes | 0.717 (99.4th percentile) | Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conj… | ||
CVE-2010-3035 | Cisco iOS Xr +1 | High 7.5 | — | 0 | — | 0.057 (93.0th percentile) | Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a cr… | ||
CVE-2010-2861 | Adobe Coldfusion +1 | Critical 9.8 | Known | 2 | Yes | 0.997 (100.0th percentile) | Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/ad… | ||
CVE-2009-2055 | Cisco iOS Xr +1 | Medium 5.9 | — | 0 | — | 0.033 (88.7th percentile) | Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009. | ||
CVE-2009-1151 | Debian Debian Linux +2 | Critical 9.8 | — | 3 | Yes | 0.966 (99.9th percentile) | Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the sav… | ||
CVE-2009-0927 | Adobe Acrobat Reader +1 | High 8.8 | — | 0 | Yes | 0.966 (99.9th percentile) | Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon… | ||
CVE-2005-2773 | HP Openview Network Node Manager +1 | Critical 9.8 | — | 0 | Yes | 0.746 (99.5th percentile) | HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3… | ||
CVE-2020-5135 | SonicWall Sonicos +1 | Critical 9.8 | Known | 0 | — | 0.269 (98.0th percentile) | A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. | ||
CVE-2019-1405 | Microsoft Windows +20 | High 7.8 | Known | 1 | Yes | 0.302 (98.2th percentile) | An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerab… | ||
CVE-2019-1322 | Microsoft Windows +11 | High 7.8 | Known | 0 | Yes | 0.188 (97.3th percentile) | An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. | ||
CVE-2019-1315 | Microsoft Windows +18 | High 7.8 | Known | 1 | — | 0.035 (89.2th percentile) | An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. | ||
CVE-2019-1253 | Microsoft Windows +13 | High 7.8 | Known | 5 | — | 0.116 (96.1th percentile) | An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on th… | ||
CVE-2019-1132 | Microsoft Windows +3 | High 7.8 | — | 2 | — | 0.099 (95.6th percentile) | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. | ||
CVE-2019-1129 | Microsoft Windows +13 | High 7.8 | Known | 0 | — | 0.018 (78.5th percentile) | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. | ||
CVE-2019-1069 | Microsoft Windows 10 1507 +26 | High 7.8 | Known | 1 | — | 0.062 (93.5th percentile) | An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. | ||
CVE-2019-1064 | Microsoft Windows 10 1607 +25 | High 7.8 | Known | 3 | — | 0.069 (94.1th percentile) | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. | ||
CVE-2019-0841 | Microsoft Windows +7 | High 7.8 | Known | 5 | Yes | 0.414 (98.7th percentile) | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. | ||
CVE-2019-0543 | Microsoft Windows 10 1507 +15 | High 7.8 | Known | 0 | — | 0.047 (91.9th percentile) | An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows S… | ||
CVE-2018-8120 | Microsoft Windows 7 +4 | High 7.0 | Known | 13 | Yes | 0.733 (99.5th percentile) | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows… | ||
CVE-2017-0101 | Microsoft Windows 7 +3 | High 7.8 | Known | 0 | — | 0.575 (99.1th percentile) | The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10… | ||
CVE-2016-3309 | Microsoft Windows 10 1507 +9 | High 7.8 | Known | 1 | — | 0.205 (97.5th percentile) | The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and… | ||
CVE-2015-2546 | Microsoft Windows 10 1507 +9 | High 8.2 | Known | 1 | — | 0.101 (95.7th percentile) | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows… | ||
CVE-2022-26486 | Mozilla Firefox +6 | Critical 9.6 | — | 0 | — | 0.024 (83.9th percentile) | An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. | ||
CVE-2022-26485 | Mozilla Firefox +6 | High 8.8 | — | 1 | — | 0.143 (96.6th percentile) | Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. | ||
CVE-2021-21973 | VMware Cloud Foundation +3 | Medium 5.3 | — | 1 | — | 0.880 (99.8th percentile) | The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. | ||
CVE-2020-8218 | Ivanti Connect Secure +3 | High 7.2 | — | 1 | — | 0.323 (98.3th percentile) | A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface. | ||
CVE-2019-11581 | Atlassian Jira Server +1 | Critical 9.8 | — | 3 | — | 0.846 (99.7th percentile) | There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. | ||
CVE-2017-6077 | — | Critical 9.8 | — | 0 | — | 0.687 (99.3th percentile) | ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POS… | ||
CVE-2016-6277 | — | High 8.8 | — | 0 | Yes | 0.998 (100.0th percentile) | NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before… | ||
CVE-2013-0631 | Adobe Coldfusion +1 | High 7.5 | — | 0 | — | 0.664 (99.3th percentile) | Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013. | ||
CVE-2013-0629 | Adobe Coldfusion +1 | High 7.5 | — | 0 | — | 0.658 (99.3th percentile) | Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013. |