CISA Known Exploited Vulnerabilities catalog (page 15)
Page 15 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 15 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2014-6352 | Microsoft Windows 7 +8 | High 7.8 | — | 0 | Yes | 0.775 (99.6th percentile) | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute… | ||
CVE-2022-23134 | Debian Debian Linux +3 | Low 3.7 | — | 1 | — | 0.953 (99.9th percentile) | After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. | ||
CVE-2022-23131 | Zabbix Frontend +1 | Critical 9.1 | — | 25 | — | 0.957 (99.9th percentile) | In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. | ||
CVE-2022-24086 | Adobe Commerce +2 | Critical 9.8 | — | 16 | — | 0.992 (99.9th percentile) | Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. | ||
CVE-2022-0609 | Google Chrome | High 8.8 | — | 0 | — | 0.224 (97.7th percentile) | Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2019-0752 | Microsoft Internet Explorer +2 | High 7.5 | Known | 2 | — | 0.817 (99.6th percentile) | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. | ||
CVE-2018-8174 | Microsoft Windows 10 +19 | High 7.5 | Known | 16 | — | 0.882 (99.8th percentile) | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7… | ||
CVE-2018-20250 | Check Point Software Technologies Ltd. Winrar +1 | High 7.8 | Known | 21 | Yes | 0.960 (99.9th percentile) | In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). | ||
CVE-2018-15982 | Adobe Flash Player +5 | High 7.8 | Known | 9 | — | 0.896 (99.8th percentile) | Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. | ||
CVE-2017-9841 | — | Critical 9.8 | — | 25 | — | 1.000 (100.0th percentile) | Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by… | ||
CVE-2014-1761 | Microsoft Office +7 | High 7.8 | — | 0 | Yes | 0.777 (99.6th percentile) | Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2… | ||
CVE-2013-3906 | Microsoft Excel Viewer +8 | High 7.8 | — | 0 | Yes | 0.849 (99.7th percentile) | GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remo… | ||
CVE-2022-22620 | Apple Ipados +4 | High 8.8 | — | 2 | — | 0.163 (97.0th percentile) | A use after free issue was addressed with improved memory management. | ||
CVE-2021-36934 | Microsoft Windows 10 1809 +9 | High 7.8 | — | 25 | Yes | 0.673 (99.3th percentile) | An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. | ||
CVE-2020-0796 | Microsoft Windows 10 1903 +11 | Critical 10.0 | Known | 107 | Yes | 0.998 (100.0th percentile) | A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution… | ||
CVE-2018-1000861 | Jenkins Jenkins +2 | Critical 9.8 | — | 3 | Yes | 0.983 (99.9th percentile) | A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that all… | ||
CVE-2017-9791 | Apache Struts +1 | Critical 9.8 | — | 3 | Yes | 0.989 (99.9th percentile) | The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage. | ||
CVE-2017-8464 | Microsoft Windows 10 1511 +9 | High 8.8 | — | 10 | Yes | 0.900 (99.8th percentile) | Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows S… | ||
CVE-2017-10271 | Oracle Weblogic Server +1 | High 7.5 | Known | 33 | Yes | 1.000 (100.0th percentile) | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). | ||
CVE-2017-0263 | Microsoft Windows 10 1507 +10 | High 7.8 | — | 1 | — | 0.100 (95.7th percentile) | The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Se… | ||
CVE-2017-0262 | Microsoft Office +1 | High 7.8 | — | 0 | — | 0.810 (99.6th percentile) | Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution… | ||
CVE-2017-0145 | Microsoft Server Message Block +9 | High 8.8 | Known | 1 | Yes | 0.898 (99.8th percentile) | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607… | ||
CVE-2017-0144 | Microsoft Server Message Block +9 | High 8.8 | Known | 32 | Yes | 0.992 (99.9th percentile) | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607… | ||
CVE-2016-3088 | Apache Activemq +1 | Critical 9.8 | — | 9 | Yes | 0.984 (99.9th percentile) | The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. | ||
CVE-2015-2051 | Dlink Dir-645 Firmware +1 | High 8.8 | — | 0 | Yes | 0.971 (99.9th percentile) | The D-Link DIR-645 Wired/Wireless Router Rev. | ||
CVE-2015-1635 | Microsoft Windows 7 +5 | Critical 9.8 | — | 37 | Yes | 1.000 (100.0th percentile) | HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP request… | ||
CVE-2015-1130 | Apple Mac OS X +1 | High 7.8 | — | 2 | Yes | 0.099 (95.6th percentile) | The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors. | ||
CVE-2014-4404 | Apple Iphone OS +3 | High 7.8 | — | 0 | Yes | 0.489 (98.9th percentile) | Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-m… | ||
CVE-2022-21882 | Microsoft Windows 10 1809 +18 | High 7.0 | Known | 8 | Yes | 0.592 (99.1th percentile) | Win32k Elevation of Privilege Vulnerability | ||
CVE-2022-22587 | Apple iOS And Ipados +3 | Critical 9.8 | — | 0 | — | 0.116 (96.1th percentile) | A memory corruption issue was addressed with improved input validation. | ||
CVE-2021-20038 | SonicWall Sma 200 Firmware +5 | Critical 9.8 | Known | 4 | — | 0.999 (100.0th percentile) | A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' use… | ||
CVE-2020-5722 | Grandstream Ucm6200 Firmware +1 | Critical 9.8 | — | 0 | Yes | 0.843 (99.7th percentile) | The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. | ||
CVE-2020-0787 | Microsoft Windows +26 | High 7.8 | Known | 4 | Yes | 0.425 (98.7th percentile) | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service… | ||
CVE-2017-5689 | HPE Proliant Ml10 Gen9 Server Firmware +36 | Critical 9.8 | — | 7 | Yes | 0.922 (99.8th percentile) | An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). | ||
CVE-2014-7169 | Apple Mac OS X +74 | Critical 9.8 | — | 4 | — | 0.999 (100.0th percentile) | GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or poss… | ||
CVE-2014-6271 | Apple Mac OS X +74 | Critical 9.8 | — | 114 | Yes | 1.000 (100.0th percentile) | GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, a… | ||
CVE-2014-1776 | Microsoft Internet Explorer +1 | Critical 9.8 | — | 0 | — | 0.827 (99.7th percentile) | Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the… | ||
CVE-2021-35247 | Solarwinds Serv-U | Medium 4.3 | — | 0 | — | 0.036 (89.7th percentile) | Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. | ||
CVE-2018-8453 | Microsoft Windows 10 +25 | High 7.8 | Known | 3 | Yes | 0.700 (99.4th percentile) | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows… | ||
CVE-2012-0391 | Apache Struts +1 | Critical 9.8 | — | 0 | Yes | 0.756 (99.5th percentile) | The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allow… | ||
CVE-2006-1547 | Apache Struts +1 | High 7.5 | — | 0 | — | 0.546 (99.0th percentile) | ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name… | ||
CVE-2021-40870 | Aviatrix Controller +1 | Critical 9.8 | — | 6 | — | 0.930 (99.8th percentile) | An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. | ||
CVE-2021-33766 | Microsoft Exchange Server +5 | High 7.3 | — | 2 | — | 0.982 (99.9th percentile) | Microsoft Exchange Server Information Disclosure Vulnerability | ||
CVE-2021-32648 | Octobercms October | High 8.2 | — | 2 | — | 0.912 (99.8th percentile) | octobercms in a CMS platform based on the Laravel PHP Framework. | ||
CVE-2021-25298 | — | High 8.8 | — | 0 | Yes | 0.736 (99.5th percentile) | Nagios XI version xi-5.7.5 is affected by OS command injection. | ||
CVE-2021-25297 | — | High 8.8 | — | 0 | Yes | 0.567 (99.1th percentile) | Nagios XI version xi-5.7.5 is affected by OS command injection. | ||
CVE-2021-25296 | — | High 8.8 | — | 0 | Yes | 0.719 (99.4th percentile) | Nagios XI version xi-5.7.5 is affected by OS command injection. | ||
CVE-2021-22991 | F5 Big-Ip Access Policy Manager +14 | Critical 9.8 | — | 0 | — | 0.624 (99.2th percentile) | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclosed requests to a virtual server may be incorrectl… | ||
CVE-2021-21975 | VMware Vrealize Operations +3 | High 7.5 | Known | 8 | Yes | 0.780 (99.6th percentile) | Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Serve… | ||
CVE-2021-21315 | Apache Cordova +2 | High 7.1 | — | 7 | — | 0.907 (99.8th percentile) | The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information. | ||
CVE-2020-14864 | Oracle Business Intelligence +1 | High 7.5 | — | 0 | — | 0.972 (99.9th percentile) | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). | ||
CVE-2020-13927 | Apache Airflow +1 | Critical 9.8 | — | 1 | Yes | 0.998 (100.0th percentile) | The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. | ||
CVE-2020-13671 | Drupal Drupal +2 | High 8.8 | — | 4 | — | 0.362 (98.5th percentile) | Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP f… | ||
CVE-2020-11978 | Apache Airflow +1 | High 8.8 | — | 1 | Yes | 0.992 (99.9th percentile) | An issue was found in Apache Airflow versions 1.10.10 and below. | ||
CVE-2021-36260 | Hikvision Ds-2cd2021g1-I\(w\) Firmware +256 | Critical 9.8 | — | 15 | Yes | 0.999 (100.0th percentile) | A command injection vulnerability in the web server of some Hikvision product. | ||
CVE-2021-27860 | Fatpipe Ipvpn +5 | Critical 9.8 | — | 0 | — | 0.397 (98.6th percentile) | A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to… | ||
CVE-2021-22017 | VMware Vcenter Server, VMware Cloud Foundation +1 | Medium 5.3 | — | 0 | — | 0.492 (98.9th percentile) | Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. | ||
CVE-2020-6572 | Google Chrome | High 8.8 | — | 0 | — | 0.106 (95.8th percentile) | Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page. | ||
CVE-2019-9670 | — | Critical 9.8 | — | 5 | Yes | 1.000 (100.0th percentile) | mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml. | ||
CVE-2019-7609 | Elastic Kibana +1 | Critical 10.0 | — | 14 | Yes | 0.953 (99.9th percentile) | Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. | ||
CVE-2019-2725 | Oracle Agile Product Lifecycle Management +8 | Critical 9.8 | Known | 25 | Yes | 1.000 (100.0th percentile) | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). | ||
CVE-2019-1579 | Palo Alto Networks Globalprotect Portal/gateway Interface +1 | High 8.1 | Known | 2 | — | 0.442 (98.8th percentile) | Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauth… | ||
CVE-2019-1458 | Microsoft Windows +9 | High 7.8 | Known | 5 | Yes | 0.744 (99.5th percentile) | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. | ||
CVE-2019-10149 | Canonical Ubuntu Linux +2 | Critical 9.8 | — | 20 | Yes | 1.000 (100.0th percentile) | A flaw was found in Exim versions 4.87 to 4.91 (inclusive). | ||
CVE-2018-13383 | Fortinet Fortinet Fortios And Fortiproxy +2 | Medium 4.3 | Known | 0 | — | 0.307 (98.3th percentile) | A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may ca… | ||
CVE-2018-13382 | Fortinet Fortinet Fortios, Fortiproxy +2 | Critical 9.1 | Known | 3 | — | 0.817 (99.6th percentile) | An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web p… | ||
CVE-2017-1000486 | — | Critical 9.8 | — | 9 | Yes | 0.941 (99.8th percentile) | Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution | ||
CVE-2015-7450 | IBM Sterling B2b Integrator +7 | Critical 9.8 | — | 0 | Yes | 0.978 (99.9th percentile) | Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a craf… | ||
CVE-2013-3900 | Microsoft Windows 10 1507 +48 | Medium 5.5 | — | 16 | — | 0.446 (98.8th percentile) | Why is Microsoft republishing a CVE from 2013? | ||
CVE-2021-43890 | Microsoft App Installer +1 | High 7.1 | Known | 1 | — | 0.113 (96.0th percentile) | We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. | ||
CVE-2021-4102 | Google Chrome | High 8.8 | — | 0 | — | 0.078 (94.7th percentile) | Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2021-44515 | — | Critical 9.8 | — | 0 | — | 0.999 (100.0th percentile) | Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. | ||
CVE-2021-44228 | Apache Log4j +143 | Critical 10.0 | Known | 550 | Yes | 1.000 (100.0th percentile) | Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker contro… | ||
CVE-2021-44168 | Fortinet Fortinet Fortios +1 | Low 3.3 | — | 1 | — | 0.009 (60.2th percentile) | A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the d… | ||
CVE-2021-35394 | — | Critical 9.8 | — | 0 | — | 0.999 (100.0th percentile) | Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. | ||
CVE-2020-8816 | — | High 7.2 | — | 5 | Yes | 0.783 (99.6th percentile) | Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease. | ||
CVE-2020-17463 | — | Critical 9.8 | — | 0 | — | 0.897 (99.8th percentile) | FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. | ||
CVE-2019-7238 | — | Critical 9.8 | — | 7 | — | 0.766 (99.5th percentile) | Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control. | ||
CVE-2019-13272 | Canonical Ubuntu Linux +22 | High 7.8 | — | 20 | Yes | 0.522 (99.0th percentile) | In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obta… | ||
CVE-2019-10758 | Mongo-Express Project Mongo-Express +1 | Critical 9.9 | — | 3 | — | 0.847 (99.7th percentile) | mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. | ||
CVE-2019-0193 | Apache Apache Solr +2 | High 7.2 | — | 5 | — | 0.835 (99.7th percentile) | In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "d… | ||
CVE-2017-17562 | Embedthis Goahead +2 | High 8.1 | — | 6 | Yes | 0.971 (99.9th percentile) | Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. | ||
CVE-2017-12149 | Red Hat Jboss Enterprise Application Platform +1 | Critical 9.8 | Known | 11 | Yes | 0.907 (99.8th percentile) | In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classe… | ||
CVE-2010-1871 | — | High 8.8 | — | 0 | Yes | 0.834 (99.7th percentile) | JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows re… | ||
CVE-2021-44077 | — | Critical 9.8 | — | 2 | Yes | 0.935 (99.8th percentile) | Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. | ||
CVE-2021-40438 | Apache HTTP Server +39 | Critical 9.0 | Known | 11 | — | 1.000 (100.0th percentile) | A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. | ||
CVE-2021-37415 | — | Critical 9.8 | — | 0 | — | 0.998 (100.0th percentile) | Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication. | ||
CVE-2020-11261 | Qualcomm Apq8009 Firmware +399 | High 7.8 | — | 0 | — | 0.015 (74.9th percentile) | Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con… | ||
CVE-2018-14847 | Mikrotik Routeros +1 | Critical 9.1 | — | 15 | Yes | 0.960 (99.9th percentile) | MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability i… | ||
CVE-2021-42321 | Microsoft Exchange Server +4 | High 8.8 | Known | 5 | Yes | 0.917 (99.8th percentile) | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
CVE-2021-42292 | Microsoft 365 Apps +14 | High 7.8 | — | 1 | — | 0.430 (98.7th percentile) | Microsoft Excel Security Feature Bypass Vulnerability | ||
CVE-2021-40449 | Microsoft Windows 10 1507 +45 | High 7.8 | Known | 8 | Yes | 0.819 (99.7th percentile) | Win32k Elevation of Privilege Vulnerability | ||
CVE-2021-22204 | Debian Debian Linux +3 | Medium 6.8 | — | 20 | Yes | 1.000 (100.0th percentile) | Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image | ||
CVE-2021-42258 | Bqe Billquick Web Suite +1 | Critical 9.8 | Known | 0 | Yes | 0.752 (99.5th percentile) | BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. | ||
CVE-2021-42013 | Apache HTTP Server +6 | Critical 9.8 | Known | 55 | Yes | 1.000 (100.0th percentile) | It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. | ||
CVE-2021-41773 | Apache HTTP Server +4 | Critical 9.8 | Known | 216 | Yes | 1.000 (100.0th percentile) | A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. | ||
CVE-2021-40539 | — | Critical 9.8 | Known | 5 | Yes | 0.990 (99.9th percentile) | Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution. | ||
CVE-2021-40444 | Microsoft Windows 10 1507 +41 | High 8.8 | Known | 51 | Yes | 0.978 (99.9th percentile) | Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. | ||
CVE-2021-38649 | Microsoft Azure Automation State Configuration +20 | High 7.0 | — | 0 | — | 0.029 (87.0th percentile) | Open Management Infrastructure Elevation of Privilege Vulnerability | ||
CVE-2021-38648 | Microsoft Azure Automation State Configuration +20 | High 7.8 | — | 0 | Yes | 0.114 (96.0th percentile) | Open Management Infrastructure Elevation of Privilege Vulnerability |