CISA Known Exploited Vulnerabilities catalog (page 9)
Page 9 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 9 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2017-18368 | Billion 5200w-T Firmware +3 | Critical 9.8 | — | 0 | Yes | 0.945 (99.9th percentile) | The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is access… | ||
CVE-2023-35081 | Ivanti Endpoint Manager Mobile +1 | High 7.2 | — | 0 | — | 0.636 (99.2th percentile) | A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the applianc… | ||
CVE-2023-37580 | — | Medium 6.1 | — | 0 | — | 0.491 (98.9th percentile) | Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client. | ||
CVE-2023-38606 | Apple iOS And Ipados +5 | Medium 5.5 | — | 0 | — | 0.029 (87.1th percentile) | This issue was addressed with improved state management. | ||
CVE-2023-35078 | Ivanti Endpoint Manager Mobile | Critical 9.8 | Known | 11 | — | 1.000 (100.0th percentile) | An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication. | ||
CVE-2023-38205 | Adobe Coldfusion | High 7.5 | — | 0 | — | 0.998 (100.0th percentile) | Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. | ||
CVE-2023-29298 | Adobe Coldfusion | High 7.5 | — | 0 | — | 0.998 (100.0th percentile) | Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security featur… | ||
CVE-2023-3519 | Citrix Netscaler Adc +3 | Critical 9.8 | Known | 19 | Yes | 0.997 (100.0th percentile) | Unauthenticated remote code execution | ||
CVE-2023-36884 | Microsoft Windows 10 1507 +32 | High 7.5 | Known | 9 | — | 0.994 (99.9th percentile) | Windows Search Remote Code Execution Vulnerability | ||
CVE-2023-37450 | Apple iOS And Ipados +7 | High 8.8 | — | 0 | — | 0.190 (97.3th percentile) | The issue was addressed with improved checks. | ||
CVE-2022-29303 | Contec Sv-Cpt-Mc310 Firmware +1 | Critical 9.8 | — | 4 | — | 0.980 (99.9th percentile) | SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php. | ||
CVE-2023-36874 | Microsoft Windows 10 1507 +32 | High 7.8 | — | 6 | Yes | 0.444 (98.8th percentile) | Windows Error Reporting Service Elevation of Privilege Vulnerability | ||
CVE-2023-35311 | Microsoft 365 Apps +9 | High 8.8 | — | 0 | — | 0.155 (96.8th percentile) | Microsoft Outlook Security Feature Bypass Vulnerability | ||
CVE-2023-32049 | Microsoft Windows 10 1607 +19 | High 8.8 | — | 0 | — | 0.042 (91.0th percentile) | Windows SmartScreen Security Feature Bypass Vulnerability | ||
CVE-2023-32046 | Microsoft Windows 10 1507 +32 | High 7.8 | — | 0 | — | 0.100 (95.6th percentile) | Windows MSHTML Platform Elevation of Privilege Vulnerability | ||
CVE-2022-31199 | — | Critical 9.8 | Known | 1 | — | 0.360 (98.5th percentile) | Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. | ||
CVE-2021-29256 | Arm Bifrost GPU Kernel Driver +3 | High 8.8 | — | 0 | — | 0.030 (87.4th percentile) | . | ||
CVE-2021-25489 | Samsung Android +1 | Low 3.3 | — | 0 | — | 0.005 (45.2th percentile) | Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic. | ||
CVE-2021-25487 | Samsung Android +1 | High 7.3 | — | 0 | — | 0.006 (50.8th percentile) | Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid… | ||
CVE-2021-25395 | Samsung Android +1 | Medium 6.4 | — | 0 | — | 0.004 (30.8th percentile) | A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised. | ||
CVE-2021-25394 | Samsung Android +1 | Medium 6.4 | — | 0 | — | 0.004 (34.7th percentile) | A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised. | ||
CVE-2021-25372 | Samsung Android +1 | Medium 6.1 | — | 0 | — | 0.008 (57.1th percentile) | An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. | ||
CVE-2021-25371 | Samsung Android +1 | Medium 6.1 | — | 0 | — | 0.008 (57.0th percentile) | A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. | ||
CVE-2019-20500 | Dlink Dwl-2600ap Firmware +1 | High 7.8 | — | 0 | — | 0.967 (99.9th percentile) | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admi… | ||
CVE-2019-17621 | Dlink Dir-818lx Firmware +14 | Critical 9.8 | — | 1 | Yes | 0.906 (99.8th percentile) | The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted… | ||
CVE-2023-32439 | Apple iOS And Ipados +5 | High 8.8 | — | 0 | — | 0.240 (97.9th percentile) | A type confusion issue was addressed with improved checks. | ||
CVE-2023-32435 | Apple iOS And Ipados +4 | High 8.8 | — | 0 | — | 0.230 (97.8th percentile) | A memory corruption issue was addressed with improved state management. | ||
CVE-2023-32434 | Apple iOS And Ipados +4 | High 7.8 | — | 3 | — | 0.582 (99.1th percentile) | An integer overflow was addressed with improved input validation. | ||
CVE-2023-27992 | Zyxel Nas326 Firmware +5 | Critical 9.8 | — | 0 | — | 0.823 (99.7th percentile) | The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware version… | ||
CVE-2023-20867 | Debian Debian Linux +2 | Low 3.9 | — | 0 | — | 0.136 (96.5th percentile) | A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. | ||
CVE-2023-20887 | Aria Operations For Networks (Formerly Vrealize Network Insight) +1 | Critical 9.8 | — | 3 | Yes | 0.983 (99.9th percentile) | Aria Operations for Networks contains a command injection vulnerability. | ||
CVE-2021-44026 | Debian Debian Linux +3 | Critical 9.8 | — | 3 | — | 0.699 (99.4th percentile) | Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params. | ||
CVE-2020-35730 | Debian Debian Linux +3 | Medium 6.1 | — | 1 | — | 0.329 (98.4th percentile) | An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. | ||
CVE-2020-12641 | — | Critical 9.8 | — | 2 | — | 0.844 (99.7th percentile) | rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path. | ||
CVE-2016-9079 | Debian Debian Linux +10 | High 7.5 | — | 3 | Yes | 0.874 (99.8th percentile) | A use-after-free vulnerability in SVG Animation has been discovered. | ||
CVE-2016-0165 | Microsoft Windows 10 1507 +8 | High 7.8 | — | 0 | — | 0.137 (96.5th percentile) | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 al… | ||
CVE-2023-27997 | Fortinet Fortios +2 | Critical 9.8 | Known | 21 | — | 0.868 (99.7th percentile) | A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and… | ||
CVE-2023-3079 | Couchbase Couchbase Server +3 | High 8.8 | — | 1 | — | 0.379 (98.6th percentile) | Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2023-33010 | Zyxel Atp100 Firmware +28 | Critical 9.8 | — | 0 | — | 0.290 (98.2th percentile) | A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50… | ||
CVE-2023-33009 | Zyxel Atp100 Firmware +28 | Critical 9.8 | — | 0 | — | 0.281 (98.1th percentile) | A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(… | ||
CVE-2023-34362 | — | Critical 9.8 | Known | 20 | Yes | 0.999 (100.0th percentile) | In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL injection vulnerability has been found in the MOVEit Transf… | ||
CVE-2023-28771 | Zyxel Atp100 Firmware +22 | Critical 9.8 | — | 7 | Yes | 0.993 (99.9th percentile) | Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, an… | ||
CVE-2023-2868 | Barracuda Barracuda Email Security Gateway +5 | Critical 9.4 | — | 4 | Yes | 0.868 (99.7th percentile) | A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006. | ||
CVE-2023-32409 | Apple iOS And Ipados +6 | High 8.6 | — | 0 | — | 0.165 (97.0th percentile) | The issue was addressed with improved bounds checks. | ||
CVE-2023-32373 | Apple iOS And Ipados +8 | High 8.8 | — | 0 | — | 0.122 (96.2th percentile) | A use-after-free issue was addressed with improved memory management. | ||
CVE-2023-28204 | Apple iOS And Ipados +7 | Medium 6.5 | — | 0 | — | 0.143 (96.6th percentile) | An out-of-bounds read was addressed with improved input validation. | ||
CVE-2023-21492 | Samsung Android +1 | Medium 4.4 | — | 0 | — | 0.026 (85.2th percentile) | Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR. | ||
CVE-2016-6415 | Cisco iOS +3 | High 7.5 | — | 1 | Yes | 0.877 (99.8th percentile) | The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain… | ||
CVE-2004-1464 | Cisco iOS +1 | Medium 5.9 | — | 0 | — | 0.048 (92.1th percentile) | Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port. | ||
CVE-2023-25717 | Commscope Ruckus Smartzone Firmware +3 | Critical 9.8 | — | 0 | — | 0.981 (99.9th percentile) | Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring. | ||
CVE-2021-3560 | Canonical Ubuntu Linux +6 | High 7.8 | — | 43 | Yes | 0.218 (97.7th percentile) | It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. | ||
CVE-2016-8735 | Apache Tomcat +19 | Critical 9.8 | — | 1 | — | 0.903 (99.8th percentile) | Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an att… | ||
CVE-2016-3427 | Apache Cassandra +38 | Critical 9.8 | — | 0 | — | 0.923 (99.8th percentile) | Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vector… | ||
CVE-2015-5317 | Jenkins Jenkins +2 | High 7.5 | — | 0 | — | 0.230 (97.8th percentile) | The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request. | ||
CVE-2014-0196 | Canonical Ubuntu Linux +30 | Medium 5.5 | — | 2 | — | 0.203 (97.5th percentile) | The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial… | ||
CVE-2010-3904 | Canonical Ubuntu Linux +8 | High 7.8 | — | 1 | Yes | 0.159 (96.9th percentile) | The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from u… | ||
CVE-2023-29336 | Microsoft Windows 10 1507 +17 | High 7.8 | — | 1 | — | 0.412 (98.7th percentile) | Win32k Elevation of Privilege Vulnerability | ||
CVE-2023-21839 | Oracle Weblogic Server +1 | High 7.5 | — | 11 | Yes | 0.999 (100.0th percentile) | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | ||
CVE-2023-1389 | TP-Link Archer Ax21 (Ax1800) +1 | High 8.8 | — | 4 | — | 1.000 (100.0th percentile) | TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web manage… | ||
CVE-2021-45046 | Apache Log4j +55 | Critical 9.0 | Known | 12 | Yes | 1.000 (100.0th percentile) | It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. | ||
CVE-2023-28432 | Minio Minio | High 7.5 | — | 25 | Yes | 0.840 (99.7th percentile) | Minio is a Multi-Cloud Object Storage framework. | ||
CVE-2023-27350 | Papercut Ng +2 | Critical 9.8 | Known | 20 | Yes | 1.000 (100.0th percentile) | This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). | ||
CVE-2023-2136 | Debian Debian Linux +2 | Critical 9.6 | — | 0 | — | 0.058 (93.2th percentile) | Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. | ||
CVE-2017-6742 | Cisco Cisco iOS Xe Software +3 | High 8.8 | — | 1 | — | 0.213 (97.6th percentile) | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. | ||
CVE-2023-2033 | Couchbase Couchbase Server +3 | High 8.8 | — | 7 | — | 0.406 (98.7th percentile) | Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2019-8526 | Apple macOS +1 | High 7.8 | — | 0 | — | 0.007 (53.5th percentile) | A use after free issue was addressed with improved memory management. | ||
CVE-2023-29492 | 3rdmill Novi Survey +1 | Critical 9.8 | — | 0 | — | 0.027 (86.0th percentile) | Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. | ||
CVE-2023-20963 | Google Android +1 | High 7.8 | — | 3 | — | 0.015 (73.9th percentile) | In WorkSource, there is a possible parcel mismatch. | ||
CVE-2023-28252 | Microsoft Windows 10 1507 +34 | High 7.8 | Known | 10 | Yes | 0.489 (98.9th percentile) | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
CVE-2023-28206 | Apple iOS And Ipados +3 | High 8.6 | — | 2 | — | 0.232 (97.8th percentile) | An out-of-bounds write issue was addressed with improved input validation. | ||
CVE-2023-28205 | Apple iOS And Ipados +4 | High 8.8 | — | 2 | — | 0.271 (98.1th percentile) | A use after free issue was addressed with improved memory management. | ||
CVE-2023-26083 | Arm 5th Gen GPU Architecture Kernel Driver +4 | Low 3.3 | — | 3 | — | 0.012 (68.9th percentile) | Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver al… | ||
CVE-2021-27878 | — | High 8.8 | Known | 0 | Yes | 0.240 (97.9th percentile) | An issue was discovered in Veritas Backup Exec before 21.2. | ||
CVE-2021-27877 | — | High 8.2 | Known | 1 | Yes | 0.649 (99.3th percentile) | An issue was discovered in Veritas Backup Exec before 21.2. | ||
CVE-2021-27876 | — | High 8.1 | Known | 3 | Yes | 0.135 (96.5th percentile) | An issue was discovered in Veritas Backup Exec before 21.2. | ||
CVE-2019-1388 | Microsoft Windows +19 | High 7.8 | Known | 7 | — | 0.086 (95.1th percentile) | An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerabilit… | ||
CVE-2022-27926 | — | Medium 6.1 | — | 0 | — | 0.176 (97.2th percentile) | A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web scrip… | ||
CVE-2023-0266 | Debian Debian Linux +2 | High 7.9 | — | 1 | — | 0.026 (85.5th percentile) | A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a privi… | ||
CVE-2022-42948 | Helpsystems Cobalt Strike +1 | Critical 9.8 | — | 0 | — | 0.027 (86.1th percentile) | Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. | ||
CVE-2022-39197 | Helpsystems Cobalt Strike +1 | Medium 6.1 | — | 16 | — | 0.441 (98.8th percentile) | An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. | ||
CVE-2022-38181 | Arm Bifrost GPU Kernel Driver +3 | High 8.8 | — | 13 | — | 0.185 (97.3th percentile) | The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. | ||
CVE-2022-3038 | Fedoraproject Fedora +1 | High 8.8 | — | 0 | — | 0.249 (97.9th percentile) | Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2022-22706 | Arm Bifrost GPU Kernel Driver +3 | High 7.8 | — | 2 | — | 0.011 (64.9th percentile) | Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. | ||
CVE-2021-30900 | Apple iOS And Ipados +3 | High 7.8 | — | 0 | — | 0.052 (92.6th percentile) | An out-of-bounds write issue was addressed with improved bounds checking. | ||
CVE-2017-7494 | Debian Debian Linux +1 | Critical 9.8 | Known | 29 | Yes | 0.994 (99.9th percentile) | Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and the… | ||
CVE-2013-3163 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | Yes | 0.707 (99.4th percentile) | Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corru… | ||
CVE-2023-26360 | Adobe Coldfusion | High 8.6 | — | 8 | Yes | 0.973 (99.9th percentile) | Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the co… | ||
CVE-2023-24880 | Microsoft Windows 10 1607 +21 | Medium 4.4 | Known | 0 | — | 0.782 (99.6th percentile) | Windows SmartScreen Security Feature Bypass Vulnerability | ||
CVE-2023-23397 | Microsoft 365 Apps +8 | Critical 9.8 | — | 40 | — | 0.972 (99.9th percentile) | Microsoft Outlook Elevation of Privilege Vulnerability | ||
CVE-2022-41328 | Fortinet Fortios | Medium 6.7 | — | 0 | — | 0.107 (95.8th percentile) | A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a… | ||
CVE-2021-39144 | Debian Debian Linux +15 | High 8.5 | — | 0 | Yes | 0.981 (99.9th percentile) | XStream is a simple library to serialize objects to XML and back again. | ||
CVE-2020-5741 | Plex Media Server (Windows) +1 | High 7.2 | — | 1 | Yes | 0.729 (99.5th percentile) | Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code. | ||
CVE-2022-35914 | Glpi-Project Glpi +1 | Critical 9.8 | — | 15 | Yes | 0.999 (100.0th percentile) | /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection. | ||
CVE-2022-33891 | Apache Spark +1 | High 8.8 | — | 15 | Yes | 0.932 (99.8th percentile) | The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. | ||
CVE-2022-28810 | — | Medium 6.8 | — | 0 | Yes | 0.710 (99.4th percentile) | Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. | ||
CVE-2022-36537 | — | High 7.5 | Known | 3 | — | 0.954 (99.9th percentile) | ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader. | ||
CVE-2022-47986 | IBM Aspera Faspex +1 | Critical 9.8 | Known | 3 | — | 1.000 (100.0th percentile) | IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. | ||
CVE-2022-41223 | Mitel Mivoice Connect +1 | Medium 6.8 | Known | 0 | — | 0.107 (95.8th percentile) | The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictio… | ||
CVE-2022-40765 | Mitel Mivoice Connect +1 | Medium 6.8 | Known | 0 | — | 0.106 (95.8th percentile) | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection at… | ||
CVE-2022-46169 | Cacti Cacti | Critical 9.8 | — | 49 | Yes | 0.998 (100.0th percentile) | Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. |