CISA + EU · actively exploited

Known Exploited Vulnerabilities

1708 vulnerabilities exploited in the wild, consolidating the CISA KEV catalog and the EU KEV (via ENISA), with remediation deadlines

1708KEV entries
53In EU KEV
354Ransomware-linked
10Due in 30 days
41Added (30d)
CVE Source Vendor · Product Vulnerability Added Due Ransomware
CVE-2026-86060 EU Mikrotik RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohib… 2026-09-05 — —
CVE-2026-67277 EU Mikrotik RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentic… 2026-09-05 — —
CVE-2026-67276 EU Mikrotik RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an author… 2026-09-05 — —
CVE-2026-85046 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2026-09-04 11d left —
CVE-2026-9586 CISA Sangoma · Switchvox Sangoma Switchvox SQL Injection Vulnerability 2026-09-02 2d overdue —
CVE-2026-83549 CISA SonicWall · SMA1000 Appliances SonicWall SMA1000 Appliances OS Command Injection Vulnerability 2026-09-02 2d overdue —
CVE-2026-83548 CISA SonicWall · SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability 2026-09-02 2d overdue —
CVE-2026-82329 CISA JFrog · Artifactory JFrog Artifactory Improper Authentication Vulnerability 2026-09-02 2d overdue —
CVE-2026-63219 EU — GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2… 2026-09-02 — —
CVE-2026-59822 CISA BerriAI · LiteLLM BerriAI LiteLLM Improper Authentication Vulnerability 2026-09-02 9d left —
CVE-2026-58400 EU — GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2… 2026-09-02 — —
CVE-2026-49869 CISA Kestra · Kestra OSS Kestra OSS OS Command Injection Vulnerability 2026-09-02 2d overdue —
CVE-2026-48710 CISA Kludex · Starlette Kludex Starlette HTTP Request/Response Smuggling Vulnerability 2026-09-02 9d left —
CVE-2026-82078 CISA + EU PaperCut · NG/MF PaperCut NG/MF Unsafe Reflection Vulnerability 2026-08-31 7d left —
CVE-2026-81578 CISA + EU PaperCut · NG/MF PaperCut NG/MF Missing Authentication for Critical Function Vulnerability 2026-08-31 7d left —
CVE-2026-74233 EU — Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbt… 2026-08-27 — —
CVE-2026-74232 EU — Zbtlink L3_V2_8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007… 2026-08-27 — —
CVE-2026-66384 CISA JFrog · Artifactory JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability 2026-08-27 3d left —
CVE-2026-53362 CISA Linux · Kernel Linux Kernel Unspecified Vulnerability 2026-08-27 8d overdue —
CVE-2023-49105 CISA ownCloud · ownCloud ownCloud Improper Authentication Vulnerability 2026-08-27 8d overdue —
CVE-2026-8452 CISA Citrix · NetScaler ADC and NetScaler Gateway Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability 2026-08-26 9d overdue —
CVE-2022-0995 CISA Linux · Kernel Linux Kernel Out-of-Bounds Write Vulnerability 2026-08-26 2d left —
CVE-2021-23758 CISA Ajax.NET Professional · Ajax.NET Professional Ajax.NET Professional Deserialization of Untrusted Data Vulnerability 2026-08-26 2d left —
CVE-2019-1068 CISA Microsoft · SQL Server Microsoft SQL Server Remote Code Execution Vulnerability 2026-08-26 9d overdue —
CVE-2015-5287 CISA Red Hat · Automatic Bug Reporting Tool Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability 2026-08-26 2d left —
CVE-2015-3246 CISA Red Hat · Libuser Red Hat Libuser Race Condition Vulnerability 2026-08-26 2d left —
CVE-2026-60004 CISA Gitea · Gitea Gitea Code Injection Vulnerability 2026-08-25 10d overdue —
CVE-2026-21962 CISA Oracle · HTTP Server and Oracle Weblogic Server Proxy Plug-in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability 2026-08-24 11d overdue —
CVE-2026-73570 CISA + EU Synacor · Zimbra Collaboration Suite (ZCS) Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability 2026-08-21 14d overdue —
CVE-2026-72530 CISA TrueConf · Server TrueConf Server Code Injection Vulnerability 2026-08-20 4d overdue —
CVE-2026-72529 CISA TrueConf · Server TrueConf Server Missing Authentication for Critical Function Vulnerability 2026-08-20 15d overdue —
CVE-2026-64849 CISA MLflow · MLflow MLflow Server-Side Request Forgery Vulnerability 2026-08-19 5d overdue —
CVE-2026-65400 CISA Apple · macOS Apple macOS Improper Authentication Vulnerability 2026-08-18 17d overdue —
CVE-2026-59310 CISA + EU Broadcom · VMware vCenter Broadcom VMware vCenter Path Traversal Vulnerability 2026-08-18 17d overdue —
CVE-2026-55040 CISA Microsoft · SharePoint Microsoft SharePoint Weak Authentication Vulnerability 2026-08-18 17d overdue —
CVE-2026-33824 CISA Microsoft · Internet Key Exchange (IKE) Service Extensions Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability 2026-08-18 17d overdue —
CVE-2026-41679 EU Paperclip Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to v… 2026-08-17 — —
CVE-2025-62593 CISA Ray-Project · Ray Ray-Project Ray Code Injection Vulnerability 2026-08-17 18d overdue —
CVE-2026-72898 CISA + EU Metabase · Metabase Metabase SQL Injection Vulnerability 2026-08-11 24d overdue —
CVE-2026-68820 CISA + EU Microsoft · Windows Ancillary Function Driver for WinSock Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability 2026-08-11 13d overdue —
CVE-2026-20349 CISA Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability 2026-08-11 24d overdue —
CVE-2026-8037 CISA Progress · LoadMaster Progress LoadMaster Command Injection Vulnerability 2026-08-07 28d overdue —
CVE-2026-63077 CISA JetBrains · TeamCity JetBrains TeamCity Deserialization of Untrusted Data Vulnerability 2026-08-05 30d overdue —
CVE-2026-9198 CISA IBM · Langflow IBM Langflow Code Injection Vulnerability 2026-08-04 31d overdue —
CVE-2026-34486 CISA Apache · Tomcat Apache Tomcat Missing Encryption of Sensitive Data Vulnerability 2026-08-04 31d overdue —
CVE-2026-18556 CISA N-able · N-central N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability 2026-08-04 31d overdue —
CVE-2026-18577 CISA N-able · N-central N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability 2026-08-03 32d overdue —
CVE-2026-20316 CISA Cisco · Secure Firewall Management Center (FMC) Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability 2026-07-29 37d overdue —
CVE-2026-16812 CISA Arista · VeloCloud Orchestrator Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability 2026-07-27 39d overdue —
CVE-2025-68686 CISA Fortinet · FortiOS Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability 2026-07-27 28d overdue —
CVE-2026-50522 CISA Microsoft · SharePoint Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 2026-07-22 44d overdue —
CVE-2026-16232 CISA Check Point · SmartConsole Check Point SmartConsole Improper Authentication Vulnerability 2026-07-22 44d overdue —
CVE-2026-63030 CISA WordPress · Core WordPress Core Interpretation Conflict Vulnerability 2026-07-21 45d overdue —
CVE-2026-60137 CISA WordPress · Core WordPress Core SQL Injection Vulnerability 2026-07-21 34d overdue —
CVE-2026-0770 CISA Langflow · Langflow Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability 2026-07-21 45d overdue —
CVE-2021-27137 CISA DD-WRT · DD-WRT DD-WRT Stack-Based Buffer Overflow Vulnerability 2026-07-21 45d overdue —
CVE-2026-58644 CISA Microsoft · SharePoint Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 2026-07-16 50d overdue —
CVE-2026-39808 CISA Fortinet · FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability 2026-07-16 50d overdue —
CVE-2026-25089 CISA Fortinet · FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability 2026-07-16 50d overdue —
CVE-2026-46817 CISA Oracle · E-Business Suite Oracle E-Business Suite Improper Privilege Management Vulnerability 2026-07-15 51d overdue —
CVE-2023-4346 CISA KNX Association · KNX Protocol Connection Authorization Option 1 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability 2026-07-15 40d overdue —
CVE-2026-56164 CISA Microsoft · SharePoint Server Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability 2026-07-14 52d overdue —
CVE-2026-56155 CISA Microsoft · Active Directory Federation Services Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability 2026-07-14 41d overdue —
CVE-2026-15410 CISA SonicWall · SMA1000 Appliances SonicWall SMA1000 Appliances Code Injection Vulnerability 2026-07-14 52d overdue RANSOMWARE
CVE-2026-15409 CISA SonicWall · SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability 2026-07-14 52d overdue RANSOMWARE
CVE-2008-4128 CISA Cisco · IOS Cisco IOS Cross-Site Request Forgery Vulnerability 2026-07-13 53d overdue —
CVE-2026-56291 CISA Balbooa · Forms Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-10 56d overdue —
CVE-2026-49049 EU Ollyo The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arb… 2026-07-10 — —
CVE-2026-48939 CISA iCagenda · iCagenda iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-10 56d overdue —
CVE-2026-56290 CISA Joomlack · Page Builder Joomlack Page Builder Improper Access Control Vulnerability 2026-07-07 59d overdue —
CVE-2026-55255 CISA Langflow · Langflow Langflow Authorization Bypass Through User-Controlled Key Vulnerability 2026-07-07 59d overdue —
CVE-2026-48908 CISA + EU JoomShaper · SP Page Builder JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-07 59d overdue —
CVE-2026-48282 CISA Adobe · ColdFusion Adobe ColdFusion Path Traversal Vulnerability 2026-07-07 59d overdue —
CVE-2026-45659 CISA Microsoft · SharePoint Server Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability 2026-07-01 65d overdue RANSOMWARE
CVE-2026-48558 CISA SimpleHelp · SimpleHelp SimpleHelp Authentication Bypass Vulnerability 2026-06-29 67d overdue —
CVE-2026-20230 CISA Cisco · Unified Communications Manager Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability 2026-06-25 71d overdue —
CVE-2026-12569 CISA + EU PTC · Windchill and FlexPLM PTC Windchill and FlexPLM Improper Input Validation Vulnerability 2026-06-25 71d overdue RANSOMWARE
CVE-2026-34910 CISA Ubiquiti · UniFi OS Ubiquiti UniFi OS Improper Input Validation Vulnerability 2026-06-23 73d overdue —
CVE-2026-34909 CISA Ubiquiti · UniFi OS Ubiquiti UniFi OS Path Traversal Vulnerability 2026-06-23 73d overdue —
CVE-2026-34908 CISA Ubiquiti · UniFi OS Ubiquiti UniFi OS Improper Access Control Vulnerability 2026-06-23 73d overdue —
CVE-2025-67038 CISA Lantronix · EDS5000 Lantronix EDS5000 Code Injection Vulnerability 2026-06-23 73d overdue —
CVE-2026-20253 CISA Splunk · Enterprise Splunk Enterprise Missing Authentication for Critical Function Vulnerability 2026-06-18 78d overdue —
CVE-2026-48907 CISA + EU Widget Factory · Joomla Content Editor Widget Factory Joomla Content Editor Improper Access Control Vulnerability 2026-06-16 80d overdue —
CVE-2026-54420 CISA LiteSpeed · cPanel Plugin LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability 2026-06-15 81d overdue —
CVE-2026-20262 CISA Cisco · Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability 2026-06-15 70d overdue —
CVE-2026-35273 CISA Oracle · PeopleSoft Enterprise PeopleTools Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability 2026-06-12 84d overdue RANSOMWARE
CVE-2026-10520 CISA Ivanti · Sentry Ivanti Sentry OS Command Injection Vulnerability 2026-06-11 85d overdue —
CVE-2026-7473 CISA Arista · Extensible Operating System Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability 2026-06-09 76d overdue —
CVE-2026-20245 CISA Cisco · Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability 2026-06-09 76d overdue —
CVE-2026-11645 CISA Google · Chromium V8 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability 2026-06-09 76d overdue —
CVE-2026-50751 CISA Check Point · Security Gateway Check Point Security Gateway Improper Authentication Vulnerability 2026-06-08 88d overdue RANSOMWARE
CVE-2026-42271 CISA BerriAI · LiteLLM BerriAI LiteLLM Command Injection Vulnerability 2026-06-08 77d overdue —
CVE-2026-28318 CISA SolarWinds · Serv-U SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability 2026-06-05 80d overdue —
CVE-2026-45247 CISA Mirasvit · Mirasvit Full Page Cache Warmer Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability 2026-06-03 93d overdue —
CVE-2025-48595 CISA Android · Framework Android Framework Integer Overflow Vulnerability 2026-06-02 94d overdue —
CVE-2022-0492 CISA Linux · Kernel Linux Kernel Improper Authentication Vulnerability 2026-06-02 94d overdue —
CVE-2024-21182 CISA Oracle · WebLogic Server Oracle WebLogic Server Unspecified Vulnerability 2026-06-01 95d overdue —
CVE-2026-0257 CISA Palo Alto Networks · PAN-OS Palo Alto Networks PAN-OS Authentication Bypass Vulnerability 2026-05-29 98d overdue RANSOMWARE
CVE-2026-8398 CISA Daemon · Daemon Tools Lite Daemon Tools Lite Embedded Malicious Code Vulnerability 2026-05-27 100d overdue —
CVE-2026-48027 CISA Nx · Nx Console Nx Console Embedded Malicious Code Vulnerability 2026-05-27 89d overdue RANSOMWARE
CVE-2026-45321 CISA TanStack · TanStack TanStack Unspecified Vulnerability 2026-05-27 89d overdue RANSOMWARE
CVE-2026-48172 CISA LiteSpeed · cPanel Plugin LiteSpeed cPanel Plugin Privilege Escalation Vulnerability 2026-05-26 101d overdue —
CVE-2026-9082 CISA Drupal · Core Drupal Core SQL Injection Vulnerability 2026-05-22 103d overdue —
CVE-2026-34926 CISA Trend Micro · Apex One Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability 2026-05-21 95d overdue —
CVE-2025-34291 CISA Langflow · Langflow Langflow Origin Validation Error Vulnerability 2026-05-21 95d overdue —
CVE-2026-45498 CISA Microsoft · Defender Microsoft Defender Denial of Service Vulnerability 2026-05-20 96d overdue —
CVE-2026-41091 CISA Microsoft · Defender Microsoft Defender Link Following Vulnerability 2026-05-20 96d overdue —
CVE-2010-0806 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Use-After-Free Vulnerability 2026-05-20 96d overdue —
CVE-2010-0249 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Use-After-Free Vulnerability 2026-05-20 96d overdue —
CVE-2009-3459 CISA Adobe · Acrobat and Reader Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability 2026-05-20 96d overdue —
CVE-2009-1537 CISA Microsoft · DirectX Microsoft DirectX NULL Byte Overwrite Vulnerability 2026-05-20 96d overdue —
CVE-2008-4250 CISA Microsoft · Windows Microsoft Windows Buffer Overflow Vulnerability 2026-05-20 96d overdue —
CVE-2026-42897 CISA + EU Microsoft · Microsoft Microsoft Exchange Server Cross-Site Scripting Vulnerability 2026-05-15 101d overdue —
CVE-2026-20182 CISA Cisco · Catalyst SD-WAN Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability 2026-05-14 113d overdue —
CVE-2026-42208 CISA BerriAI · LiteLLM BerriAI LiteLLM SQL Injection Vulnerability 2026-05-08 119d overdue —
CVE-2026-6973 CISA Ivanti · Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability 2026-05-07 120d overdue —
CVE-2026-0300 CISA Palo Alto Networks · PAN-OS Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability 2026-05-06 121d overdue —
CVE-2026-31431 CISA Linux · Kernel Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability 2026-05-01 115d overdue —
CVE-2026-41940 CISA + EU WebPros · cPanel & WHM and WP2 (WordPress Squared) WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability 2026-04-30 127d overdue RANSOMWARE
CVE-2026-32202 CISA Microsoft · Windows Microsoft Windows Protection Mechanism Failure Vulnerability 2026-04-28 118d overdue —
CVE-2024-1708 CISA ConnectWise · ScreenConnect ConnectWise ScreenConnect Path Traversal Vulnerability 2026-04-28 118d overdue RANSOMWARE
CVE-2025-29635 CISA D-Link · DIR-823X D-Link DIR-823X Command Injection Vulnerability 2026-04-24 122d overdue —
CVE-2024-7399 CISA Samsung · MagicINFO 9 Server Samsung MagicINFO 9 Server Path Traversal Vulnerability 2026-04-24 122d overdue —
CVE-2024-57728 CISA SimpleHelp · SimpleHelp SimpleHelp Path Traversal Vulnerability 2026-04-24 122d overdue RANSOMWARE
CVE-2024-57726 CISA SimpleHelp · SimpleHelp SimpleHelp Missing Authorization Vulnerability 2026-04-24 122d overdue RANSOMWARE
CVE-2026-39987 CISA Marimo · Marimo Marimo Remote Code Execution Vulnerability 2026-04-23 123d overdue —
CVE-2026-33825 CISA Microsoft · Defender Microsoft Defender Insufficient Granularity of Access Control Vulnerability 2026-04-22 124d overdue RANSOMWARE
CVE-2026-20133 CISA Cisco · Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability 2026-04-20 137d overdue —
CVE-2026-20128 CISA Cisco · Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability 2026-04-20 137d overdue —
CVE-2026-20122 CISA Cisco · Catalyst SD-WAN Manger Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability 2026-04-20 137d overdue —
CVE-2025-48700 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability 2026-04-20 137d overdue —
CVE-2025-32975 CISA Quest · KACE Systems Management Appliance (SMA) Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability 2026-04-20 126d overdue —
CVE-2025-2749 CISA Kentico · Kentico Xperience Kentico Xperience Path Traversal Vulnerability 2026-04-20 126d overdue —
CVE-2024-27199 CISA JetBrains · TeamCity JetBrains TeamCity Relative Path Traversal Vulnerability 2026-04-20 126d overdue RANSOMWARE
CVE-2023-27351 CISA PaperCut · NG/MF PaperCut NG/MF Improper Authentication Vulnerability 2026-04-20 126d overdue RANSOMWARE
CVE-2026-34197 CISA Apache · ActiveMQ Apache ActiveMQ Improper Input Validation Vulnerability 2026-04-16 130d overdue —
CVE-2026-32201 CISA Microsoft · SharePoint Server Microsoft SharePoint Server Improper Input Validation Vulnerability 2026-04-14 132d overdue —
CVE-2009-0238 CISA Microsoft · Office Microsoft Office Remote Code Execution 2026-04-14 132d overdue —
CVE-2026-34621 CISA Adobe · Acrobat and Reader Adobe Acrobat and Reader Prototype Pollution Vulnerability 2026-04-13 133d overdue —
CVE-2026-21643 CISA Fortinet · FortiClient EMS Fortinet FortiClient EMS SQL Injection Vulnerability 2026-04-13 144d overdue —
CVE-2025-60710 CISA Microsoft · Windows Microsoft Windows Link Following Vulnerability 2026-04-13 133d overdue RANSOMWARE
CVE-2023-36424 CISA Microsoft · Windows Microsoft Windows Out-of-Bounds Read Vulnerability 2026-04-13 133d overdue —
CVE-2023-21529 CISA Microsoft · Exchange Server Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability 2026-04-13 133d overdue RANSOMWARE
CVE-2020-9715 CISA Adobe · Acrobat Adobe Acrobat Use-After-Free Vulnerability 2026-04-13 133d overdue —
CVE-2012-1854 CISA Microsoft · Visual Basic for Applications (VBA) Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability 2026-04-13 133d overdue —
CVE-2026-1340 CISA + EU Ivanti · Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability 2026-04-08 149d overdue —
CVE-2026-35616 CISA Fortinet · FortiClient EMS Fortinet FortiClient EMS Improper Access Control Vulnerability 2026-04-06 151d overdue —
CVE-2026-3502 CISA TrueConf · Client TrueConf Client Download of Code Without Integrity Check Vulnerability 2026-04-02 144d overdue —
CVE-2026-5281 CISA Google · Dawn Google Dawn Use-After-Free Vulnerability 2026-04-01 145d overdue —
CVE-2026-3055 CISA Citrix · NetScaler Citrix NetScaler Out-of-Bounds Read Vulnerability 2026-03-30 158d overdue —
CVE-2025-53521 CISA F5 · BIG-IP F5 BIG-IP Stack-Based Buffer Overflow Vulnerability 2026-03-27 161d overdue —
CVE-2026-33634 CISA Aquasecurity · Trivy Aquasecurity Trivy Embedded Malicious Code Vulnerability 2026-03-26 151d overdue —
CVE-2026-33017 CISA Langflow · Langflow Langflow Code Injection Vulnerability 2026-03-25 152d overdue —
CVE-2025-54068 CISA Laravel · Livewire Laravel Livewire Code Injection Vulnerability 2026-03-20 157d overdue —
CVE-2025-43520 CISA Apple · Multiple Products Apple Multiple Products Classic Buffer Overflow Vulnerability 2026-03-20 157d overdue —
CVE-2025-43510 CISA Apple · Multiple Products Apple Multiple Products Improper Locking Vulnerability 2026-03-20 157d overdue —
CVE-2025-32432 CISA Craft CMS · Craft CMS Craft CMS Code Injection Vulnerability 2026-03-20 157d overdue —
CVE-2025-31277 CISA Apple · Multiple Products Apple Multiple Products Buffer Overflow Vulnerability 2026-03-20 157d overdue —
CVE-2026-20131 CISA Cisco · Secure Firewall Management Center (FMC) Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability 2026-03-19 169d overdue RANSOMWARE
CVE-2026-20963 CISA + EU Microsoft · SharePoint Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 2026-03-18 170d overdue —
CVE-2025-66376 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability 2026-03-18 159d overdue —
CVE-2025-47813 CISA Wing FTP Server · Wing FTP Server Wing FTP Server Information Disclosure Vulnerability 2026-03-16 161d overdue —
CVE-2026-3910 CISA Google · Chromium V8 Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability 2026-03-13 164d overdue —
CVE-2026-3909 CISA Google · Skia Google Skia Out-of-Bounds Write Vulnerability 2026-03-13 164d overdue —
CVE-2025-68613 CISA n8n · n8n n8n Improper Control of Dynamically-Managed Code Resources Vulnerability 2026-03-11 166d overdue —
CVE-2026-1603 CISA Ivanti · Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability 2026-03-09 168d overdue —
CVE-2025-26399 CISA SolarWinds · Web Help Desk SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability 2026-03-09 179d overdue RANSOMWARE
CVE-2021-22054 CISA Omnissa · Workspace One UEM Omnissa Workspace ONE Server-Side Request Forgery 2026-03-09 168d overdue —
CVE-2023-43000 CISA Apple · Multiple Products Apple Multiple products Use-After-Free Vulnerability 2026-03-05 165d overdue —
CVE-2023-41974 CISA Apple · iOS and iPadOS Apple iOS and iPadOS Use-After-Free Vulnerability 2026-03-05 165d overdue —
CVE-2021-30952 CISA Apple · Multiple Products Apple Multiple Products Integer Overflow or Wraparound Vulnerability 2026-03-05 165d overdue —
CVE-2021-22681 CISA Rockwell · Multiple Products Rockwell Multiple Products Insufficient Protected Credentials Vulnerability 2026-03-05 165d overdue —
CVE-2017-7921 CISA Hikvision · Multiple Products Hikvision Multiple Products Improper Authentication Vulnerability 2026-03-05 165d overdue —
CVE-2026-22719 CISA Broadcom · VMware Aria Operations Broadcom VMware Aria Operations Command Injection Vulnerability 2026-03-03 167d overdue —
CVE-2026-21385 CISA Qualcomm · Multiple Chipsets Qualcomm Multiple Chipsets Memory Corruption Vulnerability 2026-03-03 167d overdue —
CVE-2026-20127 CISA Cisco · Catalyst SD-WAN Controller and Manager Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability 2026-02-25 192d overdue —
CVE-2022-20775 CISA Cisco · SD-WAN Cisco SD-WAN Path Traversal Vulnerability 2026-02-25 192d overdue —
CVE-2026-25108 CISA Soliton Systems K.K · FileZen Soliton Systems K.K FileZen OS Command Injection Vulnerability 2026-02-24 174d overdue —
CVE-2025-68461 CISA Roundcube · Webmail RoundCube Webmail Cross-site Scripting Vulnerability 2026-02-20 178d overdue —
CVE-2025-49113 CISA Roundcube · Webmail RoundCube Webmail Deserialization of Untrusted Data Vulnerability 2026-02-20 178d overdue —
CVE-2026-22769 CISA Dell · RecoverPoint for Virtual Machines (RP4VMs) Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability 2026-02-18 198d overdue —
CVE-2021-22175 CISA GitLab · GitLab GitLab Server-Side Request Forgery (SSRF) Vulnerability 2026-02-18 180d overdue —
CVE-2026-2441 CISA Google · Chromium Google Chromium CSS Use-After-Free Vulnerability 2026-02-17 181d overdue —
CVE-2024-7694 CISA TeamT5 · ThreatSonar Anti-Ransomware TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability 2026-02-17 181d overdue —
CVE-2020-7796 CISA Synacor · Zimbra Collaboration Suite Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability 2026-02-17 181d overdue —
CVE-2008-0015 CISA Microsoft · Windows Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability 2026-02-17 181d overdue —
CVE-2026-1731 CISA + EU BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA) BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability 2026-02-13 203d overdue RANSOMWARE
CVE-2026-20700 CISA Apple · Multiple Products Apple Multiple Buffer Overflow Vulnerability 2026-02-12 186d overdue —
CVE-2025-40536 CISA SolarWinds · Web Help Desk SolarWinds Web Help Desk Security Control Bypass Vulnerability 2026-02-12 204d overdue —
CVE-2025-15556 CISA Notepad++ · Notepad++ Notepad++ Download of Code Without Integrity Check Vulnerability 2026-02-12 186d overdue —
CVE-2024-43468 CISA Microsoft · Configuration Manager Microsoft Configuration Manager SQL Injection Vulnerability 2026-02-12 186d overdue —
CVE-2026-21533 CISA Microsoft · Windows Microsoft Windows Improper Privilege Management Vulnerability 2026-02-10 188d overdue —
CVE-2026-21525 CISA Microsoft · Windows Microsoft Windows NULL Pointer Dereference Vulnerability 2026-02-10 188d overdue —
CVE-2026-21519 CISA Microsoft · Windows Microsoft Windows Type Confusion Vulnerability 2026-02-10 188d overdue —
CVE-2026-21514 CISA Microsoft · Office Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability 2026-02-10 188d overdue —
CVE-2026-21513 CISA Microsoft · Windows Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability 2026-02-10 188d overdue —
CVE-2026-21510 CISA Microsoft · Windows Microsoft Windows Shell Protection Mechanism Failure Vulnerability 2026-02-10 188d overdue —
CVE-2026-24423 CISA SmarterTools · SmarterMail SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability 2026-02-05 193d overdue RANSOMWARE
CVE-2025-11953 CISA React Native Community · CLI React Native Community CLI OS Command Injection Vulnerability 2026-02-05 193d overdue —
CVE-2025-64328 CISA Sangoma · FreePBX Sangoma FreePBX OS Command Injection Vulnerability 2026-02-03 195d overdue —
CVE-2025-40551 CISA SolarWinds · Web Help Desk SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability 2026-02-03 213d overdue —
CVE-2021-39935 CISA GitLab · Community and Enterprise Editions GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability 2026-02-03 195d overdue —
CVE-2019-19006 CISA Sangoma · FreePBX Sangoma FreePBX Improper Authentication Vulnerability 2026-02-03 195d overdue —
CVE-2026-1281 CISA + EU Ivanti · Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability 2026-01-29 218d overdue —
CVE-2026-24858 CISA Fortinet · Multiple Products Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability 2026-01-27 220d overdue —
CVE-2025-59719 EU Fortinet An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 t… 2026-01-27 — —
CVE-2026-24061 CISA GNU · InetUtils GNU InetUtils Argument Injection Vulnerability 2026-01-26 203d overdue —
CVE-2026-23760 CISA SmarterTools · SmarterMail SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability 2026-01-26 203d overdue RANSOMWARE
CVE-2026-21509 CISA Microsoft · Office Microsoft Office Security Feature Bypass Vulnerability 2026-01-26 203d overdue —
CVE-2025-52691 CISA SmarterTools · SmarterMail SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability 2026-01-26 203d overdue RANSOMWARE
CVE-2018-14634 CISA Linux · Kernel Linux Kernel Integer Overflow Vulnerability 2026-01-26 203d overdue —
CVE-2024-37079 CISA Broadcom · VMware vCenter Server Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability 2026-01-23 206d overdue —
CVE-2025-68645 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability 2026-01-22 207d overdue —
CVE-2025-54313 CISA Prettier · eslint-config-prettier Prettier eslint-config-prettier Embedded Malicious Code Vulnerability 2026-01-22 207d overdue —
CVE-2025-34026 CISA Versa · Concerto Versa Concerto Improper Authentication Vulnerability 2026-01-22 207d overdue —
CVE-2025-31125 CISA Vite · Vitejs Vite Vitejs Improper Access Control Vulnerability 2026-01-22 207d overdue —
CVE-2026-20045 CISA Cisco · Unified Communications Manager Cisco Unified Communications Products Code Injection Vulnerability 2026-01-21 208d overdue —
CVE-2026-20805 CISA Microsoft · Windows Microsoft Windows Information Disclosure Vulnerability 2026-01-13 216d overdue —
CVE-2025-8110 CISA Gogs · Gogs Gogs Path Traversal Vulnerability 2026-01-12 217d overdue —
CVE-2025-37164 CISA Hewlett Packard Enterprise (HPE) · OneView Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability 2026-01-07 222d overdue —
CVE-2009-0556 CISA Microsoft · Office Microsoft Office PowerPoint Code Injection Vulnerability 2026-01-07 222d overdue —
CVE-2025-14847 CISA MongoDB · MongoDB and MongoDB Server MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability 2025-12-29 231d overdue —
CVE-2023-52163 CISA Digiever · DS-2105 Pro Digiever DS-2105 Pro Missing Authorization Vulnerability 2025-12-22 238d overdue —
CVE-2025-14733 CISA WatchGuard · Firebox WatchGuard Firebox Out of Bounds Write Vulnerability 2025-12-19 255d overdue —
CVE-2025-59374 CISA ASUS · Live Update ASUS Live Update Embedded Malicious Code Vulnerability 2025-12-17 243d overdue —
CVE-2025-40602 CISA SonicWall · SMA1000 appliance SonicWall SMA1000 Missing Authorization Vulnerability 2025-12-17 257d overdue —
CVE-2025-20393 CISA Cisco · Multiple Products Cisco Multiple Products Improper Input Validation Vulnerability 2025-12-17 257d overdue —
CVE-2025-59718 CISA + EU Fortinet · Multiple Products Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability 2025-12-16 258d overdue —
CVE-2025-43529 CISA Apple · Multiple Products Apple Multiple Products Use-After-Free WebKit Vulnerability 2025-12-15 245d overdue —
CVE-2025-14611 CISA Gladinet · CentreStack and Triofox Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability 2025-12-15 245d overdue —
CVE-2025-14174 CISA Google · Chromium Google Chromium Out of Bounds Memory Access Vulnerability 2025-12-12 248d overdue —
CVE-2018-4063 CISA Sierra Wireless · AirLink ALEOS Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability 2025-12-12 248d overdue —
CVE-2025-58360 CISA OSGeo · GeoServer OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability 2025-12-11 249d overdue —
CVE-2025-62221 CISA Microsoft · Windows Microsoft Windows Use After Free Vulnerability 2025-12-09 251d overdue —
CVE-2025-6218 CISA RARLAB · WinRAR RARLAB WinRAR Path Traversal Vulnerability 2025-12-09 251d overdue —
CVE-2025-66644 CISA Array Networks · ArrayOS AG Array Networks ArrayOS AG OS Command Injection Vulnerability 2025-12-08 252d overdue —
CVE-2022-37055 CISA D-Link · Routers D-Link Routers Buffer Overflow Vulnerability 2025-12-08 252d overdue —
CVE-2025-55182 CISA + EU Meta · React Server Components Meta React Server Components Remote Code Execution Vulnerability 2025-12-05 269d overdue RANSOMWARE
CVE-2021-26828 CISA OpenPLC · ScadaBR OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability 2025-12-03 257d overdue —
CVE-2025-48633 CISA Android · Framework Android Framework Information Disclosure Vulnerability 2025-12-02 258d overdue —
CVE-2025-48572 CISA Android · Framework Android Framework Privilege Escalation Vulnerability 2025-12-02 258d overdue —
CVE-2021-26829 CISA OpenPLC · ScadaBR OpenPLC ScadaBR Cross-site Scripting Vulnerability 2025-11-28 262d overdue —
CVE-2025-61757 CISA Oracle · Fusion Middleware Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability 2025-11-21 269d overdue —
CVE-2025-13223 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2025-11-19 271d overdue —
CVE-2025-58034 CISA Fortinet · FortiWeb Fortinet FortiWeb OS Command Injection Vulnerability 2025-11-18 286d overdue —
CVE-2025-64446 CISA Fortinet · FortiWeb Fortinet FortiWeb Path Traversal Vulnerability 2025-11-14 290d overdue —
CVE-2025-9242 CISA WatchGuard · Firebox WatchGuard Firebox Out-of-Bounds Write Vulnerability 2025-11-12 278d overdue —
CVE-2025-62215 CISA Microsoft · Windows Microsoft Windows Race Condition Vulnerability 2025-11-12 278d overdue —
CVE-2025-12480 CISA Gladinet · Triofox Gladinet Triofox Improper Access Control Vulnerability 2025-11-12 278d overdue —
CVE-2025-21042 CISA Samsung · Mobile Devices Samsung Mobile Devices Out-of-Bounds Write Vulnerability 2025-11-10 280d overdue —
CVE-2025-48703 CISA CWP · Control Web Panel CWP Control Web Panel OS Command Injection Vulnerability 2025-11-04 286d overdue —
CVE-2025-11371 CISA Gladinet · CentreStack and Triofox Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability 2025-11-04 286d overdue —
CVE-2025-41244 CISA Broadcom · VMware Aria Operations and VMware Tools Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability 2025-10-30 291d overdue —
CVE-2025-24893 CISA XWiki · Platform XWiki Platform Eval Injection Vulnerability 2025-10-30 291d overdue —
CVE-2025-6205 CISA Dassault Systèmes · DELMIA Apriso Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability 2025-10-28 293d overdue —
CVE-2025-6204 CISA Dassault Systèmes · DELMIA Apriso Dassault Systèmes DELMIA Apriso Code Injection Vulnerability 2025-10-28 293d overdue —
CVE-2025-59287 CISA Microsoft · Windows Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability 2025-10-24 297d overdue —
CVE-2025-54236 CISA Adobe · Commerce and Magento Adobe Commerce and Magento Improper Input Validation Vulnerability 2025-10-24 297d overdue —
CVE-2025-61932 CISA Motex · LANSCOPE Endpoint Manager Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability 2025-10-22 299d overdue —
CVE-2025-61884 CISA Oracle · E-Business Suite Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability 2025-10-20 301d overdue RANSOMWARE
CVE-2025-33073 CISA Microsoft · Windows Microsoft Windows SMB Client Improper Access Control Vulnerability 2025-10-20 301d overdue —
CVE-2025-2747 CISA Kentico · Xperience CMS Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability 2025-10-20 301d overdue —
CVE-2025-2746 CISA Kentico · Xperience CMS Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability 2025-10-20 301d overdue —
CVE-2022-48503 CISA Apple · Multiple Products Apple Multiple Products Unspecified Vulnerability 2025-10-20 301d overdue —
CVE-2025-54253 CISA Adobe · Experience Manager (AEM) Forms Adobe Experience Manager Forms Code Execution Vulnerability 2025-10-15 306d overdue —
CVE-2025-59230 CISA Microsoft · Windows Microsoft Windows Improper Access Control Vulnerability 2025-10-14 307d overdue —
CVE-2025-47827 CISA IGEL · IGEL OS IGEL OS Use of a Key Past its Expiration Date Vulnerability 2025-10-14 307d overdue —
CVE-2025-24990 CISA Microsoft · Windows Microsoft Windows Untrusted Pointer Dereference Vulnerability 2025-10-14 307d overdue —
CVE-2016-7836 CISA SKYSEA · Client View SKYSEA Client View Improper Authentication Vulnerability 2025-10-14 307d overdue —
CVE-2021-43798 CISA Grafana Labs · Grafana Grafana Path Traversal Vulnerability 2025-10-09 312d overdue —
CVE-2025-27915 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability 2025-10-07 314d overdue —
CVE-2025-61882 CISA Oracle · E-Business Suite Oracle E-Business Suite Unspecified Vulnerability 2025-10-06 315d overdue RANSOMWARE
CVE-2021-43226 CISA Microsoft · Windows Microsoft Windows Privilege Escalation Vulnerability 2025-10-06 315d overdue RANSOMWARE
CVE-2021-22555 CISA Linux · Kernel Linux Kernel Heap Out-of-Bounds Write Vulnerability 2025-10-06 315d overdue —
CVE-2013-3918 CISA Microsoft · Windows Microsoft Windows Out-of-Bounds Write Vulnerability 2025-10-06 315d overdue —
CVE-2011-3402 CISA Microsoft · Windows Microsoft Windows Remote Code Execution Vulnerability 2025-10-06 315d overdue —
CVE-2010-3962 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability 2025-10-06 315d overdue —
CVE-2010-3765 CISA Mozilla · Multiple Products Mozilla Multiple Products Remote Code Execution Vulnerability 2025-10-06 315d overdue —
CVE-2025-4008 CISA Smartbedded · Meteobridge Smartbedded Meteobridge Command Injection Vulnerability 2025-10-02 319d overdue —
CVE-2025-21043 CISA Samsung · Mobile Devices Samsung Mobile Devices Out-of-Bounds Write Vulnerability 2025-10-02 319d overdue —
CVE-2017-1000353 CISA Jenkins · Jenkins Jenkins Remote Code Execution Vulnerability 2025-10-02 319d overdue —
CVE-2015-7755 CISA Juniper · ScreenOS Juniper ScreenOS Improper Authentication Vulnerability 2025-10-02 319d overdue —
CVE-2014-6278 CISA GNU · GNU Bash GNU Bash OS Command Injection Vulnerability 2025-10-02 319d overdue —
CVE-2025-59689 CISA Libraesva · Email Security Gateway Libraesva Email Security Gateway Command Injection Vulnerability 2025-09-29 322d overdue —
CVE-2025-32463 CISA Sudo · Sudo Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability 2025-09-29 322d overdue —
CVE-2025-20352 CISA Cisco · IOS and IOS XE Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability 2025-09-29 322d overdue —
CVE-2025-10035 CISA Fortra · GoAnywhere MFT Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability 2025-09-29 322d overdue RANSOMWARE
CVE-2021-21311 CISA Adminer · Adminer Adminer Server-Side Request Forgery Vulnerability 2025-09-29 322d overdue —
CVE-2025-20362 CISA Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability 2025-09-25 346d overdue —
CVE-2025-20333 CISA Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability 2025-09-25 346d overdue —
CVE-2025-10585 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2025-09-23 328d overdue —
CVE-2025-5086 CISA Dassault Systèmes · DELMIA Apriso Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability 2025-09-11 340d overdue —
CVE-2025-25231 EU Omnissa Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be… 2025-09-09 — —
CVE-2025-53690 CISA Sitecore · Multiple Products Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability 2025-09-04 347d overdue —
CVE-2025-48543 CISA Android · Runtime Android Runtime Use-After-Free Vulnerability 2025-09-04 347d overdue —
CVE-2025-38352 CISA Linux · Kernel Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability 2025-09-04 347d overdue —
CVE-2025-9377 CISA TP-Link · Multiple Routers TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability 2025-09-03 348d overdue —
CVE-2023-50224 CISA TP-Link · TL-WR841N TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability 2025-09-03 348d overdue —
CVE-2025-55177 CISA Meta Platforms · WhatsApp Meta Platforms WhatsApp Incorrect Authorization Vulnerability 2025-09-02 349d overdue —
CVE-2020-24363 CISA TP-Link · TL-WA855RE TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability 2025-09-02 349d overdue —
CVE-2025-57819 CISA Sangoma · FreePBX Sangoma FreePBX Authentication Bypass Vulnerability 2025-08-29 353d overdue —
CVE-2025-7775 CISA Citrix · NetScaler Citrix NetScaler Memory Overflow Vulnerability 2025-08-26 375d overdue —
CVE-2025-48384 CISA Git · Git Git Link Following Vulnerability 2025-08-25 357d overdue —
CVE-2024-8069 CISA Citrix · Session Recording Citrix Session Recording Deserialization of Untrusted Data Vulnerability 2025-08-25 357d overdue —
CVE-2024-8068 CISA Citrix · Session Recording Citrix Session Recording Improper Privilege Management Vulnerability 2025-08-25 357d overdue —
CVE-2025-43300 CISA Apple · iOS, iPadOS, and macOS Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability 2025-08-21 361d overdue —
CVE-2025-54948 CISA Trend Micro · Apex One Trend Micro Apex One OS Command Injection Vulnerability 2025-08-18 364d overdue —
CVE-2025-8876 CISA N-able · N-Central N-able N-Central Command Injection Vulnerability 2025-08-13 383d overdue —
CVE-2025-8875 CISA N-able · N-Central N-able N-Central Insecure Deserialization Vulnerability 2025-08-13 383d overdue —
CVE-2025-8088 CISA RARLAB · WinRAR RARLAB WinRAR Path Traversal Vulnerability 2025-08-12 370d overdue RANSOMWARE
CVE-2013-3893 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Resource Management Errors Vulnerability 2025-08-12 370d overdue —
CVE-2007-0671 CISA Microsoft · Office Microsoft Office Excel Remote Code Execution Vulnerability 2025-08-12 370d overdue —
CVE-2022-40799 CISA D-Link · DNR-322L D-Link DNR-322L Download of Code Without Integrity Check Vulnerability 2025-08-05 377d overdue —
CVE-2020-25079 CISA D-Link · DCS-2530L and DCS-2670L Devices D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability 2025-08-05 377d overdue —
CVE-2020-25078 CISA D-Link · DCS-2530L and DCS-2670L Devices D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability 2025-08-05 377d overdue —
CVE-2025-20337 CISA Cisco · Identity Services Engine Cisco Identity Services Engine Injection Vulnerability 2025-07-28 385d overdue —
CVE-2025-20281 CISA Cisco · Identity Services Engine Cisco Identity Services Engine Injection Vulnerability 2025-07-28 385d overdue —
CVE-2023-2533 CISA PaperCut · NG/MF PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability 2025-07-28 385d overdue —
CVE-2025-6558 CISA Google · Chromium Google Chromium ANGLE and GPU Improper Input Validation Vulnerability 2025-07-22 391d overdue —
CVE-2025-54309 CISA CrushFTP · CrushFTP CrushFTP Unprotected Alternate Channel Vulnerability 2025-07-22 391d overdue —
CVE-2025-49706 CISA Microsoft · SharePoint Microsoft SharePoint Improper Authentication Vulnerability 2025-07-22 411d overdue RANSOMWARE
CVE-2025-49704 CISA Microsoft · SharePoint Microsoft SharePoint Code Injection Vulnerability 2025-07-22 411d overdue RANSOMWARE
CVE-2025-2776 CISA SysAid · SysAid On-Prem SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability 2025-07-22 391d overdue —
CVE-2025-2775 CISA SysAid · SysAid On-Prem SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability 2025-07-22 391d overdue —
CVE-2025-53770 CISA + EU Microsoft · SharePoint Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 2025-07-20 413d overdue RANSOMWARE
CVE-2025-25257 CISA Fortinet · FortiWeb Fortinet FortiWeb SQL Injection Vulnerability 2025-07-18 395d overdue —
CVE-2025-47812 CISA Wing FTP Server · Wing FTP Server Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability 2025-07-14 399d overdue —
CVE-2015-7501 EU — Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV)… 2025-07-14 — —
CVE-2011-4085 EU Red Hat The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform bef… 2025-07-14 — —
CVE-2025-5777 CISA Citrix · NetScaler ADC and Gateway Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability 2025-07-10 423d overdue RANSOMWARE
CVE-2019-9621 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability 2025-07-07 406d overdue —
CVE-2019-5418 CISA Rails · Ruby on Rails Rails Ruby on Rails Path Traversal Vulnerability 2025-07-07 406d overdue —
CVE-2016-10033 CISA PHP · PHPMailer PHPMailer Command Injection Vulnerability 2025-07-07 406d overdue —
CVE-2014-3931 CISA Looking Glass · Multi-Router Looking Glass (MRLG) Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability 2025-07-07 406d overdue —
CVE-2025-6554 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2025-07-02 411d overdue —
CVE-2025-48928 CISA TeleMessage · TM SGNL TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability 2025-07-01 412d overdue —
CVE-2025-48927 CISA TeleMessage · TM SGNL TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability 2025-07-01 412d overdue —
CVE-2025-6543 CISA + EU Citrix · NetScaler ADC and Gateway Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability 2025-06-30 413d overdue —
CVE-2024-54085 CISA AMI · MegaRAC SPx AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability 2025-06-25 418d overdue —
CVE-2024-0769 CISA D-Link · DIR-859 Router D-Link DIR-859 Router Path Traversal Vulnerability 2025-06-25 418d overdue —
CVE-2019-6693 CISA Fortinet · FortiOS Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability 2025-06-25 418d overdue RANSOMWARE
CVE-2023-0386 CISA Linux · Kernel Linux Kernel Improper Ownership Management Vulnerability 2025-06-17 426d overdue —
CVE-2025-43200 CISA Apple · Multiple Products Apple Multiple Products Unspecified Vulnerability 2025-06-16 427d overdue —
CVE-2023-33538 CISA TP-Link · Multiple Routers TP-Link Multiple Routers Command Injection Vulnerability 2025-06-16 427d overdue —
CVE-2025-33053 CISA Microsoft · Windows Microsoft Windows External Control of File Name or Path Vulnerability 2025-06-10 433d overdue —
CVE-2025-24016 CISA Wazuh · Wazuh Server Wazuh Server Deserialization of Untrusted Data Vulnerability 2025-06-10 433d overdue —
CVE-2025-32433 CISA Erlang · Erlang/OTP Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability 2025-06-09 434d overdue —
CVE-2024-42009 CISA + EU Roundcube · Webmail RoundCube Webmail Cross-Site Scripting Vulnerability 2025-06-09 434d overdue —
CVE-2025-5419 CISA Google · Chromium V8 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability 2025-06-05 438d overdue —
CVE-2025-27038 CISA Qualcomm · Multiple Chipsets Qualcomm Multiple Chipsets Use-After-Free Vulnerability 2025-06-03 440d overdue —
CVE-2025-21480 CISA Qualcomm · Multiple Chipsets Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability 2025-06-03 440d overdue —
CVE-2025-21479 CISA Qualcomm · Multiple Chipsets Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability 2025-06-03 440d overdue —
CVE-2025-3935 CISA ConnectWise · ScreenConnect ConnectWise ScreenConnect Improper Authentication Vulnerability 2025-06-02 441d overdue —
CVE-2025-35939 CISA Craft CMS · Craft CMS Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability 2025-06-02 441d overdue —
CVE-2024-56145 CISA Craft CMS · Craft CMS Craft CMS Code Injection Vulnerability 2025-06-02 441d overdue —
CVE-2023-39780 CISA ASUS · RT-AX55 Routers ASUS RT-AX55 Routers OS Command Injection Vulnerability 2025-06-02 441d overdue —
CVE-2021-32030 CISA ASUS · Routers ASUS Routers Improper Authentication Vulnerability 2025-06-02 441d overdue —
CVE-2025-4632 CISA Samsung · MagicINFO 9 Server Samsung MagicINFO 9 Server Path Traversal Vulnerability 2025-05-22 452d overdue —
CVE-2025-4428 CISA + EU Ivanti · Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability 2025-05-19 455d overdue —
CVE-2025-4427 CISA + EU Ivanti · Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability 2025-05-19 455d overdue —
CVE-2025-27920 CISA Srimax · Output Messenger Srimax Output Messenger Directory Traversal Vulnerability 2025-05-19 455d overdue —
CVE-2024-27443 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability 2025-05-19 455d overdue —
CVE-2024-11182 CISA MDaemon · Email Server MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability 2025-05-19 455d overdue —
CVE-2023-38950 CISA ZKTeco · BioTime ZKTeco BioTime Path Traversal Vulnerability 2025-05-19 455d overdue —
CVE-2025-42999 CISA SAP · NetWeaver SAP NetWeaver Deserialization Vulnerability 2025-05-15 459d overdue RANSOMWARE
CVE-2024-12987 CISA DrayTek · Vigor Routers DrayTek Vigor Routers OS Command Injection Vulnerability 2025-05-15 459d overdue —
CVE-2025-32756 CISA Fortinet · Multiple Products Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability 2025-05-14 460d overdue —
CVE-2025-32709 CISA Microsoft · Windows Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability 2025-05-13 461d overdue —
CVE-2025-32706 CISA Microsoft · Windows Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability 2025-05-13 461d overdue —
CVE-2025-32701 CISA Microsoft · Windows Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability 2025-05-13 461d overdue —
CVE-2025-30400 CISA Microsoft · Windows Microsoft Windows DWM Core Library Use-After-Free Vulnerability 2025-05-13 461d overdue —
CVE-2025-30397 CISA Microsoft · Windows Microsoft Windows Scripting Engine Type Confusion Vulnerability 2025-05-13 461d overdue —
CVE-2025-47729 CISA TeleMessage · TM SGNL TeleMessage TM SGNL Hidden Functionality Vulnerability 2025-05-12 462d overdue —
CVE-2024-6047 CISA GeoVision · Multiple Devices GeoVision Devices OS Command Injection Vulnerability 2025-05-07 467d overdue —
CVE-2024-11120 CISA GeoVision · Multiple Devices GeoVision Devices OS Command Injection Vulnerability 2025-05-07 467d overdue —
CVE-2025-27363 CISA FreeType · FreeType FreeType Out-of-Bounds Write Vulnerability 2025-05-06 468d overdue —
CVE-2025-3248 CISA Langflow · Langflow Langflow Missing Authentication Vulnerability 2025-05-05 469d overdue RANSOMWARE
CVE-2025-34028 CISA Commvault · Command Center Commvault Command Center Path Traversal Vulnerability 2025-05-02 472d overdue —
CVE-2024-58136 CISA Yiiframework · Yii Yiiframework Yii Improper Protection of Alternate Path Vulnerability 2025-05-02 472d overdue —
CVE-2024-38475 CISA Apache · HTTP Server Apache HTTP Server Improper Escaping of Output Vulnerability 2025-05-01 473d overdue —
CVE-2023-44221 CISA SonicWall · SMA100 Appliances SonicWall SMA100 Appliances OS Command Injection Vulnerability 2025-05-01 473d overdue —
CVE-2025-31324 CISA SAP · NetWeaver SAP NetWeaver Unrestricted File Upload Vulnerability 2025-04-29 475d overdue RANSOMWARE
CVE-2025-42599 CISA Qualitia · Active! Mail Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability 2025-04-28 476d overdue —
CVE-2025-3928 CISA Commvault · Web Server Commvault Web Server Unspecified Vulnerability 2025-04-28 476d overdue —
CVE-2025-1976 CISA Broadcom · Brocade Fabric OS Broadcom Brocade Fabric OS Code Injection Vulnerability 2025-04-28 476d overdue —
CVE-2025-31201 CISA Apple · Multiple Products Apple Multiple Products Arbitrary Read and Write Vulnerability 2025-04-17 487d overdue —
CVE-2025-31200 CISA Apple · Multiple Products Apple Multiple Products Memory Corruption Vulnerability 2025-04-17 487d overdue —
CVE-2025-24054 CISA Microsoft · Windows Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability 2025-04-17 487d overdue —
CVE-2021-20035 CISA SonicWall · SMA100 Appliances SonicWall SMA100 Appliances OS Command Injection Vulnerability 2025-04-16 488d overdue —
CVE-2024-53197 CISA Linux · Kernel Linux Kernel Out-of-Bounds Access Vulnerability 2025-04-09 495d overdue —
CVE-2024-53150 CISA Linux · Kernel Linux Kernel Out-of-Bounds Read Vulnerability 2025-04-09 495d overdue —
CVE-2025-30406 CISA Gladinet · CentreStack Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability 2025-04-08 496d overdue —
CVE-2025-29824 CISA Microsoft · Windows Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability 2025-04-08 496d overdue RANSOMWARE
CVE-2025-31161 CISA CrushFTP · CrushFTP CrushFTP Authentication Bypass Vulnerability 2025-04-07 497d overdue RANSOMWARE
CVE-2025-22457 CISA + EU Ivanti · Connect Secure, Policy Secure, and ZTA Gateways Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability 2025-04-04 514d overdue RANSOMWARE
CVE-2025-24813 CISA Apache · Tomcat Apache Tomcat Path Equivalence Vulnerability 2025-04-01 503d overdue —
CVE-2024-20439 CISA Cisco · Smart Licensing Utility Cisco Smart Licensing Utility Static Credential Vulnerability 2025-03-31 504d overdue —
CVE-2025-2783 CISA Google · Chromium Mojo Google Chromium Mojo Sandbox Escape Vulnerability 2025-03-27 508d overdue —
CVE-2019-9875 CISA Sitecore · CMS and Experience Platform (XP) Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability 2025-03-26 509d overdue —
CVE-2019-9874 CISA Sitecore · CMS and Experience Platform (XP) Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability 2025-03-26 509d overdue —
CVE-2025-30154 CISA reviewdog · action-setup GitHub Action reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability 2025-03-24 511d overdue —
CVE-2025-1316 CISA Edimax · IC-7100 IP Camera Edimax IC-7100 IP Camera OS Command Injection Vulnerability 2025-03-19 516d overdue —
CVE-2024-48248 CISA NAKIVO · Backup and Replication NAKIVO Backup and Replication Absolute Path Traversal Vulnerability 2025-03-19 516d overdue —
CVE-2017-12637 CISA SAP · NetWeaver SAP NetWeaver Directory Traversal Vulnerability 2025-03-19 516d overdue —
CVE-2025-30066 CISA tj-actions · changed-files GitHub Action tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability 2025-03-18 517d overdue —
CVE-2025-24472 CISA Fortinet · FortiOS and FortiProxy Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability 2025-03-18 517d overdue RANSOMWARE
CVE-2025-24201 CISA Apple · Multiple Products Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability 2025-03-13 522d overdue —
CVE-2025-21590 CISA Juniper · Junos OS Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability 2025-03-13 522d overdue —
CVE-2025-26633 CISA Microsoft · Windows Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability 2025-03-11 524d overdue RANSOMWARE
CVE-2025-24993 CISA Microsoft · Windows Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability 2025-03-11 524d overdue —
CVE-2025-24991 CISA Microsoft · Windows Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability 2025-03-11 524d overdue —
CVE-2025-24985 CISA Microsoft · Windows Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability 2025-03-11 524d overdue —
CVE-2025-24984 CISA Microsoft · Windows Microsoft Windows NTFS Information Disclosure Vulnerability 2025-03-11 524d overdue —
CVE-2025-24983 CISA Microsoft · Windows Microsoft Windows Win32k Use-After-Free Vulnerability 2025-03-11 524d overdue —
CVE-2025-25181 CISA Advantive · VeraCore Advantive VeraCore SQL Injection Vulnerability 2025-03-10 525d overdue —
CVE-2024-57968 CISA Advantive · VeraCore Advantive VeraCore Unrestricted File Upload Vulnerability 2025-03-10 525d overdue —
CVE-2024-13161 CISA Ivanti · Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability 2025-03-10 525d overdue —
CVE-2024-13160 CISA Ivanti · Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability 2025-03-10 525d overdue —
CVE-2024-13159 CISA Ivanti · Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability 2025-03-10 525d overdue —
CVE-2025-22226 CISA VMware · ESXi, Workstation, and Fusion VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability 2025-03-04 531d overdue —
CVE-2025-22225 CISA VMware · ESXi VMware ESXi Arbitrary Write Vulnerability 2025-03-04 531d overdue RANSOMWARE
CVE-2025-22224 CISA VMware · ESXi and Workstation VMware ESXi and Workstation TOCTOU Race Condition Vulnerability 2025-03-04 531d overdue —
CVE-2024-50302 CISA Linux · Kernel Linux Kernel Use of Uninitialized Resource Vulnerability 2025-03-04 531d overdue —
CVE-2024-4885 CISA Progress · WhatsUp Gold Progress WhatsUp Gold Path Traversal Vulnerability 2025-03-03 532d overdue —
CVE-2023-20118 CISA Cisco · Small Business RV Series Routers Cisco Small Business RV Series Routers Command Injection Vulnerability 2025-03-03 532d overdue —
CVE-2022-43939 CISA Hitachi Vantara · Pentaho Business Analytics (BA) Server Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability 2025-03-03 532d overdue —
CVE-2022-43769 CISA Hitachi Vantara · Pentaho Business Analytics (BA) Server Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability 2025-03-03 532d overdue —
CVE-2018-8639 CISA Microsoft · Windows Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability 2025-03-03 532d overdue RANSOMWARE
CVE-2024-49035 CISA Microsoft · Partner Center Microsoft Partner Center Improper Access Control Vulnerability 2025-02-25 538d overdue —
CVE-2023-34192 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability 2025-02-25 538d overdue —
CVE-2024-20953 CISA Oracle · Agile Product Lifecycle Management (PLM) Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability 2025-02-24 539d overdue —
CVE-2017-3066 CISA Adobe · ColdFusion Adobe ColdFusion Deserialization Vulnerability 2025-02-24 539d overdue —
CVE-2025-24989 CISA Microsoft · Power Pages Microsoft Power Pages Improper Access Control Vulnerability 2025-02-21 542d overdue —
CVE-2025-23209 CISA Craft CMS · Craft CMS Craft CMS Code Injection Vulnerability 2025-02-20 543d overdue —
CVE-2025-0111 CISA Palo Alto Networks · PAN-OS Palo Alto Networks PAN-OS File Read Vulnerability 2025-02-20 543d overdue —
CVE-2025-0108 CISA Palo Alto Networks · PAN-OS Palo Alto Networks PAN-OS Authentication Bypass Vulnerability 2025-02-18 545d overdue —
CVE-2024-53704 CISA SonicWall · SonicOS SonicWall SonicOS SSLVPN Improper Authentication Vulnerability 2025-02-18 545d overdue RANSOMWARE
CVE-2024-57727 CISA SimpleHelp · SimpleHelp SimpleHelp Path Traversal Vulnerability 2025-02-13 550d overdue RANSOMWARE
CVE-2025-24200 CISA Apple · iOS and iPadOS Apple iOS and iPadOS Incorrect Authorization Vulnerability 2025-02-12 551d overdue —
CVE-2024-41710 CISA Mitel · SIP Phones Mitel SIP Phones Argument Injection Vulnerability 2025-02-12 551d overdue —
CVE-2025-21418 CISA Microsoft · Windows Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability 2025-02-11 552d overdue —
CVE-2025-21391 CISA Microsoft · Windows Microsoft Windows Storage Link Following Vulnerability 2025-02-11 552d overdue —
CVE-2024-40891 CISA Zyxel · DSL CPE Devices Zyxel DSL CPE OS Command Injection Vulnerability 2025-02-11 552d overdue —
CVE-2024-40890 CISA Zyxel · DSL CPE Devices Zyxel DSL CPE OS Command Injection Vulnerability 2025-02-11 552d overdue —
CVE-2025-0994 CISA Trimble · Cityworks Trimble Cityworks Deserialization Vulnerability 2025-02-07 556d overdue —
CVE-2025-0411 CISA 7-Zip · 7-Zip 7-Zip Mark of the Web Bypass Vulnerability 2025-02-06 557d overdue —
CVE-2024-21413 CISA Microsoft · Office Outlook Microsoft Outlook Improper Input Validation Vulnerability 2025-02-06 557d overdue —
CVE-2022-23748 CISA Audinate · Dante Discovery Dante Discovery Process Control Vulnerability 2025-02-06 557d overdue —
CVE-2020-29574 CISA Sophos · CyberoamOS CyberoamOS (CROS) SQL Injection Vulnerability 2025-02-06 557d overdue RANSOMWARE
CVE-2020-15069 CISA Sophos · XG Firewall Sophos XG Firewall Buffer Overflow Vulnerability 2025-02-06 557d overdue —
CVE-2024-53104 CISA Linux · Kernel Linux Kernel Out-of-Bounds Write Vulnerability 2025-02-05 558d overdue —
CVE-2024-45195 CISA Apache · OFBiz Apache OFBiz Forced Browsing Vulnerability 2025-02-04 559d overdue —
CVE-2024-29059 CISA Microsoft · .NET Framework Microsoft .NET Framework Information Disclosure Vulnerability 2025-02-04 559d overdue —
CVE-2018-9276 CISA Paessler · PRTG Network Monitor Paessler PRTG Network Monitor OS Command Injection Vulnerability 2025-02-04 559d overdue —
CVE-2018-19410 CISA Paessler · PRTG Network Monitor Paessler PRTG Network Monitor Local File Inclusion Vulnerability 2025-02-04 559d overdue —
CVE-2025-24085 CISA Apple · Multiple Products Apple Multiple Products Use-After-Free Vulnerability 2025-01-29 565d overdue —
CVE-2025-23006 CISA SonicWall · SMA1000 Appliances SonicWall SMA1000 Appliances Deserialization Vulnerability 2025-01-24 570d overdue RANSOMWARE
CVE-2020-11023 CISA JQuery · JQuery JQuery Cross-Site Scripting (XSS) Vulnerability 2025-01-23 571d overdue —
CVE-2024-50603 CISA Aviatrix · Controllers Aviatrix Controllers OS Command Injection Vulnerability 2025-01-16 578d overdue —
CVE-2025-21335 CISA Microsoft · Windows Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability 2025-01-14 580d overdue —
CVE-2025-21334 CISA Microsoft · Windows Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability 2025-01-14 580d overdue —
CVE-2025-21333 CISA Microsoft · Windows Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability 2025-01-14 580d overdue —
CVE-2024-55591 CISA + EU Fortinet · FortiOS and FortiProxy Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability 2025-01-14 594d overdue RANSOMWARE
CVE-2024-12686 CISA BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability 2025-01-13 581d overdue —
CVE-2023-48365 CISA Qlik · Sense Qlik Sense HTTP Tunneling Vulnerability 2025-01-13 581d overdue RANSOMWARE
CVE-2025-0282 CISA Ivanti · Connect Secure, Policy Secure, and ZTA Gateways Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability 2025-01-08 600d overdue RANSOMWARE
CVE-2024-55550 CISA Mitel · MiCollab Mitel MiCollab Path Traversal Vulnerability 2025-01-07 587d overdue RANSOMWARE
CVE-2024-41713 CISA Mitel · MiCollab Mitel MiCollab Path Traversal Vulnerability 2025-01-07 587d overdue RANSOMWARE
CVE-2020-2883 CISA Oracle · WebLogic Server Oracle WebLogic Server Unspecified Vulnerability 2025-01-07 587d overdue —
CVE-2024-3393 CISA Palo Alto Networks · PAN-OS Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability 2024-12-30 595d overdue —
CVE-2021-44207 CISA Acclaim Systems · USAHERDS Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability 2024-12-23 602d overdue —
CVE-2024-12356 CISA BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability 2024-12-19 619d overdue —
CVE-2022-23227 CISA NUUO · NVRmini2 Devices NUUO NVRmini2 Devices Missing Authentication Vulnerability 2024-12-18 607d overdue —
CVE-2021-40407 CISA Reolink · RLC-410W IP Camera Reolink RLC-410W IP Camera OS Command Injection Vulnerability 2024-12-18 607d overdue —
CVE-2019-11001 CISA Reolink · Multiple IP Cameras Reolink Multiple IP Cameras OS Command Injection Vulnerability 2024-12-18 607d overdue —
CVE-2018-14933 CISA NUUO · NVRmini Devices NUUO NVRmini Devices OS Command Injection Vulnerability 2024-12-18 607d overdue —
CVE-2024-55956 CISA Cleo · Multiple Products Cleo Multiple Products Unauthenticated File Upload Vulnerability 2024-12-17 608d overdue RANSOMWARE
CVE-2024-35250 CISA Microsoft · Windows Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability 2024-12-16 609d overdue —
CVE-2024-20767 CISA Adobe · ColdFusion Adobe ColdFusion Improper Access Control Vulnerability 2024-12-16 609d overdue —
CVE-2024-50623 CISA Cleo · Multiple Products Cleo Multiple Products Unrestricted File Upload Vulnerability 2024-12-13 612d overdue RANSOMWARE
CVE-2024-49138 CISA Microsoft · Windows Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability 2024-12-10 615d overdue —
CVE-2024-51378 CISA CyberPersons · CyberPanel CyberPanel Incorrect Default Permissions Vulnerability 2024-12-04 621d overdue RANSOMWARE
CVE-2024-11680 CISA ProjectSend · ProjectSend ProjectSend Improper Authentication Vulnerability 2024-12-03 622d overdue —
CVE-2024-11667 CISA Zyxel · Multiple Firewalls Zyxel Multiple Firewalls Path Traversal Vulnerability 2024-12-03 622d overdue RANSOMWARE
CVE-2023-45727 CISA North Grid · Proself North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability 2024-12-03 622d overdue —
CVE-2023-28461 CISA Array Networks · AG/vxAG ArrayOS Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability 2024-11-25 630d overdue RANSOMWARE
CVE-2024-44309 CISA Apple · Multiple Products Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability 2024-11-21 634d overdue —
CVE-2024-44308 CISA Apple · Multiple Products Apple Multiple Products Code Execution Vulnerability 2024-11-21 634d overdue —
CVE-2024-21287 CISA Oracle · Agile Product Lifecycle Management (PLM) Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability 2024-11-21 634d overdue —
CVE-2024-38813 CISA VMware · vCenter Server VMware vCenter Server Privilege Escalation Vulnerability 2024-11-20 635d overdue —
CVE-2024-38812 CISA VMware · vCenter Server VMware vCenter Server Heap-Based Buffer Overflow Vulnerability 2024-11-20 635d overdue —
CVE-2024-9474 CISA Palo Alto Networks · PAN-OS Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability 2024-11-18 637d overdue RANSOMWARE
CVE-2024-1212 CISA Progress · Kemp LoadMaster Progress Kemp LoadMaster OS Command Injection Vulnerability 2024-11-18 637d overdue —
CVE-2024-0012 CISA Palo Alto Networks · PAN-OS Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability 2024-11-18 637d overdue RANSOMWARE
CVE-2024-9465 CISA Palo Alto Networks · Expedition Palo Alto Networks Expedition SQL Injection Vulnerability 2024-11-14 641d overdue —
CVE-2024-9463 CISA Palo Alto Networks · Expedition Palo Alto Networks Expedition OS Command Injection Vulnerability 2024-11-14 641d overdue —
CVE-2024-49039 CISA Microsoft · Windows Microsoft Windows Task Scheduler Privilege Escalation Vulnerability 2024-11-12 643d overdue RANSOMWARE
CVE-2024-43451 CISA Microsoft · Windows Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability 2024-11-12 643d overdue —
CVE-2021-41277 CISA Metabase · Metabase Metabase GeoJSON API Local File Inclusion Vulnerability 2024-11-12 643d overdue —
CVE-2021-26086 CISA Atlassian · Jira Server and Data Center Atlassian Jira Server and Data Center Path Traversal Vulnerability 2024-11-12 643d overdue —
CVE-2014-2120 CISA Cisco · Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability 2024-11-12 643d overdue —
CVE-2024-5910 CISA Palo Alto Networks · Expedition Palo Alto Networks Expedition Missing Authentication Vulnerability 2024-11-07 648d overdue —
CVE-2024-51567 CISA CyberPersons · CyberPanel CyberPanel Incorrect Default Permissions Vulnerability 2024-11-07 648d overdue RANSOMWARE
CVE-2024-43093 CISA Android · Framework Android Framework Privilege Escalation Vulnerability 2024-11-07 648d overdue —
CVE-2019-16278 CISA Nostromo · nhttpd Nostromo nhttpd Directory Traversal Vulnerability 2024-11-07 648d overdue —
CVE-2024-8957 CISA PTZOptics · PT30X-SDI/NDI Cameras PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability 2024-11-04 651d overdue —
CVE-2024-8956 CISA PTZOptics · PT30X-SDI/NDI Cameras PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability 2024-11-04 651d overdue —
CVE-2024-37383 CISA Roundcube · Webmail RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability 2024-10-24 662d overdue —
CVE-2024-20481 CISA Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Denial-of-Service Vulnerability 2024-10-24 662d overdue —
CVE-2024-47575 CISA Fortinet · FortiManager Fortinet FortiManager Missing Authentication Vulnerability 2024-10-23 663d overdue —
CVE-2024-38094 CISA Microsoft · SharePoint Microsoft SharePoint Deserialization Vulnerability 2024-10-22 664d overdue RANSOMWARE
CVE-2024-9537 CISA ScienceLogic · SL1 ScienceLogic SL1 Unspecified Vulnerability 2024-10-21 665d overdue —
CVE-2024-40711 CISA Veeam · Backup & Replication Veeam Backup and Replication Deserialization Vulnerability 2024-10-17 669d overdue RANSOMWARE
CVE-2024-9680 CISA Mozilla · Firefox Mozilla Firefox Use-After-Free Vulnerability 2024-10-15 671d overdue RANSOMWARE
CVE-2024-30088 CISA Microsoft · Windows Microsoft Windows Kernel TOCTOU Race Condition Vulnerability 2024-10-15 671d overdue RANSOMWARE
CVE-2024-28987 CISA SolarWinds · Web Help Desk SolarWinds Web Help Desk Hardcoded Credential Vulnerability 2024-10-15 671d overdue —
CVE-2024-9380 CISA + EU Ivanti · Cloud Services Appliance (CSA) Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability 2024-10-09 677d overdue —
CVE-2024-9379 CISA Ivanti · Cloud Services Appliance (CSA) Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability 2024-10-09 677d overdue —
CVE-2024-23113 CISA Fortinet · Multiple Products Fortinet Multiple Products Format String Vulnerability 2024-10-09 677d overdue —
CVE-2024-43573 CISA Microsoft · Windows Microsoft Windows MSHTML Platform Spoofing Vulnerability 2024-10-08 678d overdue —
CVE-2024-43572 CISA Microsoft · Windows Microsoft Windows Management Console Remote Code Execution Vulnerability 2024-10-08 678d overdue —
CVE-2024-43047 CISA Qualcomm · Multiple Chipsets Qualcomm Multiple Chipsets Use-After-Free Vulnerability 2024-10-08 678d overdue —
CVE-2024-45519 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability 2024-10-03 683d overdue —
CVE-2024-29824 CISA Ivanti · Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability 2024-10-02 684d overdue —
CVE-2023-25280 CISA D-Link · DIR-820 Router D-Link DIR-820 Router OS Command Injection Vulnerability 2024-09-30 686d overdue —
CVE-2020-15415 CISA DrayTek · Multiple Vigor Routers DrayTek Multiple Vigor Routers OS Command Injection Vulnerability 2024-09-30 686d overdue —
CVE-2019-0344 CISA SAP · Commerce Cloud SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability 2024-09-30 686d overdue —
CVE-2024-7593 CISA Ivanti · Virtual Traffic Manager Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability 2024-09-24 692d overdue —
CVE-2024-8963 CISA + EU Ivanti · Cloud Services Appliance (CSA) Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability 2024-09-19 697d overdue —
CVE-2024-27348 CISA Apache · HugeGraph-Server Apache HugeGraph-Server Improper Access Control Vulnerability 2024-09-18 698d overdue —
CVE-2022-21445 CISA Oracle · ADF Faces Oracle ADF Faces Deserialization of Untrusted Data Vulnerability 2024-09-18 698d overdue —
CVE-2020-14644 CISA Oracle · WebLogic Server Oracle WebLogic Server Remote Code Execution Vulnerability 2024-09-18 698d overdue —
CVE-2020-0618 CISA Microsoft · SQL Server Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability 2024-09-18 698d overdue RANSOMWARE
CVE-2014-0502 CISA Adobe · Flash Player Adobe Flash Player Double Free Vulnerablity 2024-09-17 699d overdue —
CVE-2014-0497 CISA Adobe · Flash Player Adobe Flash Player Integer Underflow Vulnerablity 2024-09-17 699d overdue —
CVE-2013-0648 CISA Adobe · Flash Player Adobe Flash Player Code Execution Vulnerability 2024-09-17 699d overdue —
CVE-2013-0643 CISA Adobe · Flash Player Adobe Flash Player Incorrect Default Permissions Vulnerability 2024-09-17 699d overdue —
CVE-2024-6670 CISA Progress · WhatsUp Gold Progress WhatsUp Gold SQL Injection Vulnerability 2024-09-16 700d overdue RANSOMWARE
CVE-2024-43461 CISA Microsoft · Windows Microsoft Windows MSHTML Platform Spoofing Vulnerability 2024-09-16 700d overdue —
CVE-2024-8190 CISA + EU Ivanti · Cloud Services Appliance Ivanti Cloud Services Appliance OS Command Injection Vulnerability 2024-09-13 703d overdue —
CVE-2024-38226 CISA Microsoft · Publisher Microsoft Publisher Protection Mechanism Failure Vulnerability 2024-09-10 706d overdue —
CVE-2024-38217 CISA Microsoft · Windows Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability 2024-09-10 706d overdue —
CVE-2024-38014 CISA Microsoft · Windows Microsoft Windows Installer Improper Privilege Management Vulnerability 2024-09-10 706d overdue —
CVE-2024-40766 CISA SonicWall · SonicOS SonicWall SonicOS Improper Access Control Vulnerability 2024-09-09 707d overdue RANSOMWARE
CVE-2017-1000253 CISA Linux · Kernel Linux Kernel PIE Stack Buffer Corruption Vulnerability 2024-09-09 707d overdue RANSOMWARE
CVE-2016-3714 CISA ImageMagick · ImageMagick ImageMagick Improper Input Validation Vulnerability 2024-09-09 707d overdue —
CVE-2024-7262 CISA Kingsoft · WPS Office Kingsoft WPS Office Path Traversal Vulnerability 2024-09-03 713d overdue —
CVE-2021-20124 CISA DrayTek · VigorConnect Draytek VigorConnect Path Traversal Vulnerability 2024-09-03 713d overdue —
CVE-2021-20123 CISA DrayTek · VigorConnect Draytek VigorConnect Path Traversal Vulnerability 2024-09-03 713d overdue —
CVE-2024-7965 CISA Google · Chromium V8 Google Chromium V8 Inappropriate Implementation Vulnerability 2024-08-28 719d overdue —
CVE-2024-38856 CISA Apache · OFBiz Apache OFBiz Incorrect Authorization Vulnerability 2024-08-27 720d overdue —
CVE-2024-7971 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2024-08-26 721d overdue —
CVE-2024-39717 CISA Versa · Director Versa Director Dangerous File Type Upload Vulnerability 2024-08-23 724d overdue —
CVE-2022-0185 CISA Linux · Kernel Linux Kernel Heap-Based Buffer Overflow Vulnerability 2024-08-21 726d overdue —
CVE-2021-33045 CISA Dahua · IP Camera Firmware Dahua IP Camera Authentication Bypass Vulnerability 2024-08-21 726d overdue —
CVE-2021-33044 CISA Dahua · IP Camera Firmware Dahua IP Camera Authentication Bypass Vulnerability 2024-08-21 726d overdue —
CVE-2021-31196 CISA Microsoft · Exchange Server Microsoft Exchange Server Information Disclosure Vulnerability 2024-08-21 726d overdue —
CVE-2024-23897 CISA Jenkins · Jenkins Command Line Interface (CLI) Jenkins Command Line Interface (CLI) Path Traversal Vulnerability 2024-08-19 728d overdue RANSOMWARE
CVE-2024-28986 CISA SolarWinds · Web Help Desk SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability 2024-08-15 732d overdue —
CVE-2024-38213 CISA Microsoft · Windows Microsoft Windows SmartScreen Security Feature Bypass Vulnerability 2024-08-13 734d overdue —
CVE-2024-38193 CISA Microsoft · Windows Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability 2024-08-13 734d overdue —
CVE-2024-38189 CISA Microsoft · Project Microsoft Project Remote Code Execution Vulnerability 2024-08-13 734d overdue —
CVE-2024-38178 CISA Microsoft · Windows Microsoft Windows Scripting Engine Memory Corruption Vulnerability 2024-08-13 734d overdue —
CVE-2024-38107 CISA Microsoft · Windows Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability 2024-08-13 734d overdue —
CVE-2024-38106 CISA Microsoft · Windows Microsoft Windows Kernel Privilege Escalation Vulnerability 2024-08-13 734d overdue —
CVE-2024-36971 CISA Android · Kernel Android Kernel Remote Code Execution Vulnerability 2024-08-07 740d overdue —
CVE-2024-32113 CISA Apache · OFBiz Apache OFBiz Path Traversal Vulnerability 2024-08-07 740d overdue —
CVE-2018-0824 CISA Microsoft · Windows Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability 2024-08-05 742d overdue —
CVE-2024-37085 CISA VMware · ESXi VMware ESXi Authentication Bypass Vulnerability 2024-07-30 748d overdue RANSOMWARE
CVE-2024-5217 CISA ServiceNow · Utah, Vancouver, and Washington DC Now Platform ServiceNow Incomplete List of Disallowed Inputs Vulnerability 2024-07-29 749d overdue —
CVE-2024-4879 CISA ServiceNow · Utah, Vancouver, and Washington DC Now Platform ServiceNow Improper Input Validation Vulnerability 2024-07-29 749d overdue —
CVE-2023-45249 CISA Acronis · Cyber Infrastructure (ACI) Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability 2024-07-29 749d overdue —
CVE-2024-39891 CISA Twilio · Authy Twilio Authy Information Disclosure Vulnerability 2024-07-23 755d overdue —
CVE-2012-4792 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Use-After-Free Vulnerability 2024-07-23 755d overdue —
CVE-2024-34102 CISA Adobe · Commerce and Magento Open Source Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability 2024-07-17 761d overdue —
CVE-2024-28995 CISA SolarWinds · Serv-U SolarWinds Serv-U Path Traversal Vulnerability 2024-07-17 761d overdue —
CVE-2022-22948 CISA VMware · vCenter Server VMware vCenter Server Incorrect Default File Permissions Vulnerability 2024-07-17 761d overdue —
CVE-2024-36401 CISA OSGeo · GeoServer OSGeo GeoServer GeoTools Eval Injection Vulnerability 2024-07-15 763d overdue —
CVE-2024-38112 CISA Microsoft · Windows Microsoft Windows MSHTML Platform Spoofing Vulnerability 2024-07-09 769d overdue —
CVE-2024-38080 CISA Microsoft · Windows Microsoft Windows Hyper-V Privilege Escalation Vulnerability 2024-07-09 769d overdue —
CVE-2024-23692 CISA Rejetto · HTTP File Server Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability 2024-07-09 769d overdue RANSOMWARE
CVE-2024-20399 CISA Cisco · NX-OS Cisco NX-OS Command Injection Vulnerability 2024-07-02 776d overdue —
CVE-2022-2586 CISA Linux · Kernel Linux Kernel Use-After-Free Vulnerability 2024-06-26 782d overdue —
CVE-2022-24816 CISA OSGeo · JAI-EXT OSGeo GeoServer JAI-EXT Code Injection Vulnerability 2024-06-26 782d overdue —
CVE-2020-13965 CISA Roundcube · Webmail Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability 2024-06-26 782d overdue —
CVE-2024-4358 CISA Progress · Telerik Report Server Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability 2024-06-13 795d overdue —
CVE-2024-32896 CISA Android · Pixel Android Pixel Privilege Escalation Vulnerability 2024-06-13 795d overdue —
CVE-2024-26169 CISA Microsoft · Windows Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability 2024-06-13 795d overdue RANSOMWARE
CVE-2024-4610 CISA Arm · Mali GPU Kernel Driver Arm Mali GPU Kernel Driver Use-After-Free Vulnerability 2024-06-12 796d overdue —
CVE-2024-4577 CISA PHP Group · PHP PHP-CGI OS Command Injection Vulnerability 2024-06-12 796d overdue RANSOMWARE
CVE-2017-3506 CISA Oracle · WebLogic Server Oracle WebLogic Server OS Command Injection Vulnerability 2024-06-03 805d overdue —
CVE-2024-24919 CISA Check Point · Quantum Security Gateways Check Point Quantum Security Gateways Information Disclosure Vulnerability 2024-05-30 809d overdue RANSOMWARE
CVE-2024-1086 CISA Linux · Kernel Linux Kernel Use-After-Free Vulnerability 2024-05-30 809d overdue RANSOMWARE
CVE-2024-4978 CISA Justice AV Solutions · Viewer Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability 2024-05-29 810d overdue —
CVE-2024-5274 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2024-05-28 811d overdue —
CVE-2020-17519 CISA Apache · Flink Apache Flink Improper Access Control Vulnerability 2024-05-23 816d overdue —
CVE-2024-4947 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2024-05-20 819d overdue —
CVE-2023-43208 CISA NextGen Healthcare · Mirth Connect NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability 2024-05-20 819d overdue RANSOMWARE
CVE-2024-4761 CISA Google · Chromium V8 Google Chromium V8 Out-of-Bounds Memory Write Vulnerability 2024-05-16 823d overdue —
CVE-2021-40655 CISA D-Link · DIR-605 Router D-Link DIR-605 Router Information Disclosure Vulnerability 2024-05-16 823d overdue —
CVE-2014-100005 CISA D-Link · DIR-600 Router D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability 2024-05-16 823d overdue —
CVE-2024-30051 CISA Microsoft · DWM Core Library Microsoft DWM Core Library Privilege Escalation Vulnerability 2024-05-14 825d overdue RANSOMWARE
CVE-2024-30040 CISA Microsoft · Windows Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability 2024-05-14 825d overdue —
CVE-2024-4671 CISA Google · Chromium Google Chromium Visuals Use-After-Free Vulnerability 2024-05-13 826d overdue —
CVE-2023-7028 CISA GitLab · GitLab CE/EE GitLab Community and Enterprise Editions Improper Access Control Vulnerability 2024-05-01 838d overdue —
CVE-2024-29988 CISA Microsoft · SmartScreen Prompt Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability 2024-04-30 839d overdue —
CVE-2024-4040 CISA CrushFTP · CrushFTP CrushFTP VFS Sandbox Escape Vulnerability 2024-04-24 859d overdue —
CVE-2024-20359 CISA Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Privilege Escalation Vulnerability 2024-04-24 859d overdue —
CVE-2024-20353 CISA Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Denial of Service Vulnerability 2024-04-24 859d overdue —
CVE-2022-38028 CISA Microsoft · Windows Microsoft Windows Print Spooler Privilege Escalation Vulnerability 2024-04-23 846d overdue —
CVE-2024-3400 CISA Palo Alto Networks · PAN-OS Palo Alto Networks PAN-OS Command Injection Vulnerability 2024-04-12 871d overdue RANSOMWARE
CVE-2024-3273 CISA D-Link · Multiple NAS Devices D-Link Multiple NAS Devices Command Injection Vulnerability 2024-04-11 858d overdue —
CVE-2024-3272 CISA D-Link · Multiple NAS Devices D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability 2024-04-11 858d overdue —
CVE-2024-29748 CISA Android · Pixel Android Pixel Privilege Escalation Vulnerability 2024-04-04 865d overdue —
CVE-2024-29745 CISA Android · Pixel Android Pixel Information Disclosure Vulnerability 2024-04-04 865d overdue —
CVE-2023-24955 CISA Microsoft · SharePoint Server Microsoft SharePoint Server Code Injection Vulnerability 2024-03-26 874d overdue RANSOMWARE
CVE-2023-48788 CISA + EU Fortinet · FortiClient EMS Fortinet FortiClient EMS SQL Injection Vulnerability 2024-03-25 875d overdue RANSOMWARE
CVE-2021-44529 CISA Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA) Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability 2024-03-25 875d overdue RANSOMWARE
CVE-2019-7256 CISA Nice · Linear eMerge E3-Series Nice Linear eMerge E3-Series OS Command Injection Vulnerability 2024-03-25 875d overdue —
CVE-2024-27198 CISA JetBrains · TeamCity JetBrains TeamCity Authentication Bypass Vulnerability 2024-03-07 893d overdue RANSOMWARE
CVE-2024-23296 CISA Apple · Multiple Products Apple Multiple Products Memory Corruption Vulnerability 2024-03-06 894d overdue —
CVE-2024-23225 CISA Apple · Multiple Products Apple Multiple Products Memory Corruption Vulnerability 2024-03-06 894d overdue —
CVE-2023-21237 CISA Android · Pixel Android Pixel Information Disclosure Vulnerability 2024-03-05 895d overdue —
CVE-2021-36380 CISA Sunhillo · SureLine Sunhillo SureLine OS Command Injection Vulnerablity 2024-03-05 895d overdue —
CVE-2024-21338 CISA Microsoft · Windows Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability 2024-03-04 896d overdue RANSOMWARE
CVE-2023-29360 CISA Microsoft · Streaming Service Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability 2024-02-29 900d overdue —
CVE-2024-1709 CISA ConnectWise · ScreenConnect ConnectWise ScreenConnect Authentication Bypass Vulnerability 2024-02-22 921d overdue RANSOMWARE
CVE-2024-21410 CISA Microsoft · Exchange Server Microsoft Exchange Server Privilege Escalation Vulnerability 2024-02-15 914d overdue —
CVE-2020-3259 CISA Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Information Disclosure Vulnerability 2024-02-15 914d overdue RANSOMWARE
CVE-2024-21412 CISA Microsoft · Windows Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability 2024-02-13 916d overdue RANSOMWARE
CVE-2024-21351 CISA Microsoft · Windows Microsoft Windows SmartScreen Security Feature Bypass Vulnerability 2024-02-13 916d overdue —
CVE-2023-43770 CISA Roundcube · Webmail Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability 2024-02-12 917d overdue —
CVE-2024-21762 CISA Fortinet · FortiOS Fortinet FortiOS Out-of-Bound Write Vulnerability 2024-02-09 934d overdue RANSOMWARE
CVE-2023-4762 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2024-02-06 923d overdue —
CVE-2024-21893 CISA Ivanti · Connect Secure, Policy Secure, and Neurons Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability 2024-01-31 948d overdue RANSOMWARE
CVE-2022-48618 CISA Apple · Multiple Products Apple Multiple Products Memory Corruption Vulnerability 2024-01-31 929d overdue —
CVE-2023-22527 CISA Atlassian · Confluence Data Center and Server Atlassian Confluence Data Center and Server Template Injection Vulnerability 2024-01-24 936d overdue RANSOMWARE
CVE-2024-23222 CISA Apple · Multiple Products Apple Multiple Products WebKit Type Confusion Vulnerability 2024-01-23 937d overdue —
CVE-2023-34048 CISA VMware · vCenter Server VMware vCenter Server Out-of-Bounds Write Vulnerability 2024-01-22 938d overdue —
CVE-2023-35082 CISA Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron Core Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability 2024-01-18 942d overdue RANSOMWARE
CVE-2024-0519 CISA Google · Chromium V8 Google Chromium V8 Out-of-Bounds Memory Access Vulnerability 2024-01-17 943d overdue —
CVE-2023-6549 CISA Citrix · NetScaler ADC and NetScaler Gateway Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability 2024-01-17 943d overdue —
CVE-2023-6548 CISA Citrix · NetScaler ADC and NetScaler Gateway Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability 2024-01-17 957d overdue —
CVE-2018-15133 CISA Laravel · Laravel Framework Laravel Deserialization of Untrusted Data Vulnerability 2024-01-16 944d overdue —
CVE-2024-21887 CISA Ivanti · Connect Secure and Policy Secure Ivanti Connect Secure and Policy Secure Command Injection Vulnerability 2024-01-10 959d overdue RANSOMWARE
CVE-2023-46805 CISA Ivanti · Connect Secure and Policy Secure Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability 2024-01-10 959d overdue RANSOMWARE
CVE-2023-29357 CISA Microsoft · SharePoint Server Microsoft SharePoint Server Privilege Escalation Vulnerability 2024-01-10 950d overdue RANSOMWARE
CVE-2023-41990 CISA Apple · Multiple Products Apple Multiple Products Code Execution Vulnerability 2024-01-08 952d overdue —
CVE-2023-38203 CISA Adobe · ColdFusion Adobe ColdFusion Deserialization of Untrusted Data Vulnerability 2024-01-08 952d overdue RANSOMWARE
CVE-2023-29300 CISA Adobe · ColdFusion Adobe ColdFusion Deserialization of Untrusted Data Vulnerability 2024-01-08 952d overdue RANSOMWARE
CVE-2023-27524 CISA Apache · Superset Apache Superset Insecure Default Initialization of Resource Vulnerability 2024-01-08 952d overdue —
CVE-2023-23752 CISA Joomla! · Joomla! Joomla! Improper Access Control Vulnerability 2024-01-08 952d overdue —
CVE-2016-20017 CISA D-Link · DSL-2750B Devices D-Link DSL-2750B Devices Command Injection Vulnerability 2024-01-08 952d overdue —
CVE-2023-7101 CISA Spreadsheet::ParseExcel · Spreadsheet::ParseExcel Spreadsheet::ParseExcel Remote Code Execution Vulnerability 2024-01-02 958d overdue —
CVE-2023-7024 CISA Google · Chromium WebRTC Google Chromium WebRTC Heap Buffer Overflow Vulnerability 2024-01-02 958d overdue —
CVE-2023-49897 CISA FXC · AE1021, AE1021PE FXC AE1021, AE1021PE OS Command Injection Vulnerability 2023-12-21 970d overdue —
CVE-2023-47565 CISA QNAP · VioStor NVR QNAP VioStor NVR OS Command Injection Vulnerability 2023-12-21 970d overdue —
CVE-2023-6448 CISA Unitronics · Vision PLC and HMI Unitronics Vision PLC and HMI Insecure Default Password Vulnerability 2023-12-11 994d overdue —
CVE-2023-41266 CISA Qlik · Sense Qlik Sense Path Traversal Vulnerability 2023-12-07 984d overdue RANSOMWARE
CVE-2023-41265 CISA Qlik · Sense Qlik Sense HTTP Tunneling Vulnerability 2023-12-07 984d overdue RANSOMWARE
CVE-2023-33107 CISA Qualcomm · Multiple Chipsets Qualcomm Multiple Chipsets Integer Overflow Vulnerability 2023-12-05 986d overdue —
CVE-2023-33106 CISA Qualcomm · Multiple Chipsets Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability 2023-12-05 986d overdue —
CVE-2023-33063 CISA Qualcomm · Multiple Chipsets Qualcomm Multiple Chipsets Use-After-Free Vulnerability 2023-12-05 986d overdue —
CVE-2022-22071 CISA Qualcomm · Multiple Chipsets Qualcomm Multiple Chipsets Use-After-Free Vulnerability 2023-12-05 986d overdue —
CVE-2023-42917 CISA Apple · Multiple Products Apple Multiple Products WebKit Memory Corruption Vulnerability 2023-12-04 987d overdue —
CVE-2023-42916 CISA Apple · Multiple Products Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability 2023-12-04 987d overdue —
CVE-2023-6345 CISA Google · Chromium Skia Google Skia Integer Overflow Vulnerability 2023-11-30 991d overdue —
CVE-2023-49103 CISA ownCloud · ownCloud graphapi ownCloud graphapi Information Disclosure Vulnerability 2023-11-30 991d overdue —
CVE-2023-4911 CISA GNU · GNU C Library GNU C Library Buffer Overflow Vulnerability 2023-11-21 1000d overdue —
CVE-2023-36584 CISA Microsoft · Windows Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability 2023-11-16 1005d overdue —
CVE-2023-1671 CISA Sophos · Web Appliance Sophos Web Appliance Command Injection Vulnerability 2023-11-16 1005d overdue —
CVE-2020-2551 CISA Oracle · Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability 2023-11-16 1005d overdue —
CVE-2023-36036 CISA Microsoft · Windows Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability 2023-11-14 1007d overdue —
CVE-2023-36033 CISA Microsoft · Windows Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability 2023-11-14 1007d overdue —
CVE-2023-36025 CISA Microsoft · Windows Microsoft Windows SmartScreen Security Feature Bypass Vulnerability 2023-11-14 1007d overdue —
CVE-2023-47246 CISA SysAid · SysAid Server SysAid Server Path Traversal Vulnerability 2023-11-13 1008d overdue RANSOMWARE
CVE-2023-36851 CISA Juniper · Junos OS Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability 2023-11-13 1025d overdue —
CVE-2023-36847 CISA Juniper · Junos OS Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability 2023-11-13 1025d overdue —
CVE-2023-36846 CISA Juniper · Junos OS Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability 2023-11-13 1025d overdue —
CVE-2023-36845 CISA Juniper · Junos OS Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability 2023-11-13 1025d overdue —
CVE-2023-36844 CISA Juniper · Junos OS Juniper Junos OS EX Series PHP External Variable Modification Vulnerability 2023-11-13 1025d overdue —
CVE-2023-29552 CISA IETF · Service Location Protocol (SLP) Service Location Protocol (SLP) Denial-of-Service Vulnerability 2023-11-08 1013d overdue —
CVE-2023-22518 CISA Atlassian · Confluence Data Center and Server Atlassian Confluence Data Center and Server Improper Authorization Vulnerability 2023-11-07 1014d overdue RANSOMWARE
CVE-2023-46604 CISA + EU Apache · ActiveMQ Apache ActiveMQ Deserialization of Untrusted Data Vulnerability 2023-11-02 1019d overdue RANSOMWARE
CVE-2023-46748 CISA F5 · BIG-IP Configuration Utility F5 BIG-IP Configuration Utility SQL Injection Vulnerability 2023-10-31 1021d overdue —
CVE-2023-46747 CISA + EU F5 · BIG-IP Configuration Utility F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability 2023-10-31 1021d overdue RANSOMWARE
CVE-2023-5631 CISA Roundcube · Webmail Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability 2023-10-26 1026d overdue —
CVE-2023-20273 CISA Cisco · Cisco IOS XE Web UI Cisco IOS XE Web UI Command Injection Vulnerability 2023-10-23 1046d overdue —
CVE-2023-4966 CISA Citrix · NetScaler ADC and NetScaler Gateway Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability 2023-10-18 1034d overdue RANSOMWARE
CVE-2023-20198 CISA Cisco · IOS XE Web UI Cisco IOS XE Web UI Privilege Escalation Vulnerability 2023-10-16 1053d overdue —
CVE-2023-44487 CISA IETF · HTTP/2 HTTP/2 Rapid Reset Attack Vulnerability 2023-10-10 1042d overdue —
CVE-2023-41763 CISA Microsoft · Skype for Business Microsoft Skype for Business Privilege Escalation Vulnerability 2023-10-10 1042d overdue —
CVE-2023-36563 CISA Microsoft · WordPad Microsoft WordPad Information Disclosure Vulnerability 2023-10-10 1042d overdue —
CVE-2023-21608 CISA Adobe · Acrobat and Reader Adobe Acrobat and Reader Use-After-Free Vulnerability 2023-10-10 1042d overdue —
CVE-2023-20109 CISA Cisco · IOS and IOS XE Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability 2023-10-10 1042d overdue —
CVE-2023-42824 CISA Apple · iOS and iPadOS Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability 2023-10-05 1047d overdue —
CVE-2023-40044 CISA Progress · WS_FTP Server Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability 2023-10-05 1047d overdue RANSOMWARE
CVE-2023-22515 CISA + EU Atlassian · Confluence Data Center and Server Atlassian Confluence Data Center and Server Broken Access Control Vulnerability 2023-10-05 1060d overdue RANSOMWARE
CVE-2023-42793 CISA JetBrains · TeamCity JetBrains TeamCity Authentication Bypass Vulnerability 2023-10-04 1048d overdue RANSOMWARE
CVE-2023-28229 CISA Microsoft · Windows CNG Key Isolation Service Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability 2023-10-04 1048d overdue —
CVE-2023-4211 CISA Arm · Mali GPU Kernel Driver Arm Mali GPU Kernel Driver Use-After-Free Vulnerability 2023-10-03 1049d overdue —
CVE-2023-5217 CISA Google · Chromium libvpx Google Chromium libvpx Heap Buffer Overflow Vulnerability 2023-10-02 1050d overdue —
CVE-2018-14667 CISA Red Hat · JBoss RichFaces Framework Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability 2023-09-28 1054d overdue —
CVE-2023-41993 CISA Apple · Multiple Products Apple Multiple Products WebKit Code Execution Vulnerability 2023-09-25 1057d overdue —
CVE-2023-41992 CISA Apple · Multiple Products Apple Multiple Products Kernel Privilege Escalation Vulnerability 2023-09-25 1057d overdue —
CVE-2023-41991 CISA Apple · Multiple Products Apple Multiple Products Improper Certificate Validation Vulnerability 2023-09-25 1057d overdue —
CVE-2023-41179 CISA Trend Micro · Apex One and Worry-Free Business Security Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability 2023-09-21 1061d overdue —
CVE-2023-28434 CISA MinIO · MinIO MinIO Security Feature Bypass Vulnerability 2023-09-19 1063d overdue —
CVE-2022-22265 CISA Samsung · Mobile Devices Samsung Mobile Devices Use-After-Free Vulnerability 2023-09-18 1064d overdue —
CVE-2021-3129 CISA Laravel · Ignition Laravel Ignition File Upload Vulnerability 2023-09-18 1064d overdue RANSOMWARE
CVE-2017-6884 CISA Zyxel · EMG2926 Routers Zyxel EMG2926 Routers Command Injection Vulnerability 2023-09-18 1064d overdue RANSOMWARE
CVE-2014-8361 CISA Realtek · SDK Realtek SDK Improper Input Validation Vulnerability 2023-09-18 1064d overdue —
CVE-2023-26369 CISA Adobe · Acrobat and Reader Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability 2023-09-14 1068d overdue —
CVE-2023-4863 CISA Google · Chromium WebP Google Chromium WebP Heap-Based Buffer Overflow Vulnerability 2023-09-13 1069d overdue —
CVE-2023-35674 CISA Android · Framework Android Framework Privilege Escalation Vulnerability 2023-09-13 1069d overdue —
CVE-2023-20269 CISA Cisco · Adaptive Security Appliance and Firepower Threat Defense Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability 2023-09-13 1069d overdue RANSOMWARE
CVE-2023-36802 CISA Microsoft · Streaming Service Proxy Microsoft Streaming Service Proxy Privilege Escalation Vulnerability 2023-09-12 1070d overdue —
CVE-2023-36761 CISA Microsoft · Word Microsoft Word Information Disclosure Vulnerability 2023-09-12 1070d overdue —
CVE-2023-41064 CISA Apple · iOS, iPadOS, and macOS Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability 2023-09-11 1071d overdue —
CVE-2023-41061 CISA Apple · iOS, iPadOS, and watchOS Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability 2023-09-11 1071d overdue —
CVE-2023-33246 CISA Apache · RocketMQ Apache RocketMQ Command Execution Vulnerability 2023-09-06 1076d overdue —
CVE-2023-38831 CISA RARLAB · WinRAR RARLAB WinRAR Code Execution Vulnerability 2023-08-24 1089d overdue RANSOMWARE
CVE-2023-32315 CISA Ignite Realtime · Openfire Ignite Realtime Openfire Path Traversal Vulnerability 2023-08-24 1089d overdue —
CVE-2023-38035 CISA Ivanti · Sentry Ivanti Sentry Authentication Bypass Vulnerability 2023-08-22 1091d overdue RANSOMWARE
CVE-2023-27532 CISA Veeam · Backup & Replication Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability 2023-08-22 1091d overdue RANSOMWARE
CVE-2023-26359 CISA Adobe · ColdFusion Adobe ColdFusion Deserialization of Untrusted Data Vulnerability 2023-08-21 1092d overdue —
CVE-2023-24489 CISA Citrix · Content Collaboration Citrix Content Collaboration ShareFile Improper Access Control Vulnerability 2023-08-16 1097d overdue —
CVE-2023-38180 CISA Microsoft · .NET Core and Visual Studio Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability 2023-08-09 1104d overdue —
CVE-2017-18368 CISA Zyxel · P660HN-T1A Routers Zyxel P660HN-T1A Routers Command Injection Vulnerability 2023-08-07 1106d overdue —
CVE-2023-35081 CISA Ivanti · Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability 2023-07-31 1113d overdue —
CVE-2023-37580 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability 2023-07-27 1117d overdue —
CVE-2023-38606 CISA Apple · Multiple Products Apple Multiple Products Kernel Unspecified Vulnerability 2023-07-26 1118d overdue —
CVE-2023-35078 CISA Ivanti · Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability 2023-07-25 1119d overdue RANSOMWARE
CVE-2023-38205 CISA Adobe · ColdFusion Adobe ColdFusion Improper Access Control Vulnerability 2023-07-20 1124d overdue —
CVE-2023-29298 CISA Adobe · ColdFusion Adobe ColdFusion Improper Access Control Vulnerability 2023-07-20 1124d overdue —
CVE-2023-3519 CISA + EU Citrix · NetScaler ADC and NetScaler Gateway Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability 2023-07-19 1125d overdue RANSOMWARE
CVE-2023-36884 CISA Microsoft · Windows Microsoft Windows Search Remote Code Execution Vulnerability 2023-07-17 1105d overdue RANSOMWARE
CVE-2023-37450 CISA Apple · Multiple Products Apple Multiple Products WebKit Code Execution Vulnerability 2023-07-13 1131d overdue —
CVE-2022-29303 CISA SolarView · Compact SolarView Compact Command Injection Vulnerability 2023-07-13 1131d overdue —
CVE-2023-36874 CISA Microsoft · Windows Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability 2023-07-11 1133d overdue —
CVE-2023-35311 CISA Microsoft · Outlook Microsoft Outlook Security Feature Bypass Vulnerability 2023-07-11 1133d overdue —
CVE-2023-32049 CISA Microsoft · Windows Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability 2023-07-11 1133d overdue —
CVE-2023-32046 CISA Microsoft · Windows Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability 2023-07-11 1133d overdue —
CVE-2022-31199 CISA Netwrix · Auditor Netwrix Auditor Insecure Object Deserialization Vulnerability 2023-07-11 1133d overdue RANSOMWARE
CVE-2021-29256 CISA Arm · Mali Graphics Processing Unit (GPU) Arm Mali GPU Kernel Driver Use-After-Free Vulnerability 2023-07-07 1137d overdue —
CVE-2021-25489 CISA Samsung · Mobile Devices Samsung Mobile Devices Improper Input Validation Vulnerability 2023-06-29 1145d overdue —
CVE-2021-25487 CISA Samsung · Mobile Devices Samsung Mobile Devices Out-of-Bounds Read Vulnerability 2023-06-29 1145d overdue —
CVE-2021-25395 CISA Samsung · Mobile Devices Samsung Mobile Devices Race Condition Vulnerability 2023-06-29 1145d overdue —
CVE-2021-25394 CISA Samsung · Mobile Devices Samsung Mobile Devices Race Condition Vulnerability 2023-06-29 1145d overdue —
CVE-2021-25372 CISA Samsung · Mobile Devices Samsung Mobile Devices Improper Boundary Check Vulnerability 2023-06-29 1145d overdue —
CVE-2021-25371 CISA Samsung · Mobile Devices Samsung Mobile Devices Unspecified Vulnerability 2023-06-29 1145d overdue —
CVE-2019-20500 CISA D-Link · DWL-2600AP Access Point D-Link DWL-2600AP Access Point Command Injection Vulnerability 2023-06-29 1145d overdue —
CVE-2019-17621 CISA D-Link · DIR-859 Router D-Link DIR-859 Router Command Execution Vulnerability 2023-06-29 1145d overdue —
CVE-2023-32439 CISA Apple · Multiple Products Apple Multiple Products WebKit Type Confusion Vulnerability 2023-06-23 1151d overdue —
CVE-2023-32435 CISA Apple · Multiple Products Apple Multiple Products WebKit Memory Corruption Vulnerability 2023-06-23 1151d overdue —
CVE-2023-32434 CISA Apple · Multiple Products Apple Multiple Products Integer Overflow Vulnerability 2023-06-23 1151d overdue —
CVE-2023-27992 CISA Zyxel · Multiple Network-Attached Storage (NAS) Devices Zyxel Multiple NAS Devices Command Injection Vulnerability 2023-06-23 1151d overdue —
CVE-2023-20867 CISA VMware · Tools VMware Tools Authentication Bypass Vulnerability 2023-06-23 1151d overdue —
CVE-2023-20887 CISA VMware · Aria Operations for Networks Vmware Aria Operations for Networks Command Injection Vulnerability 2023-06-22 1152d overdue —
CVE-2021-44026 CISA Roundcube · Roundcube Webmail Roundcube Webmail SQL Injection Vulnerability 2023-06-22 1152d overdue —
CVE-2020-35730 CISA Roundcube · Roundcube Webmail Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability 2023-06-22 1152d overdue —
CVE-2020-12641 CISA Roundcube · Roundcube Webmail Roundcube Webmail Remote Code Execution Vulnerability 2023-06-22 1152d overdue —
CVE-2016-9079 CISA Mozilla · Firefox, Firefox ESR, and Thunderbird Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability 2023-06-22 1152d overdue —
CVE-2016-0165 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2023-06-22 1152d overdue —
CVE-2023-27997 CISA + EU Fortinet · FortiOS and FortiProxy SSL-VPN Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability 2023-06-13 1161d overdue RANSOMWARE
CVE-2023-3079 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2023-06-07 1167d overdue —
CVE-2023-33010 CISA Zyxel · Multiple Firewalls Zyxel Multiple Firewalls Buffer Overflow Vulnerability 2023-06-05 1169d overdue —
CVE-2023-33009 CISA Zyxel · Multiple Firewalls Zyxel Multiple Firewalls Buffer Overflow Vulnerability 2023-06-05 1169d overdue —
CVE-2023-34362 CISA Progress · MOVEit Transfer Progress MOVEit Transfer SQL Injection Vulnerability 2023-06-02 1172d overdue RANSOMWARE
CVE-2023-28771 CISA Zyxel · Multiple Firewalls Zyxel Multiple Firewalls OS Command Injection Vulnerability 2023-05-31 1174d overdue —
CVE-2023-2868 CISA Barracuda Networks · Email Security Gateway (ESG) Appliance Barracuda Networks ESG Appliance Improper Input Validation Vulnerability 2023-05-26 1179d overdue —
CVE-2023-32409 CISA Apple · Multiple Products Apple Multiple Products WebKit Sandbox Escape Vulnerability 2023-05-22 1183d overdue —
CVE-2023-32373 CISA Apple · Multiple Products Apple Multiple Products WebKit Use-After-Free Vulnerability 2023-05-22 1183d overdue —
CVE-2023-28204 CISA Apple · Multiple Products Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability 2023-05-22 1183d overdue —
CVE-2023-21492 CISA Samsung · Mobile Devices Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability 2023-05-19 1186d overdue —
CVE-2016-6415 CISA Cisco · IOS, IOS XR, and IOS XE Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability 2023-05-19 1186d overdue —
CVE-2004-1464 CISA Cisco · IOS Cisco IOS Denial-of-Service Vulnerability 2023-05-19 1186d overdue —
CVE-2023-25717 CISA Ruckus Wireless · Multiple Products Multiple Ruckus Wireless Products CSRF and RCE Vulnerability 2023-05-12 1193d overdue —
CVE-2021-3560 CISA Red Hat · Polkit Red Hat Polkit Incorrect Authorization Vulnerability 2023-05-12 1193d overdue —
CVE-2016-8735 CISA Apache · Tomcat Apache Tomcat Remote Code Execution Vulnerability 2023-05-12 1193d overdue —
CVE-2016-3427 CISA Oracle · Java SE and JRockit Oracle Java SE and JRockit Unspecified Vulnerability 2023-05-12 1193d overdue —
CVE-2015-5317 CISA Jenkins · Jenkins User Interface (UI) Jenkins User Interface (UI) Information Disclosure Vulnerability 2023-05-12 1193d overdue —
CVE-2014-0196 CISA Linux · Kernel Linux Kernel Race Condition Vulnerability 2023-05-12 1193d overdue —
CVE-2010-3904 CISA Linux · Kernel Linux Kernel Improper Input Validation Vulnerability 2023-05-12 1193d overdue —
CVE-2023-29336 CISA Microsoft · Win32k Microsoft Win32K Privilege Escalation Vulnerability 2023-05-09 1196d overdue —
CVE-2023-21839 CISA Oracle · WebLogic Server Oracle WebLogic Server Unspecified Vulnerability 2023-05-01 1204d overdue —
CVE-2023-1389 CISA TP-Link · Archer AX21 TP-Link Archer AX-21 Command Injection Vulnerability 2023-05-01 1204d overdue —
CVE-2021-45046 CISA Apache · Log4j2 Apache Log4j2 Deserialization of Untrusted Data Vulnerability 2023-05-01 1204d overdue RANSOMWARE
CVE-2023-28432 CISA MinIO · MinIO MinIO Information Disclosure Vulnerability 2023-04-21 1214d overdue —
CVE-2023-27350 CISA PaperCut · MF/NG PaperCut MF/NG Improper Access Control Vulnerability 2023-04-21 1214d overdue RANSOMWARE
CVE-2023-2136 CISA Google · Chromium Skia Google Chrome Skia Integer Overflow Vulnerability 2023-04-21 1214d overdue —
CVE-2017-6742 CISA Cisco · IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2023-04-19 1216d overdue —
CVE-2023-2033 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2023-04-17 1218d overdue —
CVE-2019-8526 CISA Apple · macOS Apple macOS Use-After-Free Vulnerability 2023-04-17 1218d overdue —
CVE-2023-29492 CISA Novi Survey · Novi Survey Novi Survey Insecure Deserialization Vulnerability 2023-04-13 1222d overdue —
CVE-2023-20963 CISA Android · Framework Android Framework Privilege Escalation Vulnerability 2023-04-13 1222d overdue —
CVE-2023-28252 CISA Microsoft · Windows Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability 2023-04-11 1224d overdue RANSOMWARE
CVE-2023-28206 CISA Apple · iOS, iPadOS, and macOS Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability 2023-04-10 1225d overdue —
CVE-2023-28205 CISA Apple · Multiple Products Apple Multiple Products WebKit Use-After-Free Vulnerability 2023-04-10 1225d overdue —
CVE-2023-26083 CISA Arm · Mali Graphics Processing Unit (GPU) Arm Mali GPU Kernel Driver Information Disclosure Vulnerability 2023-04-07 1228d overdue —
CVE-2021-27878 CISA Veritas · Backup Exec Agent Veritas Backup Exec Agent Command Execution Vulnerability 2023-04-07 1228d overdue RANSOMWARE
CVE-2021-27877 CISA Veritas · Backup Exec Agent Veritas Backup Exec Agent Improper Authentication Vulnerability 2023-04-07 1228d overdue RANSOMWARE
CVE-2021-27876 CISA Veritas · Backup Exec Agent Veritas Backup Exec Agent File Access Vulnerability 2023-04-07 1228d overdue RANSOMWARE
CVE-2019-1388 CISA Microsoft · Windows Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability 2023-04-07 1228d overdue RANSOMWARE
CVE-2022-27926 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability 2023-04-03 1232d overdue —
CVE-2023-0266 CISA Linux · Kernel Linux Kernel Use-After-Free Vulnerability 2023-03-30 1236d overdue —
CVE-2022-42948 CISA Fortra · Cobalt Strike Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability 2023-03-30 1236d overdue —
CVE-2022-39197 CISA Fortra · Cobalt Strike Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability 2023-03-30 1236d overdue —
CVE-2022-38181 CISA Arm · Mali Graphics Processing Unit (GPU) Arm Mali GPU Kernel Driver Use-After-Free Vulnerability 2023-03-30 1236d overdue —
CVE-2022-3038 CISA Google · Chromium Network Service Google Chromium Network Service Use-After-Free Vulnerability 2023-03-30 1236d overdue —
CVE-2022-22706 CISA Arm · Mali Graphics Processing Unit (GPU) Arm Mali GPU Kernel Driver Unspecified Vulnerability 2023-03-30 1236d overdue —
CVE-2021-30900 CISA Apple · iOS, iPadOS, and macOS Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability 2023-03-30 1236d overdue —
CVE-2017-7494 CISA Samba · Samba Samba Remote Code Execution Vulnerability 2023-03-30 1236d overdue RANSOMWARE
CVE-2013-3163 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Memory Corruption Vulnerability 2023-03-30 1236d overdue —
CVE-2023-26360 CISA Adobe · ColdFusion Adobe ColdFusion Deserialization of Untrusted Data Vulnerability 2023-03-15 1251d overdue —
CVE-2023-24880 CISA Microsoft · Windows Microsoft Windows SmartScreen Security Feature Bypass Vulnerability 2023-03-14 1252d overdue RANSOMWARE
CVE-2023-23397 CISA Microsoft · Office Microsoft Office Outlook Privilege Escalation Vulnerability 2023-03-14 1252d overdue —
CVE-2022-41328 CISA Fortinet · FortiOS Fortinet FortiOS Path Traversal Vulnerability 2023-03-14 1252d overdue —
CVE-2021-39144 CISA XStream · XStream XStream Remote Code Execution Vulnerability 2023-03-10 1256d overdue —
CVE-2020-5741 CISA Plex · Media Server Plex Media Server Remote Code Execution Vulnerability 2023-03-10 1256d overdue —
CVE-2022-35914 CISA Teclib · GLPI Teclib GLPI Remote Code Execution Vulnerability 2023-03-07 1259d overdue —
CVE-2022-33891 CISA Apache · Spark Apache Spark Command Injection Vulnerability 2023-03-07 1259d overdue —
CVE-2022-28810 CISA Zoho · ManageEngine Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability 2023-03-07 1259d overdue —
CVE-2022-36537 CISA ZK Framework · AuUploader ZK Framework AuUploader Unspecified Vulnerability 2023-02-27 1267d overdue RANSOMWARE
CVE-2022-47986 CISA IBM · Aspera Faspex IBM Aspera Faspex Code Execution Vulnerability 2023-02-21 1273d overdue RANSOMWARE
CVE-2022-41223 CISA Mitel · MiVoice Connect Mitel MiVoice Connect Code Injection Vulnerability 2023-02-21 1273d overdue RANSOMWARE
CVE-2022-40765 CISA Mitel · MiVoice Connect Mitel MiVoice Connect Command Injection Vulnerability 2023-02-21 1273d overdue RANSOMWARE
CVE-2022-46169 CISA Cacti · Cacti Cacti Command Injection Vulnerability 2023-02-16 1278d overdue —
CVE-2023-23529 CISA Apple · Multiple Products Apple Multiple Products WebKit Type Confusion Vulnerability 2023-02-14 1280d overdue —
CVE-2023-23376 CISA Microsoft · Windows Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability 2023-02-14 1280d overdue RANSOMWARE
CVE-2023-21823 CISA Microsoft · Windows Microsoft Windows Graphic Component Privilege Escalation Vulnerability 2023-02-14 1280d overdue —
CVE-2023-21715 CISA Microsoft · Office Microsoft Office Publisher Security Feature Bypass Vulnerability 2023-02-14 1280d overdue —
CVE-2023-0669 CISA Fortra · GoAnywhere MFT Fortra GoAnywhere MFT Remote Code Execution Vulnerability 2023-02-10 1284d overdue RANSOMWARE
CVE-2022-24990 CISA TerraMaster · TerraMaster OS TerraMaster OS Remote Command Execution Vulnerability 2023-02-10 1284d overdue RANSOMWARE
CVE-2015-2291 CISA Intel · Ethernet Diagnostics Driver for Windows Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability 2023-02-10 1284d overdue RANSOMWARE
CVE-2023-22952 CISA SugarCRM · Multiple Products Multiple SugarCRM Products Remote Code Execution Vulnerability 2023-02-02 1292d overdue —
CVE-2022-21587 CISA Oracle · E-Business Suite Oracle E-Business Suite Unspecified Vulnerability 2023-02-02 1292d overdue RANSOMWARE
CVE-2017-11357 CISA Telerik · User Interface (UI) for ASP.NET AJAX Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability 2023-01-26 1299d overdue RANSOMWARE
CVE-2022-47966 CISA Zoho · ManageEngine Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability 2023-01-23 1302d overdue RANSOMWARE
CVE-2022-44877 CISA CWP · Control Web Panel CWP Control Web Panel OS Command Injection Vulnerability 2023-01-17 1308d overdue —
CVE-2023-21674 CISA Microsoft · Windows Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability 2023-01-10 1315d overdue —
CVE-2022-41080 CISA Microsoft · Exchange Server Microsoft Exchange Server Privilege Escalation Vulnerability 2023-01-10 1315d overdue RANSOMWARE
CVE-2018-5430 CISA TIBCO · JasperReports TIBCO JasperReports Server Information Disclosure Vulnerability 2022-12-29 1327d overdue —
CVE-2018-18809 CISA TIBCO · JasperReports TIBCO JasperReports Library Directory Traversal Vulnerability 2022-12-29 1327d overdue —
CVE-2022-42856 CISA Apple · iOS Apple iOS Type Confusion Vulnerability 2022-12-14 1342d overdue —
CVE-2022-44698 CISA Microsoft · Defender Microsoft Defender SmartScreen Security Feature Bypass Vulnerability 2022-12-13 1343d overdue RANSOMWARE
CVE-2022-42475 CISA Fortinet · FortiOS Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability 2022-12-13 1343d overdue RANSOMWARE
CVE-2022-27518 CISA Citrix · Application Delivery Controller (ADC) and Gateway Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability 2022-12-13 1343d overdue —
CVE-2022-26501 CISA Veeam · Backup & Replication Veeam Backup & Replication Remote Code Execution Vulnerability 2022-12-13 1343d overdue RANSOMWARE
CVE-2022-26500 CISA Veeam · Backup & Replication Veeam Backup & Replication Remote Code Execution Vulnerability 2022-12-13 1343d overdue RANSOMWARE
CVE-2022-4262 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2022-12-05 1351d overdue —
CVE-2022-4135 CISA Google · Chromium GPU Google Chromium GPU Heap Buffer Overflow Vulnerability 2022-11-28 1358d overdue —
CVE-2021-35587 CISA Oracle · Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability 2022-11-28 1358d overdue —
CVE-2022-41049 CISA Microsoft · Windows Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability 2022-11-14 1368d overdue —
CVE-2022-41128 CISA Microsoft · Windows Microsoft Windows Scripting Languages Remote Code Execution Vulnerability 2022-11-08 1368d overdue —
CVE-2022-41125 CISA Microsoft · Windows Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability 2022-11-08 1368d overdue —
CVE-2022-41091 CISA Microsoft · Windows Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability 2022-11-08 1368d overdue RANSOMWARE
CVE-2022-41073 CISA Microsoft · Windows Microsoft Windows Print Spooler Privilege Escalation Vulnerability 2022-11-08 1368d overdue RANSOMWARE
CVE-2021-25370 CISA Samsung · Mobile Devices Samsung Mobile Devices Memory Corruption Vulnerability 2022-11-08 1378d overdue —
CVE-2021-25369 CISA Samsung · Mobile Devices Samsung Mobile Devices Improper Access Control Vulnerability 2022-11-08 1378d overdue —
CVE-2021-25337 CISA Samsung · Mobile Devices Samsung Mobile Devices Improper Access Control Vulnerability 2022-11-08 1378d overdue —
CVE-2022-3723 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2022-10-28 1389d overdue —
CVE-2022-42827 CISA Apple · iOS and iPadOS Apple iOS and iPadOS Out-of-Bounds Write Vulnerability 2022-10-25 1392d overdue —
CVE-2020-3433 CISA Cisco · AnyConnect Secure Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability 2022-10-24 1393d overdue RANSOMWARE
CVE-2020-3153 CISA Cisco · AnyConnect Secure Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability 2022-10-24 1393d overdue RANSOMWARE
CVE-2018-19323 CISA GIGABYTE · Multiple Products GIGABYTE Multiple Products Privilege Escalation Vulnerability 2022-10-24 1393d overdue RANSOMWARE
CVE-2018-19322 CISA GIGABYTE · Multiple Products GIGABYTE Multiple Products Code Execution Vulnerability 2022-10-24 1393d overdue RANSOMWARE
CVE-2018-19321 CISA GIGABYTE · Multiple Products GIGABYTE Multiple Products Privilege Escalation Vulnerability 2022-10-24 1393d overdue RANSOMWARE
CVE-2018-19320 CISA GIGABYTE · Multiple Products GIGABYTE Multiple Products Unspecified Vulnerability 2022-10-24 1393d overdue RANSOMWARE
CVE-2022-41352 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability 2022-10-20 1397d overdue —
CVE-2021-3493 CISA Linux · Kernel Linux Kernel Privilege Escalation Vulnerability 2022-10-20 1397d overdue —
CVE-2022-41033 CISA Microsoft · Windows COM+ Event System Service Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability 2022-10-11 1406d overdue —
CVE-2022-40684 CISA Fortinet · Multiple Products Fortinet Multiple Products Authentication Bypass Vulnerability 2022-10-11 1406d overdue RANSOMWARE
CVE-2022-41082 CISA Microsoft · Exchange Server Microsoft Exchange Server Remote Code Execution Vulnerability 2022-09-30 1417d overdue RANSOMWARE
CVE-2022-41040 CISA Microsoft · Exchange Server Microsoft Exchange Server Server-Side Request Forgery Vulnerability 2022-09-30 1417d overdue RANSOMWARE
CVE-2022-36804 CISA Atlassian · Bitbucket Server and Data Center Atlassian Bitbucket Server and Data Center Command Injection Vulnerability 2022-09-30 1417d overdue —
CVE-2022-3236 CISA Sophos · Firewall Sophos Firewall Code Injection Vulnerability 2022-09-23 1424d overdue —
CVE-2022-35405 CISA Zoho · ManageEngine Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability 2022-09-22 1425d overdue —
CVE-2022-40139 CISA Trend Micro · Apex One and Apex One as a Service Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability 2022-09-15 1432d overdue —
CVE-2013-6282 CISA Linux · Kernel Linux Kernel Improper Input Validation Vulnerability 2022-09-15 1432d overdue —
CVE-2013-2597 CISA Code Aurora · ACDB Audio Driver Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability 2022-09-15 1432d overdue —
CVE-2013-2596 CISA Linux · Kernel Linux Kernel Integer Overflow Vulnerability 2022-09-15 1432d overdue —
CVE-2013-2094 CISA Linux · Kernel Linux Kernel Privilege Escalation Vulnerability 2022-09-15 1432d overdue —
CVE-2010-2568 CISA Microsoft · Windows Microsoft Windows Remote Code Execution Vulnerability 2022-09-15 1432d overdue —
CVE-2022-37969 CISA Microsoft · Windows Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability 2022-09-14 1433d overdue RANSOMWARE
CVE-2022-32917 CISA Apple · iOS, iPadOS, and macOS Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability 2022-09-14 1433d overdue —
CVE-2022-3075 CISA Google · Chromium Mojo Google Chromium Mojo Insufficient Data Validation Vulnerability 2022-09-08 1439d overdue —
CVE-2022-27593 CISA QNAP · Photo Station QNAP Photo Station Externally Controlled Reference Vulnerability 2022-09-08 1439d overdue RANSOMWARE
CVE-2022-26258 CISA D-Link · DIR-820L D-Link DIR-820L Remote Code Execution Vulnerability 2022-09-08 1439d overdue —
CVE-2020-9934 CISA Apple · iOS, iPadOS, and macOS Apple iOS, iPadOS, and macOS Input Validation Vulnerability 2022-09-08 1439d overdue —
CVE-2018-7445 CISA MikroTik · RouterOS MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability 2022-09-08 1439d overdue —
CVE-2018-6530 CISA D-Link · Multiple Routers D-Link Multiple Routers OS Command Injection Vulnerability 2022-09-08 1439d overdue RANSOMWARE
CVE-2018-2628 CISA Oracle · WebLogic Server Oracle WebLogic Server Unspecified Vulnerability 2022-09-08 1439d overdue —
CVE-2018-13374 CISA Fortinet · FortiOS and FortiADC Fortinet FortiOS and FortiADC Improper Access Control Vulnerability 2022-09-08 1439d overdue RANSOMWARE
CVE-2017-5521 CISA NETGEAR · Multiple Devices NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability 2022-09-08 1439d overdue —
CVE-2011-4723 CISA D-Link · DIR-300 Router D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability 2022-09-08 1439d overdue —
CVE-2011-1823 CISA Android · Android OS Android OS Privilege Escalation Vulnerability 2022-09-08 1439d overdue —
CVE-2022-26352 CISA dotCMS · dotCMS dotCMS Unrestricted Upload of File Vulnerability 2022-08-25 1453d overdue RANSOMWARE
CVE-2022-24706 CISA Apache · CouchDB Apache CouchDB Insecure Default Initialization of Resource Vulnerability 2022-08-25 1453d overdue —
CVE-2022-24112 CISA Apache · APISIX Apache APISIX Authentication Bypass Vulnerability 2022-08-25 1453d overdue —
CVE-2022-22963 CISA VMware Tanzu · Spring Cloud VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability 2022-08-25 1453d overdue —
CVE-2022-2294 CISA WebRTC · WebRTC WebRTC Heap Buffer Overflow Vulnerability 2022-08-25 1453d overdue RANSOMWARE
CVE-2021-39226 CISA Grafana Labs · Grafana Grafana Authentication Bypass Vulnerability 2022-08-25 1453d overdue —
CVE-2021-38406 CISA Delta Electronics · DOPSoft 2 Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability 2022-08-25 1453d overdue —
CVE-2021-31010 CISA Apple · iOS, macOS, watchOS Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability 2022-08-25 1453d overdue —
CVE-2020-36193 CISA PEAR · Archive_Tar PEAR Archive_Tar Improper Link Resolution Vulnerability 2022-08-25 1453d overdue —
CVE-2020-28949 CISA PEAR · Archive_Tar PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability 2022-08-25 1453d overdue —
CVE-2022-0028 CISA Palo Alto Networks · PAN-OS Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability 2022-08-22 1456d overdue —
CVE-2022-32894 CISA Apple · iOS and macOS Apple iOS and macOS Out-of-Bounds Write Vulnerability 2022-08-18 1460d overdue —
CVE-2022-32893 CISA Apple · iOS and macOS Apple iOS and macOS Out-of-Bounds Write Vulnerability 2022-08-18 1460d overdue —
CVE-2022-2856 CISA Google · Chromium Intents Google Chromium Intents Insufficient Input Validation Vulnerability 2022-08-18 1460d overdue —
CVE-2022-26923 CISA Microsoft · Active Directory Microsoft Active Directory Domain Services Privilege Escalation Vulnerability 2022-08-18 1460d overdue —
CVE-2022-22536 CISA SAP · Multiple Products SAP Multiple Products HTTP Request Smuggling Vulnerability 2022-08-18 1460d overdue —
CVE-2022-21971 CISA Microsoft · Windows Microsoft Windows Runtime Remote Code Execution Vulnerability 2022-08-18 1460d overdue —
CVE-2017-15944 CISA Palo Alto Networks · PAN-OS Palo Alto Networks PAN-OS Remote Code Execution Vulnerability 2022-08-18 1460d overdue —
CVE-2022-37042 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability 2022-08-11 1467d overdue RANSOMWARE
CVE-2022-27925 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability 2022-08-11 1467d overdue RANSOMWARE
CVE-2022-34713 CISA Microsoft · Windows Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability 2022-08-09 1469d overdue —
CVE-2022-30333 CISA RARLAB · UnRAR RARLAB UnRAR Directory Traversal Vulnerability 2022-08-09 1469d overdue RANSOMWARE
CVE-2022-27924 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability 2022-08-04 1474d overdue RANSOMWARE
CVE-2022-26138 CISA Atlassian · Confluence Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability 2022-07-29 1480d overdue —
CVE-2022-22047 CISA Microsoft · Windows Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability 2022-07-12 1497d overdue —
CVE-2022-26925 CISA Microsoft · Windows Microsoft Windows LSA Spoofing Vulnerability 2022-07-01 1508d overdue —
CVE-2022-29499 CISA Mitel · MiVoice Connect Mitel MiVoice Connect Data Validation Vulnerability 2022-06-27 1512d overdue RANSOMWARE
CVE-2021-4034 CISA Red Hat · Polkit Red Hat Polkit Out-of-Bounds Read and Write Vulnerability 2022-06-27 1512d overdue RANSOMWARE
CVE-2021-30983 CISA Apple · iOS and iPadOS Apple iOS and iPadOS Buffer Overflow Vulnerability 2022-06-27 1512d overdue —
CVE-2021-30533 CISA Google · Chromium PopupBlocker Google Chromium PopupBlocker Security Bypass Vulnerability 2022-06-27 1512d overdue —
CVE-2020-9907 CISA Apple · Multiple Products Apple Multiple Products Memory Corruption Vulnerability 2022-06-27 1512d overdue —
CVE-2020-3837 CISA Apple · Multiple Products Apple Multiple Products Memory Corruption Vulnerability 2022-06-27 1512d overdue —
CVE-2019-8605 CISA Apple · Multiple Products Apple Multiple Products Use-After-Free Vulnerability 2022-06-27 1512d overdue —
CVE-2018-4344 CISA Apple · Multiple Products Apple Multiple Products Memory Corruption Vulnerability 2022-06-27 1512d overdue —
CVE-2022-30190 CISA Microsoft · Windows Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability 2022-06-14 1525d overdue RANSOMWARE
CVE-2021-38163 CISA SAP · NetWeaver SAP NetWeaver Unrestricted File Upload Vulnerability 2022-06-09 1530d overdue —
CVE-2016-2388 CISA SAP · NetWeaver SAP NetWeaver Information Disclosure Vulnerability 2022-06-09 1530d overdue —
CVE-2016-2386 CISA SAP · NetWeaver SAP NetWeaver SQL Injection Vulnerability 2022-06-09 1530d overdue —
CVE-2019-7195 CISA QNAP · Photo Station QNAP Photo Station Path Traversal Vulnerability 2022-06-08 1538d overdue RANSOMWARE
CVE-2019-7194 CISA QNAP · Photo Station QNAP Photo Station Path Traversal Vulnerability 2022-06-08 1538d overdue RANSOMWARE
CVE-2019-7193 CISA QNAP · QTS QNAP QTS Improper Input Validation Vulnerability 2022-06-08 1538d overdue RANSOMWARE
CVE-2019-7192 CISA QNAP · Photo Station QNAP Photo Station Improper Access Control Vulnerability 2022-06-08 1538d overdue RANSOMWARE
CVE-2019-5825 CISA Google · Chromium V8 Google Chromium V8 Out-of-Bounds Write Vulnerability 2022-06-08 1538d overdue —
CVE-2019-15271 CISA Cisco · RV Series Routers Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability 2022-06-08 1538d overdue —
CVE-2018-6065 CISA Google · Chromium V8 Google Chromium V8 Integer Overflow Vulnerability 2022-06-08 1538d overdue —
CVE-2018-4990 CISA Adobe · Acrobat and Reader Adobe Acrobat and Reader Double Free Vulnerability 2022-06-08 1538d overdue —
CVE-2018-17480 CISA Google · Chromium V8 Google Chromium V8 Out-of-Bounds Write Vulnerability 2022-06-08 1538d overdue —
CVE-2018-17463 CISA Google · Chromium V8 Google Chromium V8 Remote Code Execution Vulnerability 2022-06-08 1538d overdue —
CVE-2017-6862 CISA NETGEAR · Multiple Devices NETGEAR Multiple Devices Buffer Overflow Vulnerability 2022-06-08 1538d overdue —
CVE-2017-5070 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2022-06-08 1538d overdue —
CVE-2017-5030 CISA Google · Chromium V8 Google Chromium V8 Memory Corruption Vulnerability 2022-06-08 1538d overdue —
CVE-2016-5198 CISA Google · Chromium V8 Google Chromium V8 Out-of-Bounds Memory Vulnerability 2022-06-08 1538d overdue —
CVE-2016-1646 CISA Google · Chromium V8 Google Chromium V8 Out-of-Bounds Read Vulnerability 2022-06-08 1538d overdue —
CVE-2013-1331 CISA Microsoft · Office Microsoft Office Buffer Overflow Vulnerability 2022-06-08 1538d overdue —
CVE-2012-5054 CISA Adobe · Flash Player Adobe Flash Player Integer Overflow Vulnerability 2022-06-08 1538d overdue —
CVE-2012-4969 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Use-After-Free Vulnerability 2022-06-08 1538d overdue —
CVE-2012-1889 CISA Microsoft · XML Core Services Microsoft XML Core Services Memory Corruption Vulnerability 2022-06-08 1538d overdue —
CVE-2012-0767 CISA Adobe · Flash Player Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability 2022-06-08 1538d overdue —
CVE-2012-0754 CISA Adobe · Flash Player Adobe Flash Player Memory Corruption Vulnerability 2022-06-08 1538d overdue —
CVE-2012-0151 CISA Microsoft · Windows Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability 2022-06-08 1538d overdue —
CVE-2011-2462 CISA Adobe · Reader and Acrobat Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability 2022-06-08 1538d overdue —
CVE-2011-0609 CISA Adobe · Flash Player Adobe Flash Player Unspecified Vulnerability 2022-06-08 1538d overdue —
CVE-2010-2883 CISA Adobe · Acrobat and Reader Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability 2022-06-08 1538d overdue —
CVE-2010-2572 CISA Microsoft · PowerPoint Microsoft PowerPoint Buffer Overflow Vulnerability 2022-06-08 1538d overdue —
CVE-2010-1297 CISA Adobe · Flash Player Adobe Flash Player Memory Corruption Vulnerability 2022-06-08 1538d overdue —
CVE-2009-4324 CISA Adobe · Acrobat and Reader Adobe Acrobat and Reader Use-After-Free Vulnerability 2022-06-08 1538d overdue —
CVE-2009-3953 CISA Adobe · Acrobat and Reader Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability 2022-06-08 1538d overdue —
CVE-2009-1862 CISA Adobe · Acrobat and Reader, Flash Player Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability 2022-06-08 1538d overdue —
CVE-2009-0563 CISA Microsoft · Office Microsoft Office Buffer Overflow Vulnerability 2022-06-08 1538d overdue —
CVE-2009-0557 CISA Microsoft · Office Microsoft Office Object Record Corruption Vulnerability 2022-06-08 1538d overdue —
CVE-2008-0655 CISA Adobe · Acrobat and Reader Adobe Acrobat and Reader Unspecified Vulnerability 2022-06-08 1538d overdue —
CVE-2007-5659 CISA Adobe · Acrobat and Reader Adobe Acrobat and Reader Buffer Overflow Vulnerability 2022-06-08 1538d overdue —
CVE-2006-2492 CISA Microsoft · Word Microsoft Word Malformed Object Pointer Vulnerability 2022-06-08 1538d overdue —
CVE-2022-26134 CISA + EU Atlassian · Confluence Server/Data Center Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability 2022-06-02 1554d overdue RANSOMWARE
CVE-2019-3010 CISA Oracle · Solaris Oracle Solaris Privilege Escalation Vulnerability 2022-05-25 1545d overdue —
CVE-2016-7256 CISA Microsoft · Windows Microsoft Windows Open Type Font Remote Code Execution Vulnerability 2022-05-25 1545d overdue —
CVE-2016-3393 CISA Microsoft · Windows Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability 2022-05-25 1545d overdue —
CVE-2016-1010 CISA Adobe · Flash Player and AIR Adobe Flash Player and AIR Integer Overflow Vulnerability 2022-05-25 1545d overdue —
CVE-2016-0984 CISA Adobe · Flash Player and AIR Adobe Flash Player and AIR Use-After-Free Vulnerability 2022-05-25 1545d overdue —
CVE-2016-0034 CISA Microsoft · Silverlight Microsoft Silverlight Runtime Remote Code Execution Vulnerability 2022-05-25 1545d overdue RANSOMWARE
CVE-2015-8651 CISA Adobe · Flash Player Adobe Flash Player Integer Overflow Vulnerability 2022-05-25 1545d overdue —
CVE-2015-6175 CISA Microsoft · Windows Microsoft Windows Kernel Privilege Escalation Vulnerability 2022-05-25 1545d overdue —
CVE-2015-4495 CISA Mozilla · Firefox Mozilla Firefox Security Feature Bypass Vulnerability 2022-05-25 1545d overdue —
CVE-2015-2425 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Memory Corruption Vulnerability 2022-05-25 1545d overdue —
CVE-2015-2360 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2022-05-25 1545d overdue —
CVE-2015-1769 CISA Microsoft · Windows Microsoft Windows Mount Manager Privilege Escalation Vulnerability 2022-05-25 1545d overdue —
CVE-2015-1671 CISA Microsoft · Windows Microsoft Windows Remote Code Execution Vulnerability 2022-05-25 1545d overdue —
CVE-2015-0310 CISA Adobe · Flash Player Adobe Flash Player ASLR Bypass Vulnerability 2022-05-25 1545d overdue —
CVE-2015-0071 CISA Microsoft · Internet Explorer Microsoft Internet Explorer ASLR Bypass Vulnerability 2022-05-25 1545d overdue —
CVE-2015-0016 CISA Microsoft · Windows Microsoft Windows TS WebProxy Directory Traversal Vulnerability 2022-05-25 1545d overdue —
CVE-2014-8439 CISA Adobe · Flash Player Adobe Flash Player Dereferenced Pointer Vulnerability 2022-05-25 1545d overdue —
CVE-2014-4148 CISA Microsoft · Windows Microsoft Windows Remote Code Execution Vulnerability 2022-05-25 1545d overdue —
CVE-2014-4123 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Privilege Escalation Vulnerability 2022-05-25 1545d overdue —
CVE-2014-4077 CISA Microsoft · Input Method Editor (IME) Japanese Microsoft IME Japanese Privilege Escalation Vulnerability 2022-05-25 1545d overdue —
CVE-2014-3153 CISA Linux · Kernel Linux Kernel Privilege Escalation Vulnerability 2022-05-25 1545d overdue —
CVE-2014-2817 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Privilege Escalation Vulnerability 2022-05-25 1545d overdue —
CVE-2014-0546 CISA Adobe · Reader and Acrobat Adobe Reader and Acrobat Sandbox Bypass Vulnerability 2022-05-25 1545d overdue —
CVE-2013-7331 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Information Disclosure Vulnerability 2022-05-25 1545d overdue —
CVE-2013-3993 CISA IBM · InfoSphere BigInsights IBM InfoSphere BigInsights Invalid Input Vulnerability 2022-05-25 1545d overdue RANSOMWARE
CVE-2013-3896 CISA Microsoft · Silverlight Microsoft Silverlight Information Disclosure Vulnerability 2022-05-25 1545d overdue —
CVE-2013-2423 CISA Oracle · Java Runtime Environment (JRE) Oracle JRE Unspecified Vulnerability 2022-05-25 1545d overdue —
CVE-2013-0431 CISA Oracle · Java Runtime Environment (JRE) Oracle JRE Sandbox Bypass Vulnerability 2022-05-25 1545d overdue RANSOMWARE
CVE-2013-0422 CISA Oracle · Java Runtime Environment (JRE) Oracle JRE Remote Code Execution Vulnerability 2022-05-25 1545d overdue RANSOMWARE
CVE-2013-0074 CISA Microsoft · Silverlight Microsoft Silverlight Double Dereference Vulnerability 2022-05-25 1545d overdue RANSOMWARE
CVE-2012-1710 CISA Oracle · Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability 2022-05-25 1545d overdue RANSOMWARE
CVE-2010-1428 CISA Red Hat · JBoss Red Hat JBoss Information Disclosure Vulnerability 2022-05-25 1545d overdue RANSOMWARE
CVE-2010-0840 CISA Oracle · Java Runtime Environment (JRE) Oracle JRE Unspecified Vulnerability 2022-05-25 1545d overdue —
CVE-2010-0738 CISA + EU Red Hat · JBoss Red Hat JBoss Authentication Bypass Vulnerability 2022-05-25 1545d overdue RANSOMWARE
CVE-2018-8611 CISA Microsoft · Windows Microsoft Windows Kernel Privilege Escalation Vulnerability 2022-05-24 1546d overdue —
CVE-2018-19953 CISA QNAP · Network Attached Storage (NAS) QNAP NAS File Station Cross-Site Scripting Vulnerability 2022-05-24 1546d overdue RANSOMWARE
CVE-2018-19949 CISA QNAP · Network Attached Storage (NAS) QNAP NAS File Station Command Injection Vulnerability 2022-05-24 1546d overdue RANSOMWARE
CVE-2018-19943 CISA QNAP · Network Attached Storage (NAS) QNAP NAS File Station Cross-Site Scripting Vulnerability 2022-05-24 1546d overdue RANSOMWARE
CVE-2017-8543 CISA Microsoft · Windows Microsoft Windows Search Remote Code Execution Vulnerability 2022-05-24 1546d overdue —
CVE-2017-8291 CISA Artifex · Ghostscript Artifex Ghostscript Type Confusion Vulnerability 2022-05-24 1546d overdue —
CVE-2017-18362 CISA Kaseya · Virtual System/Server Administrator (VSA) Kaseya VSA SQL Injection Vulnerability 2022-05-24 1546d overdue RANSOMWARE
CVE-2017-0210 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Privilege Escalation Vulnerability 2022-05-24 1546d overdue —
CVE-2017-0149 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Memory Corruption Vulnerability 2022-05-24 1546d overdue —
CVE-2017-0147 CISA Microsoft · SMBv1 server Microsoft Windows SMBv1 Information Disclosure Vulnerability 2022-05-24 1546d overdue RANSOMWARE
CVE-2017-0022 CISA Microsoft · XML Core Services Microsoft XML Core Services Information Disclosure Vulnerability 2022-05-24 1546d overdue —
CVE-2017-0005 CISA Microsoft · Windows Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability 2022-05-24 1546d overdue —
CVE-2016-6367 CISA Cisco · Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability 2022-05-24 1546d overdue —
CVE-2016-6366 CISA Cisco · Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability 2022-05-24 1546d overdue —
CVE-2016-4657 CISA Apple · iOS Apple iOS Webkit Memory Corruption Vulnerability 2022-05-24 1546d overdue —
CVE-2016-4656 CISA Apple · iOS Apple iOS Memory Corruption Vulnerability 2022-05-24 1546d overdue —
CVE-2016-4655 CISA Apple · iOS Apple iOS Information Disclosure Vulnerability 2022-05-24 1546d overdue —
CVE-2016-3351 CISA Microsoft · Internet Explorer and Edge Microsoft Internet Explorer and Edge Information Disclosure Vulnerability 2022-05-24 1546d overdue RANSOMWARE
CVE-2016-3298 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability 2022-05-24 1546d overdue —
CVE-2016-0162 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Information Disclosure Vulnerability 2022-05-24 1546d overdue —
CVE-2022-20821 CISA Cisco · IOS XR Cisco IOS XR Open Port Vulnerability 2022-05-23 1547d overdue —
CVE-2021-30883 CISA Apple · Multiple Products Apple Multiple Products Memory Corruption Vulnerability 2022-05-23 1547d overdue —
CVE-2021-1048 CISA Android · Kernel Android Kernel Use-After-Free Vulnerability 2022-05-23 1547d overdue —
CVE-2021-0920 CISA Android · Kernel Android Kernel Race Condition Vulnerability 2022-05-23 1547d overdue —
CVE-2020-1027 CISA Microsoft · Windows Microsoft Windows Kernel Privilege Escalation Vulnerability 2022-05-23 1547d overdue —
CVE-2020-0638 CISA Microsoft · Update Notification Manager Microsoft Update Notification Manager Privilege Escalation Vulnerability 2022-05-23 1547d overdue RANSOMWARE
CVE-2019-8720 CISA WebKitGTK · WebKitGTK WebKitGTK Memory Corruption Vulnerability 2022-05-23 1547d overdue —
CVE-2019-7287 CISA Apple · iOS Apple iOS Memory Corruption Vulnerability 2022-05-23 1547d overdue —
CVE-2019-7286 CISA Apple · Multiple Products Apple Multiple Products Memory Corruption Vulnerability 2022-05-23 1547d overdue —
CVE-2019-5786 CISA Google · Chrome Blink Google Chrome Blink Use-After-Free Vulnerability 2022-05-23 1547d overdue —
CVE-2019-18426 CISA Meta Platforms · WhatsApp WhatsApp Cross-Site Scripting Vulnerability 2022-05-23 1547d overdue —
CVE-2019-1385 CISA Microsoft · Windows Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability 2022-05-23 1547d overdue RANSOMWARE
CVE-2019-13720 CISA Google · Chrome WebAudio Google Chrome WebAudio Use-After-Free Vulnerability 2022-05-23 1547d overdue —
CVE-2019-11708 CISA Mozilla · Firefox and Thunderbird Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability 2022-05-23 1547d overdue —
CVE-2019-11707 CISA Mozilla · Firefox and Thunderbird Mozilla Firefox and Thunderbird Type Confusion Vulnerability 2022-05-23 1547d overdue —
CVE-2019-1130 CISA Microsoft · Windows Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability 2022-05-23 1547d overdue RANSOMWARE
CVE-2019-0880 CISA Microsoft · Windows Microsoft Windows Privilege Escalation Vulnerability 2022-05-23 1547d overdue —
CVE-2019-0703 CISA Microsoft · Windows Microsoft Windows SMB Information Disclosure Vulnerability 2022-05-23 1547d overdue —
CVE-2019-0676 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Information Disclosure Vulnerability 2022-05-23 1547d overdue —
CVE-2018-8589 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2022-05-23 1547d overdue —
CVE-2018-5002 CISA Adobe · Flash Player Adobe Flash Player Stack-based Buffer Overflow Vulnerability 2022-05-23 1547d overdue —
CVE-2022-30525 CISA Zyxel · Multiple Firewalls Zyxel Multiple Firewalls OS Command Injection Vulnerability 2022-05-16 1554d overdue —
CVE-2022-22947 CISA VMware · Spring Cloud Gateway VMware Spring Cloud Gateway Code Injection Vulnerability 2022-05-16 1554d overdue —
CVE-2022-1388 CISA F5 · BIG-IP F5 BIG-IP Missing Authentication Vulnerability 2022-05-10 1560d overdue RANSOMWARE
CVE-2021-1789 CISA Apple · Multiple Products Apple Multiple Products Type Confusion Vulnerability 2022-05-04 1566d overdue —
CVE-2019-8506 CISA Apple · Multiple Products Apple Multiple Products Type Confusion Vulnerability 2022-05-04 1566d overdue —
CVE-2014-4113 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2022-05-04 1566d overdue —
CVE-2014-0322 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Use-After-Free Vulnerability 2022-05-04 1566d overdue —
CVE-2014-0160 CISA OpenSSL · OpenSSL OpenSSL Information Disclosure Vulnerability 2022-05-04 1566d overdue —
CVE-2022-29464 CISA WSO2 · Multiple Products WSO2 Multiple Products Unrestrictive Upload of File Vulnerability 2022-04-25 1575d overdue RANSOMWARE
CVE-2022-26904 CISA Microsoft · Windows Microsoft Windows User Profile Service Privilege Escalation Vulnerability 2022-04-25 1575d overdue —
CVE-2022-21919 CISA Microsoft · Windows Microsoft Windows User Profile Service Privilege Escalation Vulnerability 2022-04-25 1575d overdue —
CVE-2022-0847 CISA Linux · Kernel Linux Kernel Privilege Escalation Vulnerability 2022-04-25 1575d overdue —
CVE-2021-41357 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2022-04-25 1575d overdue —
CVE-2021-40450 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2022-04-25 1575d overdue —
CVE-2019-1003029 CISA Jenkins · Script Security Plugin Jenkins Script Security Plugin Sandbox Bypass Vulnerability 2022-04-25 1575d overdue —
CVE-2022-22718 CISA Microsoft · Windows Microsoft Windows Print Spooler Privilege Escalation Vulnerability 2022-04-19 1581d overdue —
CVE-2019-3568 CISA Meta Platforms · WhatsApp WhatsApp VOIP Stack Buffer Overflow Vulnerability 2022-04-19 1581d overdue —
CVE-2018-6882 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability 2022-04-19 1581d overdue RANSOMWARE
CVE-2022-22960 CISA VMware · Multiple Products VMware Multiple Products Privilege Escalation Vulnerability 2022-04-15 1585d overdue —
CVE-2022-1364 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2022-04-15 1585d overdue —
CVE-2019-3929 CISA Crestron · Multiple Products Crestron Multiple Products Command Injection Vulnerability 2022-04-15 1585d overdue —
CVE-2019-16057 CISA D-Link · DNS-320 Storage Device D-Link DNS-320 Remote Code Execution Vulnerability 2022-04-15 1585d overdue RANSOMWARE
CVE-2018-7841 CISA Schneider Electric · U.motion Builder Schneider Electric U.motion Builder SQL Injection Vulnerability 2022-04-15 1585d overdue —
CVE-2016-4523 CISA Trihedral · VTScada (formerly VTS) Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability 2022-04-15 1585d overdue —
CVE-2014-0780 CISA InduSoft · Web Studio InduSoft Web Studio NTWebServer Directory Traversal Vulnerability 2022-04-15 1585d overdue —
CVE-2010-5330 CISA Ubiquiti · AirOS Ubiquiti AirOS Command Injection Vulnerability 2022-04-15 1585d overdue —
CVE-2007-3010 CISA Alcatel · OmniPCX Enterprise Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability 2022-04-15 1585d overdue —
CVE-2022-22954 CISA VMware · Workspace ONE Access and Identity Manager VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability 2022-04-14 1586d overdue RANSOMWARE
CVE-2022-24521 CISA Microsoft · Windows Microsoft Windows CLFS Driver Privilege Escalation Vulnerability 2022-04-13 1587d overdue RANSOMWARE
CVE-2018-7602 CISA Drupal · Core Drupal Core Remote Code Execution Vulnerability 2022-04-13 1587d overdue RANSOMWARE
CVE-2018-20753 CISA Kaseya · Virtual System/Server Administrator (VSA) Kaseya VSA Remote Code Execution Vulnerability 2022-04-13 1587d overdue RANSOMWARE
CVE-2015-5123 CISA Adobe · Flash Player Adobe Flash Player Use-After-Free Vulnerability 2022-04-13 1587d overdue —
CVE-2015-5122 CISA Adobe · Flash Player Adobe Flash Player Use-After-Free Vulnerability 2022-04-13 1587d overdue —
CVE-2015-3113 CISA Adobe · Flash Player Adobe Flash Player Heap-Based Buffer Overflow Vulnerability 2022-04-13 1587d overdue —
CVE-2015-2502 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Memory Corruption Vulnerability 2022-04-13 1587d overdue —
CVE-2015-0313 CISA Adobe · Flash Player Adobe Flash Player Use-After-Free Vulnerability 2022-04-13 1587d overdue —
CVE-2015-0311 CISA Adobe · Flash Player Adobe Flash Player Remote Code Execution Vulnerability 2022-04-13 1587d overdue —
CVE-2014-9163 CISA Adobe · Flash Player Adobe Flash Player Stack-Based Buffer Overflow Vulnerability 2022-04-13 1587d overdue —
CVE-2022-23176 CISA WatchGuard · Firebox and XTM WatchGuard Firebox and XTM Privilege Escalation Vulnerability 2022-04-11 1589d overdue —
CVE-2021-42287 CISA Microsoft · Active Directory Microsoft Active Directory Domain Services Privilege Escalation Vulnerability 2022-04-11 1589d overdue RANSOMWARE
CVE-2021-42278 CISA Microsoft · Active Directory Microsoft Active Directory Domain Services Privilege Escalation Vulnerability 2022-04-11 1589d overdue RANSOMWARE
CVE-2021-39793 CISA Google · Pixel Google Pixel Out-of-Bounds Write Vulnerability 2022-04-11 1589d overdue —
CVE-2021-27852 CISA Checkbox · Checkbox Survey Checkbox Survey Deserialization of Untrusted Data Vulnerability 2022-04-11 1589d overdue —
CVE-2021-22600 CISA Linux · Kernel Linux Kernel Privilege Escalation Vulnerability 2022-04-11 1589d overdue —
CVE-2020-2509 CISA QNAP · QNAP Network-Attached Storage (NAS) QNAP Network-Attached Storage (NAS) Command Injection Vulnerability 2022-04-11 1589d overdue —
CVE-2017-11317 CISA Telerik · User Interface (UI) for ASP.NET AJAX Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability 2022-04-11 1589d overdue —
CVE-2021-3156 CISA Sudo · Sudo Sudo Heap-Based Buffer Overflow Vulnerability 2022-04-06 1594d overdue —
CVE-2021-31166 CISA Microsoft · HTTP Protocol Stack Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability 2022-04-06 1594d overdue —
CVE-2017-0148 CISA Microsoft · SMBv1 server Microsoft SMBv1 Server Remote Code Execution Vulnerability 2022-04-06 1594d overdue RANSOMWARE
CVE-2022-22965 CISA VMware · Spring Framework Spring Framework JDK 9+ Remote Code Execution Vulnerability 2022-04-04 1596d overdue —
CVE-2022-22675 CISA Apple · macOS Apple macOS Out-of-Bounds Write Vulnerability 2022-04-04 1596d overdue —
CVE-2022-22674 CISA Apple · macOS Apple macOS Out-of-Bounds Read Vulnerability 2022-04-04 1596d overdue —
CVE-2021-45382 CISA D-Link · Multiple Routers D-Link Multiple Routers Remote Code Execution Vulnerability 2022-04-04 1596d overdue —
CVE-2022-26871 CISA Trend Micro · Apex Central Trend Micro Apex Central Arbitrary File Upload Vulnerability 2022-03-31 1600d overdue —
CVE-2022-1040 CISA Sophos · Firewall Sophos Firewall Authentication Bypass Vulnerability 2022-03-31 1600d overdue —
CVE-2021-34484 CISA Microsoft · Windows Microsoft Windows User Profile Service Privilege Escalation Vulnerability 2022-03-31 1600d overdue —
CVE-2021-28799 CISA QNAP · Network Attached Storage (NAS) QNAP NAS Improper Authorization Vulnerability 2022-03-31 1600d overdue RANSOMWARE
CVE-2021-21551 CISA Dell · dbutil Driver Dell dbutil Driver Insufficient Access Control Vulnerability 2022-03-31 1600d overdue —
CVE-2018-10562 CISA Dasan · Gigabit Passive Optical Network (GPON) Routers Dasan GPON Routers Command Injection Vulnerability 2022-03-31 1600d overdue RANSOMWARE
CVE-2018-10561 CISA Dasan · Gigabit Passive Optical Network (GPON) Routers Dasan GPON Routers Authentication Bypass Vulnerability 2022-03-31 1600d overdue —
CVE-2022-1096 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2022-03-28 1603d overdue —
CVE-2022-0543 CISA Redis · Debian-specific Redis Servers Debian-specific Redis Server Lua Sandbox Escape Vulnerability 2022-03-28 1603d overdue —
CVE-2021-38646 CISA Microsoft · Office Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability 2022-03-28 1603d overdue RANSOMWARE
CVE-2021-34486 CISA Microsoft · Windows Microsoft Windows Event Tracing Privilege Escalation Vulnerability 2022-03-28 1603d overdue —
CVE-2021-26085 CISA Atlassian · Confluence Server Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability 2022-03-28 1603d overdue RANSOMWARE
CVE-2021-20028 CISA SonicWall · Secure Remote Access (SRA) SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability 2022-03-28 1603d overdue RANSOMWARE
CVE-2019-7483 CISA SonicWall · SMA100 SonicWall SMA100 Directory Traversal Vulnerability 2022-03-28 1603d overdue —
CVE-2018-8440 CISA Microsoft · Windows Microsoft Windows Privilege Escalation Vulnerability 2022-03-28 1603d overdue RANSOMWARE
CVE-2018-8406 CISA Microsoft · DirectX Graphics Kernel (DXGKRNL) Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability 2022-03-28 1603d overdue RANSOMWARE
CVE-2018-8405 CISA Microsoft · DirectX Graphics Kernel (DXGKRNL) Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability 2022-03-28 1603d overdue RANSOMWARE
CVE-2017-0213 CISA Microsoft · Windows Microsoft Windows Privilege Escalation Vulnerability 2022-03-28 1603d overdue RANSOMWARE
CVE-2017-0059 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Information Disclosure Vulnerability 2022-03-28 1603d overdue —
CVE-2017-0037 CISA Microsoft · Edge and Internet Explorer Microsoft Edge and Internet Explorer Type Confusion Vulnerability 2022-03-28 1603d overdue —
CVE-2016-7201 CISA Microsoft · Edge Microsoft Edge Memory Corruption Vulnerability 2022-03-28 1603d overdue —
CVE-2016-7200 CISA Microsoft · Edge Microsoft Edge Memory Corruption Vulnerability 2022-03-28 1603d overdue —
CVE-2016-0189 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Memory Corruption Vulnerability 2022-03-28 1603d overdue RANSOMWARE
CVE-2016-0151 CISA Microsoft · Client-Server Run-time Subsystem (CSRSS) Microsoft Windows CSRSS Security Feature Bypass Vulnerability 2022-03-28 1603d overdue RANSOMWARE
CVE-2016-0040 CISA Microsoft · Windows Microsoft Windows Kernel Privilege Escalation Vulnerability 2022-03-28 1603d overdue —
CVE-2015-2426 CISA Microsoft · Windows Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability 2022-03-28 1603d overdue —
CVE-2015-2419 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Memory Corruption Vulnerability 2022-03-28 1603d overdue —
CVE-2015-1770 CISA Microsoft · Office Microsoft Office Uninitialized Memory Use Vulnerability 2022-03-28 1603d overdue —
CVE-2013-3660 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2022-03-28 1603d overdue —
CVE-2013-2729 CISA Adobe · Reader and Acrobat Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability 2022-03-28 1603d overdue —
CVE-2013-2551 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Use-After-Free Vulnerability 2022-03-28 1603d overdue RANSOMWARE
CVE-2013-2465 CISA Oracle · Java SE Oracle Java SE Unspecified Vulnerability 2022-03-28 1603d overdue RANSOMWARE
CVE-2013-1690 CISA Mozilla · Firefox and Thunderbird Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability 2022-03-28 1603d overdue —
CVE-2012-5076 CISA Oracle · Java SE Oracle Java SE Sandbox Bypass Vulnerability 2022-03-28 1603d overdue —
CVE-2012-2539 CISA Microsoft · Word Microsoft Word Remote Code Execution Vulnerability 2022-03-28 1603d overdue —
CVE-2012-2034 CISA Adobe · Flash Player Adobe Flash Player Memory Corruption Vulnerability 2022-03-28 1603d overdue —
CVE-2012-0518 CISA Oracle · Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability 2022-03-28 1603d overdue —
CVE-2011-2005 CISA Microsoft · Ancillary Function Driver (afd.sys) Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability 2022-03-28 1603d overdue —
CVE-2010-4398 CISA Microsoft · Windows Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability 2022-03-28 1600d overdue —
CVE-2022-26318 CISA WatchGuard · Firebox and XTM Appliances WatchGuard Firebox and XTM Appliances Arbitrary Code Execution 2022-03-25 1606d overdue —
CVE-2022-26143 CISA Mitel · MiCollab, MiVoice Business Express MiCollab, MiVoice Business Express Access Control Vulnerability 2022-03-25 1606d overdue —
CVE-2022-21999 CISA Microsoft · Windows Microsoft Windows Print Spooler Privilege Escalation Vulnerability 2022-03-25 1606d overdue RANSOMWARE
CVE-2021-42237 CISA Sitecore · XP Sitecore XP Remote Command Execution Vulnerability 2022-03-25 1606d overdue RANSOMWARE
CVE-2021-22941 CISA Citrix · ShareFile Citrix ShareFile Improper Access Control Vulnerability 2022-03-25 1606d overdue RANSOMWARE
CVE-2020-9377 CISA D-Link · DIR-610 Devices D-Link DIR-610 Devices Remote Command Execution 2022-03-25 1606d overdue —
CVE-2020-9054 CISA Zyxel · Multiple Network-Attached Storage (NAS) Devices Zyxel Multiple NAS Devices OS Command Injection Vulnerability 2022-03-25 1606d overdue —
CVE-2020-7247 CISA OpenBSD · OpenSMTPD OpenSMTPD Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2020-5410 CISA VMware Tanzu · Spring Cloud Configuration (Config) Server VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability 2022-03-25 1606d overdue —
CVE-2020-25223 CISA Sophos · SG UTM Sophos SG UTM Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2020-2506 CISA QNAP Systems · Helpdesk QNAP Helpdesk Improper Access Control Vulnerability 2022-03-25 1606d overdue —
CVE-2020-2021 CISA Palo Alto Networks · PAN-OS Palo Alto Networks PAN-OS Authentication Bypass Vulnerability 2022-03-25 1606d overdue RANSOMWARE
CVE-2020-1956 CISA Apache · Kylin Apache Kylin OS Command Injection Vulnerability 2022-03-25 1606d overdue —
CVE-2020-1631 CISA Juniper · Junos OS Juniper Junos OS Path Traversal Vulnerability 2022-03-25 1606d overdue —
CVE-2019-6340 CISA Drupal · Core Drupal Core Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2019-2616 CISA Oracle · BI Publisher (Formerly XML Publisher) Oracle BI Publisher Unauthorized Access Vulnerability 2022-03-25 1606d overdue —
CVE-2019-16920 CISA D-Link · Multiple Routers D-Link Multiple Routers Command Injection Vulnerability 2022-03-25 1606d overdue —
CVE-2019-15107 CISA Webmin · Webmin Webmin Command Injection Vulnerability 2022-03-25 1606d overdue RANSOMWARE
CVE-2019-12991 CISA Citrix · SD-WAN and NetScaler Citrix SD-WAN and NetScaler Command Injection Vulnerability 2022-03-25 1606d overdue —
CVE-2019-12989 CISA Citrix · SD-WAN and NetScaler Citrix SD-WAN and NetScaler SQL Injection Vulnerability 2022-03-25 1606d overdue —
CVE-2019-11043 CISA PHP · FastCGI Process Manager (FPM) PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability 2022-03-25 1606d overdue RANSOMWARE
CVE-2019-10068 CISA Kentico · Xperience Kentico Xperience Deserialization of Untrusted Data Vulnerability 2022-03-25 1606d overdue —
CVE-2019-1003030 CISA Jenkins · Matrix Project Plugin Jenkins Matrix Project Plugin Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2019-0903 CISA Microsoft · Graphics Device Interface (GDI) Microsoft GDI Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2018-8414 CISA Microsoft · Windows Microsoft Windows Shell Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2018-8373 CISA Microsoft · Internet Explorer Scripting Engine Microsoft Scripting Engine Memory Corruption Vulnerability 2022-03-25 1606d overdue —
CVE-2018-6961 CISA VMware · SD-WAN Edge VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability 2022-03-25 1606d overdue —
CVE-2018-14839 CISA LG · N1A1 NAS LG N1A1 NAS Remote Command Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2018-1273 CISA VMware Tanzu · Spring Data Commons VMware Tanzu Spring Data Commons Property Binder Vulnerability 2022-03-25 1606d overdue RANSOMWARE
CVE-2018-11138 CISA Quest · KACE System Management Appliance Quest KACE System Management Appliance Remote Command Execution Vulnerability 2022-03-25 1606d overdue RANSOMWARE
CVE-2018-0147 CISA Cisco · Secure Access Control System (ACS) Cisco Secure Access Control System Java Deserialization Vulnerability 2022-03-25 1606d overdue —
CVE-2018-0125 CISA Cisco · VPN Routers Cisco VPN Routers Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2017-6334 CISA NETGEAR · DGN2200 Devices NETGEAR DGN2200 Devices OS Command Injection Vulnerability 2022-03-25 1606d overdue —
CVE-2017-6316 CISA Citrix · NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server Citrix Multiple Products Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2017-3881 CISA Cisco · IOS and IOS XE Cisco IOS and IOS XE Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2017-12617 CISA Apache · Tomcat Apache Tomcat Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2017-12615 CISA Apache · Tomcat Apache Tomcat on Windows Remote Code Execution Vulnerability 2022-03-25 1606d overdue RANSOMWARE
CVE-2017-0146 CISA Microsoft · Windows Microsoft Windows SMB Remote Code Execution Vulnerability 2022-03-25 1606d overdue RANSOMWARE
CVE-2016-7892 CISA Adobe · Flash Player Adobe Flash Player Use-After-Free Vulnerability 2022-03-25 1606d overdue —
CVE-2016-4171 CISA Adobe · Flash Player Adobe Flash Player Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2016-1555 CISA NETGEAR · Wireless Access Point (WAP) Devices NETGEAR Multiple WAP Devices Command Injection Vulnerability 2022-03-25 1606d overdue —
CVE-2016-11021 CISA D-Link · DCS-930L Devices D-Link DCS-930L Devices OS Command Injection Vulnerability 2022-03-25 1606d overdue —
CVE-2016-10174 CISA NETGEAR · WNR2000v5 Router NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability 2022-03-25 1606d overdue —
CVE-2016-0752 CISA Rails · Ruby on Rails Ruby on Rails Directory Traversal Vulnerability 2022-03-25 1606d overdue —
CVE-2015-4068 CISA Arcserve · Unified Data Protection (UDP) Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability 2022-03-25 1606d overdue —
CVE-2015-3035 CISA TP-Link · Multiple Archer Devices TP-Link Multiple Archer Devices Directory Traversal Vulnerability 2022-03-25 1606d overdue —
CVE-2015-1427 CISA Elastic · Elasticsearch Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2015-1187 CISA D-Link and TRENDnet · Multiple Devices D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2015-0666 CISA Cisco · Prime Data Center Network Manager (DCNM) Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability 2022-03-25 1606d overdue —
CVE-2014-6332 CISA Microsoft · Windows Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2014-6324 CISA Microsoft · Kerberos Key Distribution Center (KDC) Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability 2022-03-25 1606d overdue —
CVE-2014-6287 CISA Rejetto · HTTP File Server (HFS) Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2014-3120 CISA Elastic · Elasticsearch Elasticsearch Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2014-0130 CISA Rails · Ruby on Rails Ruby on Rails Directory Traversal Vulnerability 2022-03-25 1606d overdue —
CVE-2013-5223 CISA D-Link · DSL-2760U D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability 2022-03-25 1606d overdue —
CVE-2013-4810 CISA Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management HP Multiple Products Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2013-2251 CISA Apache · Struts Apache Struts Improper Input Validation Vulnerability 2022-03-25 1606d overdue —
CVE-2012-1823 CISA PHP · PHP PHP-CGI Query String Parameter Vulnerability 2022-03-25 1606d overdue —
CVE-2010-4345 CISA Exim · Exim Exim Privilege Escalation Vulnerability 2022-03-25 1606d overdue —
CVE-2010-4344 CISA Exim · Exim Exim Heap-Based Buffer Overflow Vulnerability 2022-03-25 1606d overdue —
CVE-2010-3035 CISA Cisco · IOS XR Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability 2022-03-25 1606d overdue —
CVE-2010-2861 CISA Adobe · ColdFusion Adobe ColdFusion Directory Traversal Vulnerability 2022-03-25 1606d overdue RANSOMWARE
CVE-2009-2055 CISA Cisco · IOS XR Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability 2022-03-25 1606d overdue —
CVE-2009-1151 CISA phpMyAdmin · phpMyAdmin phpMyAdmin Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2009-0927 CISA Adobe · Reader and Acrobat Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability 2022-03-25 1606d overdue —
CVE-2005-2773 CISA Hewlett Packard (HP) · OpenView Network Node Manager HP OpenView Network Node Manager Remote Code Execution Vulnerability 2022-03-25 1606d overdue —
CVE-2020-5135 CISA SonicWall · SonicOS SonicWall SonicOS Buffer Overflow Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2019-1405 CISA Microsoft · Windows Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2019-1322 CISA Microsoft · Windows Microsoft Windows Privilege Escalation Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2019-1315 CISA Microsoft · Windows Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2019-1253 CISA Microsoft · Windows Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2019-1132 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2022-03-15 1616d overdue —
CVE-2019-1129 CISA Microsoft · Windows Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2019-1069 CISA Microsoft · Task Scheduler Microsoft Task Scheduler Privilege Escalation Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2019-1064 CISA Microsoft · Windows Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2019-0841 CISA Microsoft · Windows Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2019-0543 CISA Microsoft · Windows Microsoft Windows Privilege Escalation Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2018-8120 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2017-0101 CISA Microsoft · Windows Microsoft Windows Transaction Manager Privilege Escalation Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2016-3309 CISA Microsoft · Windows Microsoft Windows Kernel Privilege Escalation Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2015-2546 CISA Microsoft · Win32k Microsoft Win32k Memory Corruption Vulnerability 2022-03-15 1616d overdue RANSOMWARE
CVE-2022-26486 CISA Mozilla · Firefox Mozilla Firefox Use-After-Free Vulnerability 2022-03-07 1631d overdue —
CVE-2022-26485 CISA Mozilla · Firefox Mozilla Firefox Use-After-Free Vulnerability 2022-03-07 1631d overdue —
CVE-2021-21973 CISA VMware · vCenter Server and Cloud Foundation VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability 2022-03-07 1631d overdue —
CVE-2020-8218 CISA Pulse Secure · Pulse Connect Secure Pulse Connect Secure Code Injection Vulnerability 2022-03-07 1461d overdue —
CVE-2019-11581 CISA Atlassian · Jira Server and Data Center Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability 2022-03-07 1461d overdue —
CVE-2017-6077 CISA NETGEAR · Wireless Router DGN2200 NETGEAR DGN2200 Remote Code Execution Vulnerability 2022-03-07 1461d overdue —
CVE-2016-6277 CISA NETGEAR · Multiple Routers NETGEAR Multiple Routers Remote Code Execution Vulnerability 2022-03-07 1461d overdue —
CVE-2013-0631 CISA Adobe · ColdFusion Adobe ColdFusion Information Disclosure Vulnerability 2022-03-07 1461d overdue —
CVE-2013-0629 CISA Adobe · ColdFusion Adobe ColdFusion Directory Traversal Vulnerability 2022-03-07 1461d overdue —
CVE-2013-0625 CISA Adobe · ColdFusion Adobe ColdFusion Authentication Bypass Vulnerability 2022-03-07 1461d overdue —
CVE-2009-3960 CISA Adobe · BlazeDS Adobe BlazeDS Information Disclosure Vulnerability 2022-03-07 1461d overdue RANSOMWARE
CVE-2022-20708 CISA Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 1635d overdue —
CVE-2022-20703 CISA Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 1635d overdue —
CVE-2022-20701 CISA Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 1635d overdue —
CVE-2022-20700 CISA Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 1635d overdue —
CVE-2022-20699 CISA Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 1635d overdue —
CVE-2021-41379 CISA Microsoft · Windows Microsoft Windows Installer Privilege Escalation Vulnerability 2022-03-03 1635d overdue RANSOMWARE
CVE-2020-1938 CISA Apache · Tomcat Apache Tomcat Improper Privilege Management Vulnerability 2022-03-03 1635d overdue —
CVE-2020-11899 CISA Treck TCP/IP stack · IPv6 Treck TCP/IP stack Out-of-Bounds Read Vulnerability 2022-03-03 1635d overdue —
CVE-2019-16928 CISA Exim · Exim Internet Mailer Exim Out-of-bounds Write Vulnerability 2022-03-03 1635d overdue —
CVE-2019-1652 CISA Cisco · Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Cisco Small Business Routers Improper Input Validation Vulnerability 2022-03-03 1635d overdue —
CVE-2019-1297 CISA Microsoft · Excel Microsoft Excel Remote Code Execution Vulnerability 2022-03-03 1635d overdue —
CVE-2018-8581 CISA Microsoft · Exchange Server Microsoft Exchange Server Privilege Escalation Vulnerability 2022-03-03 1635d overdue RANSOMWARE
CVE-2018-8298 CISA ChakraCore · ChakraCore scripting engine ChakraCore Scripting Engine Type Confusion Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0180 CISA Cisco · IOS Software Cisco IOS Software Denial-of-Service Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0179 CISA Cisco · IOS Software Cisco IOS Software Denial-of-Service Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0175 CISA Cisco · IOS, XR, and XE Software Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0174 CISA Cisco · IOS XE Software Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0173 CISA Cisco · IOS and IOS XE Software Cisco IOS and IOS XE Software Improper Input Validation Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0172 CISA Cisco · IOS and IOS XE Software Cisco IOS and IOS XE Software Improper Input Validation Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0167 CISA Cisco · IOS, XR, and XE Software Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0161 CISA Cisco · IOS Software Cisco IOS Software Resource Management Errors Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0159 CISA Cisco · IOS Software and Cisco IOS XE Software Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0158 CISA Cisco · IOS Software and Cisco IOS XE Software Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0156 CISA Cisco · IOS Software and Cisco IOS XE Software Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0155 CISA Cisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0154 CISA Cisco · IOS Software Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability 2022-03-03 1635d overdue —
CVE-2018-0151 CISA Cisco · IOS and IOS XE Software Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability 2022-03-03 1635d overdue —
CVE-2017-8540 CISA Microsoft · Malware Protection Engine Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability 2022-03-03 1628d overdue —
CVE-2017-6744 CISA Cisco · IOS software Cisco IOS Software SNMP Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2017-6743 CISA Cisco · IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2017-6740 CISA Cisco · IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2017-6739 CISA Cisco · IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2017-6738 CISA Cisco · IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2017-6737 CISA Cisco · IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2017-6736 CISA Cisco · IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2017-6663 CISA Cisco · IOS and IOS XE Software Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability 2022-03-03 1628d overdue —
CVE-2017-6627 CISA Cisco · IOS and IOS XE Software Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability 2022-03-03 1628d overdue —
CVE-2017-12319 CISA Cisco · IOS XE Software Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability 2022-03-03 1628d overdue —
CVE-2017-12240 CISA Cisco · IOS and IOS XE Software Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2017-12238 CISA Cisco · Catalyst 6800 Series Switches Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability 2022-03-03 1628d overdue —
CVE-2017-12237 CISA Cisco · IOS and IOS XE Software Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability 2022-03-03 1628d overdue —
CVE-2017-12235 CISA Cisco · IOS software Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability 2022-03-03 1628d overdue —
CVE-2017-12234 CISA Cisco · IOS software Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability 2022-03-03 1628d overdue —
CVE-2017-12233 CISA Cisco · IOS software Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability 2022-03-03 1628d overdue —
CVE-2017-12232 CISA Cisco · IOS software Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability 2022-03-03 1628d overdue —
CVE-2017-12231 CISA Cisco · IOS software Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability 2022-03-03 1628d overdue —
CVE-2017-11826 CISA Microsoft · Office Microsoft Office Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2017-11292 CISA Adobe · Flash Player Adobe Flash Player Type Confusion Vulnerability 2022-03-03 1628d overdue —
CVE-2017-0261 CISA Microsoft · Office Microsoft Office Use-After-Free Vulnerability 2022-03-03 1628d overdue —
CVE-2017-0001 CISA Microsoft · Graphics Device Interface (GDI) Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability 2022-03-03 1628d overdue —
CVE-2016-8562 CISA Siemens · SIMATIC CP Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability 2022-03-03 1628d overdue —
CVE-2016-7855 CISA Adobe · Flash Player Adobe Flash Player Use-After-Free Vulnerability 2022-03-03 1628d overdue —
CVE-2016-7262 CISA Microsoft · Excel Microsoft Office Security Feature Bypass Vulnerability 2022-03-03 1628d overdue —
CVE-2016-7193 CISA Microsoft · Office Microsoft Office Memory Corruption Vulnerability 2022-03-03 1628d overdue —
CVE-2016-5195 CISA Linux · Kernel Linux Kernel Race Condition Vulnerability 2022-03-03 1628d overdue —
CVE-2016-4117 CISA Adobe · Flash Player Adobe Flash Player Arbitrary Code Execution Vulnerability 2022-03-03 1628d overdue RANSOMWARE
CVE-2016-1019 CISA Adobe · Flash Player Adobe Flash Player Arbitrary Code Execution Vulnerability 2022-03-03 1628d overdue RANSOMWARE
CVE-2016-0099 CISA Microsoft · Windows Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability 2022-03-03 1628d overdue RANSOMWARE
CVE-2015-7645 CISA Adobe · Flash Player Adobe Flash Player Arbitrary Code Execution Vulnerability 2022-03-03 1628d overdue RANSOMWARE
CVE-2015-5119 CISA Adobe · Flash Player Adobe Flash Player Use-After-Free Vulnerability 2022-03-03 1628d overdue —
CVE-2015-4902 CISA Oracle · Java SE Oracle Java SE Integrity Check Vulnerability 2022-03-03 1628d overdue —
CVE-2015-3043 CISA Adobe · Flash Player Adobe Flash Player Memory Corruption Vulnerability 2022-03-03 1628d overdue —
CVE-2015-2590 CISA Oracle · Java SE Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2015-2545 CISA Microsoft · Office Microsoft Office Malformed EPS File Vulnerability 2022-03-03 1628d overdue —
CVE-2015-2424 CISA Microsoft · PowerPoint Microsoft PowerPoint Memory Corruption Vulnerability 2022-03-03 1628d overdue —
CVE-2015-2387 CISA Microsoft · ATM Font Driver Microsoft ATM Font Driver Privilege Escalation Vulnerability 2022-03-03 1628d overdue —
CVE-2015-1701 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2022-03-03 1628d overdue RANSOMWARE
CVE-2015-1642 CISA Microsoft · Office Microsoft Office Memory Corruption Vulnerability 2022-03-03 1628d overdue —
CVE-2014-4114 CISA Microsoft · Windows Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2014-0496 CISA Adobe · Reader and Acrobat Adobe Reader and Acrobat Use-After-Free Vulnerability 2022-03-03 1628d overdue —
CVE-2013-5065 CISA Microsoft · Windows Microsoft Windows Kernel Privilege Escalation Vulnerability 2022-03-03 1628d overdue —
CVE-2013-3897 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Use-After-Free Vulnerability 2022-03-03 1628d overdue —
CVE-2013-3346 CISA Adobe · Reader and Acrobat Adobe Reader and Acrobat Memory Corruption Vulnerability 2022-03-03 1628d overdue —
CVE-2013-1675 CISA Mozilla · Firefox Mozilla Firefox Information Disclosure Vulnerability 2022-03-03 1628d overdue —
CVE-2013-1347 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2013-0641 CISA Adobe · Reader Adobe Reader Buffer Overflow Vulnerability 2022-03-03 1628d overdue —
CVE-2013-0640 CISA Adobe · Reader and Acrobat Adobe Reader and Acrobat Memory Corruption Vulnerability 2022-03-03 1628d overdue —
CVE-2013-0632 CISA Adobe · ColdFusion Adobe ColdFusion Authentication Bypass Vulnerability 2022-03-03 1628d overdue —
CVE-2012-4681 CISA Oracle · Java SE Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability 2022-03-03 1628d overdue RANSOMWARE
CVE-2012-1856 CISA Microsoft · Office Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2012-1723 CISA Oracle · Java SE Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability 2022-03-03 1628d overdue RANSOMWARE
CVE-2012-1535 CISA Adobe · Flash Player Adobe Flash Player Arbitrary Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2012-0507 CISA Oracle · Java SE Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability 2022-03-03 1628d overdue RANSOMWARE
CVE-2011-3544 CISA Oracle · Java SE JDK and JRE Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2011-1889 CISA Microsoft · Forefront Threat Management Gateway (TMG) Microsoft Forefront TMG Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2011-0611 CISA Adobe · Flash Player Adobe Flash Player Remote Code Execution Vulnerability 2022-03-03 1628d overdue —
CVE-2010-3333 CISA Microsoft · Office Microsoft Office Stack-based Buffer Overflow Vulnerability 2022-03-03 1628d overdue —
CVE-2010-0232 CISA Microsoft · Windows Microsoft Windows Kernel Exception Handler Vulnerability 2022-03-03 1628d overdue —
CVE-2010-0188 CISA Adobe · Reader and Acrobat Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability 2022-03-03 1628d overdue RANSOMWARE
CVE-2009-3129 CISA Microsoft · Excel Microsoft Excel Featheader Record Memory Corruption Vulnerability 2022-03-03 1628d overdue —
CVE-2009-1123 CISA Microsoft · Windows Microsoft Windows Improper Input Validation Vulnerability 2022-03-03 1628d overdue —
CVE-2008-3431 CISA Oracle · VirtualBox Oracle VirtualBox Insufficient Input Validation Vulnerability 2022-03-03 1628d overdue —
CVE-2008-2992 CISA Adobe · Acrobat and Reader Adobe Reader and Acrobat Input Validation Vulnerability 2022-03-03 1628d overdue RANSOMWARE
CVE-2004-0210 CISA Microsoft · Windows Microsoft Windows Privilege Escalation Vulnerability 2022-03-03 1628d overdue —
CVE-2002-0367 CISA Microsoft · Windows Microsoft Windows Privilege Escalation Vulnerability 2022-03-03 1628d overdue —
CVE-2022-24682 CISA Synacor · Zimbra Collaborate Suite (ZCS) Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability 2022-02-25 1641d overdue RANSOMWARE
CVE-2017-8570 CISA Microsoft · Office Microsoft Office Remote Code Execution Vulnerability 2022-02-25 1474d overdue —
CVE-2017-0222 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Remote Code Execution Vulnerability 2022-02-25 1474d overdue —
CVE-2014-6352 CISA Microsoft · Windows Microsoft Windows Code Injection Vulnerability 2022-02-25 1474d overdue —
CVE-2022-23134 CISA Zabbix · Frontend Zabbix Frontend Improper Access Control Vulnerability 2022-02-22 1644d overdue —
CVE-2022-23131 CISA Zabbix · Frontend Zabbix Frontend Authentication Bypass Vulnerability 2022-02-22 1644d overdue —
CVE-2022-24086 CISA Adobe · Commerce and Magento Open Source Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability 2022-02-15 1651d overdue —
CVE-2022-0609 CISA Google · Chromium Animation Google Chromium Animation Use-After-Free Vulnerability 2022-02-15 1651d overdue —
CVE-2019-0752 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Type Confusion Vulnerability 2022-02-15 1484d overdue RANSOMWARE
CVE-2018-8174 CISA Microsoft · Windows Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability 2022-02-15 1484d overdue RANSOMWARE
CVE-2018-20250 CISA RARLAB · WinRAR WinRAR Absolute Path Traversal Vulnerability 2022-02-15 1484d overdue RANSOMWARE
CVE-2018-15982 CISA Adobe · Flash Player Adobe Flash Player Use-After-Free Vulnerability 2022-02-15 1484d overdue RANSOMWARE
CVE-2017-9841 CISA PHPUnit · PHPUnit PHPUnit Command Injection Vulnerability 2022-02-15 1484d overdue —
CVE-2014-1761 CISA Microsoft · Word Microsoft Word Memory Corruption Vulnerability 2022-02-15 1484d overdue —
CVE-2013-3906 CISA Microsoft · Graphics Component Microsoft Graphics Component Memory Corruption Vulnerability 2022-02-15 1484d overdue —
CVE-2022-22620 CISA Apple · iOS, iPadOS, and macOS Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability 2022-02-11 1655d overdue —
CVE-2021-36934 CISA Microsoft · Windows Microsoft Windows SAM Local Privilege Escalation Vulnerability 2022-02-10 1656d overdue —
CVE-2020-0796 CISA Microsoft · SMBv3 Microsoft SMBv3 Remote Code Execution Vulnerability 2022-02-10 1489d overdue RANSOMWARE
CVE-2018-1000861 CISA Jenkins · Jenkins Stapler Web Framework Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability 2022-02-10 1489d overdue —
CVE-2017-9791 CISA Apache · Struts 1 Apache Struts 1 Improper Input Validation Vulnerability 2022-02-10 1489d overdue —
CVE-2017-8464 CISA Microsoft · Windows Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability 2022-02-10 1489d overdue —
CVE-2017-10271 CISA + EU Oracle · WebLogic Server Oracle Corporation WebLogic Server Remote Code Execution Vulnerability 2022-02-10 1489d overdue RANSOMWARE
CVE-2017-0263 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2022-02-10 1489d overdue —
CVE-2017-0262 CISA Microsoft · Office Microsoft Office Remote Code Execution Vulnerability 2022-02-10 1489d overdue —
CVE-2017-0145 CISA Microsoft · SMBv1 Microsoft SMBv1 Remote Code Execution Vulnerability 2022-02-10 1489d overdue RANSOMWARE
CVE-2017-0144 CISA + EU Microsoft · SMBv1 Microsoft SMBv1 Remote Code Execution Vulnerability 2022-02-10 1489d overdue RANSOMWARE
CVE-2016-3088 CISA Apache · ActiveMQ Apache ActiveMQ Improper Input Validation Vulnerability 2022-02-10 1489d overdue —
CVE-2015-2051 CISA D-Link · DIR-645 Router D-Link DIR-645 Router Remote Code Execution Vulnerability 2022-02-10 1489d overdue —
CVE-2015-1635 CISA Microsoft · HTTP.sys Microsoft HTTP.sys Remote Code Execution Vulnerability 2022-02-10 1489d overdue —
CVE-2015-1130 CISA Apple · OS X Apple OS X Authentication Bypass Vulnerability 2022-02-10 1489d overdue —
CVE-2014-4404 CISA Apple · OS X Apple OS X Heap-Based Buffer Overflow Vulnerability 2022-02-10 1489d overdue —
CVE-2022-21882 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2022-02-04 1662d overdue RANSOMWARE
CVE-2022-22587 CISA Apple · iOS and macOS Apple Memory Corruption Vulnerability 2022-01-28 1669d overdue —
CVE-2021-20038 CISA SonicWall · SMA 100 Appliances SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability 2022-01-28 1669d overdue RANSOMWARE
CVE-2020-5722 CISA Grandstream · UCM6200 Grandstream Networks UCM6200 Series SQL Injection Vulnerability 2022-01-28 1502d overdue —
CVE-2020-0787 CISA + EU Microsoft · Windows Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability 2022-01-28 1502d overdue RANSOMWARE
CVE-2017-5689 CISA Intel · Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability 2022-01-28 1502d overdue —
CVE-2014-7169 CISA GNU · Bourne-Again Shell (Bash) GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability 2022-01-28 1502d overdue —
CVE-2014-6271 CISA GNU · Bourne-Again Shell (Bash) GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability 2022-01-28 1502d overdue —
CVE-2014-1776 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Memory Corruption Vulnerability 2022-01-28 1502d overdue —
CVE-2021-35247 CISA SolarWinds · Serv-U SolarWinds Serv-U Improper Input Validation Vulnerability 2022-01-21 1676d overdue —
CVE-2018-8453 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2022-01-21 1509d overdue RANSOMWARE
CVE-2012-0391 CISA Apache · Struts 2 Apache Struts 2 Improper Input Validation Vulnerability 2022-01-21 1509d overdue —
CVE-2006-1547 CISA Apache · Struts 1 Apache Struts 1 ActionForm Denial-of-Service Vulnerability 2022-01-21 1509d overdue —
CVE-2021-40870 CISA Aviatrix · Aviatrix Controller Aviatrix Controller Unrestricted Upload of File 2022-01-18 1679d overdue —
CVE-2021-33766 CISA Microsoft · Exchange Server Microsoft Exchange Server Information Disclosure 2022-01-18 1679d overdue —
CVE-2021-32648 CISA October CMS · October CMS October CMS Improper Authentication 2022-01-18 1679d overdue —
CVE-2021-25298 CISA Nagios · Nagios XI Nagios XI OS Command Injection 2022-01-18 1679d overdue —
CVE-2021-25297 CISA Nagios · Nagios XI Nagios XI OS Command Injection 2022-01-18 1679d overdue —
CVE-2021-25296 CISA Nagios · Nagios XI Nagios XI OS Command Injection 2022-01-18 1679d overdue —
CVE-2021-22991 CISA F5 · BIG-IP Traffic Management Microkernel F5 BIG-IP Traffic Management Microkernel Buffer Overflow 2022-01-18 1679d overdue —
CVE-2021-21975 CISA VMware · vRealize Operations Manager API VMware Server Side Request Forgery in vRealize Operations Manager API 2022-01-18 1679d overdue RANSOMWARE
CVE-2021-21315 CISA Npm package · System Information Library for Node.JS System Information Library for Node.JS Command Injection 2022-01-18 1679d overdue —
CVE-2020-14864 CISA Oracle · Intelligence Enterprise Edition Oracle Business Intelligence Enterprise Edition Path Transversal 2022-01-18 1512d overdue —
CVE-2020-13927 CISA Apache · Airflow's Experimental API Apache Airflow's Experimental API Authentication Bypass 2022-01-18 1512d overdue —
CVE-2020-13671 CISA Drupal · Drupal core Drupal core Un-restricted Upload of File 2022-01-18 1512d overdue —
CVE-2020-11978 CISA Apache · Airflow Apache Airflow Command Injection 2022-01-18 1512d overdue —
CVE-2021-36260 CISA Hikvision · Security cameras web server Hikvision Improper Input Validation 2022-01-10 1687d overdue —
CVE-2021-27860 CISA FatPipe · WARP, IPVPN, and MPVPN software FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit 2022-01-10 1687d overdue —
CVE-2021-22017 CISA VMware · vCenter Server VMware vCenter Server Improper Access Control 2022-01-10 1687d overdue —
CVE-2020-6572 CISA Google · Chrome Media Google Chrome Media Use-After-Free Vulnerability 2022-01-10 1520d overdue —
CVE-2019-9670 CISA Synacor · Zimbra Collaboration Suite (ZCS) Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference 2022-01-10 1520d overdue —
CVE-2019-7609 CISA Elastic · Kibana Kibana Arbitrary Code Execution 2022-01-10 1520d overdue —
CVE-2019-2725 CISA Oracle · WebLogic Server Oracle WebLogic Server, Injection 2022-01-10 1520d overdue RANSOMWARE
CVE-2019-1579 CISA Palo Alto Networks · PAN-OS Palo Alto Networks PAN-OS Remote Code Execution Vulnerability 2022-01-10 1520d overdue RANSOMWARE
CVE-2019-1458 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2022-01-10 1520d overdue RANSOMWARE
CVE-2019-10149 CISA Exim · Mail Transfer Agent (MTA) Exim Mail Transfer Agent (MTA) Improper Input Validation 2022-01-10 1520d overdue —
CVE-2018-13383 CISA Fortinet · FortiOS and FortiProxy Fortinet FortiOS and FortiProxy Out-of-bounds Write 2022-01-10 1520d overdue RANSOMWARE
CVE-2018-13382 CISA Fortinet · FortiOS and FortiProxy Fortinet FortiOS and FortiProxy Improper Authorization 2022-01-10 1520d overdue RANSOMWARE
CVE-2017-1000486 CISA Primetek · Primefaces Application Primetek Primefaces Remote Code Execution Vulnerability 2022-01-10 1520d overdue —
CVE-2015-7450 CISA IBM · WebSphere Application Server and Server Hypervisor Edition IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. 2022-01-10 1520d overdue —
CVE-2013-3900 CISA Microsoft · WinVerifyTrust function Microsoft WinVerifyTrust function Remote Code Execution 2022-01-10 1520d overdue —
CVE-2021-43890 CISA Microsoft · Windows Microsoft Windows AppX Installer Spoofing Vulnerability 2021-12-15 1713d overdue RANSOMWARE
CVE-2021-4102 CISA Google · Chromium V8 Google Chromium V8 Use-After-Free Vulnerability 2021-12-15 1713d overdue —
CVE-2021-44515 CISA Zoho · Desktop Central Zoho Desktop Central Authentication Bypass Vulnerability 2021-12-10 1718d overdue —
CVE-2021-44228 CISA Apache · Log4j2 Apache Log4j2 Remote Code Execution Vulnerability 2021-12-10 1718d overdue RANSOMWARE
CVE-2021-44168 CISA Fortinet · FortiOS Fortinet FortiOS Arbitrary File Download 2021-12-10 1718d overdue —
CVE-2021-35394 CISA Realtek · Jungle Software Development Kit (SDK) Realtek Jungle SDK Remote Code Execution Vulnerability 2021-12-10 1718d overdue —
CVE-2020-8816 CISA Pi-hole · AdminLTE Pi-Hole AdminLTE Remote Code Execution Vulnerability 2021-12-10 1550d overdue —
CVE-2020-17463 CISA Fuel CMS · Fuel CMS Fuel CMS SQL Injection Vulnerability 2021-12-10 1550d overdue —
CVE-2019-7238 CISA Sonatype · Nexus Repository Manager Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability 2021-12-10 1550d overdue —
CVE-2019-13272 CISA Linux · Kernel Linux Kernel Improper Privilege Management Vulnerability 2021-12-10 1550d overdue —
CVE-2019-10758 CISA MongoDB · mongo-express MongoDB mongo-express Remote Code Execution Vulnerability 2021-12-10 1550d overdue —
CVE-2019-0193 CISA Apache · Solr Apache Solr DataImportHandler Code Injection Vulnerability 2021-12-10 1550d overdue —
CVE-2017-17562 CISA Embedthis · GoAhead Embedthis GoAhead Remote Code Execution Vulnerability 2021-12-10 1550d overdue —
CVE-2017-12149 CISA + EU Red Hat · JBoss Application Server Red Hat JBoss Application Server Remote Code Execution Vulnerability 2021-12-10 1550d overdue RANSOMWARE
CVE-2010-1871 CISA Red Hat · JBoss Seam 2 Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability 2021-12-10 1550d overdue —
CVE-2021-44077 CISA Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability 2021-12-01 1727d overdue —
CVE-2021-40438 CISA Apache · Apache Apache HTTP Server-Side Request Forgery (SSRF) 2021-12-01 1727d overdue RANSOMWARE
CVE-2021-37415 CISA Zoho · ManageEngine ServiceDesk Plus (SDP) Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability 2021-12-01 1727d overdue —
CVE-2020-11261 CISA Qualcomm · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Qualcomm Multiple Chipsets Improper Input Validation Vulnerability 2021-12-01 1559d overdue —
CVE-2018-14847 CISA MikroTik · RouterOS MikroTik Router OS Directory Traversal Vulnerability 2021-12-01 1559d overdue —
CVE-2021-42321 CISA Microsoft · Exchange Microsoft Exchange Server Remote Code Execution Vulnerability 2021-11-17 1741d overdue RANSOMWARE
CVE-2021-42292 CISA Microsoft · Office Microsoft Excel Security Feature Bypass 2021-11-17 1741d overdue —
CVE-2021-40449 CISA Microsoft · Windows Microsoft Windows Win32k Privilege Escalation Vulnerability 2021-11-17 1741d overdue RANSOMWARE
CVE-2021-22204 CISA Perl · Exiftool ExifTool Remote Code Execution Vulnerability 2021-11-17 1741d overdue —
CVE-2021-42258 CISA BQE · BillQuick Web Suite BQE BillQuick Web Suite SQL Injection Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-42013 CISA Apache · HTTP Server Apache HTTP Server Path Traversal Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-41773 CISA Apache · HTTP Server Apache HTTP Server Path Traversal Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-40539 CISA Zoho · ManageEngine Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-40444 CISA Microsoft · MSHTML Microsoft MSHTML Remote Code Execution Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-38649 CISA Microsoft · Open Management Infrastructure (OMI) Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-38648 CISA Microsoft · Open Management Infrastructure (OMI) Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-38647 CISA Microsoft · Open Management Infrastructure (OMI) Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-38645 CISA Microsoft · Open Management Infrastructure (OMI) Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-38003 CISA Google · Chromium V8 Google Chromium V8 Memory Corruption Vulnerability 2021-11-03 1755d overdue —
CVE-2021-38000 CISA Google · Chromium Intents Google Chromium Intents Improper Input Validation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-37976 CISA Google · Chromium Google Chromium Information Disclosure Vulnerability 2021-11-03 1755d overdue —
CVE-2021-37975 CISA Google · Chromium V8 Google Chromium V8 Use-After-Free Vulnerability 2021-11-03 1755d overdue —
CVE-2021-37973 CISA Google · Chromium Portals Google Chromium Portals Use-After-Free Vulnerability 2021-11-03 1755d overdue —
CVE-2021-36955 CISA Microsoft · Windows Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-36948 CISA Microsoft · Windows Microsoft Windows Update Medic Service Privilege Escalation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-36942 CISA Microsoft · Windows Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-36742 CISA Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security Trend Micro Multiple Products Improper Input Validation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-36741 CISA Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security Trend Micro Multiple Products Improper Input Validation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-35464 CISA ForgeRock · Access Management (AM) ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-35395 CISA Realtek · AP-Router SDK Realtek AP-Router SDK Buffer Overflow Vulnerability 2021-11-03 1755d overdue —
CVE-2021-35211 CISA SolarWinds · Serv-U SolarWinds Serv-U Remote Code Execution Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-34527 CISA Microsoft · Windows Microsoft Windows Print Spooler Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2021-34523 CISA Microsoft · Exchange Server Microsoft Exchange Server Privilege Escalation Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-34473 CISA Microsoft · Exchange Server Microsoft Exchange Server Remote Code Execution Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-34448 CISA Microsoft · Windows Microsoft Windows Scripting Engine Memory Corruption Vulnerability 2021-11-03 1755d overdue —
CVE-2021-33771 CISA Microsoft · Windows Microsoft Windows Kernel Privilege Escalation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-33742 CISA Microsoft · Windows Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability 2021-11-03 1755d overdue —
CVE-2021-33739 CISA Microsoft · Windows Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-31979 CISA Microsoft · Windows Microsoft Windows Kernel Privilege Escalation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-31956 CISA Microsoft · Windows Microsoft Windows NTFS Privilege Escalation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-31955 CISA Microsoft · Windows Microsoft Windows Kernel Information Disclosure Vulnerability 2021-11-03 1755d overdue —
CVE-2021-31755 CISA Tenda · AC11 Router Tenda AC11 Router Stack Buffer Overflow Vulnerability 2021-11-03 1755d overdue —
CVE-2021-31207 CISA Microsoft · Exchange Server Microsoft Exchange Server Security Feature Bypass Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-31201 CISA Microsoft · Enhanced Cryptographic Provider Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-31199 CISA Microsoft · Enhanced Cryptographic Provider Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30869 CISA Apple · iOS, iPadOS, and macOS Apple iOS, iPadOS, and macOS Type Confusion Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30860 CISA Apple · Multiple Products Apple Multiple Products Integer Overflow Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30858 CISA Apple · iOS, iPadOS, and macOS Apple iOS, iPadOS, macOS Use-After-Free Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30807 CISA Apple · Multiple Products Apple Multiple Products Memory Corruption Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30762 CISA Apple · iOS Apple iOS WebKit Use-After-Free Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30761 CISA Apple · iOS Apple iOS WebKit Memory Corruption Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30713 CISA Apple · macOS Apple macOS Unspecified Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30666 CISA Apple · iOS Apple iOS WebKit Buffer Overflow Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30665 CISA Apple · Multiple Products Apple Multiple Products WebKit Memory Corruption Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30663 CISA Apple · Multiple Products Apple Multiple Products WebKit Integer Overflow Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30661 CISA Apple · Multiple Products Apple Multiple Products WebKit Storage Use-After-Free Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30657 CISA Apple · macOS Apple macOS Unspecified Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30633 CISA Google · Chromium Indexed DB API Google Chromium Indexed DB API Use-After-Free Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30632 CISA Google · Chromium V8 Google Chromium V8 Out-of-Bounds Write Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30563 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30554 CISA Google · Chromium WebGL Google Chromium WebGL Use-After-Free Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30551 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2021-11-03 1755d overdue —
CVE-2021-30116 CISA Kaseya · Virtual System/Server Administrator (VSA) Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-28664 CISA Arm · Mali Graphics Processing Unit (GPU) Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability 2021-11-03 1755d overdue —
CVE-2021-28663 CISA Arm · Mali Graphics Processing Unit (GPU) Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability 2021-11-03 1755d overdue —
CVE-2021-28550 CISA Adobe · Acrobat and Reader Adobe Acrobat and Reader Use-After-Free Vulnerability 2021-11-03 1755d overdue —
CVE-2021-28310 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-27562 CISA Arm · Trusted Firmware Arm Trusted Firmware Out-of-Bounds Write Vulnerability 2021-11-03 1755d overdue —
CVE-2021-27561 CISA Yealink · Device Management Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability 2021-11-03 1755d overdue —
CVE-2021-27104 CISA Accellion · FTA Accellion FTA OS Command Injection Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-27103 CISA Accellion · FTA Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-27102 CISA Accellion · FTA Accellion FTA OS Command Injection Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-27101 CISA Accellion · FTA Accellion FTA SQL Injection Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-27085 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Remote Code Execution Vulnerability 2021-11-03 1755d overdue —
CVE-2021-27065 CISA Microsoft · Exchange Server Microsoft Exchange Server Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2021-27059 CISA Microsoft · Office Microsoft Office Remote Code Execution Vulnerability 2021-11-03 1755d overdue —
CVE-2021-26858 CISA Microsoft · Exchange Server Microsoft Exchange Server Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2021-26857 CISA Microsoft · Exchange Server Microsoft Exchange Server Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2021-26855 CISA Microsoft · Exchange Server Microsoft Exchange Server Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2021-26411 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Memory Corruption Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-26084 CISA Atlassian · Confluence Server and Data Center Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-23874 CISA McAfee · McAfee Total Protection (MTP) McAfee Total Protection (MTP) Improper Privilege Management Vulnerability 2021-11-03 1755d overdue —
CVE-2021-22986 CISA F5 · BIG-IP and BIG-IQ Centralized Management F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-22900 CISA Ivanti · Pulse Connect Secure Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability 2021-11-03 1588d overdue —
CVE-2021-22899 CISA Ivanti · Pulse Connect Secure Ivanti Pulse Connect Secure Command Injection Vulnerability 2021-11-03 1588d overdue —
CVE-2021-22894 CISA Ivanti · Pulse Connect Secure Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability 2021-11-03 1588d overdue —
CVE-2021-22893 CISA Ivanti · Pulse Connect Secure Ivanti Pulse Connect Secure Use-After-Free Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2021-22506 CISA Micro Focus · Micro Focus Access Manager Micro Focus Access Manager Information Leakage Vulnerability 2021-11-03 1755d overdue —
CVE-2021-22502 CISA Micro Focus · Operation Bridge Reporter (OBR) Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability 2021-11-03 1755d overdue —
CVE-2021-22205 CISA GitLab · Community and Enterprise Editions GitLab Community and Enterprise Editions Remote Code Execution Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-22005 CISA VMware · vCenter Server VMware vCenter Server File Upload Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-21985 CISA VMware · vCenter Server VMware vCenter Server Improper Input Validation Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-21972 CISA VMware · vCenter Server VMware vCenter Server Remote Code Execution Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-21224 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2021-11-03 1755d overdue —
CVE-2021-21220 CISA Google · Chromium V8 Google Chromium V8 Improper Input Validation Vulnerability 2021-11-03 1755d overdue —
CVE-2021-21206 CISA Google · Chromium Blink Google Chromium Blink Use-After-Free Vulnerability 2021-11-03 1755d overdue —
CVE-2021-21193 CISA Google · Chromium Blink Google Chromium Blink Use-After-Free Vulnerability 2021-11-03 1755d overdue —
CVE-2021-21166 CISA Google · Chromium Google Chromium Race Condition Vulnerability 2021-11-03 1755d overdue —
CVE-2021-21148 CISA Google · Chromium V8 Google Chromium V8 Heap Buffer Overflow Vulnerability 2021-11-03 1755d overdue —
CVE-2021-21017 CISA Adobe · Acrobat and Reader Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability 2021-11-03 1755d overdue —
CVE-2021-20090 CISA Arcadyan · Buffalo Firmware Arcadyan Buffalo Firmware Path Traversal Vulnerability 2021-11-03 1755d overdue —
CVE-2021-20023 CISA SonicWall · SonicWall Email Security SonicWall Email Security Path Traversal Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-20022 CISA SonicWall · SonicWall Email Security SonicWall Email Security Unrestricted Upload of File Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-20021 CISA SonicWall · SonicWall Email Security SonicWall Email Security Improper Privilege Management Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-20016 CISA SonicWall · SSLVPN SMA100 SonicWall SSLVPN SMA100 SQL Injection Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-1906 CISA Qualcomm · Multiple Chipsets Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability 2021-11-03 1755d overdue —
CVE-2021-1905 CISA Qualcomm · Multiple Chipsets Qualcomm Multiple Chipsets Use-After-Free Vulnerability 2021-11-03 1588d overdue —
CVE-2021-1879 CISA Apple · iOS, iPadOS, and watchOS Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability 2021-11-03 1755d overdue —
CVE-2021-1871 CISA Apple · iOS, iPadOS, and macOS Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability 2021-11-03 1755d overdue —
CVE-2021-1870 CISA Apple · iOS, iPadOS, and macOS Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability 2021-11-03 1755d overdue —
CVE-2021-1782 CISA Apple · Multiple Products Apple Multiple Products Race Condition Vulnerability 2021-11-03 1755d overdue —
CVE-2021-1732 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-1675 CISA Microsoft · Windows Microsoft Windows Print Spooler Remote Code Execution Vulnerability 2021-11-03 1755d overdue RANSOMWARE
CVE-2021-1647 CISA Microsoft · Defender Microsoft Defender Remote Code Execution Vulnerability 2021-11-03 1755d overdue —
CVE-2021-1498 CISA Cisco · HyperFlex HX Cisco HyperFlex HX Data Platform Command Injection Vulnerability 2021-11-03 1755d overdue —
CVE-2021-1497 CISA Cisco · HyperFlex HX Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability 2021-11-03 1755d overdue —
CVE-2020-9859 CISA Apple · Multiple Products Apple Multiple Products Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-9819 CISA Apple · iOS, iPadOS, and watchOS Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability 2021-11-03 1588d overdue —
CVE-2020-9818 CISA Apple · iOS, iPadOS, and watchOS Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability 2021-11-03 1588d overdue —
CVE-2020-8657 CISA EyesOfNetwork · EyesOfNetwork EyesOfNetwork Use of Hard-Coded Credentials Vulnerability 2021-11-03 1588d overdue —
CVE-2020-8655 CISA EyesOfNetwork · EyesOfNetwork EyesOfNetwork Improper Privilege Management Vulnerability 2021-11-03 1588d overdue —
CVE-2020-8644 CISA PlaySMS · PlaySMS PlaySMS Server-Side Template Injection Vulnerability 2021-11-03 1588d overdue —
CVE-2020-8599 CISA Trend Micro · Apex One and OfficeScan Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability 2021-11-03 1588d overdue —
CVE-2020-8515 CISA DrayTek · Multiple Vigor Routers Multiple DrayTek Vigor Routers Web Management Page Vulnerability 2021-11-03 1588d overdue —
CVE-2020-8468 CISA Trend Micro · Apex One, OfficeScan and Worry-Free Business Security Agents Trend Micro Multiple Products Content Validation Escape Vulnerability 2021-11-03 1588d overdue —
CVE-2020-8467 CISA Trend Micro · Apex One and OfficeScan Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-8260 CISA Ivanti · Pulse Connect Secure Ivanti Pulse Connect Secure Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-8243 CISA Ivanti · Pulse Connect Secure Ivanti Pulse Connect Secure Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-8196 CISA Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability 2021-11-03 1588d overdue —
CVE-2020-8195 CISA Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability 2021-11-03 1588d overdue —
CVE-2020-8193 CISA Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability 2021-11-03 1588d overdue —
CVE-2020-7961 CISA Liferay · Liferay Portal Liferay Portal Deserialization of Untrusted Data Vulnerability 2021-11-03 1588d overdue —
CVE-2020-6820 CISA Mozilla · Firefox and Thunderbird Mozilla Firefox And Thunderbird Use-After-Free Vulnerability 2021-11-03 1588d overdue —
CVE-2020-6819 CISA Mozilla · Firefox and Thunderbird Mozilla Firefox And Thunderbird Use-After-Free Vulnerability 2021-11-03 1588d overdue —
CVE-2020-6418 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2021-11-03 1588d overdue —
CVE-2020-6287 CISA SAP · NetWeaver SAP NetWeaver Missing Authentication for Critical Function Vulnerability 2021-11-03 1588d overdue —
CVE-2020-6207 CISA SAP · Solution Manager SAP Solution Manager Missing Authentication for Critical Function Vulnerability 2021-11-03 1588d overdue —
CVE-2020-5902 CISA F5 · BIG-IP F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2020-5849 CISA Unraid · Unraid Unraid Authentication Bypass Vulnerability 2021-11-03 1588d overdue —
CVE-2020-5847 CISA Unraid · Unraid Unraid Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-5735 CISA Amcrest · Cameras and Network Video Recorder (NVR) Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability 2021-11-03 1588d overdue —
CVE-2020-4430 CISA IBM · Data Risk Manager IBM Data Risk Manager Directory Traversal Vulnerability 2021-11-03 1588d overdue —
CVE-2020-4428 CISA IBM · Data Risk Manager IBM Data Risk Manager Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-4427 CISA IBM · Data Risk Manager IBM Data Risk Manager Security Bypass Vulnerability 2021-11-03 1588d overdue —
CVE-2020-4006 CISA VMware · Multiple Products Multiple VMware Products Command Injection Vulnerability 2021-11-03 1588d overdue —
CVE-2020-3992 CISA VMware · ESXi VMware ESXi OpenSLP Use-After-Free Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2020-3952 CISA VMware · vCenter Server VMware vCenter Server Information Disclosure Vulnerability 2021-11-03 1588d overdue —
CVE-2020-3950 CISA VMware · Multiple Products VMware Multiple Products Privilege Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2020-3580 CISA Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2020-3569 CISA Cisco · IOS XR Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability 2021-11-03 1588d overdue —
CVE-2020-3566 CISA Cisco · IOS XR Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability 2021-11-03 1588d overdue —
CVE-2020-3452 CISA Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Read-Only Path Traversal Vulnerability 2021-11-03 1588d overdue —
CVE-2020-3161 CISA Cisco · Cisco IP Phones Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability 2021-11-03 1588d overdue —
CVE-2020-3118 CISA Cisco · IOS XR Cisco IOS XR Software Discovery Protocol Format String Vulnerability 2021-11-03 1588d overdue —
CVE-2020-29583 CISA Zyxel · Multiple Products Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability 2021-11-03 1588d overdue —
CVE-2020-29557 CISA D-Link · DIR-825 R1 Devices D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability 2021-11-03 1588d overdue —
CVE-2020-27950 CISA Apple · Multiple Products Apple Multiple Products Memory Initialization Vulnerability 2021-11-03 1588d overdue —
CVE-2020-27932 CISA Apple · Multiple Products Apple Multiple Products Type Confusion Vulnerability 2021-11-03 1588d overdue —
CVE-2020-27930 CISA Apple · Multiple Products Apple Multiple Products Memory Corruption Vulnerability 2021-11-03 1588d overdue —
CVE-2020-26919 CISA NETGEAR · JGS516PE Devices Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability 2021-11-03 1588d overdue —
CVE-2020-2555 CISA Oracle · Multiple Products Oracle Multiple Products Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-25506 CISA D-Link · DNS-320 Device D-Link DNS-320 Device Command Injection Vulnerability 2021-11-03 1588d overdue —
CVE-2020-25213 CISA WordPress · File Manager Plugin WordPress File Manager Plugin Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-24557 CISA Trend Micro · Apex One, OfficeScan, and Worry-Free Business Security Trend Micro Multiple Products Improper Access Control Vulnerability 2021-11-03 1588d overdue —
CVE-2020-17530 CISA Apache · Struts Apache Struts Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-17496 CISA vBulletin · vBulletin vBulletin PHP Module Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-17144 CISA Microsoft · Exchange Server Microsoft Exchange Server Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-17087 CISA Microsoft · Windows Microsoft Windows Kernel Privilege Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2020-16846 CISA SaltStack · Salt SaltStack Salt Shell Injection Vulnerability 2021-11-03 1588d overdue —
CVE-2020-16017 CISA Google · Chrome Google Chrome Use-After-Free Vulnerability 2021-11-03 1588d overdue —
CVE-2020-16013 CISA Google · Chromium V8 Google Chromium V8 Incorrect Implementation Vulnerabililty 2021-11-03 1588d overdue —
CVE-2020-16010 CISA Google · Chrome for Android UI Google Chrome for Android UI Heap Buffer Overflow Vulnerability 2021-11-03 1588d overdue —
CVE-2020-16009 CISA Google · Chromium V8 Google Chromium V8 Type Confusion Vulnerability 2021-11-03 1588d overdue —
CVE-2020-15999 CISA Google · Chrome FreeType Google Chrome FreeType Heap Buffer Overflow Vulnerability 2021-11-03 1755d overdue —
CVE-2020-15505 CISA Ivanti · MobileIron Multiple Products Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-14883 CISA Oracle · WebLogic Server Oracle WebLogic Server Unspecified Vulnerability 2021-11-03 1588d overdue —
CVE-2020-14882 CISA Oracle · WebLogic Server Oracle WebLogic Server Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-14871 CISA Oracle · Solaris and Zettabyte File System (ZFS) Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability 2021-11-03 1588d overdue —
CVE-2020-14750 CISA Oracle · WebLogic Server Oracle WebLogic Server Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-1472 CISA + EU Microsoft · Netlogon Microsoft Netlogon Privilege Escalation Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2020-1464 CISA Microsoft · Windows Microsoft Windows Spoofing Vulnerability 2021-11-03 1588d overdue —
CVE-2020-1380 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability 2021-11-03 1588d overdue —
CVE-2020-1350 CISA Microsoft · Windows Microsoft Windows DNS Server Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-12812 CISA Fortinet · FortiOS Fortinet FortiOS SSL VPN Improper Authentication Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2020-12271 CISA Sophos · SFOS Sophos SFOS SQL Injection Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2020-11738 CISA WordPress · Snap Creek Duplicator Plugin WordPress Snap Creek Duplicator Plugin File Download Vulnerability 2021-11-03 1588d overdue —
CVE-2020-11652 CISA SaltStack · Salt SaltStack Salt Path Traversal Vulnerability 2021-11-03 1588d overdue —
CVE-2020-11651 CISA SaltStack · Salt SaltStack Salt Authentication Bypass Vulnerability 2021-11-03 1588d overdue —
CVE-2020-1147 CISA Microsoft · .NET Framework, SharePoint, Visual Studio Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-10987 CISA Tenda · AC1900 Router AC15 Model Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-1054 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2020-1040 CISA Microsoft · Hyper-V RemoteFX Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-10221 CISA rConfig · rConfig rConfig OS Command Injection Vulnerability 2021-11-03 1588d overdue —
CVE-2020-1020 CISA Microsoft · Windows Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-10199 CISA Sonatype · Nexus Repository Sonatype Nexus Repository Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-10189 CISA Zoho · ManageEngine Zoho ManageEngine Desktop Central File Upload Vulnerability 2021-11-03 1588d overdue —
CVE-2020-10181 CISA Sumavision · Enhanced Multimedia Router (EMR) Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability 2021-11-03 1588d overdue —
CVE-2020-10148 CISA SolarWinds · Orion SolarWinds Orion Authentication Bypass Vulnerability 2021-11-03 1588d overdue —
CVE-2020-0986 CISA Microsoft · Windows Microsoft Windows Kernel Privilege Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2020-0968 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2020-0938 CISA Microsoft · Windows Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-0878 CISA Microsoft · Edge and Internet Explorer Microsoft Edge and Internet Explorer Memory Corruption Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2020-0688 CISA Microsoft · Exchange Server Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2020-0683 CISA Microsoft · Windows Microsoft Windows Installer Privilege Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2020-0674 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability 2021-11-03 1588d overdue —
CVE-2020-0646 CISA Microsoft · .NET Framework Microsoft .NET Framework Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2020-0601 CISA Microsoft · Windows Microsoft Windows CryptoAPI Spoofing Vulnerability 2021-11-03 1588d overdue —
CVE-2020-0069 CISA MediaTek · Multiple Chipsets Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability 2021-11-03 1588d overdue —
CVE-2020-0041 CISA Android · Android Kernel Android Kernel Out-of-Bounds Write Vulnerability 2021-11-03 1588d overdue —
CVE-2019-9978 CISA WordPress · Social Warfare Plugin WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability 2021-11-03 1588d overdue —
CVE-2019-9082 CISA ThinkPHP · ThinkPHP ThinkPHP Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2019-8394 CISA Zoho · ManageEngine Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability 2021-11-03 1588d overdue —
CVE-2019-7481 CISA SonicWall · SMA100 SonicWall SMA100 SQL Injection Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-6223 CISA Apple · iOS and macOS Apple iOS and macOS Group Facetime Vulnerability 2021-11-03 1588d overdue —
CVE-2019-5591 CISA Fortinet · FortiOS Fortinet FortiOS Default Configuration Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-5544 CISA VMware · VMware ESXi and Horizon DaaS VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-4716 CISA IBM · Planning Analytics IBM Planning Analytics Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2019-3398 CISA Atlassian · Confluence Server and Data Center Atlassian Confluence Server and Data Center Path Traversal Vulnerability 2021-11-03 1588d overdue —
CVE-2019-3396 CISA Atlassian · Confluence Server and Data Server Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-2215 CISA Android · Android Kernel Android Kernel Use-After-Free Vulnerability 2021-11-03 1588d overdue —
CVE-2019-20085 CISA TVT · NVMS-1000 TVT NVMS-1000 Directory Traversal Vulnerability 2021-11-03 1588d overdue —
CVE-2019-19781 CISA Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-19356 CISA Netis · WF2419 Devices Netis WF2419 Devices Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2019-18988 CISA TeamViewer · Desktop TeamViewer Desktop Bypass Remote Login Vulnerability 2021-11-03 1588d overdue —
CVE-2019-18935 CISA Progress · Telerik UI for ASP.NET AJAX Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-18187 CISA Trend Micro · OfficeScan Trend Micro OfficeScan Directory Traversal Vulnerability 2021-11-03 1588d overdue —
CVE-2019-17558 CISA Apache · Solr Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2019-17026 CISA Mozilla · Firefox and Thunderbird Mozilla Firefox And Thunderbird Type Confusion Vulnerability 2021-11-03 1588d overdue —
CVE-2019-16759 CISA vBulletin · vBulletin vBulletin PHP Module Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2019-1653 CISA Cisco · Small Business RV320 and RV325 Routers Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability 2021-11-03 1588d overdue —
CVE-2019-16256 CISA SIMalliance · Toolbox Browser SIMalliance Toolbox Browser Command Injection Vulnerability 2021-11-03 1588d overdue —
CVE-2019-15949 CISA Nagios · Nagios XI Nagios XI Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2019-15752 CISA Docker · Desktop Community Edition Docker Desktop Community Edition Privilege Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2019-1429 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability 2021-11-03 1588d overdue —
CVE-2019-1367 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-13608 CISA Citrix · StoreFront Server Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-1215 CISA Microsoft · Windows Microsoft Windows Privilege Escalation Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-1214 CISA Microsoft · Windows Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2019-11634 CISA Citrix · Workspace Application and Receiver for Windows Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-11580 CISA Atlassian · Crowd and Crowd Data Center Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-11539 CISA Ivanti · Pulse Connect Secure and Pulse Policy Secure Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-11510 CISA Ivanti · Pulse Connect Secure Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-0863 CISA Microsoft · Windows Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2019-0859 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2019-0808 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2019-0803 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-0797 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2019-0708 CISA Microsoft · Remote Desktop Services Microsoft Remote Desktop Services Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-0604 CISA Microsoft · SharePoint Microsoft SharePoint Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2019-0541 CISA Microsoft · MSHTML Microsoft MSHTML Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2019-0211 CISA Apache · HTTP Server Apache HTTP Server Privilege Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2018-8653 CISA Microsoft · Internet Explorer Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability 2021-11-03 1588d overdue —
CVE-2018-7600 CISA Drupal · Drupal Core Drupal Core Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2018-6789 CISA Exim · Exim Exim Buffer Overflow Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2018-4939 CISA Adobe · ColdFusion Adobe ColdFusion Deserialization of Untrusted Data Vulnerability 2021-11-03 1588d overdue —
CVE-2018-4878 CISA Adobe · Flash Player Adobe Flash Player Use-After-Free Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2018-2380 CISA SAP · Customer Relationship Management (CRM) SAP Customer Relationship Management (CRM) Path Traversal Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2018-20062 CISA ThinkPHP · noneCms ThinkPHP "noneCms" Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2018-18325 CISA DotNetNuke (DNN) · DotNetNuke (DNN) DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability 2021-11-03 1588d overdue —
CVE-2018-15961 CISA Adobe · ColdFusion Adobe ColdFusion Unrestricted File Upload Vulnerability 2021-11-03 1588d overdue —
CVE-2018-15811 CISA DotNetNuke (DNN) · DotNetNuke (DNN) DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability 2021-11-03 1588d overdue —
CVE-2018-14558 CISA Tenda · AC7, AC9, and AC10 Routers Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability 2021-11-03 1588d overdue —
CVE-2018-13379 CISA Fortinet · FortiOS Fortinet FortiOS SSL VPN Path Traversal Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2018-11776 CISA Apache · Struts Apache Struts Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2018-0802 CISA Microsoft · Office Microsoft Office Memory Corruption Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2018-0798 CISA Microsoft · Office Microsoft Office Memory Corruption Vulnerability 2021-11-03 1588d overdue —
CVE-2018-0296 CISA Cisco · Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability 2021-11-03 1588d overdue —
CVE-2018-0171 CISA Cisco · IOS and IOS XE Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2017-9822 CISA DotNetNuke (DNN) · DotNetNuke (DNN) DotNetNuke (DNN) Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2017-9805 CISA Apache · Struts Apache Struts Deserialization of Untrusted Data Vulnerability 2021-11-03 1588d overdue —
CVE-2017-9248 CISA Progress · ASP.NET AJAX and Sitefinity Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability 2021-11-03 1588d overdue —
CVE-2017-8759 CISA Microsoft · .NET Framework Microsoft .NET Framework Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2017-7269 CISA Microsoft · Internet Information Services (IIS) Microsoft Windows Server Buffer Overflow Vulnerability 2021-11-03 1588d overdue —
CVE-2017-6327 CISA Symantec · Symantec Messaging Gateway Symantec Messaging Gateway Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2017-5638 CISA Apache · Struts Apache Struts Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2017-16651 CISA Roundcube · Roundcube Webmail Roundcube Webmail File Disclosure Vulnerability 2021-11-03 1588d overdue —
CVE-2017-11882 CISA Microsoft · Office Microsoft Office Memory Corruption Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2017-11774 CISA Microsoft · Office Microsoft Office Outlook Security Feature Bypass Vulnerability 2021-11-03 1588d overdue —
CVE-2017-0199 CISA Microsoft · Office and WordPad Microsoft Office and WordPad Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2017-0143 CISA Microsoft · Windows Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2016-9563 CISA SAP · NetWeaver SAP NetWeaver XML External Entity (XXE) Vulnerability 2021-11-03 1588d overdue —
CVE-2016-7255 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2016-4437 CISA Apache · Shiro Apache Shiro Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2016-3976 CISA SAP · NetWeaver SAP NetWeaver Directory Traversal Vulnerability 2021-11-03 1588d overdue —
CVE-2016-3718 CISA ImageMagick · ImageMagick ImageMagick Server-Side Request Forgery (SSRF) Vulnerability 2021-11-03 1588d overdue —
CVE-2016-3715 CISA ImageMagick · ImageMagick ImageMagick Arbitrary File Deletion Vulnerability 2021-11-03 1588d overdue —
CVE-2016-3643 CISA SolarWinds · Virtualization Manager SolarWinds Virtualization Manager Privilege Escalation Vulnerability 2021-11-03 1588d overdue —
CVE-2016-3235 CISA Microsoft · Office Microsoft Office OLE DLL Side Loading Vulnerability 2021-11-03 1588d overdue —
CVE-2016-0185 CISA Microsoft · Windows Microsoft Windows Media Center Remote Code Execution Vulnerability 2021-11-03 1588d overdue —
CVE-2016-0167 CISA Microsoft · Win32k Microsoft Win32k Privilege Escalation Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2015-4852 CISA Oracle · WebLogic Server Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability 2021-11-03 1588d overdue —
CVE-2015-1641 CISA Microsoft · Office Microsoft Office Memory Corruption Vulnerability 2021-11-03 1588d overdue —
CVE-2014-1812 CISA Microsoft · Windows Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2012-3152 CISA Oracle · Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability 2021-11-03 1588d overdue —
CVE-2012-0158 CISA Microsoft · MSCOMCTL.OCX Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability 2021-11-03 1588d overdue RANSOMWARE
CVE-2010-5326 CISA SAP · NetWeaver SAP NetWeaver Remote Code Execution Vulnerability 2021-11-03 1588d overdue —

Sources: CISA Known Exploited Vulnerabilities Catalog and the EU KEV via the ENISA European Vulnerability Database. EUVD ids link to ENISA. Countdown is relative to today (UTC).