● Live advisory feed

Security Advisory Fusion for CSIRTs, SOCs & Defenders

Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.

Daily Briefings IntelFusions

Advisories tracked

9,186

Known exploited

1,706

Sources online

Last sync

19M AGO

1,637 records · page 22 / 33

CVE-2012-2034: Adobe Flash Player Memory Corruption Vulnerability

Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).

criticalexploitedCVE-2012-2034 cisa-kev2022-03-28

CVE-2021-26085: Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.

criticalexploitedpublic exploitCVE-2021-26085 cisa-kev2022-03-28

CVE-2019-7483: SonicWall SMA100 Directory Traversal Vulnerability

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

criticalexploitedCVE-2019-7483 cisa-kev2022-03-28

CVE-2017-0213: Microsoft Windows Privilege Escalation Vulnerability

Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.

criticalexploitedpublic exploitCVE-2017-0213 cisa-kev2022-03-28

CVE-2016-0040: Microsoft Windows Kernel Privilege Escalation Vulnerability

The kernel in Microsoft Windows allows local users to gain privileges via a crafted application.

criticalexploitedpublic exploitCVE-2016-0040 cisa-kev2022-03-28

CVE-2013-1690: Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.

criticalexploitedpublic exploitCVE-2013-1690 cisa-kev2022-03-28

CVE-2016-7201: Microsoft Edge Memory Corruption Vulnerability

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.

criticalexploitedpublic exploitCVE-2016-7201 cisa-kev2022-03-28

CVE-2022-1096: Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrom…

criticalexploitedpublic exploitCVE-2022-1096 cisa-kev2022-03-28

CVE-2018-8406: Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.

criticalexploitedCVE-2018-8406 cisa-kev2022-03-28

CVE-2011-2005: Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.

criticalexploitedpublic exploitCVE-2011-2005 cisa-kev2022-03-28

CVE-2018-8405: Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.

criticalexploitedCVE-2018-8405 cisa-kev2022-03-28

CVE-2015-2419: Microsoft Internet Explorer Memory Corruption Vulnerability

JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.

criticalexploitedpublic exploitCVE-2015-2419 cisa-kev2022-03-28

CVE-2012-2539: Microsoft Word Remote Code Execution Vulnerability

Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.

criticalexploitedCVE-2012-2539 cisa-kev2022-03-28

CVE-2022-0543: Debian-specific Redis Server Lua Sandbox Escape Vulnerability

Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

criticalexploitedpublic exploitCVE-2022-0543 cisa-kev2022-03-28

CVE-2012-0518: Oracle Fusion Middleware Unspecified Vulnerability

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors

criticalexploitedCVE-2012-0518 cisa-kev2022-03-28

CVE-2010-4398: Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.

criticalexploitedpublic exploitCVE-2010-4398 cisa-kev2022-03-28

CVE-2021-20028: SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.

criticalexploitedCVE-2021-20028 cisa-kev2022-03-28

CVE-2018-0125: Cisco VPN Routers Remote Code Execution Vulnerability

A vulnerability in the web interface of the Cisco VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as root and gain full control of an affected system.

criticalexploitedCVE-2018-0125 cisa-kev2022-03-25

CVE-2022-26318: WatchGuard Firebox and XTM Appliances Arbitrary Code Execution

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code.

criticalexploitedpublic exploitCVE-2022-26318 cisa-kev2022-03-25

CVE-2020-25223: Sophos SG UTM Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM.

criticalexploitedpublic exploitCVE-2020-25223 cisa-kev2022-03-25

CVE-2020-1631: Juniper Junos OS Path Traversal Vulnerability

A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform remote code execution.

criticalexploitedCVE-2020-1631 cisa-kev2022-03-25

CVE-2019-16920: D-Link Multiple Routers Command Injection Vulnerability

Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise.

criticalexploitedpublic exploitCVE-2019-16920 cisa-kev2022-03-25

CVE-2019-0903: Microsoft GDI Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.

criticalexploitedCVE-2019-0903 cisa-kev2022-03-25

CVE-2018-14839: LG N1A1 NAS Remote Command Execution Vulnerability

LG N1A1 NAS 3718.510 is affected by a remote code execution vulnerability.

criticalexploitedCVE-2018-14839 cisa-kev2022-03-25

CVE-2018-1273: VMware Tanzu Spring Data Commons Property Binder Vulnerability

Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution.

criticalexploitedpublic exploitCVE-2018-1273 cisa-kev2022-03-25

CVE-2018-11138: Quest KACE System Management Appliance Remote Command Execution Vulnerability

The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance is accessible by anonymous users and can be abused to perform remote code execution.

criticalexploitedpublic exploitCVE-2018-11138 cisa-kev2022-03-25

CVE-2017-3881: Cisco IOS and IOS XE Remote Code Execution Vulnerability

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges.

criticalexploitedpublic exploitCVE-2017-3881 cisa-kev2022-03-25

CVE-2017-12615: Apache Tomcat on Windows Remote Code Execution Vulnerability

When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

criticalexploitedpublic exploitCVE-2017-12615 cisa-kev2022-03-25

CVE-2016-1555: NETGEAR Multiple WAP Devices Command Injection Vulnerability

Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution.

criticalexploitedpublic exploitCVE-2016-1555 cisa-kev2022-03-25

CVE-2016-0752: Ruby on Rails Directory Traversal Vulnerability

Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.

criticalexploitedpublic exploitCVE-2016-0752 cisa-kev2022-03-25

CVE-2015-3035: TP-Link Multiple Archer Devices Directory Traversal Vulnerability

Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

criticalexploitedpublic exploitCVE-2015-3035 cisa-kev2022-03-25

CVE-2020-2506: QNAP Helpdesk Improper Access Control Vulnerability

QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive information.

criticalexploitedCVE-2020-2506 cisa-kev2022-03-25

CVE-2014-0130: Ruby on Rails Directory Traversal Vulnerability

Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.

criticalexploitedpublic exploitCVE-2014-0130 cisa-kev2022-03-25

CVE-2013-2251: Apache Struts Improper Input Validation Vulnerability

Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.

criticalexploitedpublic exploitCVE-2013-2251 cisa-kev2022-03-25

CVE-2009-2055: Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).

criticalexploitedCVE-2009-2055 cisa-kev2022-03-25

CVE-2018-6961: VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution.

criticalexploitedpublic exploitCVE-2018-6961 cisa-kev2022-03-25

CVE-2010-4345: Exim Privilege Escalation Vulnerability

Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.

criticalexploitedpublic exploitCVE-2010-4345 cisa-kev2022-03-25

CVE-2015-0666: Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read arbitrary files.

criticalexploitedCVE-2015-0666 cisa-kev2022-03-25

CVE-2019-12989: Citrix SD-WAN and NetScaler SQL Injection Vulnerability

Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection.

criticalexploitedpublic exploitCVE-2019-12989 cisa-kev2022-03-25

CVE-2014-6324: Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability

The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.

criticalexploitedpublic exploitCVE-2014-6324 cisa-kev2022-03-25

CVE-2017-12617: Apache Tomcat Remote Code Execution Vulnerability

When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

criticalexploitedpublic exploitCVE-2017-12617 cisa-kev2022-03-25

CVE-2014-6287: Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (HFS or HttpFileServer) allows remote attackers to execute arbitrary programs.

criticalexploitedpublic exploitCVE-2014-6287 cisa-kev2022-03-25

CVE-2016-10174: NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability

The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.

criticalexploitedpublic exploitCVE-2016-10174 cisa-kev2022-03-25

CVE-2009-1151: phpMyAdmin Remote Code Execution Vulnerability

Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.

criticalexploitedpublic exploitCVE-2009-1151 cisa-kev2022-03-25

CVE-2015-1187: D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to perform remote code execution.

criticalexploitedpublic exploitCVE-2015-1187 cisa-kev2022-03-25

CVE-2016-4171: Adobe Flash Player Remote Code Execution Vulnerability

Unspecified vulnerability in Adobe Flash Player allows for remote code execution.

criticalexploitedCVE-2016-4171 cisa-kev2022-03-25

CVE-2013-4810: HP Multiple Products Remote Code Execution Vulnerability

HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet.

criticalexploitedpublic exploitCVE-2013-4810 cisa-kev2022-03-25

CVE-2014-6332: Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site.

criticalexploitedpublic exploitCVE-2014-6332 cisa-kev2022-03-25

CVE-2020-1956: Apache Kylin OS Command Injection Vulnerability

Apache Kylin contains an OS command injection vulnerability which could permit an attacker to perform remote code execution.

criticalexploitedpublic exploitCVE-2020-1956 cisa-kev2022-03-25

CVE-2015-1427: Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.

criticalexploitedpublic exploitCVE-2015-1427 cisa-kev2022-03-25