KEVIntel entry: Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to... | Affected: Adobe / Flash Player | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync... | Affected: Microsoft / Windows, Office, Office Compatibility Pack, Lync | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote... | Affected: Microsoft / Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in... | Affected: Check Point Software Technologies Ltd. / WinRAR | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Adobe Commerce checkout improper input validation leads to remote code execution | Affected: Adobe / Magento Commerce | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data... | Affected: PHPUnit / PHPUnit | CVSS: 9.8 (CRITICAL) | EPSS: 0.99999 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting... | Affected: Microsoft / Internet Explorer 11, Internet Explorer 10 | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1,... | Affected: Apple / Safari (v and ), macOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via... | Affected: Apple / OS X | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT... | Affected: Microsoft Corporation / Windows Shell | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle... | Affected: Microsoft Corporation / Microsoft Office | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are... | Affected: Oracle Corporation / WebLogic Server | CVSS: 7.5 (HIGH) | EPSS: 0.99934 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT... | Affected: Microsoft Corporation / Microsoft Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows 10 Version 20H2 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;... | Affected: Microsoft Corporation / Windows SMB | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote... | Affected: Microsoft / Windows | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;... | Affected: Microsoft Corporation / Windows SMB | CVSS: 8.8 (HIGH) | EPSS: 0.9923 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT... | Affected: Apache / ActiveMQ | CVSS: 9.8 (CRITICAL) | EPSS: 0.98518 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a... | Affected: D-Link / DIR-645 Wired/Wireless Router | CVSS: 8.8 (HIGH) | EPSS: 0.97101 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests,... | Affected: Microsoft / Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation) | CVSS: 10.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in... | Affected: Jenkins / Jenkins | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged... | Affected: Apple / iOS, Apple TV | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the... | Affected: Apache Software Foundation / Apache Struts | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Win32k Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2 | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables,... | Affected: GNU / Bash | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to... | Affected: GNU / Bash | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of... | Affected: Microsoft / Internet Explorer | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links,... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated... | Affected: SonicWall / SonicWall SMA100 | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3,... | Affected: Apple / iOS and iPadOS, macOS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker... | Affected: Grandstream / Grandstream UCM6200 Series | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and... | Affected: Intel Corporation / Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling... | Affected: Apache / Struts | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k... | Affected: Microsoft / Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers | CVSS: 7.8 (HIGH) | EPSS: 0.73106 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Improper Input Validation Vulnerability in Serv-U | Affected: SolarWinds / Serv-U | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a... | Affected: Apache Software Foundation / Struts | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Command Injection Vulnerability | Affected: sebhildebrandt / systeminformation | CVSS: 7.1 (HIGH) | EPSS: 0.9024 | Used in malware: unknown | Not yet in CISA KEV: False

Command Injection Vulnerability


KEVIntel entry: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3,... | Affected: F5 / BIG-IP | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). Supported... | Affected: Oracle Corporation / Business Intelligence Enterprise Edition | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension... | Affected: Drupal / Drupal Core | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example... | Affected: Apache Software Foundation / Apache Airflow | CVSS: 8.8 (HIGH) | EPSS: 0.99118 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Account Takeover in Octobercms | Affected: octobercms / october | CVSS: 8.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False

Account Takeover in Octobercms


KEVIntel entry: Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the... | Affected: VMware / VMware vRealize Operations | CVSS: 7.5 (HIGH) | EPSS: 0.78435 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to... | Affected: Apache / Apache Airflow | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file... | Affected: Nagios / Nagios XI | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which... | Affected: Aviatrix / Controller | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Information Disclosure Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8 | CVSS: 7.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Secure Boot Security Feature Bypass Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 4.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to... | Affected: Fortinet / Fortinet FortiOS, FortiProxy | CVSS: 9.1 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k... | Affected: Microsoft / Windows, Windows Server | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow... | Affected: IBM / WebSphere | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in... | Affected: exim / exim | CVSS: 9.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy... | Affected: Fortinet / Fortinet FortiOS and FortiProxy | CVSS: 4.3 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are... | Affected: Oracle Corporation / Tape Library ACSLS | CVSS: 9.8 (CRITICAL) | EPSS: 0.99964 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network... | Affected: VMware / VMware vCenter Server, VMware Cloud Foundation | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution | Affected: Primetek / Primefaces | CVSS: 9.8 (CRITICAL) | EPSS: 0.94104 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the... | Affected: Hikvision / IP Camera | CVSS: 9.8 (CRITICAL) | EPSS: 0.99869 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or... | Affected: Palo Alto Networks / Palo Alto Networks GlobalProtect Portal/Gateway Interface | CVSS: 8.1 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: WinVerifyTrust Signature Validation Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 5.5 (MEDIUM) | EPSS: 0.44647 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page. | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as... | Affected: Synacor / Zimbra Collaboration Suite | CVSS: 9.8 (CRITICAL) | EPSS: 0.99986 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the... | Affected: Elastic / Kibana | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Arbitrary file upload vulnerability in FatPipe software | Affected: FatPipe / WARP, IPVPN, MPVPN | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute... | Affected: FreePBX / Rest Phone Apps | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Windows AppX Installer Spoofing Vulnerability | Affected: Microsoft / App Installer | CVSS: 7.1 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints | Affected: Apache Software Foundation / Apache Log4j2 | CVSS: 10.0 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of... | Affected: Embedthis / GoAhead | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. | Affected: daylightstudio / FUEL CMS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild... | Affected: Zoho / ManageEngine Desktop Central | CVSS: 9.8 (CRITICAL) | EPSS: 0.99869 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a... | Affected: Linux / kernel | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local... | Affected: Fortinet / Fortinet FortiOS | CVSS: 3.3 (LOW) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to... | Affected: mongo-express / mongo-express | CVSS: 9.9 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control. | Affected: Sonatype / Nexus Repository Manager | CVSS: 9.8 (CRITICAL) | EPSS: 0.76526 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the... | Affected: Red Hat, Inc. / jbossas | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The... | Affected: Realtek / Jungle SDK | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the... | Affected: Apache / Apache Solr | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss... | Affected: Red Hat / JBoss Enterprise Application Platform | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease. | Affected: Pi-hole / Pi-hole Web | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto,... | Affected: Qualcomm, Inc. / Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication. | Affected: Zoho / ManageEngine ServiceDesk Plus | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: mod_proxy SSRF | Affected: Apache Software Foundation / Apache HTTP Server | CVSS: 9.0 (CRITICAL) | EPSS: 0.99999 | Used in malware: unknown | Not yet in CISA KEV: False

mod_proxy SSRF


KEVIntel entry: MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write... | Affected: MikroTik / RouterOS | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to... | Affected: Zoho / ManageEngine ServiceDesk Plus, ManageEngine ServiceDesk Plus MSP, ManageEngine SupportCenter Plus | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2016 Cumulative Update 21, Microsoft Exchange Server 2019 Cumulative Update 10, Microsoft Exchange Server 2016 Cumulative Update 22, Microsoft Exchange Server 2019 Cumulative Update 11 | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Excel Security Feature Bypass Vulnerability | Affected: Microsoft / Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Excel 2016, Microsoft Office 2016, Microsoft Excel 2013 Service Pack 1, Microsoft Office 2013 Service Pack 1 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Win32k Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the... | Affected: ExifTool / ExifTool | CVSS: 6.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the... | Affected: Zoho / ManageEngine Desktop Central | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as... | Affected: Warfare Plugins / Social Warfare | CVSS: 6.1 (MEDIUM) | EPSS: 0.73543 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does... | Affected: VMware / VMware vCenter Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of... | Affected: NoneCms / NoneCms | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access... | Affected: SonicWall / SonicWall SMA100 | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the... | Affected: SonicWall / Email Security | CVSS: 7.2 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot dot... | Affected: SAP / NetWeaver AS Java | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly... | Affected: SaltStack / Salt | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. | Affected: Yealink / Device Management | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges... | Affected: Sumavision / Enhanced Multimedia Router (EMR) | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in... | Affected: Sophos / XG Firewall | CVSS: 10.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP... | Affected: SonicWall / Email Security | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Serv-U Remote Memory Escape Vulnerability | Affected: SolarWinds / Serv-U Managed File Transfer Server and Serv-U Secured FTP | CVSS: 9.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location... | Affected: Samsung / SIMalliance Toolbox Browser | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file... | Affected: Snap Creek / Duplicator | CVSS: 7.5 (HIGH) | EPSS: 0.97822 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it... | Affected: WordPress / File Manager plugin | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a... | Affected: VMware / VMware ESXi | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: TVT NVMS-1000 devices allow GET /.. Directory Traversal | Affected: TVT / NVMS-1000 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1... | Affected: Trend Micro / Trend Micro Apex One, Trend Micro OfficeScan, Trend Micro Worry-Free Business Security | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on... | Affected: VMware / VMware vCenter Server, VMware Cloud Foundation | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute... | Affected: Trend Micro / Trend Micro OfficeScan, Trend Micro Apex One | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect... | Affected: Progress / Telerik UI for ASP.NET AJAX | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access... | Affected: Realtek / Jungle SDK | CVSS: 9.8 (CRITICAL) | EPSS: 0.98059 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute,... | Affected: Qualcomm, Inc. / Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | CVSS: 6.2 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote... | Affected: Oracle / Fusion Middleware | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild... | Affected: Mozilla / Thunderbird, Firefox, Firefox ESR | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the... | Affected: VMware / ESXi and Horizon DaaS | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Unraid 6.8.0 allows authentication bypass. | Affected: Limetech / Unraid | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an... | Affected: Trend Micro / Trend Micro OfficeScan, Trend Micro Apex One | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1... | Affected: Trend Micro / Trend Micro Apex One, Trend Micro OfficeScan, Trend Micro Worry-Free Business Security | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the... | Affected: SonicWall / Email Security | CVSS: 4.9 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some... | Affected: SaltStack / Salt | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a... | Affected: Trend Micro / Trend Micro Apex One, Trend Micro Worry-Free Business Security | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape... | Affected: Trend Micro / Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS) | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files... | Affected: Trend Micro / Trend Micro OfficeScan | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via... | Affected: ThinkPHP / ThinkPHP | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute,... | Affected: Qualcomm, Inc. / Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | CVSS: 8.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse... | Affected: Pulse Secure / Pulse Connect Secure | CVSS: 8.0 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can... | Affected: Pulse Secure / Pulse Connect Secure | CVSS: 10.0 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual... | Affected: Symantec Corporation / Messaging Gateway | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated... | Affected: SolarWinds / Virtualization Manager | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands | Affected: SolarWinds / Orion Platform | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem,... | Affected: Roundcube / Roundcube Webmail | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are... | Affected: Oracle Corporation / WebLogic Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated... | Affected: Microsoft / Windows Server | CVSS: 9.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an... | Affected: SAP SE / SAP NetWeaver AS JAVA (LM Configuration Wizard) | CVSS: 10.0 (CRITICAL) | EPSS: 0.94719 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco HyperFlex HX Command Injection Vulnerabilities | Affected: Cisco / Cisco HyperFlex HX Data Platform | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability | Affected: Cisco / Cisco IOS XR Software | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | Affected: Cisco / Cisco IOS XR Software | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote... | Affected: SAP / NetWeaver Application Server Java | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code... | Affected: Pulse Secure / Pulse Connect Secure / Pulse Policy Secure | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability | Affected: Cisco / Cisco IP phone | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability | Affected: Cisco / Cisco Adaptive Security Appliance (ASA) Software | CVSS: 7.5 (HIGH) | EPSS: 0.99992 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities | Affected: Cisco / Cisco Adaptive Security Appliance (ASA) Software | CVSS: 6.1 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Cisco HyperFlex HX Command Injection Vulnerabilities | Affected: Cisco / Cisco HyperFlex HX Data Platform | CVSS: 9.8 (CRITICAL) | EPSS: 0.99928 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities | Affected: Cisco / Cisco IOS XR Software | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | Affected: Cisco / Cisco Small Business RV Series Router Firmware | CVSS: 7.5 (HIGH) | EPSS: 0.99876 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an... | Affected: Cisco / Cisco Adaptive Security Appliance unknown | CVSS: 7.5 (HIGH) | EPSS: 0.99903 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix... | Affected: Citrix / Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix... | Affected: Citrix / Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. | Affected: Citrix / Application Delivery Controller and Gateway | CVSS: 9.8 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization. | Affected: Zoho / ManageEngine ServiceDesk Plus | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Citrix Workspace App before 1904 for Windows has Incorrect Access Control. | Affected: Citrix / Workspace App | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to... | Affected: D-Link / DIR-825 R1 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code... | Affected: D-Link / DNS-320 | CVSS: 9.8 (CRITICAL) | EPSS: 0.99968 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites." | Affected: DotNetNuke / DotNetNuke CMS Fixed in 9.1.1 | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file... | Affected: Docker / Docker Desktop Community Edition | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1909 for ARM64-based Systems | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to... | Affected: Atlassian / Confluence Server, Confluence Data Center | CVSS: 9.8 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a... | Affected: Arm / Mali GPU kernel driver | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <=... | Affected: Buffalo / Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2,... | Affected: Apple / iOS and iPadOS, macOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web... | Affected: Apple / iOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3,... | Affected: Apple / macOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content... | Affected: Apple / iOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS... | Affected: Apple / iOS and iPadOS, iOS, watchOS | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security... | Affected: Apple / iOS and iPadOS, macOS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to... | Affected: Cisco / Cisco IOS and IOS XE | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update... | Affected: Apple / iOS and iPadOS, macOS | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content... | Affected: Apple / iOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the... | Affected: SAP / NetWeaver AS JAVA | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a... | Affected: SAP SE / SAP Solution Manager (User Experience Monitoring) | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). | Affected: Sonatype / Nexus Repository | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100... | Affected: SonicWall / SMA100 | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through... | Affected: Tenda / AC7, AC9, AC10 | CVSS: 9.8 (CRITICAL) | EPSS: 0.08672 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5,... | Affected: Apple / iOS, iOS-1, watchOS, watchOS-1 | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS... | Affected: Apple / iOS, macOS | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message... | Affected: Apache Software Foundation / Apache Struts | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution | Affected: Adobe / Acrobat Reader | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 and later. | Affected: Accellion / FTA | CVSS: 9.8 (CRITICAL) | EPSS: 0.11406 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed version is... | Affected: Accellion / FTA | CVSS: 9.8 (CRITICAL) | EPSS: 0.05998 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS... | Affected: Apple / iOS, iOS-1, watchOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS... | Affected: Apple / watchOS, iOS and iPadOS, macOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update... | Affected: Apple / watchOS, iOS and iPadOS, macOS | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary... | Affected: Apache / Shiro | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or... | Affected: Apache / Apache HTTP Server | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 | Affected: Apache Software Foundation / Apache HTTP Server | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) | Affected: Apache Software Foundation / Apache HTTP Server | CVSS: 9.8 (CRITICAL) | EPSS: 0.99964 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9,... | Affected: Apple / watchOS, iOS and iPadOS, macOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS... | Affected: Apple / macOS, watchOS, iOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6.... | Affected: Apple / macOS, iOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by... | Affected: Apache Software Foundation / Apache Struts | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for... | Affected: Apache Software Foundation / Apache Struts | CVSS: 8.1 (HIGH) | EPSS: 0.99461 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and... | Affected: Mediatek / Android | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of... | Affected: Google / Android | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to... | Affected: Amcrest / Amcrest | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the... | Affected: Adobe / Adobe Flash Player before 28.0.0.161 | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve... | Affected: Arm / Mali GPU kernel driver | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild... | Affected: BQE / BillQuick Web Suite | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in... | Affected: VMware / VMware vCenter Server and VMware Cloud Foundation | CVSS: 9.8 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port... | Affected: VMware / VMware vCenter Server, VMware Cloud Foundation | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload... | Affected: Adobe / ColdFusion | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel... | Affected: vBulletin / vBulletin | CVSS: 9.8 (CRITICAL) | EPSS: 0.8774 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when... | Affected: Arm / Trusted Firmware M | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version is FTA_9_12_416 and later. | Affected: Accellion / FTA | CVSS: 7.8 (HIGH) | EPSS: 0.03654 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request. | Affected: vBulletin / vBulletin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unraid through 6.8.0 allows Remote Code Execution. | Affected: Lime Technology / Unraid | CVSS: 9.8 (CRITICAL) | EPSS: 0.95844 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the... | Affected: Tenda / AC15 AC1900 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows... | Affected: Tenda / AC11 | CVSS: 9.8 (CRITICAL) | EPSS: 0.85849 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers'... | Affected: TeamViewer / TeamViewer Desktop | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution. | Affected: Zoho / ManageEngine ADSelfService Plus | CVSS: 9.8 (CRITICAL) | EPSS: 0.9896 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before... | Affected: VMware / VMware Fusion, VMware Remote Console for Mac and Horizon Client for Mac | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account... | Affected: Zyxel / USG devices | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability. | Affected: VMware / VMware Workspace One Access (Access), VMware Workspace One Access Connector (Access Connector), VMware Identity Manager (vIDM), VMware Identity Manager Connector (vIDM Connector), VMware Cloud Foundation, vRealize Suite Lifecycle Manager | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting... | Affected: Microsoft / Internet Explorer 9, Internet Explorer 11, Internet Explorer 11 on Windows Server 2012, Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Internet Explorer 10 | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source... | Affected: Microsoft / Microsoft SharePoint Enterprise Server, Microsoft SharePoint Server, Microsoft Visual Studio 2019, Microsoft Visual Studio 2019 version 16.6 (includes 16.0 - 16.5), Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8), Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3), .NET Core, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server, version 1803  (Server Core Installation), Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016, Microsoft .NET Framework 4.8 on Windows Server 2016  (Server Core installation), Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1, Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1, Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems, Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems, Microsoft .NET Framework 4.8 on Windows RT 8.1, Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1, Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Microsoft .NET Framework 4.8 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation), Microsoft .NET Framework 4.8 on Windows Server 2012 R2, Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019  (Server Core installation), Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1909 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1903 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server, version 1803  (Server Core Installation), Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019  (Server Core installation), Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016  (Server Core installation), Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for x64-based Systems, Microsoft .NET Framework 4.6, Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 2004 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 2004 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 2004 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 2004 for ARM64-based Systems | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k... | Affected: Microsoft / Windows, Windows Server | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting... | Affected: Microsoft / Internet Explorer 9, Internet Explorer 11, Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Internet Explorer 11 on Windows Server 2012 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8, Microsoft Exchange Server 2019, Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Exchange Server 2016 Cumulative Update 11 | CVSS: 9.1 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2019, Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8, Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Exchange Server 2016 Cumulative Update 11 | CVSS: 7.8 (HIGH) | EPSS: 0.99946 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Print Spooler Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft... | Affected: Microsoft Corporation / Microsoft Outlook | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Netlogon Elevation of Privilege Vulnerability | Affected: Microsoft / Windows Server version 2004, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server, version 1909 (Server Core installation), Windows Server, version 1903 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server version 20H2 | CVSS: 5.5 (MEDIUM) | EPSS: 0.99512 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2019, Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8, Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Exchange Server 2016 Cumulative Update 11 | CVSS: 7.8 (HIGH) | EPSS: 0.89509 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Scripting Engine Memory Corruption Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows 10 Version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2012, Windows Server 2012 R2 | CVSS: 6.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code... | Affected: Microsoft / Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server, version 1803  (Server Core Installation), Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016, Microsoft .NET Framework 4.8 on Windows Server 2016  (Server Core installation), Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1, Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1, Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems, Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems, Microsoft .NET Framework 4.8 on Windows RT 8.1, Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1, Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Microsoft .NET Framework 4.8 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation), Microsoft .NET Framework 4.8 on Windows Server 2012 R2, Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019  (Server Core installation), Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1903 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019  (Server Core installation), Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1909 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server, version 1803  (Server Core Installation), Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016  (Server Core installation), Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus... | Affected: SAP SE / SAP CRM | CVSS: 6.6 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in... | Affected: SaltStack / Salt | CVSS: 9.8 (CRITICAL) | EPSS: 0.99585 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting... | Affected: Microsoft / Internet Explorer 9, Internet Explorer 11, Internet Explorer 11 on Windows Server 2012, Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Internet Explorer 10 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server... | Affected: Microsoft Corporation / Office/WordPad | CVSS: 7.8 (HIGH) | EPSS: 0.99933 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting... | Affected: Microsoft / Internet Explorer 10, Internet Explorer 11, Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Internet Explorer 11 on Windows Server 2012, Internet Explorer 9 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution... | Affected: Microsoft Corporation / Equation Editor | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5,... | Affected: Apple / iOS and iPadOS, Safari, tvOS, watchOS, macOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an... | Affected: Drupal / Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 | CVSS: 9.8 (CRITICAL) | EPSS: 0.99993 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were... | Affected: GitLab / GitLab | CVSS: 10.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may... | Affected: Exim / Exim | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in... | Affected: rConfig / rConfig | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as... | Affected: Pulse Secure / Pulse Connect Secure | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters. | Affected: DNN / DotNetNuke | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an... | Affected: DNN Software / DNN Platform | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as... | Affected: DrayTek / Vigor2960, Vigor3900, Vigor300B | CVSS: 9.8 (CRITICAL) | EPSS: 0.99993 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface... | Affected: F5 / BIG-IP | CVSS: 9.8 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to... | Affected: Apple / macOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A... | Affected: Apple / macOS | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API... | Affected: EyesOfNetwork / EyesOfNetwork | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd... | Affected: F5 / BIG-IP; BIG-IQ | CVSS: 9.8 (CRITICAL) | EPSS: 0.99898 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does... | Affected: ForgeRock / AM server | CVSS: 9.8 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by... | Affected: Fortinet / Fortinet FortiOS | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in... | Affected: Fortinet / Fortinet FortiOS | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to... | Affected: Fortinet / Fortinet FortiOS, FortiProxy | CVSS: 9.1 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to... | Affected: Google / Chrome | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to... | Affected: Google / Chrome | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information... | Affected: Google / Chrome | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS... | Affected: Apple / macOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a... | Affected: Google / Chrome | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to... | Affected: Google / Chrome | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially... | Affected: Google / Chrome | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the... | Affected: Nagios / XI | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user... | Affected: EyesOfNetwork / EyesOfNetwork | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in... | Affected: Mozilla / Thunderbird, Firefox, Firefox ESR | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8, Microsoft Exchange Server 2019, Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Exchange Server 2010 Service Pack 3, Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Exchange Server 2016 Cumulative Update 11 | CVSS: 7.8 (HIGH) | EPSS: 0.94008 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code... | Affected: Pulse Secure / Pulse Connect Secure | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to... | Affected: Pulse Secure / Pulse Connect Secre | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and... | Affected: Pulse Secure / Pulse Connect Secure | CVSS: 10.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to... | Affected: Pulse Secure / Pulse Secure Secure | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are... | Affected: Oracle Corporation / WebLogic Server | CVSS: 7.2 (HIGH) | EPSS: 0.97929 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily... | Affected: Google / Chrome | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5... | Affected: Apple / iOS, macOS, tvOS, watchOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission... | Affected: Atlassian / Confluence | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False