KEVIntel entry: An issue was discovered in ThoughtWorks GoCD before 21.3.0. The business continuity add-on, which is enabled by default, leaks all secrets known to... | Affected: ThoughtWorks / GoCD | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browser | Affected: Adobe / ColdFusion | CVSS: 5.4 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The supported version that is affected is 12.2. Easily exploitable... | Affected: Oracle Corporation / User Management | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote... | Affected: Oracle / E-Business Suite | CVSS: 5.0 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerability to read arbitrary files... | Affected: Xiaomi / Mi WiFi R3G | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could allow an authenticated... | Affected: Mitel / MiCollab | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation | Affected: eugenbobrowski / Debug Tool | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cisco SD-WAN vManage Directory Traversal Vulnerability | Affected: Cisco / Cisco Catalyst SD-WAN Manager | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release through... | Affected: Sitecore / Experience Platform, Experience Manager, Experience Commerce | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. NOTE:... | Affected: SonarSource / SonarQube | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unauthenticated Arbitrary File Access in Jellyfin | Affected: jellyfin / jellyfin | CVSS: 7.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks. | Affected: BigAnt Software / BigAnt Server | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | Affected: Cisco / Cisco Identity Services Engine Software | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to read arbitrary files. | Affected: Razer / Sila Gaming Router | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update | Affected: Unknown / Sitemap by click5 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentication. The... | Affected: GibbonEdu / Gibbon | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web | Affected: Juniper Networks / Junos OS | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an... | Affected: SonicWall / SMA100 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated... | Affected: SonicWall / SonicWall SMA100 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: End-of-Train and Head-of-Train Remote Linking Protocol Weak Authentication | Affected: End-of-Train and Head-of-Train remote linking protocol / End-of-Train and Head-of-Train remote linking protocol | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Ivanti Avalanche (Premise) 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath... | Affected: Ivanti / Avalanche | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure | Affected: Unknown / Duplicator, Duplicator Pro | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). The... | Affected: Oracle Corporation / BI Publisher (formerly XML Publisher) | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files... | Affected: SearchBlox / SearchBlox | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directory... | Affected: Ghost / Ghost | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This... | Affected: Linear / eMerge E3-Series | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi, and... | Affected: Emerson / Dixell XWEB-500 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute... | Affected: Sudo project / Sudo | CVSS: 2.8 (LOW) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions... | Affected: SAP SE / SAP NetWeaver Development Infrastructure (Component Build Service) | CVSS: 9.9 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Remote Code Execution vulnerability | Affected: nette / application | CVSS: 8.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True

Remote Code Execution vulnerability


KEVIntel entry: File Provider <= 1.2.3 - Unauthenticated SQLi | Affected: Unknown / File Provider | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inject OS commands via... | Affected: TerraMaster / TOS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crafted... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. | Affected: CloudPanel / CloudPanel 2 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Path Traversal: '\..\filename' in mlflow/mlflow | Affected: mlflow / mlflow/mlflow | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Dahua Smart Park Management unrestricted upload | Affected: Dahua / Smart Park Management | CVSS: 6.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions... | Affected: SolarView / SolarView Compact | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass... | Affected: Digital China Networks / DCBI-Netlog-LAB | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setTracerouteCfg function. | Affected: TOTOlink / A3700R | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone... | Affected: Altenergy / Power Control Software | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface. | Affected: jeecg / jeecg-boot | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: rudder-server vulnerable to SQL Injection | Affected: rudderlabs / rudder-server | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests from various timekeeper streams, it is possible to... | Affected: FSMLabs / TimeKeeper | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This... | Affected: Cassia Networks / Cassia Gateway | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands... | Affected: Chamilo / Chamilo | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: H3C GR3200 MiniGR1B0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList. | Affected: H3C / GR3200 MiniGR1B0V100R014 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Printer web page invalid command execution | Affected: Honeywell / PM23/43, PC23/43, PD43, PM42, PX4ie/6ie, PX45/65, PD45, PX240, PX940, PM45, RP2f/RP4f | CVSS: 9.9 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not... | Affected: SolarView / SolarView Compact | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an... | Affected: SonicWall / GMS, Analytics | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers... | Affected: vBulletin / vBulletin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: In the module "Step by Step products Pack" (ndk_steppingpack) version 1.5.6 and before from NDK Design for PrestaShop, a guest can perform SQL... | Affected: NDK Design / Step by Step products Pack | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: KubePi's JWT token validation has a defect | Affected: 1Panel-dev / KubePi | CVSS: 6.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a... | Affected: FUXA / FUXA | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's'... | Affected: Easy Digital Downloads / WordPress Plugin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and... | Affected: GL.iNet / GL.iNet devices | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: KubePi is vulnerable to missing authorization | Affected: KubeOperator / KubePi | CVSS: 7.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the... | Affected: TOTOLINK / A3700R | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WAGO: WBM Command Injection in multiple products | Affected: WAGO / Compact Controller CC100, Edge Controller, PFC100, PFC200, Touch Panel 600 Advanced Line, Touch Panel 600 Marine Line, Touch Panel 600 Standard Line | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: jeecgboot JimuReport Template injection | Affected: jeecgboot / JimuReport | CVSS: 6.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True

jeecgboot JimuReport Template injection


KEVIntel entry: Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present | Affected: Apache Software Foundation / Apache OFBiz | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to, and including,... | Affected: dglingren / Media Library Assistant | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: jeecg-boot qurestSql sql injection | Affected: jeecg / jeecg-boot | CVSS: 6.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True

jeecg-boot qurestSql sql injection


KEVIntel entry: A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for... | Affected: PrestaShop / ApolloTheme AP PageBuilder | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access... | Affected: WordPress / secure-file-manager | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Nirweb support < 2.8.2 - Unauthenticated SQLi | Affected: Unknown / Nirweb support | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Authentication bypass issue in the Operator Console | Affected: minio / console | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php. | Affected: Atom CMS / Atom CMS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload | Affected: Unknown / Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Poll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injection | Affected: wpdevart / Poll, Survey, Questionnaire and Voting system | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection | Affected: WAVLINK / WN535K2, WN535K3 | CVSS: 8.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise_variable makes an eval... | Affected: Webmin / Webmin | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified... | Affected: Western Digital / MyCloud NAS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php... | Affected: WordPress / Gift Vouchers plugin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with... | Affected: OFBiz / OFBiz | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on... | Affected: Jolokia / Jolokia agent | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the... | Affected: Apache Software Foundation / Apache Tika | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute... | Affected: PhpCollab / PhpCollab | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php. | Affected: FlowPaper / FlexPaper | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may... | Affected: InfluxData / InfluxDB | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the... | Affected: Bonitasoft / Bonita Web | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated... | Affected: GrandNode / GrandNode | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a... | Affected: markevans / Dragonfly | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The Security Model has... | Affected: Hitachi Vantara / Pentaho | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3. | Affected: Sitecore / Experience Manager, Experience Platform, Experience Commerce | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: BuddyPress privilege escalation via REST API | Affected: buddypress / BuddyPress | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability | Affected: Apache Software Foundation / Apache OFBiz | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add()... | Affected: Myucms / Myucms v2.2.1 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Authentication bypass | Affected: alibaba / nacos | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True

Authentication bypass


KEVIntel entry: An issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin account is used to reset the password of the admin account in case... | Affected: JFrog / Artifactory | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4... | Affected: Progress / MOVEit Transfer | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. This vulnerability allows unauthenticated attackers to... | Affected: IncomCMS / IncomCMS 2.0 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell... | Affected: Belkin / LINKSYS RE6500 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: MasaCMS SQL Injection vulnerability | Affected: MasaCMS / MasaCMS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

MasaCMS SQL Injection vulnerability


KEVIntel entry: WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php | Affected: nickboss / WordPress File Upload | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated remote... | Affected: R-HUB / TurboMeeting | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability... | Affected: adonespitogo / angular-base64-upload | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData. | Affected: JeecgBoot / JeecgBoot | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is... | Affected: wpdevteam / NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles the... | Affected: Ollama / Ollama | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Arbitrary File Write by Prompt Injection via DuckDB SQL in vanna-ai/vanna | Affected: vanna-ai / vanna-ai/vanna | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ZoneMinder Time-based SQL Injection | Affected: ZoneMinder / zoneminder | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

ZoneMinder Time-based SQL Injection


KEVIntel entry: Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload | Affected: revmakx / Backup and Staging by WP Time Capsule | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability | Affected: Ajit Bohra / WP Query Console | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Arbitrary File Overwrite and Data Exfiltration in aimhubio/aim | Affected: aimhubio / aimhubio/aim | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SQL Injection | Affected: Riello / Netman 204 | CVSS: 6.9 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True

SQL Injection


KEVIntel entry: SPIP porte_plume Plugin Arbitrary PHP Execution | Affected: SPIP / SPIP | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE | Affected: Apache Software Foundation / Apache OFBiz | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability | Affected: ValvePress / Automatic | CVSS: 9.9 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cacti command injection in cmd_realtime.php | Affected: Cacti / cacti | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload | Affected: D-Link / DAR-7000, DAR-8000 | CVSS: 6.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Qualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAcesso.php. | Affected: Qualitor / Qualitor | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Flowmon Unauthenticated Command Injection Vulnerability | Affected: Progress Software / Flowmon | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry:  FOG has a command injection in /fog/management/export.php?filename= | Affected: FOGProject / fogproject | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: PayPlus Payment Gateway < 6.6.9 - Unauthenticated SQLi | Affected: Unknown / PayPlus Payment Gateway | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
Authentication bypass... | Affected: Ericsson / CodeChecker | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: IBM Operational Decision Manager JDNI injection | Affected: IBM / Operational Decision Manager | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in the TP-Link Archer c20 router with firmware version V6.6_230412 and earlier permits unauthorized individuals to bypass the... | Affected: TP-Link / Archer C20 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameter in... | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Authentication Bypass in OpenMetadata | Affected: open-metadata / OpenMetadata | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

Authentication Bypass in OpenMetadata


KEVIntel entry: ** UNSUPPORTED WHEN ASSIGNED **
The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before... | Affected: Zyxel / NAS326 firmware, NAS542 firmware | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the... | Affected: Monitorr / Monitorr | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code execution... | Affected: WordPress / drag-and-drop-multiple-file-upload-contact-form-7 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks. | Affected: WSO2 / API Manager | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control. | Affected: vBulletin / vBulletin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches... | Affected: Netsweeper / Netsweeper | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page. | Affected: SEOWON INTECH / SLC-130 and SLR-120S | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: GLPI allows unauthenticated SQL injection through the inventory endpoint | Affected: glpi-project / glpi | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments. | Affected: FlowiseAI / Flowise | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion | Affected: extendthemes / Kubio AI Page Builder | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Navidrome has authentication bypass in Subsonic API with non-existent username | Affected: navidrome / navidrome | CVSS: 6.9 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection | Affected: SysAid / SysAid On-Prem | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with default credentials (username... | Affected: Hirsch / Enterphone MESH | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: itsourcecode Tailoring Management System customerview.php sql injection | Affected: itsourcecode / Tailoring Management System | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL Injection | Affected: Unknown / Car Seller - Auto Classifieds Script | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled... | Affected: ThinkPHP / ThinkPHP Framework | CVSS: 9.8 (CRITICAL) | EPSS: 0.15505 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Remote Code Execution in DocsGPT | Affected: Arc53 / DocsGPT | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

Remote Code Execution in DocsGPT


KEVIntel entry: A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink... | Affected: Schneider Electric / EVlink City, EVlink Parking, EVlink Smart Wallbox | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an... | Affected: Cisco / RV132W ADSL2+ Wireless-N VPN Router, RV134W VDSL2 Wireless-AC VPN Router | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being... | Affected: Cisco / IOS | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary... | Affected: OpenMRS / OpenMRS | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a... | Affected: Wavlink / WN575A4, WN579X3, WN530G3A | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyone who... | Affected: Amcrest / IPM-721S | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: jqueryFileTree 2.1.5 and older Directory Traversal | Affected: jqueryFileTree / jqueryFileTree | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ingress-nginx admission controller RCE escalation | Affected: kubernetes / ingress-nginx | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ECOA BAS controller - Path Traversal-3 | Affected: ECOA / ECS Router Controller ECS (FLASH), RiskBuster Terminator E6L45, RiskBuster System RB 3.0.0, RiskBuster System TRANE 1.0, Graphic Control Software, SmartHome II E9246, RiskTerminator | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True

ECOA BAS controller - Path Traversal-3


KEVIntel entry: cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a... | Affected: Zx2c4 / CGit | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. | Affected: LimeSurvey / LimeSurvey | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Local File Inclusion (LFI) in Artica Pandora FMS through version 7.23 allows an attacker to call any php file via the /pandora_console/ajax.php... | Affected: Artica / Pandora FMS | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_base_config.php os command injection | Affected: Raisecom / MSG1200, MSG2100E, MSG2200, MSG2300 | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user | Affected: Veeam / Backup and Recovery | CVSS: 9.9 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Authentication bypass | Affected: alibaba / nacos | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True

Authentication bypass


KEVIntel entry: Four-Faith F3x36 bapply.cgi Auth Bypass | Affected: Four-Faith / F3x36 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

Four-Faith F3x36 bapply.cgi Auth Bypass


KEVIntel entry: A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers... | Affected: Grafana / Grafana | CVSS: 7.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This... | Affected: Atlassian / Jira Core Server, Jira Software Server, Jira Software Data Center, Jira Service Management Server, Jira Service Management Data Center | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via... | Affected: WAVLINK / WN579 X3 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to... | Affected: Atlassian / Jira | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to... | Affected: Wavlink / WL-WN533A8 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before... | Affected: Citrix / XenMobile Server | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix... | Affected: Citrix / Citrix ADC and Citrix Gateway | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6). | Affected: Citrix / SD-WAN | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6). | Affected: Citrix / SD-WAN | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6). | Affected: Citrix / SD-WAN | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal. | Affected: Citrix / SD-WAN | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002... | Affected: Six Apart Ltd. / Movable Type | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader Component | Affected: ProfilePress / ProfilePress | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQLi | Affected: Unknown / Steveas WP Live Chat Shoutbox | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Windows Common Log File System Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Windows Schannel Remote Code Execution Vulnerability | Affected: Microsoft / Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microsoft Office Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft 365 Apps for Enterprise, Microsoft Office 2016, Microsoft Office 2019, Microsoft Office for Android, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024 | CVSS: 8.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc. | Affected: DT Research / BiosFlashShell, Dtbios | CVSS: 8.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microsoft SharePoint Server Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Windows Netlogon Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability | Affected: Microsoft / Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 8.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management... | Affected: Hewlett Packard Enterprise / HPE Edgeline Infrastructure Manager | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Perfect Survey < 1.5.2 - Unauthenticated SQL Injection | Affected: Unknown / Perfect Survey | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution | Affected: Unknown / Workreap | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts... | Affected: KRAMER / VIAware | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Directory Traversal | Affected: lukashinsch / spring-boot-actuator-logview | CVSS: 7.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True

Directory Traversal


KEVIntel entry: CyberPower PowerPanel Enterprise Missing Authentication | Affected: CyberPower / CyberPower PowerPanel Enterprise | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type... | Affected: ZeroShell / ZeroShell | CVSS: 10.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file | Affected: Apache Software Foundation / PyArrow | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Remote Code Execution in Apache Unomi | Affected: Apache Software Foundation / Apache Unomi | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

Remote Code Execution in Apache Unomi


KEVIntel entry: SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php. An... | Affected: SuperWebMailer / SuperWebMailer | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities | Affected: Cisco / Cisco Prime Infrastructure | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and... | Affected: strapi / strapi | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to... | Affected: Oturia / Smart Google Code Inserter | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the... | Affected: Seagate / BlackArmor NAS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in... | Affected: CSE / Bookstore | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are... | Affected: Oracle Corporation / WebLogic Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ARPrice Lite < 3.6.1 - Unauthenticated SQLi | Affected: Unknown / Pricing Table Plugin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: modules/attributewizardpro/file_upload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to... | Affected: PrestaShop / Attribute Wizard addon | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-1 | Affected: MERIT LILIN ENT.CO.,LTD. / P2/Z2/P3/Z3 IP camera firmware | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote... | Affected: Daylight Studio / FUEL CMS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: KiviCare < 2.3.9 - Unauthenticated SQLi | Affected: Unknown / KiviCare – Clinic & Patient Management System (EHR) | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

KiviCare < 2.3.9 - Unauthenticated SQLi


KEVIntel entry: WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability | Affected: Collne Inc. / Welcart e-Commerce (WordPress plugin) | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level. | Affected: Voipmonitor / Voipmonitor GUI | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in Dynamicweb before 9.12.8. An attacker can add a new administrator user without authentication. This flaw exists due to a... | Affected: Dynamicweb / Dynamicweb | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection. Because, by default, nodes' passwords are stored in... | Affected: rConfig / rConfig | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Weaver E-Office uploadify.php unrestricted upload | Affected: Weaver / E-Office | CVSS: 6.3 (MEDIUM) | EPSS: 0.92333 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Landray EKP sysUiComponent.do delPreviewFile path traversal | Affected: Landray / EKP | CVSS: 6.9 (MEDIUM) | EPSS: 0.0024 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: QTS, QuTS hero, QuTScloud | Affected: QNAP Systems Inc. / QTS, QuTS hero, QuTScloud | CVSS: 5.8 (MEDIUM) | EPSS: 0.92646 | Used in malware: unknown | Not yet in CISA KEV: True

QTS, QuTS hero, QuTScloud


KEVIntel entry: WAVLINK WN535K2/WN535K3 nightled.cgi os command injection | Affected: WAVLINK / WN535K2, WN535K3 | CVSS: 8.0 (HIGH) | EPSS: 0.94158 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI.... | Affected: Intellian / Aptus Web | CVSS: 9.8 (CRITICAL) | EPSS: 0.93352 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An unauthenticated attacker could achieve the code execution through a RemoteControl server. | Affected: Ivanti / Avalanche | CVSS: 9.8 (CRITICAL) | EPSS: 0.9289 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows... | Affected: Zimbra / Zimbra Collaboration Suite | CVSS: 5.0 (MEDIUM) | EPSS: 0.92144 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation... | Affected: TerraMaster / TOS | CVSS: 9.8 (CRITICAL) | EPSS: 0.9312 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Simple Link Directory < 7.7.2 - Unauthenticated SQL injection | Affected: Unknown / Simple Link Directory | CVSS: 9.8 (CRITICAL) | EPSS: 0.77716 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters. The... | Affected: TOTOLINK / EX200 | CVSS: 9.8 (CRITICAL) | EPSS: 0.15398 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to... | Affected: SonLogger / SonLogger | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: JoomSport < 5.2.8 - Unauthenticated SQLi | Affected: Unknown / JoomSport | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory... | Affected: Eaton / Intelligent Power Manager | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SpeakOut! Email Petitions < 2.14.15.1 - Unauthenticated SQLi | Affected: Unknown / SpeakOut! Email Petitions | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor... | Affected: home-assistant / core, supervisor | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ZEROF Web Server 2.0 allows /HandleEvent SQL Injection. | Affected: ZEROF / Web Server 2.0 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Users Ultra <= 3.1.0 - Unauthenticated SQL Injection | Affected: Unknown / Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential... | Affected: Penta Security Systems Inc. / WAPPLES | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in... | Affected: Agentejo / Cockpit | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection. | Affected: SmartNode / SN200 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection | Affected: Unknown / Secure Copy Content Protection and Content Locking | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through... | Affected: NETGEAR / ReadyNAS Surveillance | CVSS: 8.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Yachtcontrol through 2019-10-06: It's possible to perform direct Operating System commands as an unauthenticated user via the... | Affected: Yachtcontrol / Yachtcontrol | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execute... | Affected: OpenDreambox / OpenDreambox 2.0.0 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input_id POST parameter in index.php. | Affected: KevinLAB Inc / Building Energy Management System 4ST BEMS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a... | Affected: Apache / Struts | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been... | Affected: rConfig / rConfig | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By... | Affected: Atlassian / Jira | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting... | Affected: vBulletin / vBulletin | CVSS: 9.0 (CRITICAL) | EPSS: 0.48358 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Remote Code Execution | Affected: Ivanti / Endpoint Manager Mobile | CVSS: 7.2 (HIGH) | EPSS: 0.87529 | Used in malware: unknown | Not yet in CISA KEV: False

Remote Code Execution


KEVIntel entry: Authentication Bypass | Affected: Ivanti / Endpoint Manager Mobile | CVSS: 5.3 (MEDIUM) | EPSS: 0.99589 | Used in malware: unknown | Not yet in CISA KEV: False

Authentication Bypass


KEVIntel entry: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.01658 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Common Log File System Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.02059 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Common Log File System Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.01291 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft DWM Core Library Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | EPSS: 0.01763 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Scripting Engine Memory Corruption Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.5 (HIGH) | EPSS: 0.21562 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in... | Affected: Srimax / Output Messenger | CVSS: 7.2 (HIGH) | EPSS: 0.01812 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature... | Affected: Zimbra / Zimbra Collaboration (ZCS) | CVSS: 6.1 (MEDIUM) | EPSS: 0.19668 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Stored XSS vulnerability in MDaemon Email Server | Affected: MDaemon / Email Server | CVSS: 5.3 (MEDIUM) | EPSS: 0.16346 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a... | Affected: ZKTeco / BioTime | CVSS: 7.5 (HIGH) | EPSS: 0.8488 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana... | Affected: Elastic / Kibana | CVSS: 9.8 (CRITICAL) | EPSS: 0.93865 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php... | Affected: rConfig / rConfig | CVSS: 9.8 (CRITICAL) | EPSS: 0.94452 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Grafana SQL Expressions allow for remote code execution | Affected: Grafana / Grafana | CVSS: 9.4 (CRITICAL) | EPSS: 0.92072 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection | Affected: DrayTek / Vigor2960, Vigor300B | CVSS: 6.9 (MEDIUM) | EPSS: 0.27754 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: GeoVision EOL device - OS Command Injection | Affected: GeoVision / GV_DSP_LPR_V2, GV_IPCAMD_GV_BX1500, GV_IPCAMD_GV_CB220, GV_IPCAMD_GV_EBL1100, GV_IPCAMD_GV_EFD1100, GV_IPCAMD_GV_FD2410, GV_IPCAMD_GV_FD3400, GV_IPCAMD_GV_FE3401, GV_IPCAMD_GV_FE420, GV-VS14_VS14, GV_VS03, GV_VS2410, GV_VS28XX, GV_VS216XX, GV VS04A, GV VS04H, GVLX 4 V2, GVLX 4 V3, GV_IPCAMD_GV_BX130, GV_GM8186_VS14 | CVSS: 9.8 (CRITICAL) | EPSS: 0.09992 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: GeoVision EOL devices - OS Command Injection | Affected: GeoVision / GV-VS12, GV-VS11, GV-DSP_LPR_V3, GVLX 4 V2, GVLX 4 V3 | CVSS: 9.8 (CRITICAL) | EPSS: 0.28554 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font... | Affected: FreeType / FreeType | CVSS: 8.1 (HIGH) | EPSS: 0.23357 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the... | Affected: yiiframework / Yii | CVSS: 9.0 (CRITICAL) | EPSS: 0.87714 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal | Affected: Commvault / Command Center Innovation Release | CVSS: 9.3 (CRITICAL) | EPSS: 0.97157 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code | Affected: langflow-ai / langflow | CVSS: 9.8 (CRITICAL) | EPSS: 0.99959 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted serialized... | Affected: SAP / NetWeaver | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative... | Affected: SonicWall / SMA100 | CVSS: 7.2 (HIGH) | EPSS: 0.74933 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. | Affected: Apache Software Foundation / Apache HTTP Server | CVSS: 9.1 (CRITICAL) | EPSS: 0.99957 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Commvault Web Server unspecified vulnerability | Affected: Commvault / Web Server | CVSS: 8.7 (HIGH) | EPSS: 0.01868 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Missing Authorization check in SAP NetWeaver (Visual Composer development server) | Affected: SAP_SE / SAP NetWeaver (Visual Composer development server) | CVSS: 10.0 (CRITICAL) | EPSS: 0.99316 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to... | Affected: Huawei Technologies Co., Ltd. / HG532 | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: True


KEVIntel entry: A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could... | Affected: SonicWall / SonicOS | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA... | Affected: Ivanti, Ivant  / ICS, IPS | CVSS: 8.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service... | Affected: SonicWall / SonicOS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port 7547,... | Affected: Eir / D1000 modem | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cross site scripting | Affected: Citrix / Citrix ADC and Citrix Gateway  | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True

Cross site scripting


KEVIntel entry: The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. A... | Affected: Belkin / Wemo Enabled Crock-Pot | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WPCargo < 6.9.0 - Unauthenticated RCE | Affected: Unknown / WPCargo Track & Trace | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

WPCargo < 6.9.0 - Unauthenticated RCE


KEVIntel entry: Bypass of the fix for CVE-2019-0195 | Affected: Apache Software Foundation / Apache Tapestry | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

Bypass of the fix for CVE-2019-0195


KEVIntel entry: An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. An unauthenticated attacker can send a crafted HTTP request to perform... | Affected: Void / Aural Rec Monitor | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Paid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection | Affected: Unknown / Paid Memberships Pro | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Authenticated users can override system configurations in their requests which allows them to execute arbitrary code. | Affected: Apache Software Foundation / Apache Druid | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with... | Affected: GitLab / GitLab | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: TBK DVR-4104/DVR-4216 os command injection | Affected: TBK / DVR-4104, DVR-4216 | CVSS: 6.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request... | Affected: QUALITIA CO., LTD. / Active! mail 6 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 | Affected: Brocade / Fabric OS | CVSS: 8.6 (HIGH) | EPSS: 0.00033 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication... | Affected: ASUS / GT-AC2900, Lyra Mini | CVSS: 9.8 (CRITICAL) | EPSS: 0.99351 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which... | Affected: TBK / DVR4104, DVR4216 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the... | Affected: Metabase / Metabase | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command... | Affected: LB-LINK / BL-AC1900_2.0, BL-WR9000, BL-X26, BL-LTE300 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: No title available | Used in malware: unknown | Not yet in CISA KEV: True

No title available


KEVIntel entry: RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI | Affected: Apache Software Foundation / Apache OFBiz | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a... | Affected: AfterLogic / ["Aurora", "WebMail Pro"] | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: QTS, QuTS hero, QuTScloud | Affected: QNAP Systems Inc. / QTS, QuTS hero, QuTScloud | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

QTS, QuTS hero, QuTScloud


KEVIntel entry: There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially... | Affected: HackerOne / Sprockets | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN,... | Affected: Dahua / Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras | CVSS: 7.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1... | Affected: ["NUUO", "NETGEAR"] / ["NVRmini 2", "NVRsolo", "ReadyNAS Surveillance"] | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event parameter in... | Affected: TerraMaster / TOS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable... | Affected: YouPHPTube / YouPHPTube | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker to obtain sensitive... | Affected: FileMage / Gateway | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin. The vulnerability is introduced in the id GET parameter... | Affected: iDangero.us / Chop Slider 3 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers. An attacker can get the... | Affected: D-Link / DIR-868L, DIR-817LW | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL. | Affected: Comodo / UTM Firewall | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual... | Affected: SonicWall / Global Management System (GMS) | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Uniview ISC 2500-S VM.php setNatConfig os command injection | Affected: Uniview / ISC 2500-S | CVSS: 8.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WPS Server Side Request Forgery in GeoServer | Affected: geoserver / geoserver | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Directory Transversal Vulnerability in Serv-U 15.3 | Affected: SolarWinds / Serv-U | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host. | Affected: GeoServer / GeoServer | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Incorrect access control in formPasswordSetup in TOTOLINK A3002RU version 1.0.8 allows attackers to change the admin user's password via an... | Affected: TOTOLINK / A3002RU | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter. | Affected: Nagios / XI | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the... | Affected: TOTOLINK / Realtek SDK based routers | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable... | Affected: YouPHPTube / YouPHPTube" | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before... | Affected: Apache Software Foundation / Apache CouchDB | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Altenergy Power Control Software status_zigbee get_status_zigbee sql injection | Affected: Altenergy / Power Control Software | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP... | Affected: WyreStorm / Apollo VX20 | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any... | Affected: Telesquare / SDT-CW3B1 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Remote code execution as guest via SolrSearchMacros request in xwiki | Affected: xwiki / xwiki-platform | CVSS: 9.8 (CRITICAL) | EPSS: 0.99898 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Kubernetes kubelet exposes /debug/pprof info on healthz port | Affected: Kubernetes / Kubernetes | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Guangzhou Yingke Electronic Technology Ncast Guest Login IPSetup.php information disclosure | Affected: Guangzhou Yingke Electronic Technology / Ncast | CVSS: 5.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions  was possible | Affected: JetBrains / TeamCity | CVSS: 7.3 (HIGH) | EPSS: 0.99991 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send... | Affected: Ignite Realtime / Openfire | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: OAuth2 client id and secret exposed through the web browser in pgAdmin 4 | Affected: pgadmin.org / pgAdmin 4 | CVSS: 9.9 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Apache Web Server (httpd) specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK... | Affected: Apache Software Foundation / Apache Tomcat Connectors | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Authentication Bypass in GoAnywhere MFT | Affected: Fortra / GoAnywhere MFT | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True

Authentication Bypass in GoAnywhere MFT


KEVIntel entry: D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection | Affected: D-Link / DNS-320, DNS-320LW, DNS-325, DNS-340L | CVSS: 9.2 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary File Download and SSRF vulnerability | Affected: WP Automatic / Automatic | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2.... | Affected: GitLab / GitLab Community Edition (CE), GitLab Enterprise Edition (EE) | CVSS: 6.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Likeshop HTTP POST Request File.php userFormImage unrestricted upload | Affected: Likeshop / Likeshop | CVSS: 7.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server. | Affected: NextGen Healthcare / Mirth Connect | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0... | Affected: Fortinet / FortiNAC | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of... | Affected: Apache / Axis2 | CVSS: 10.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at... | Affected: NETGEAR / ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Remote Code Exploit in Lucee Admin | Affected: lucee / Lucee | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True

Remote Code Exploit in Lucee Admin


KEVIntel entry: VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input validation and lack of... | Affected: VMware / VMware View Planner | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: NTLM Hash Disclosure Spoofing Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1,... | Affected: Apple / iOS and iPadOS, macOS, tvOS, visionOS | CVSS: 6.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1,... | Affected: Apple / iOS and iPadOS, macOS, tvOS, visionOS, watchOS | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands... | Affected: SonicWall / SMA100 | CVSS: 6.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation | Affected: brainstormforce / OttoKit: All-in-One Automation Platform (Formerly SureTriggers) | CVSS: 8.1 (HIGH) | EPSS: 0.00207 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ALSA: usb-audio: Fix out of bounds reads when finding clock sources | Affected: Linux / Linux | CVSS: 7.1 (HIGH) | EPSS: 0.01254 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices | Affected: Linux / Linux | CVSS: 7.8 (HIGH) | EPSS: 0.03558 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's... | Affected: Gladinet / CentreStack | CVSS: 9.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Common Log File System Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy instance is... | Affected: CrushFTP / CrushFTP | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA... | Affected: Ivanti / Connect Secure, Policy Secure, Neurons for ZTA gateways | CVSS: 9.0 (CRITICAL) | EPSS: 0.10245 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT | Affected: Apache Software Foundation / Apache Tomcat | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a... | Affected: Cisco / Cisco Smart License Utility | CVSS: 9.8 (CRITICAL) | EPSS: 0.9201 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to... | Affected: Google / Chrome | CVSS: 8.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by... | Affected: Sitecore / Sitecore CMS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2... | Affected: Sitecore / CMS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Multiple Reviewdog actions were compromised during a specific time period | Affected: reviewdog / reviewdog | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted... | Affected: Horde / IMP | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and... | Affected: Meta / WhatsApp cloud service | CVSS: 3.5 (LOW) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote... | Affected: SAP / NetWeaver Application Server Java | CVSS: 7.5 (HIGH) | EPSS: 0.94557 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to... | Affected: NAKIVO / Backup & Replication Director | CVSS: 8.6 (HIGH) | EPSS: 0.93995 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Edimax IC-7100 IP Camera OS Command Injection | Affected: Edimax / IC-7100 IP Camera | CVSS: 9.3 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected... | Affected: tj-actions / changed-files | CVSS: 8.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy... | Affected: Fortinet / FortiProxy, FortiOS | CVSS: 8.1 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4... | Affected: Apple / Safari, iOS and iPadOS, iPadOS, macOS, visionOS, watchOS | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Junos OS: An local attacker with shell access can execute arbitrary code | Affected: Juniper Networks / Junos OS | CVSS: 6.7 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Fast FAT File System Driver Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows NTFS Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows NTFS Information Disclosure Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows NTFS Information Disclosure Vulnerability | Affected: Microsoft / Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 4.6 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False