KEVIntel entry: Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is... | Affected: Progress / Telerik UI for ASP.NET AJAX | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been... | Affected: Netis / WF2419 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level. | Affected: NETGEAR / JGS516PE | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which... | Affected: Microsoft / Visio | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: PlaySMS before 1.4.3 does not sanitize inputs from a malicious string. | Affected: PlaySMS / PlaySMS | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k... | Affected: Microsoft / Windows, Windows Server | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send... | Affected: Atlassian / Crowd | CVSS: 9.8 (CRITICAL) | EPSS: 0.95355 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3... | Affected: Atlassian / Confluence Server | CVSS: 9.8 (CRITICAL) | EPSS: 0.99913 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap... | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package,... | Affected: Microsoft / Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft SharePoint Enterprise Server | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Scripting Engine Memory Corruption Vulnerability | Affected: Microsoft / Internet Explorer 11 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31 | CVSS: 8.4 (HIGH) | EPSS: 0.36514 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 5.2 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are... | Affected: Oracle Corporation / WebLogic Server | CVSS: 9.8 (CRITICAL) | EPSS: 0.99997 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Affected: Google / Chrome | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks. | Affected: Citrix / StoreFront Server | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker... | Affected: IBM / Data Risk Manager | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured... | Affected: IBM / Data Risk Manager | CVSS: 9.8 (CRITICAL) | EPSS: 0.70031 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM... | Affected: IBM / Data Risk Manager | CVSS: 9.1 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary... | Affected: Oracle / WebLogic Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported versions that are affected... | Affected: Oracle Corporation / Solaris Operating System | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are... | Affected: Oracle Corporation / WebCenter Portal, Utilities Framework | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks... | Affected: Mozilla / Firefox ESR, Thunderbird, Firefox | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Common Log File System Driver Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery... | Affected: ImageMagick / ImageMagick | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is... | Affected: Accellion / FTA | CVSS: 9.8 (CRITICAL) | EPSS: 0.56686 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data... | Affected: Adobe / Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit... | Affected: Google / Android | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be... | Affected: Apache / Apache Solr | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1,... | Affected: Apple / macOS | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and... | Affected: IBM / Planning Analytics | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. | Affected: ImageMagick / ImageMagick | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6 | Affected: Kaseya / VSA | CVSS: 10.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution | Affected: Adobe / Acrobat Reader | CVSS: 9.6 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts... | Affected: Apache Software Foundation / Apache Struts | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3,... | Affected: MobileIron / Core & Connector, Sentry, Monitor and Reporting Database (RDB) | CVSS: 9.8 (CRITICAL) | EPSS: 0.99737 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services... | Affected: Liferay / Liferay Portal | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: McAfee Total Protection (MTP) privilege escalation vulnerability | Affected: McAfee,LLC / McAfee Total Protection (MTP) | CVSS: 8.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be... | Affected: Micro Focus / Operation Bridge Reporter. | CVSS: 9.8 (CRITICAL) | EPSS: 0.9674 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Open Management Infrastructure Remote Code Execution Vulnerability | Affected: Microsoft / Open Management Infrastructure, System Center Operations Manager (SCOM), Azure Automation State Configuration, DSC Extension, Azure Automation Update Management, Log Analytics Agent, Azure Diagnostics (LAD), Container Monitoring Solution, Azure Security Center, Azure Sentinel, Azure Stack Hub | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Browser Memory Corruption Vulnerability | Affected: Microsoft / ChakraCore, Microsoft Edge (EdgeHTML-based), Internet Explorer 9, Internet Explorer 11 | CVSS: 4.2 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0.... | Affected: Micro Focus / Access Manager. | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft DWM Core Library Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 | CVSS: 8.4 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Defender Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft System Center Endpoint Protection, Microsoft System Center 2012 R2 Endpoint Protection, Microsoft Security Essentials, Microsoft System Center 2012 Endpoint Protection, Windows Defender | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Kernel Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows NTFS Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Kernel Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Kernel Local Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 5.2 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Open Management Infrastructure Elevation of Privilege Vulnerability | Affected: Microsoft / Open Management Infrastructure, System Center Operations Manager (SCOM), Azure Automation State Configuration, DSC Extension, Azure Automation Update Management, Log Analytics Agent, Azure Diagnostics (LAD), Container Monitoring Solution, Azure Security Center, Azure Sentinel, Azure Stack Hub | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows Update Medic Service Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and... | Affected: Microsoft / Windows | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Kernel Information Disclosure Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server... | Affected: Microsoft / Internet Information Services (IIS) | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Open Management Infrastructure Elevation of Privilege Vulnerability | Affected: Microsoft / Open Management Infrastructure, System Center Operations Manager (SCOM), Azure Automation State Configuration, DSC Extension, Azure Automation Update Management, Log Analytics Agent, Azure Diagnostics (LAD), Container Monitoring Solution, Azure Security Center, Azure Sentinel, Azure Stack Hub | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka... | Affected: Microsoft / Microsoft Exchange Server 2013, Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30 | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;... | Affected: Microsoft Corporation / Windows SMB | CVSS: 8.8 (HIGH) | EPSS: 0.93307 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold... | Affected: Microsoft / Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8 | CVSS: 9.1 (CRITICAL) | EPSS: 0.99999 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Win32k Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 | CVSS: 7.8 (HIGH) | EPSS: 0.78376 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Print Spooler Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows MSHTML Platform Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows 10 Version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2012, Windows Server 2012 R2 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Win32k Elevation of Privilege Vulnerability | Affected: Microsoft / Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS... | Affected: Microsoft / Windows Server, Windows Server, version 1909 (Server Core installation), Windows Server, version 1903 (Server Core installation), Windows Server, version 2004 (Server Core installation) | CVSS: 10.0 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Internet Explorer Memory Corruption Vulnerability | Affected: Microsoft / Internet Explorer 9, Internet Explorer 11, Microsoft Edge (EdgeHTML-based) | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Exchange Server Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8 | CVSS: 9.0 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix... | Affected: Citrix / Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP | CVSS: 6.5 (MEDIUM) | EPSS: 0.88411 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft MSHTML Remote Code Execution Vulnerability | Affected: Microsoft / Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 8.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows 10 Version 2004 for 32-bit Systems, Windows Server, version 2004 (Server Core installation), Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Open Management Infrastructure Elevation of Privilege Vulnerability | Affected: Microsoft / Open Management Infrastructure, System Center Operations Manager (SCOM), Azure Automation State Configuration, DSC Extension, Azure Automation Update Management, Log Analytics Agent, Azure Diagnostics (LAD), Container Monitoring Solution, Azure Security Center, Azure Sentinel, Azure Stack Hub | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting... | Affected: Microsoft / Internet Explorer 9, Internet Explorer 11, Internet Explorer 10 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker... | Affected: Microsoft / Windows, Windows Server | CVSS: 9.8 (CRITICAL) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Windows Spoofing Vulnerability | Affected: Microsoft / Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1709 for 32-bit Systems, Windows 10 Version 1709, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False

Windows Spoofing Vulnerability


KEVIntel entry: Microsoft Exchange Server Security Feature Bypass Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8 | CVSS: 6.6 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k... | Affected: Microsoft / Windows Server, Windows | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Windows LSA Spoofing Vulnerability | Affected: Microsoft / Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server version 2004, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008  Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | CVSS: 7.5 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False

Windows LSA Spoofing Vulnerability


KEVIntel entry: Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution... | Affected: Microsoft Corporation / Equation Editor | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word... | Affected: Microsoft / Word | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Internet Explorer Remote Code Execution Vulnerability | Affected: Microsoft / Internet Explorer 11 | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution... | Affected: Microsoft / Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k... | Affected: Microsoft / Windows, Windows Server | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or... | Affected: Microsoft Corporation / Microsoft .NET Framework | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege... | Affected: Microsoft / Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) | CVSS: 7.8 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003... | Affected: Microsoft / Office | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow... | Affected: Microsoft Corporation / Microsoft Office | CVSS: 7.8 (HIGH) | EPSS: 0.99945 | Used in malware: yes | Not yet in CISA KEV: False


KEVIntel entry: Microsoft Office Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft Office 2016, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1 | CVSS: 7.6 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: WP DSGVO Tools (GDPR) <= 3.1.23 Unauthenticated Arbitrary Post Deletion | Affected: legalweb / WP DSGVO Tools (GDPR) | CVSS: 7.5 (HIGH) | EPSS: 0.01446 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Catwalk Server is enabled for HTTP access,... | Affected: Canon / imageRUNNER ADVANCE iR-ADV C5250 | CVSS: 7.5 (HIGH) | EPSS: 0.04 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation | Affected: ProfilePress / ProfilePress | CVSS: 9.8 (CRITICAL) | EPSS: 0.91153 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin | Affected: StoreApps / WooCommerce Stock Manager | CVSS: 8.8 (HIGH) | EPSS: 0.00109 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE | Affected: Unknown / Fancy Product Designer | CVSS: 9.8 (CRITICAL) | EPSS: 0.8345 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Facebook for WordPress < 3.0.0 - PHP Object Injection with POP Chain | Affected: Unknown / Facebook for WordPress | CVSS: 8.1 (HIGH) | EPSS: 0.06505 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: All Thrive Themes and Plugins - Unauthenticated Option Update | Affected: Thrive Themes / Thrive Optimize, Thrive Comments, Thrive Headline Optimizer, Thrive Leads, Thrive Ultimatum, Thrive Quiz Builder, Thrive Apprentice, Thrive Visual Editor, Thrive Dashboard, Thrive Ovation, Thrive Clever Widgets, Rise by Thrive Themes, Ignition by Thrive Themes, Luxe by Thrive Themes, FocusBlog by Thrive Themes, Minus by Thrive Themes, Squared by Thrive Themes, Voice, Performag by Thrive Themes, Pressive by Thrive Themes, Storied by Thrive Themes, Thrive Themes Builder | CVSS: 5.3 (MEDIUM) | EPSS: 0.00178 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: User Profile Picture < 2.5.0 - Sensitive Information Disclosure | Affected: Unknown / User Profile Picture | CVSS: 7.5 (HIGH) | EPSS: 0.00554 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended payment step (for course videos and materials) by... | Affected: WordPress / wp-courses plugin | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify... | Affected: watchful.li / XCloner Backup and Restore | CVSS: 9.9 (CRITICAL) | EPSS: 0.49962 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauthenticated attackers to... | Affected: WordPress / Quiz and Survey Master plugin | CVSS: 10.0 (CRITICAL) | EPSS: 0.13311 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authenticated attackers, with... | Affected: Elegant Themes / Divi | CVSS: 9.9 (CRITICAL) | EPSS: 0.01667 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to... | Affected: gVectors / wpDiscuz | CVSS: 10.0 (CRITICAL) | EPSS: 0.93857 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions. | Affected: supsystic.com / data-tables-generator-by-supsystic | CVSS: 8.8 (HIGH) | EPSS: 0.00423 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative... | Affected: jQuery / File Upload Plugin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu. | Affected: Code Snippets / Code Snippets plugin for WordPress | CVSS: 8.8 (HIGH) | EPSS: 0.50314 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject... | Affected: WordPress / Minimal Coming Soon & Maintenance Mode plugin | CVSS: 8.8 (HIGH) | EPSS: 0.0073 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users (with subscriber or greater access) to modify, delete, or... | Affected: WordPress / 301 Redirects - Easy Redirect Manager | CVSS: 9.0 (CRITICAL) | EPSS: 0.00181 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use... | Affected: Cerio / DT-300N | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Incorrect access control in migla_ajax_functions.php in the Calmar Webmedia Total Donations plugin through 2.0.5 for WordPress allows... | Affected: Calmar Webmedia / Total Donations plugin for WordPress | CVSS: 9.8 (CRITICAL) | EPSS: 0.05645 | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because... | Affected: Van Ons / WP GDPR Compliance | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfault... | Affected: Suricata / Suricata | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's... | Affected: Ether Cartel / Ether Cartel | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An integer overflow in the _transfer function of a smart contract implementation for Hexagon (HXG), an Ethereum ERC20 token, allows attackers to... | Affected: Hexagon / HXG (Ethereum ERC20 token) | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable,... | Affected: Matrix / Synapse | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The transferFrom function of a smart contract implementation for Useless Ethereum Token (UET), an Ethereum ERC20 token, allows attackers to steal... | Affected: Useless Ethereum Token / UET | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh (aka SMT), an Ethereum ERC20 token, allows... | Affected: SmartMesh / SmartMesh | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin (BEC), the Ethereum ERC20 token used... | Affected: Beauty Chain / Beauty Ecosystem Coin (BEC) | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 allows... | Affected: vBulletin / vBulletin | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP... | Affected: Joomla! / Joomla! | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly restrict URLs, which allows remote attackers to conduct PHP... | Affected: Hajime Fujimoto / mt-phpincgi | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access, which allows remote attackers to conduct cross-site... | Affected: WordPress / FancyBox for WordPress plugin | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before... | Affected: FreePBX / ARI Framework module/Asterisk Recording Interface (ARI) | CVSS: 10.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SQL injection vulnerability in the Statistics (ke_stats) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands... | Affected: TYPO3 / ke_stats | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The MSCOMCTL library in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1 makes it easier for remote attackers to... | Affected: Microsoft / Office | CVSS: 6.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The ShellExecute API in Windows Shell in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,... | Affected: Microsoft / Windows | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356... | Affected: Adobe / Flash Player | CVSS: 10.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: VsaVb7rt.dll in Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not implement the ASLR protection mechanism, which makes it easier for remote... | Affected: Microsoft / .NET Framework | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine TCP connection states, which allows remote... | Affected: Microsoft / .NET Framework | CVSS: 5.0 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers... | Affected: Roundcube / Webmail | CVSS: 5.0 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows remote attackers to... | Affected: Daum / DaumGame ActiveX plugin | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification)... | Affected: NTP / NTP | CVSS: 5.0 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Multiple unrestricted file upload vulnerabilities in (1) media-upload.php, (2) media-upload-lncthumb.php, and (3) media-upload-sq_button.php in... | Affected: OptimizePress / OptimizePress theme for WordPress | CVSS: 6.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe... | Affected: Adobe / Flash Player | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote... | Affected: Microsoft / Office | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an... | Affected: Microsoft / Office 2013 | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista... | Affected: Microsoft / Windows | CVSS: 8.8 (HIGH) | EPSS: 0.73872 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and... | Affected: TimThumb / timthumb.php | CVSS: 6.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and... | Affected: ["D-Link", "Planex", "Alpha Networks"] / ["DIR-100", "DIR-120", "DI-624S", "DI-524UP", "DI-604S", "DI-604UP", "DI-604+", "TM-G5240", "BRL-04R", "BRL-04UR", "BRL-04CW"] | CVSS: 10.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid,... | Affected: vBulletin / vBulletin | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote... | Affected: Joomla! / Joomla! | CVSS: 6.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND... | Affected: ISC / BIND | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40... | Affected: Oracle / Java SE | CVSS: 10.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on... | Affected: Adobe / Flash Player | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before... | Affected: Adobe / Flash Player | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unrestricted file upload vulnerability in index.php in Atomymaxsite 2.5 and earlier allows remote attackers to execute arbitrary code by uploading... | Affected: Atomymaxsite / Atomymaxsite | CVSS: 6.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Opera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2) other inline element, which makes it easier for... | Affected: Opera / Opera Browser | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Multiple incomplete blacklist vulnerabilities in the Simple File Upload (mod_simplefileuploadv1.3) module before 1.3.5 for Joomla! allow remote... | Affected: Joomla! / Simple File Upload | CVSS: 6.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for... | Affected: Microsoft / Office | CVSS: 7.8 (HIGH) | EPSS: 0.21028 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via... | Affected: PHP / PHP | CVSS: 10.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and... | Affected: Adobe / Flash Player | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter,... | Affected: Webglimpse / Webglimpse | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU#2, 9.x before 9.5 MU#11, 10.0.x... | Affected: Parallels / Plesk Panel | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SQL injection vulnerability in the Kitchen recipe (mv_cooking) extension before 0.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL... | Affected: TYPO3 / mv_cooking extension | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and... | Affected: FreeBSD / FreeBSD | CVSS: 10.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6... | Affected: Adobe / Reader and Acrobat | CVSS: 10.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows... | Affected: Microsoft / Windows | CVSS: 8.8 (HIGH) | EPSS: 0.78285 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby... | Affected: phpLDAPadmin / phpLDAPadmin | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7... | Affected: Adobe / Flash Player | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets... | Affected: Microsoft / Windows | CVSS: 7.1 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web... | Affected: Mongoose / Mongoose | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and... | Affected: Apple / iOS | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro... | Affected: JustSystems / Ichitaro | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to... | Affected: Adobe / Flash Player | CVSS: 10.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator... | Affected: CRE Loaded / CRE Loaded | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as... | Affected: Plone / Plone | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of... | Affected: Apache / Subversion | CVSS: 5.0 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute... | Affected: Adobe / Flash Player | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Multiple SQL injection vulnerabilities in WEC Discussion Forum (wec_discussion) extension 2.1.0 and earlier for TYPO3 allow remote attackers to... | Affected: TYPO3 / WEC Discussion Forum | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Directory traversal vulnerability in the nBill (com_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10 for... | Affected: nBill / nBill | CVSS: 5.0 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to... | Affected: Microsoft / Internet Explorer | CVSS: 8.1 (HIGH) | EPSS: 0.96889 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll... | Affected: Adobe / Flash Player | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before... | Affected: Mozilla / Firefox, Thunderbird, SeaMonkey | CVSS: 9.8 (CRITICAL) | EPSS: 0.83279 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of... | Affected: Adobe / Shockwave Player | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the... | Affected: Microsoft / Windows | CVSS: 7.2 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly... | Affected: Linux / Linux Kernel | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2,... | Affected: Microsoft / Windows | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and... | Affected: Adobe / Flash Player, Reader, Acrobat | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka... | Affected: Atlassian / JIRA | CVSS: 9.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow remote attackers to inject arbitrary web script or... | Affected: Atlassian / JIRA | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers... | Affected: Microsoft / Internet Explorer | CVSS: 8.8 (HIGH) | EPSS: 0.82045 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003... | Affected: Microsoft / Internet Explorer | CVSS: 8.8 (HIGH) | EPSS: 0.91885 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute... | Affected: Adobe / Reader and Acrobat | CVSS: 8.8 (HIGH) | EPSS: 0.86468 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to force the download and... | Affected: UUSee / UUUpgrade ActiveX control | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which... | Affected: SPIP / SPIP | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office... | Affected: Microsoft / Office Web Components | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest... | Affected: Microsoft / Windows | CVSS: 8.8 (HIGH) | EPSS: 0.76647 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories... | Affected: FCKeditor / FCKeditor | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly... | Affected: Perl / Compress::Raw::Zlib | CVSS: 6.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000... | Affected: Microsoft / DirectX | CVSS: 8.8 (HIGH) | EPSS: 0.50926 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the... | Affected: Baofeng / Baofeng products | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames iGame 2009, allows remote... | Affected: Chinagames / iGame | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute... | Affected: Baofeng / Storm | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the... | Affected: PuterJam / PJBlog3 | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary... | Affected: Mozilla / Firefox, Thunderbird, SeaMonkey | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute... | Affected: Microsoft / Office PowerPoint | CVSS: 8.8 (HIGH) | EPSS: 0.67539 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in JustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier allows remote attackers to... | Affected: JustSystems / Ichitaro | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word,... | Affected: Microsoft / Office Excel | CVSS: 8.8 (HIGH) | EPSS: 0.43063 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF... | Affected: Adobe / Reader | CVSS: 7.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1,... | Affected: Microsoft / Internet Explorer | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute... | Affected: Microsoft / Windows | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Unspecified vulnerability in PHPCow allows remote attackers to execute arbitrary code via unknown vectors, related to a "file inclusion... | Affected: PHPCow / PHPCow | CVSS: 10.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows... | Affected: Microsoft / Windows | CVSS: 9.8 (CRITICAL) | EPSS: 0.98751 | Used in malware: unknown | Not yet in CISA KEV: False


KEVIntel entry: Unspecified vulnerability in multiple JustSystems Ichitaro products allows remote attackers to execute arbitrary code via a crafted JTD document,... | Affected: JustSystems / Ichitaro | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a... | Affected: Adobe / Flash Player | CVSS: 4.3 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft... | Affected: Microsoft / Visual Studio | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone... | Affected: Microsoft / Windows XP SP2 | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the... | Affected: Microsoft / Office Word 2002 SP3 | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and earlier... | Affected: Coppermine / Photo Gallery | CVSS: 6.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted... | Affected: Microsoft / Jet Database Engine | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld... | Affected: Ourgame / GLWorld | CVSS: 10.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Stack-based buffer overflow in JSGCI.DLL in JustSystems Ichitaro 2005, 2006, and 2007 allows user-assisted remote attackers to execute arbitrary... | Affected: JustSystems / Ichitaro | CVSS: 9.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via... | Affected: SSReader / Ultra Star Reader ActiveX control | CVSS: 6.8 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourgame GLWorld and possibly... | Affected: Ourgame / GLWorld | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True


KEVIntel entry: Stack-based buffer overflow in Justsystem Ichitaro 9.x through 13.x, Ichitaro 2004, 2005, 2006, and Government 2006; Ichitaro for Linux; and... | Affected: Justsystem / Ichitaro | CVSS: 7.5 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True