Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2021-22600 KEV |
|
[KEV] Vulnerability in :linux_kernel: (CVE-2021-22600)
vulnerability in :linux_kernel: (CVE-2021-22600). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `:2022-05-05` or later.
|
| CVE-2021-42287 KEV |
|
[KEV] Privilege Escalation in Microsoft active-directory (CVE-2021-42287)
vulnerability in Microsoft active-directory (CVE-2021-42287). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2021-42278 KEV |
|
[KEV] Vulnerability in Microsoft active-directory (CVE-2021-42278)
vulnerability in Microsoft active-directory (CVE-2021-42278). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2021-46416 |
|
Vulnerability in sma (CVE-2021-46416)
vulnerability in sma (CVE-2021-46416). Confidential information can be exposed externally.
|
| CVE-2020-27374 |
|
Vulnerability in drtrustusa (CVE-2020-27374)
vulnerability in drtrustusa (CVE-2020-27374). Successful exploitation can lead to full system takeover.
|
| CVE-2020-27376 |
|
Vulnerability in drtrustusa (CVE-2020-27376)
vulnerability in drtrustusa (CVE-2020-27376). Successful exploitation can lead to full system takeover.
|
| CVE-2020-27373 |
|
OS Command Injection in drtrustusa (CVE-2020-27373)
OS command injection in drtrustusa (CVE-2020-27373). Successful exploitation can lead to full system takeover.
|
| CVE-2022-26251 |
|
Privilege Escalation in synametrics (CVE-2022-26251)
vulnerability in synametrics (CVE-2022-26251). Successful exploitation can lead to full system takeover.
|
| CVE-2022-26607 |
|
Unrestricted File Upload in baigo (CVE-2022-26607)
vulnerability in baigo (CVE-2022-26607). Successful exploitation can lead to full system takeover.
|
| CVE-2022-26250 |
|
Vulnerability in synametrics (CVE-2022-26250)
vulnerability in synametrics (CVE-2022-26250). Successful exploitation can lead to full system takeover.
|
| CVE-2021-3156 KEV |
|
[KEV] Vulnerability in sudo (CVE-2021-3156)
vulnerability in sudo (CVE-2021-3156). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2021-31166 KEV |
|
[KEV] Use-After-Free in Microsoft http-protocol-stack (CVE-2021-31166)
vulnerability in Microsoft http-protocol-stack (CVE-2021-31166). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-0148 KEV |
|
[KEV] Vulnerability in Microsoft smbv1-server (CVE-2017-0148)
vulnerability in Microsoft smbv1-server (CVE-2017-0148). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-26281 |
|
BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.
BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.
|
| CVE-2022-22965 KEV |
|
[KEV] Code Injection in Vmware spring-framework (CVE-2022-22965)
code injection in Vmware spring-framework (CVE-2022-22965). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-22675 KEV |
|
[KEV] Vulnerability in Apple macos (CVE-2022-22675)
vulnerability in Apple macos (CVE-2022-22675). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-22674 KEV |
|
[KEV] Vulnerability in Apple macos (CVE-2022-22674)
vulnerability in Apple macos (CVE-2022-22674). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-45382 KEV |
|
[KEV] OS Command Injection in D-link multiple-routers (CVE-2021-45382)
OS command injection in D-link multiple-routers (CVE-2021-45382). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-34484 KEV |
|
[KEV] Privilege Escalation in Microsoft windows (CVE-2021-34484)
vulnerability in Microsoft windows (CVE-2021-34484). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2022-26871 KEV |
|
[KEV] Vulnerability in Trend micro trend-micro (CVE-2022-26871)
vulnerability in Trend micro trend-micro (CVE-2022-26871). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-1040 KEV |
|
[KEV] Vulnerability in Sophos firewall (CVE-2022-1040)
vulnerability in Sophos firewall (CVE-2022-1040). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-28799 KEV |
|
[KEV] Vulnerability in Qnap network-attached-storage-nas (CVE-2021-28799)
vulnerability in Qnap network-attached-storage-nas (CVE-2021-28799). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-21551 KEV |
|
[KEV] Vulnerability in Dell dbutil-driver (CVE-2021-21551)
vulnerability in Dell dbutil-driver (CVE-2021-21551). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2018-10562 KEV |
|
[KEV] OS Command Injection in Dasan gigabit-passive-optical-network-gpon-routers (CVE-2018-10562)
OS command injection in Dasan gigabit-passive-optical-network-gpon-routers (CVE-2018-10562). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2018-10561 KEV |
|
[KEV] Authentication Bypass in Dasan gigabit-passive-optical-network-gpon-routers (CVE-2018-10561)
authentication bypass in Dasan gigabit-passive-optical-network-gpon-routers (CVE-2018-10561). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-46008 |
|
Vulnerability in totolink (CVE-2021-46008)
vulnerability in totolink (CVE-2021-46008). Successful exploitation can lead to full system takeover.
|
| CVE-2021-46010 |
|
Vulnerability in totolink (CVE-2021-46010)
vulnerability in totolink (CVE-2021-46010). Successful exploitation can lead to full system takeover.
|
| CVE-2021-45031 |
|
Vulnerability in mepsan (CVE-2021-45031)
vulnerability in mepsan (CVE-2021-45031). Confidential information can be exposed externally.
|
| CVE-2022-1055 |
|
Use-After-Free in privilege-escalation (CVE-2022-1055)
vulnerability in privilege-escalation (CVE-2022-1055). Successful exploitation can lead to full system takeover.
|
| CVE-2021-34486 KEV |
|
[KEV] Use-After-Free in Microsoft windows (CVE-2021-34486)
vulnerability in Microsoft windows (CVE-2021-34486). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2021-38646 KEV |
|
[KEV] Vulnerability in Microsoft office (CVE-2021-38646)
vulnerability in Microsoft office (CVE-2021-38646). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2022-1096 KEV |
|
[KEV] Vulnerability in Google chromium-v8 (CVE-2022-1096)
vulnerability in Google chromium-v8 (CVE-2022-1096). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-0543 KEV |
|
[KEV] Vulnerability in redis (CVE-2022-0543)
vulnerability in redis (CVE-2022-0543). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-26085 KEV |
|
[KEV] Vulnerability in Atlassian confluence-server (CVE-2021-26085)
vulnerability in Atlassian confluence-server (CVE-2021-26085). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-20028 KEV |
|
[KEV] SQL Injection in Sonicwall secure-remote-access-sra (CVE-2021-20028)
SQL injection in Sonicwall secure-remote-access-sra (CVE-2021-20028). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2019-7483 KEV |
|
[KEV] Path Traversal in Sonicwall sma100 (CVE-2019-7483)
path traversal in Sonicwall sma100 (CVE-2019-7483). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2018-8440 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2018-8440)
vulnerability in Microsoft windows (CVE-2018-8440). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2018-8406 KEV |
|
[KEV] Vulnerability in Microsoft directx-graphics-kernel-dxgkrnl (CVE-2018-8406)
vulnerability in Microsoft directx-graphics-kernel-dxgkrnl (CVE-2018-8406). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2018-8405 KEV |
|
[KEV] Vulnerability in Microsoft directx-graphics-kernel-dxgkrnl (CVE-2018-8405)
vulnerability in Microsoft directx-graphics-kernel-dxgkrnl (CVE-2018-8405). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-0213 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2017-0213)
vulnerability in Microsoft windows (CVE-2017-0213). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-0059 KEV |
|
[KEV] Information Disclosure in Microsoft internet-explorer (CVE-2017-0059)
vulnerability in Microsoft internet-explorer (CVE-2017-0059). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-0037 KEV |
|
[KEV] Vulnerability in Microsoft edge-and-internet-explorer (CVE-2017-0037)
vulnerability in Microsoft edge-and-internet-explorer (CVE-2017-0037). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2016-7201 KEV |
|
[KEV] Buffer Overflow in Microsoft edge (CVE-2016-7201)
vulnerability in Microsoft edge (CVE-2016-7201). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2016-7200 KEV |
|
[KEV] Buffer Overflow in Microsoft edge (CVE-2016-7200)
vulnerability in Microsoft edge (CVE-2016-7200). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2016-0189 KEV |
|
[KEV] Buffer Overflow in Microsoft internet-explorer (CVE-2016-0189)
vulnerability in Microsoft internet-explorer (CVE-2016-0189). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2016-0151 KEV |
|
[KEV] Vulnerability in Microsoft client-server-run-time-subsystem-csrss (CVE-2016-0151)
vulnerability in Microsoft client-server-run-time-subsystem-csrss (CVE-2016-0151). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2016-0040 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2016-0040)
vulnerability in Microsoft windows (CVE-2016-0040). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2015-2426 KEV |
|
[KEV] Buffer Overflow in Microsoft windows (CVE-2015-2426)
vulnerability in Microsoft windows (CVE-2015-2426). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2015-2419 KEV |
|
[KEV] Buffer Overflow in Microsoft internet-explorer (CVE-2015-2419)
vulnerability in Microsoft internet-explorer (CVE-2015-2419). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2015-1770 KEV |
|
[KEV] Vulnerability in Microsoft office (CVE-2015-1770)
vulnerability in Microsoft office (CVE-2015-1770). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|