Verdict
Ransomware crews are using this
CISA has linked this vulnerability to known ransomware campaigns. Treat any exposed instance as an active incident, not a patching ticket. 332 vulnerabilities in this band.
- CVE-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability Mitel · MiVoice Connect
- CVE-2022-40765 Mitel MiVoice Connect Command Injection Vulnerability Mitel · MiVoice Connect
- CVE-2023-23376 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-2291 Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability Intel · Ethernet Diagnostics Driver for Windows
- CVE-2022-24990 TerraMaster OS Remote Command Execution Vulnerability TerraMaster · TerraMaster OS
- CVE-2023-0669 Fortra GoAnywhere MFT Remote Code Execution Vulnerability Fortra · GoAnywhere MFT
- CVE-2022-21587 Oracle E-Business Suite Unspecified Vulnerability Oracle · E-Business Suite
- CVE-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability Telerik · User Interface (UI) for ASP.NET AJAX
- CVE-2022-47966 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Zoho · ManageEngine
- CVE-2022-41080 Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft · Exchange Server
- CVE-2022-42475 Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Fortinet · FortiOS
- CVE-2022-44698 Microsoft Defender SmartScreen Security Feature Bypass Vulnerability Microsoft · Defender
- CVE-2022-26500 Veeam Backup & Replication Remote Code Execution Vulnerability Veeam · Backup & Replication
- CVE-2022-26501 Veeam Backup & Replication Remote Code Execution Vulnerability Veeam · Backup & Replication
- CVE-2022-41091 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Microsoft · Windows
- CVE-2022-41073 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2020-3433 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability Cisco · AnyConnect Secure
- CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability Cisco · AnyConnect Secure
- CVE-2018-19323 GIGABYTE Multiple Products Privilege Escalation Vulnerability GIGABYTE · Multiple Products
- CVE-2018-19322 GIGABYTE Multiple Products Code Execution Vulnerability GIGABYTE · Multiple Products
- CVE-2018-19321 GIGABYTE Multiple Products Privilege Escalation Vulnerability GIGABYTE · Multiple Products
- CVE-2018-19320 GIGABYTE Multiple Products Unspecified Vulnerability GIGABYTE · Multiple Products
- CVE-2022-40684 Fortinet Multiple Products Authentication Bypass Vulnerability Fortinet · Multiple Products
- CVE-2022-41082 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2022-41040 Microsoft Exchange Server Server-Side Request Forgery Vulnerability Microsoft · Exchange Server
- CVE-2022-27593 QNAP Photo Station Externally Controlled Reference Vulnerability QNAP · Photo Station
- CVE-2018-6530 D-Link Multiple Routers OS Command Injection Vulnerability D-Link · Multiple Routers
- CVE-2018-13374 Fortinet FortiOS and FortiADC Improper Access Control Vulnerability Fortinet · FortiOS and FortiADC
- CVE-2022-26352 dotCMS Unrestricted Upload of File Vulnerability dotCMS · dotCMS
- CVE-2022-2294 WebRTC Heap Buffer Overflow Vulnerability WebRTC · WebRTC
- CVE-2022-27925 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2022-37042 Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2022-30333 RARLAB UnRAR Directory Traversal Vulnerability RARLAB · UnRAR
- CVE-2022-27924 Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2022-29499 Mitel MiVoice Connect Data Validation Vulnerability Mitel · MiVoice Connect
- CVE-2022-30190 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2019-7195 QNAP Photo Station Path Traversal Vulnerability QNAP · Photo Station
- CVE-2019-7194 QNAP Photo Station Path Traversal Vulnerability QNAP · Photo Station
- CVE-2019-7193 QNAP QTS Improper Input Validation Vulnerability QNAP · QTS
- CVE-2019-7192 QNAP Photo Station Improper Access Control Vulnerability QNAP · Photo Station
- CVE-2022-26134 Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Atlassian · Confluence Server/Data Center
- CVE-2016-0034 Microsoft Silverlight Runtime Remote Code Execution Vulnerability Microsoft · Silverlight
- CVE-2013-3993 IBM InfoSphere BigInsights Invalid Input Vulnerability IBM · InfoSphere BigInsights
- CVE-2013-0431 Oracle JRE Sandbox Bypass Vulnerability Oracle · Java Runtime Environment (JRE)
- CVE-2013-0422 Oracle JRE Remote Code Execution Vulnerability Oracle · Java Runtime Environment (JRE)
- CVE-2013-0074 Microsoft Silverlight Double Dereference Vulnerability Microsoft · Silverlight
- CVE-2012-1710 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2010-1428 Red Hat JBoss Information Disclosure Vulnerability Red Hat · JBoss
- CVE-2010-0738 Red Hat JBoss Authentication Bypass Vulnerability Red Hat · JBoss
- CVE-2018-19953 QNAP NAS File Station Cross-Site Scripting Vulnerability QNAP · Network Attached Storage (NAS)
- CVE-2018-19949 QNAP NAS File Station Command Injection Vulnerability QNAP · Network Attached Storage (NAS)
- CVE-2018-19943 QNAP NAS File Station Cross-Site Scripting Vulnerability QNAP · Network Attached Storage (NAS)
- CVE-2017-0147 Microsoft Windows SMBv1 Information Disclosure Vulnerability Microsoft · SMBv1 server
- CVE-2017-18362 Kaseya VSA SQL Injection Vulnerability Kaseya · Virtual System/Server Administrator (VSA)
- CVE-2016-3351 Microsoft Internet Explorer and Edge Information Disclosure Vulnerability Microsoft · Internet Explorer and Edge
- CVE-2020-0638 Microsoft Update Notification Manager Privilege Escalation Vulnerability Microsoft · Update Notification Manager
- CVE-2019-1385 Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1130 Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2022-1388 F5 BIG-IP Missing Authentication Vulnerability F5 · BIG-IP
- CVE-2022-29464 WSO2 Multiple Products Unrestrictive Upload of File Vulnerability WSO2 · Multiple Products
- CVE-2018-6882 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2019-16057 D-Link DNS-320 Remote Code Execution Vulnerability D-Link · DNS-320 Storage Device
- CVE-2022-22954 VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability VMware · Workspace ONE Access and Identity Manager
- CVE-2022-24521 Microsoft Windows CLFS Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-7602 Drupal Core Remote Code Execution Vulnerability Drupal · Core
- CVE-2018-20753 Kaseya VSA Remote Code Execution Vulnerability Kaseya · Virtual System/Server Administrator (VSA)
- CVE-2021-42287 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft · Active Directory
- CVE-2021-42278 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft · Active Directory
- CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerability Microsoft · SMBv1 server
- CVE-2021-28799 QNAP NAS Improper Authorization Vulnerability QNAP · Network Attached Storage (NAS)
- CVE-2018-10562 Dasan GPON Routers Command Injection Vulnerability Dasan · Gigabit Passive Optical Network (GPON) Routers
- CVE-2021-38646 Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability Microsoft · Office
- CVE-2021-26085 Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability Atlassian · Confluence Server
- CVE-2021-20028 SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability SonicWall · Secure Remote Access (SRA)
- CVE-2018-8440 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-8406 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability Microsoft · DirectX Graphics Kernel (DXGKRNL)
- CVE-2018-8405 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability Microsoft · DirectX Graphics Kernel (DXGKRNL)
- CVE-2017-0213 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2016-0151 Microsoft Windows CSRSS Security Feature Bypass Vulnerability Microsoft · Client-Server Run-time Subsystem (CSRSS)
- CVE-2013-2551 Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft · Internet Explorer
- CVE-2013-2465 Oracle Java SE Unspecified Vulnerability Oracle · Java SE
- CVE-2022-21999 Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-42237 Sitecore XP Remote Command Execution Vulnerability Sitecore · XP
- CVE-2021-22941 Citrix ShareFile Improper Access Control Vulnerability Citrix · ShareFile
- CVE-2020-2021 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks · PAN-OS
- CVE-2019-15107 Webmin Command Injection Vulnerability Webmin · Webmin
- CVE-2019-11043 PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability PHP · FastCGI Process Manager (FPM)
- CVE-2018-1273 VMware Tanzu Spring Data Commons Property Binder Vulnerability VMware Tanzu · Spring Data Commons
- CVE-2018-11138 Quest KACE System Management Appliance Remote Command Execution Vulnerability Quest · KACE System Management Appliance
- CVE-2017-12615 Apache Tomcat on Windows Remote Code Execution Vulnerability Apache · Tomcat
- CVE-2017-0146 Microsoft Windows SMB Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2010-2861 Adobe ColdFusion Directory Traversal Vulnerability Adobe · ColdFusion
- CVE-2019-1405 Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1322 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1315 Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1253 Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1129 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-1069 Microsoft Task Scheduler Privilege Escalation Vulnerability Microsoft · Task Scheduler
- CVE-2019-1064 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-0841 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-0543 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-8120 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2017-0101 Microsoft Windows Transaction Manager Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2016-3309 Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-2546 Microsoft Win32k Memory Corruption Vulnerability Microsoft · Win32k
- CVE-2009-3960 Adobe BlazeDS Information Disclosure Vulnerability Adobe · BlazeDS
- CVE-2021-41379 Microsoft Windows Installer Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-8581 Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft · Exchange Server
- CVE-2016-1019 Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe · Flash Player
- CVE-2016-0099 Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2015-7645 Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe · Flash Player
- CVE-2015-1701 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2012-4681 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle · Java SE
- CVE-2012-1723 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle · Java SE
- CVE-2012-0507 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle · Java SE
- CVE-2010-0188 Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability Adobe · Reader and Acrobat
- CVE-2008-2992 Adobe Reader and Acrobat Input Validation Vulnerability Adobe · Acrobat and Reader
- CVE-2022-24682 Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability Synacor · Zimbra Collaborate Suite (ZCS)
- CVE-2019-0752 Microsoft Internet Explorer Type Confusion Vulnerability Microsoft · Internet Explorer
- CVE-2018-8174 Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability Microsoft · Windows
Nothing on this page matches that filter.