Verdict
Ransomware crews are using this
CISA has linked this vulnerability to known ransomware campaigns. Treat any exposed instance as an active incident, not a patching ticket. 332 vulnerabilities in this band.
- CVE-2018-20250 WinRAR Absolute Path Traversal Vulnerability RARLAB · WinRAR
- CVE-2018-15982 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2020-0796 Microsoft SMBv3 Remote Code Execution Vulnerability Microsoft · SMBv3
- CVE-2017-10271 Oracle Corporation WebLogic Server Remote Code Execution Vulnerability Oracle · WebLogic Server
- CVE-2017-0145 Microsoft SMBv1 Remote Code Execution Vulnerability Microsoft · SMBv1
- CVE-2017-0144 Microsoft SMBv1 Remote Code Execution Vulnerability Microsoft · SMBv1
- CVE-2021-20038 SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability SonicWall · SMA 100 Appliances
- CVE-2020-0787 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2018-8453 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-21975 VMware Server Side Request Forgery in vRealize Operations Manager API VMware · vRealize Operations Manager API
- CVE-2019-1458 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2019-2725 Oracle WebLogic Server, Injection Oracle · WebLogic Server
- CVE-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization Fortinet · FortiOS and FortiProxy
- CVE-2018-13383 Fortinet FortiOS and FortiProxy Out-of-bounds Write Fortinet · FortiOS and FortiProxy
- CVE-2019-1579 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability Palo Alto Networks · PAN-OS
- CVE-2021-43890 Microsoft Windows AppX Installer Spoofing Vulnerability Microsoft · Windows
- CVE-2017-12149 Red Hat JBoss Application Server Remote Code Execution Vulnerability Red Hat · JBoss Application Server
- CVE-2021-44228 Apache Log4j2 Remote Code Execution Vulnerability Apache · Log4j2
- CVE-2021-40438 Apache HTTP Server-Side Request Forgery (SSRF) Apache · Apache
- CVE-2021-40449 Microsoft Windows Win32k Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-42321 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange
- CVE-2021-27104 Accellion FTA OS Command Injection Vulnerability Accellion · FTA
- CVE-2021-27102 Accellion FTA OS Command Injection Vulnerability Accellion · FTA
- CVE-2021-27101 Accellion FTA SQL Injection Vulnerability Accellion · FTA
- CVE-2021-27103 Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability Accellion · FTA
- CVE-2018-4878 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2021-42013 Apache HTTP Server Path Traversal Vulnerability Apache · HTTP Server
- CVE-2021-41773 Apache HTTP Server Path Traversal Vulnerability Apache · HTTP Server
- CVE-2017-5638 Apache Struts Remote Code Execution Vulnerability Apache · Struts
- CVE-2021-26084 Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Atlassian · Confluence Server and Data Center
- CVE-2019-11580 Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Atlassian · Crowd and Crowd Data Center
- CVE-2019-3396 Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Atlassian · Confluence Server and Data Server
- CVE-2021-42258 BQE BillQuick Web Suite SQL Injection Vulnerability BQE · BillQuick Web Suite
- CVE-2020-3580 Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2019-13608 Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability Citrix · StoreFront Server
- CVE-2019-19781 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2019-11634 Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability Citrix · Workspace Application and Receiver for Windows
- CVE-2017-9822 DotNetNuke (DNN) Remote Code Execution Vulnerability DotNetNuke (DNN) · DotNetNuke (DNN)
- CVE-2018-7600 Drupal Core Remote Code Execution Vulnerability Drupal · Drupal Core
- CVE-2021-22205 GitLab Community and Enterprise Editions Remote Code Execution Vulnerability GitLab · Community and Enterprise Editions
- CVE-2018-6789 Exim Buffer Overflow Vulnerability Exim · Exim
- CVE-2020-5902 F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability F5 · BIG-IP
- CVE-2021-22986 F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability F5 · BIG-IP and BIG-IQ Centralized Management
- CVE-2021-35464 ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability ForgeRock · Access Management (AM)
- CVE-2020-12812 Fortinet FortiOS SSL VPN Improper Authentication Vulnerability Fortinet · FortiOS
- CVE-2018-13379 Fortinet FortiOS SSL VPN Path Traversal Vulnerability Fortinet · FortiOS
- CVE-2021-30116 Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability Kaseya · Virtual System/Server Administrator (VSA)
- CVE-2014-1812 Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2021-38647 Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability Microsoft · Open Management Infrastructure (OMI)
- CVE-2016-0167 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2020-0878 Microsoft Edge and Internet Explorer Memory Corruption Vulnerability Microsoft · Edge and Internet Explorer
- CVE-2021-34523 Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft · Exchange Server
- CVE-2020-0688 Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2017-0143 Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2019-0708 Microsoft Remote Desktop Services Remote Code Execution Vulnerability Microsoft · Remote Desktop Services
- CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2021-1732 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2021-34527 Microsoft Windows Print Spooler Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2021-31207 Microsoft Exchange Server Security Feature Bypass Vulnerability Microsoft · Exchange Server
- CVE-2021-26411 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2021-40444 Microsoft MSHTML Remote Code Execution Vulnerability Microsoft · MSHTML
- CVE-2021-36942 Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability Microsoft · Windows
- CVE-2019-1215 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2017-11882 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2019-1367 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2017-0199 Microsoft Office and WordPad Remote Code Execution Vulnerability Microsoft · Office and WordPad
- CVE-2020-1472 Microsoft Netlogon Privilege Escalation Vulnerability Microsoft · Netlogon
- CVE-2021-26855 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2021-26858 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2021-27065 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2021-1675 Microsoft Windows Print Spooler Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2019-0604 Microsoft SharePoint Remote Code Execution Vulnerability Microsoft · SharePoint
- CVE-2021-26857 Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft · Exchange Server
- CVE-2021-36955 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2019-18935 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Progress · Telerik UI for ASP.NET AJAX
- CVE-2021-22893 Ivanti Pulse Connect Secure Use-After-Free Vulnerability Ivanti · Pulse Connect Secure
- CVE-2019-11510 Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability Ivanti · Pulse Connect Secure
- CVE-2019-11539 Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability Ivanti · Pulse Connect Secure and Pulse Policy Secure
- CVE-2018-2380 SAP Customer Relationship Management (CRM) Path Traversal Vulnerability SAP · Customer Relationship Management (CRM)
- CVE-2021-35211 SolarWinds Serv-U Remote Code Execution Vulnerability SolarWinds · Serv-U
- CVE-2021-20021 SonicWall Email Security Improper Privilege Management Vulnerability SonicWall · SonicWall Email Security
- CVE-2019-7481 SonicWall SMA100 SQL Injection Vulnerability SonicWall · SMA100
- CVE-2021-20022 SonicWall Email Security Unrestricted Upload of File Vulnerability SonicWall · SonicWall Email Security
- CVE-2021-20023 SonicWall Email Security Path Traversal Vulnerability SonicWall · SonicWall Email Security
- CVE-2021-20016 SonicWall SSLVPN SMA100 SQL Injection Vulnerability SonicWall · SSLVPN SMA100
- CVE-2020-12271 Sophos SFOS SQL Injection Vulnerability Sophos · SFOS
- CVE-2019-5544 VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability VMware · VMware ESXi and Horizon DaaS
- CVE-2020-3992 VMware ESXi OpenSLP Use-After-Free Vulnerability VMware · ESXi
- CVE-2021-22005 VMware vCenter Server File Upload Vulnerability VMware · vCenter Server
- CVE-2021-21972 VMware vCenter Server Remote Code Execution Vulnerability VMware · vCenter Server
- CVE-2021-21985 VMware vCenter Server Improper Input Validation Vulnerability VMware · vCenter Server
- CVE-2021-40539 Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability Zoho · ManageEngine
Nothing on this page matches that filter.