Verdict
Weaponised and widely attempted
Reliable public exploit code exists, or mass exploitation attempts are probable. Patch inside days, not weeks. 637 vulnerabilities in this band.
- CVE-2022-24086 Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability Adobe · Commerce and Magento Open Source
- CVE-2017-9841 PHPUnit Command Injection Vulnerability PHPUnit · PHPUnit
- CVE-2014-1761 Microsoft Word Memory Corruption Vulnerability Microsoft · Word
- CVE-2013-3906 Microsoft Graphics Component Memory Corruption Vulnerability Microsoft · Graphics Component
- CVE-2021-36934 Microsoft Windows SAM Local Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2018-1000861 Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability Jenkins · Jenkins Stapler Web Framework
- CVE-2017-9791 Apache Struts 1 Improper Input Validation Vulnerability Apache · Struts 1
- CVE-2017-8464 Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2017-0262 Microsoft Office Remote Code Execution Vulnerability Microsoft · Office
- CVE-2016-3088 Apache ActiveMQ Improper Input Validation Vulnerability Apache · ActiveMQ
- CVE-2015-2051 D-Link DIR-645 Router Remote Code Execution Vulnerability D-Link · DIR-645 Router
- CVE-2015-1635 Microsoft HTTP.sys Remote Code Execution Vulnerability Microsoft · HTTP.sys
- CVE-2022-21882 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2020-5722 Grandstream Networks UCM6200 Series SQL Injection Vulnerability Grandstream · UCM6200
- CVE-2017-5689 Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability Intel · Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability
- CVE-2014-1776 Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2014-6271 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability GNU · Bourne-Again Shell (Bash)
- CVE-2014-7169 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability GNU · Bourne-Again Shell (Bash)
- CVE-2006-1547 Apache Struts 1 ActionForm Denial-of-Service Vulnerability Apache · Struts 1
- CVE-2012-0391 Apache Struts 2 Improper Input Validation Vulnerability Apache · Struts 2
- CVE-2021-32648 October CMS Improper Authentication October CMS · October CMS
- CVE-2021-25296 Nagios XI OS Command Injection Nagios · Nagios XI
- CVE-2021-25297 Nagios XI OS Command Injection Nagios · Nagios XI
- CVE-2021-25298 Nagios XI OS Command Injection Nagios · Nagios XI
- CVE-2021-40870 Aviatrix Controller Unrestricted Upload of File Aviatrix · Aviatrix Controller
- CVE-2021-33766 Microsoft Exchange Server Information Disclosure Microsoft · Exchange Server
- CVE-2021-21315 System Information Library for Node.JS Command Injection Npm package · System Information Library for Node.JS
- CVE-2021-22991 F5 BIG-IP Traffic Management Microkernel Buffer Overflow F5 · BIG-IP Traffic Management Microkernel
- CVE-2020-14864 Oracle Business Intelligence Enterprise Edition Path Transversal Oracle · Intelligence Enterprise Edition
- CVE-2020-11978 Apache Airflow Command Injection Apache · Airflow
- CVE-2020-13927 Apache Airflow's Experimental API Authentication Bypass Apache · Airflow's Experimental API
- CVE-2021-36260 Hikvision Improper Input Validation Hikvision · Security cameras web server
- CVE-2019-9670 Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2019-10149 Exim Mail Transfer Agent (MTA) Improper Input Validation Exim · Mail Transfer Agent (MTA)
- CVE-2015-7450 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. IBM · WebSphere Application Server and Server Hypervisor Edition
- CVE-2017-1000486 Primetek Primefaces Remote Code Execution Vulnerability Primetek · Primefaces Application
- CVE-2019-7609 Kibana Arbitrary Code Execution Elastic · Kibana
- CVE-2021-44515 Zoho Desktop Central Authentication Bypass Vulnerability Zoho · Desktop Central
- CVE-2019-13272 Linux Kernel Improper Privilege Management Vulnerability Linux · Kernel
- CVE-2021-35394 Realtek Jungle SDK Remote Code Execution Vulnerability Realtek · Jungle Software Development Kit (SDK)
- CVE-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability Sonatype · Nexus Repository Manager
- CVE-2019-0193 Apache Solr DataImportHandler Code Injection Vulnerability Apache · Solr
- CVE-2017-17562 Embedthis GoAhead Remote Code Execution Vulnerability Embedthis · GoAhead
- CVE-2010-1871 Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability Red Hat · JBoss Seam 2
- CVE-2020-17463 Fuel CMS SQL Injection Vulnerability Fuel CMS · Fuel CMS
- CVE-2020-8816 Pi-Hole AdminLTE Remote Code Execution Vulnerability Pi-hole · AdminLTE
- CVE-2019-10758 MongoDB mongo-express Remote Code Execution Vulnerability MongoDB · mongo-express
- CVE-2018-14847 MikroTik Router OS Directory Traversal Vulnerability MikroTik · RouterOS
- CVE-2021-37415 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability Zoho · ManageEngine ServiceDesk Plus (SDP)
- CVE-2021-44077 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus
- CVE-2021-22204 ExifTool Remote Code Execution Vulnerability Perl · Exiftool
- CVE-2021-21017 Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability Adobe · Acrobat and Reader
- CVE-2021-28550 Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe · Acrobat and Reader
- CVE-2018-4939 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2018-15961 Adobe ColdFusion Unrestricted File Upload Vulnerability Adobe · ColdFusion
- CVE-2019-2215 Android Kernel Use-After-Free Vulnerability Android · Android Kernel
- CVE-2017-9805 Apache Struts Deserialization of Untrusted Data Vulnerability Apache · Struts
- CVE-2019-0211 Apache HTTP Server Privilege Escalation Vulnerability Apache · HTTP Server
- CVE-2016-4437 Apache Shiro Code Execution Vulnerability Apache · Shiro
- CVE-2019-17558 Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability Apache · Solr
- CVE-2020-17530 Apache Struts Remote Code Execution Vulnerability Apache · Struts
- CVE-2018-11776 Apache Struts Remote Code Execution Vulnerability Apache · Struts
- CVE-2021-30860 Apple Multiple Products Integer Overflow Vulnerability Apple · Multiple Products
- CVE-2021-30657 Apple macOS Unspecified Vulnerability Apple · macOS
- CVE-2021-20090 Arcadyan Buffalo Firmware Path Traversal Vulnerability Arcadyan · Buffalo Firmware
- CVE-2019-3398 Atlassian Confluence Server and Data Center Path Traversal Vulnerability Atlassian · Confluence Server and Data Center
- CVE-2020-3452 Cisco ASA and FTD Read-Only Path Traversal Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2021-1497 Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability Cisco · HyperFlex HX
- CVE-2021-1498 Cisco HyperFlex HX Data Platform Command Injection Vulnerability Cisco · HyperFlex HX
- CVE-2018-0171 Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability Cisco · IOS and IOS XE
- CVE-2020-3161 Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability Cisco · Cisco IP Phones
- CVE-2019-1653 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability Cisco · Small Business RV320 and RV325 Routers
- CVE-2018-0296 Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2020-8193 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2020-29557 D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability D-Link · DIR-825 R1 Devices
- CVE-2020-25506 D-Link DNS-320 Device Command Injection Vulnerability D-Link · DNS-320 Device
- CVE-2018-15811 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability DotNetNuke (DNN) · DotNetNuke (DNN)
- CVE-2018-18325 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability DotNetNuke (DNN) · DotNetNuke (DNN)
- CVE-2020-8515 Multiple DrayTek Vigor Routers Web Management Page Vulnerability DrayTek · Multiple Vigor Routers
- CVE-2020-8657 EyesOfNetwork Use of Hard-Coded Credentials Vulnerability EyesOfNetwork · EyesOfNetwork
- CVE-2020-8655 EyesOfNetwork Improper Privilege Management Vulnerability EyesOfNetwork · EyesOfNetwork
- CVE-2020-15999 Google Chrome FreeType Heap Buffer Overflow Vulnerability Google · Chrome FreeType
- CVE-2021-30632 Google Chromium V8 Out-of-Bounds Write Vulnerability Google · Chromium V8
- CVE-2021-30551 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2020-6418 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2021-21224 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2021-21220 Google Chromium V8 Improper Input Validation Vulnerability Google · Chromium V8
- CVE-2020-4430 IBM Data Risk Manager Directory Traversal Vulnerability IBM · Data Risk Manager
- CVE-2020-4427 IBM Data Risk Manager Security Bypass Vulnerability IBM · Data Risk Manager
- CVE-2020-4428 IBM Data Risk Manager Remote Code Execution Vulnerability IBM · Data Risk Manager
- CVE-2019-4716 IBM Planning Analytics Remote Code Execution Vulnerability IBM · Planning Analytics
- CVE-2016-3715 ImageMagick Arbitrary File Deletion Vulnerability ImageMagick · ImageMagick
- CVE-2016-3718 ImageMagick Server-Side Request Forgery (SSRF) Vulnerability ImageMagick · ImageMagick
- CVE-2020-15505 Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability Ivanti · MobileIron Multiple Products
- CVE-2020-7961 Liferay Portal Deserialization of Untrusted Data Vulnerability Liferay · Liferay Portal
- CVE-2021-22502 Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability Micro Focus · Operation Bridge Reporter (OBR)
- CVE-2021-31955 Microsoft Windows Kernel Information Disclosure Vulnerability Microsoft · Windows
- CVE-2016-0185 Microsoft Windows Media Center Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2021-33742 Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2020-0938 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2020-1020 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2017-7269 Microsoft Windows Server Buffer Overflow Vulnerability Microsoft · Internet Information Services (IIS)
- CVE-2016-7255 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2020-1350 Microsoft Windows DNS Server Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2017-8759 Microsoft .NET Framework Remote Code Execution Vulnerability Microsoft · .NET Framework
- CVE-2018-0798 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2018-0802 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2012-0158 Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability Microsoft · MSCOMCTL.OCX
- CVE-2015-1641 Microsoft Office Memory Corruption Vulnerability Microsoft · Office
- CVE-2019-0541 Microsoft MSHTML Remote Code Execution Vulnerability Microsoft · MSHTML
- CVE-2020-0674 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2019-1429 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2017-11774 Microsoft Office Outlook Security Feature Bypass Vulnerability Microsoft · Office
- CVE-2020-1054 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2020-0601 Microsoft Windows CryptoAPI Spoofing Vulnerability Microsoft · Windows
- CVE-2020-0646 Microsoft .NET Framework Remote Code Execution Vulnerability Microsoft · .NET Framework
- CVE-2019-0808 Microsoft Win32k Privilege Escalation Vulnerability Microsoft · Win32k
- CVE-2020-1147 Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Microsoft · .NET Framework, SharePoint, Visual Studio
- CVE-2019-15949 Nagios XI Remote Code Execution Vulnerability Nagios · Nagios XI
- CVE-2020-26919 Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability NETGEAR · JGS516PE Devices
Nothing on this page matches that filter.