Threat database

1,164 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.8	KEVEPSS 1.9%	CVE-2022-41033Windows COM+ Event System Service · Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability High7.8KEVEPSS 1.9%2022-10-11CISA KEVCVE-2022-41033 CVE-2022-41033 is a high-severity privilege escalation vulnerability in the Microsoft Windows COM+ Event System Service. It allows an attacker with limited privileges to escalate their privileges on the affected system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 1.9%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-10-11
High	8.8	KEVEPSS 99%	CVE-2022-36804Bitbucket Server and Data Center · Atlassian Bitbucket Server and Data Center Command Injection Vulnerability High8.8KEVEPSS 99%2022-09-30CISA KEVCVE-2022-36804 CVE-2022-36804 is a command injection vulnerability affecting multiple API endpoints in Atlassian Bitbucket Server and Data Center. An attacker with access to a public repository or read permissions on a private repository can execute arbitrary code by sending a crafted HTTP request. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 99%Vulnerability Atlassian #exploited-in-the-wild	CISA KEV	2022-09-30
High	8.0	KEVEPSS 99%	CVE-2022-41082Exchange Server · Microsoft Exchange Server Remote Code Execution Vulnerability High8.0KEVEPSS 99%2022-09-30CISA KEVCVE-2022-41082 CVE-2022-41082 is a high-severity vulnerability in Microsoft Exchange Server that allows authenticated remote code execution. Known as "ProxyNotShell," it can be chained with CVE-2022-41040 to achieve remote code execution. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. KEVEPSS 99%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-09-30
High	8.8	KEVEPSS 99%	CVE-2022-41040Exchange Server · Microsoft Exchange Server Server-Side Request Forgery Vulnerability High8.8KEVEPSS 99%2022-09-30CISA KEVCVE-2022-41040 CVE-2022-41040 is a server-side request forgery (SSRF) vulnerability in Microsoft Exchange Server, known as "ProxyNotShell." It can be chained with CVE-2022-41082 to achieve remote code execution. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. KEVEPSS 99%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-09-30
Critical	9.8	KEVEPSS 98%	CVE-2022-3236Firewall · Sophos Firewall Code Injection Vulnerability Critical9.8KEVEPSS 98%2022-09-23CISA KEVCVE-2022-3236 CVE-2022-3236 is a critical code injection vulnerability in the User Portal and Webadmin interfaces of Sophos Firewall. It allows unauthenticated remote attackers to execute arbitrary code on affected devices. The vulnerability has a very high CVSS score of 9.8 and has been exploited in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 98%Vulnerability Sophos #exploited-in-the-wild	CISA KEV	2022-09-23
Critical	9.8	KEVEPSS 99%	CVE-2022-35405ManageEngine · Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Critical9.8KEVEPSS 99%2022-09-22CISA KEVCVE-2022-35405 CVE-2022-35405 is a high-severity remote code execution vulnerability affecting multiple Zoho ManageEngine products, including PAM360, Password Manager Pro, and Access Manager Plus. The vulnerability is unspecified in detail but has been exploited in the wild. No specific affected versions or patch information are provided in the available data. KEVEPSS 99%Vulnerability Zoho #exploited-in-the-wild	CISA KEV	2022-09-22
High	7.2	KEVEPSS 3.3%	CVE-2022-40139Apex One and Apex One as a Service · Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability High7.2KEVEPSS 3.3%2022-09-15CISA KEVCVE-2022-40139 CVE-2022-40139 is a high severity vulnerability in Trend Micro Apex One and Apex One as a Service involving improper validation of rollback mechanism components. This flaw could allow remote code execution. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 3.3%Vulnerability Trend Micro #exploited-in-the-wild	CISA KEV	2022-09-15
High	7.8	KEVEPSS 89%	CVE-2010-2568Windows · Microsoft Windows Remote Code Execution Vulnerability High7.8KEVEPSS 89%2022-09-15CISA KEVCVE-2010-2568 CVE-2010-2568 is a high-severity remote code execution vulnerability in Microsoft Windows where the operating system incorrectly parses shortcut files. This flaw allows malicious code execution when Windows displays the icon of a crafted malicious shortcut file. Exploitation requires user interaction (UI required) and can lead to full compromise with code executing as the logged-on user. This vulnerability has been exploited in the wild. KEVEPSS 89%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-09-15
High	8.4	KEVEPSS 47%	CVE-2013-2094Kernel · Linux Kernel Privilege Escalation Vulnerability High8.4KEVEPSS 47%2022-09-15CISA KEVCVE-2013-2094 CVE-2013-2094 is a high-severity Linux kernel vulnerability that allows local privilege escalation. The flaw arises because the kernel does not properly check all 64 bits of the attr.config parameter passed from user space, leading to an out-of-bounds access in the perf_swevent_enabled array within the sw_perf_event_destroy() function. This vulnerability has been exploited in the wild. KEVEPSS 47%Vulnerability Linux #exploited-in-the-wild	CISA KEV	2022-09-15
High	7.8	KEVEPSS 3.2%	CVE-2013-2596Kernel · Linux Kernel Integer Overflow Vulnerability High7.8KEVEPSS 3.2%2022-09-15CISA KEVCVE-2013-2596 CVE-2013-2596 is an integer overflow vulnerability in the Linux kernel's fb_mmap function within drivers/video/fbmem.c. This flaw allows local attackers with limited privileges to escalate their privileges on the affected system. The vulnerability has a high severity rating and has been exploited in the wild. KEVEPSS 3.2%Vulnerability Linux #exploited-in-the-wild	CISA KEV	2022-09-15
High	8.4	KEVEPSS 1.5%	CVE-2013-2597ACDB Audio Driver · Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability High8.4KEVEPSS 1.5%2022-09-15CISA KEVCVE-2013-2597 CVE-2013-2597 is a stack-based buffer overflow vulnerability in the Code Aurora ACDB audio driver. This flaw allows for privilege escalation on affected systems. Code Aurora components are used in third-party products including Qualcomm and Android devices. The vulnerability has a high severity score and has been exploited in the wild. KEVEPSS 1.5%Vulnerability Code Aurora #exploited-in-the-wild	CISA KEV	2022-09-15
High	8.8	KEVEPSS 39%	CVE-2013-6282Kernel · Linux Kernel Improper Input Validation Vulnerability High8.8KEVEPSS 39%2022-09-15CISA KEVCVE-2013-6282 CVE-2013-6282 is a high-severity vulnerability in the Linux kernel affecting ARM v6k/v7 platforms. The kernel's get_user and put_user API functions do not properly validate target addresses, allowing applications to read and write kernel memory. This flaw can lead to privilege escalation. Exploits have been observed in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 39%Vulnerability Linux #exploited-in-the-wild	CISA KEV	2022-09-15
High	7.8	KEVEPSS 5.6%	CVE-2022-32917iOS, iPadOS, and macOS · Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability High7.8KEVEPSS 5.6%2022-09-14CISA KEVCVE-2022-32917 CVE-2022-32917 is a high-severity vulnerability in the Apple kernel used by iOS, iPadOS, and macOS. It allows an application to execute code with kernel privileges, potentially leading to full system compromise. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data. KEVEPSS 5.6%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-09-14
High	7.8	KEVEPSS 28%	CVE-2022-37969Windows · Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability High7.8KEVEPSS 28%2022-09-14CISA KEVCVE-2022-37969 CVE-2022-37969 is a high-severity privilege escalation vulnerability in the Microsoft Windows Common Log File System (CLFS) driver. The vulnerability is unspecified in detail but has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 28%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-09-14
Critical	9.8	KEVEPSS 99%	CVE-2018-2628WebLogic Server · Oracle WebLogic Server Unspecified Vulnerability Critical9.8KEVEPSS 99%2022-09-08CISA KEVCVE-2018-2628 CVE-2018-2628 is an unspecified vulnerability in Oracle WebLogic Server that allows an unauthenticated attacker with T3 network access to compromise the server. The vulnerability has been exploited in the wild. Oracle released patches addressing this and other vulnerabilities in their April 2018 Critical Patch Update. Oracle strongly recommends applying these patches promptly to mitigate the risk. KEVEPSS 99%Vulnerability Oracle #exploited-in-the-wild	CISA KEV	2022-09-08
Critical	9.8	KEVEPSS 91%	CVE-2022-26258DIR-820L · D-Link DIR-820L Remote Code Execution Vulnerability Critical9.8KEVEPSS 91%2022-09-08CISA KEVCVE-2022-26258 The D-Link DIR-820L router has a remote code execution vulnerability related to the Device Name parameter in the /lan.asp page. This vulnerability allows attackers to execute arbitrary code remotely. It has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 91%Vulnerability D-Link #exploited-in-the-wild	CISA KEV	2022-09-08
High	8.1	KEVEPSS 89%	CVE-2017-5521Multiple Devices · NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability High8.1KEVEPSS 89%2022-09-08CISA KEVCVE-2017-5521 Multiple NETGEAR devices have a vulnerability that allows disclosure of the admin password through crafted requests to the web management server. This issue exposes sensitive information and has been exploited in the wild. No specific affected versions or patches are provided in the available data. KEVEPSS 89%Vulnerability NETGEAR #exploited-in-the-wild	CISA KEV	2022-09-08
Medium	4.3	KEVEPSS 38%	CVE-2018-13374FortiOS and FortiADC · Fortinet FortiOS and FortiADC Improper Access Control Vulnerability Medium4.3KEVEPSS 38%2022-09-08CISA KEVCVE-2018-13374 CVE-2018-13374 is an improper access control vulnerability in Fortinet FortiOS and FortiADC. It allows attackers to retrieve LDAP server login credentials configured in FortiGate by directing an LDAP server connectivity test to a malicious LDAP server. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. KEVEPSS 38%Vulnerability Fortinet #exploited-in-the-wild	CISA KEV	2022-09-08
Critical	9.8	KEVEPSS 60%	CVE-2018-7445RouterOS · MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability Critical9.8KEVEPSS 60%2022-09-08CISA KEVCVE-2018-7445 CVE-2018-7445 is a stack-based buffer overflow vulnerability in MikroTik RouterOS that occurs when processing NetBIOS session request messages. Remote attackers with access to the vulnerable service can exploit this flaw to execute arbitrary code on the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 60%Vulnerability MikroTik #exploited-in-the-wild	CISA KEV	2022-09-08
Critical	9.6	KEVEPSS 5.8%	CVE-2022-3075Chromium Mojo · Google Chromium Mojo Insufficient Data Validation Vulnerability Critical9.6KEVEPSS 5.8%2022-09-08CISA KEVCVE-2022-3075 CVE-2022-3075 is an insufficient data validation vulnerability in Google Chromium Mojo that allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. This affects multiple Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. The vulnerability has been exploited in the wild. KEVEPSS 5.8%Vulnerability Google #exploited-in-the-wild	CISA KEV	2022-09-08

Showing 341–360 of 1,164 results