Threat database

1,164 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	KEVEPSS 84%	CVE-2018-17463Google Chromium V8 Remote Code Execution Vulnerability High8.8KEVEPSS 84%2022-06-08CISA KEVCVE-2018-17463 CVE-2018-17463 is a high-severity remote code execution vulnerability in the Google Chromium V8 JavaScript engine. It allows a remote attacker to execute code within the sandbox environment by delivering a crafted HTML page. This vulnerability affects multiple web browsers that use the Chromium engine, such as Google Chrome, Microsoft Edge, and Opera. Exploits have been observed in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 84%Vulnerability Google #exploited-in-the-wild	CISA KEV	2022-06-08
High	8.8	KEVEPSS 35%	CVE-2018-17480Google Chromium V8 Out-of-Bounds Write Vulnerability High8.8KEVEPSS 35%2022-06-08CISA KEVCVE-2018-17480 CVE-2018-17480 is an out-of-bounds write vulnerability in the Google Chromium V8 JavaScript engine. This flaw allows a remote attacker to execute code within the sandbox environment by delivering a specially crafted HTML page. Multiple Chromium-based browsers, including Google Chrome, Microsoft Edge, and Opera, may be affected. Exploitation of this vulnerability has been observed in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 35%Vulnerability Google #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 21%	CVE-2009-1862Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability High7.8KEVEPSS 21%2022-06-08CISA KEVCVE-2009-1862 CVE-2009-1862 is a high-severity vulnerability affecting Adobe Acrobat and Reader, as well as Adobe Flash Player. It allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 21%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	8.8	KEVEPSS 35%	CVE-2018-4990Adobe Acrobat and Reader Double Free Vulnerability High8.8KEVEPSS 35%2022-06-08CISA KEVCVE-2018-4990 CVE-2018-4990 is a double free vulnerability in Adobe Acrobat and Reader that can lead to remote code execution. This vulnerability has been exploited in the wild, indicating active attacks leveraging this flaw. No specific affected versions or patch information is provided in the available data. KEVEPSS 35%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
Critical	9.8	KEVEPSS 14%	CVE-2019-7193QNAP QTS Improper Input Validation Vulnerability Critical9.8KEVEPSS 14%2022-06-08CISA KEVCVE-2019-7193 CVE-2019-7193 is an improper input validation vulnerability in QNAP QTS that allows remote attackers to inject code on the system. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 14%Vulnerability QNAP #exploited-in-the-wild	CISA KEV	2022-06-08
High	8.8	KEVEPSS 60%	CVE-2018-6065Google Chromium V8 Integer Overflow Vulnerability High8.8KEVEPSS 60%2022-06-08CISA KEVCVE-2018-6065 CVE-2018-6065 is an integer overflow vulnerability in the Google Chromium V8 JavaScript engine. It allows remote attackers to potentially cause heap corruption by crafting malicious HTML pages. This vulnerability affects multiple web browsers that use the Chromium engine, including Google Chrome, Microsoft Edge, and Opera. Exploits for this vulnerability have been observed in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 60%Vulnerability Google #exploited-in-the-wild	CISA KEV	2022-06-08
High	8.8	KEVEPSS 48%	CVE-2016-1646Google Chromium V8 Out-of-Bounds Read Vulnerability High8.8KEVEPSS 48%2022-06-08CISA KEVCVE-2016-1646 CVE-2016-1646 is an out-of-bounds read vulnerability in the Google Chromium V8 JavaScript engine. It allows remote attackers to cause denial of service or potentially other unspecified impacts by supplying crafted JavaScript code. This vulnerability affects multiple web browsers that use the Chromium engine, including Google Chrome, Microsoft Edge, and Opera. Exploits for this vulnerability have been observed in the wild. No explicit patch information is provided in the input data. KEVEPSS 48%Vulnerability Google #exploited-in-the-wild	CISA KEV	2022-06-08
Critical	9.8	KEVEPSS 82%	CVE-2019-7194QNAP Photo Station Path Traversal Vulnerability Critical9.8KEVEPSS 82%2022-06-08CISA KEVCVE-2019-7194 QNAP Photo Station contains a path traversal vulnerability that allows remote attackers to access or modify system files. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. It affects QNAP devices running Photo Station. No specific affected versions or patch information is provided. KEVEPSS 82%Vulnerability QNAP #exploited-in-the-wild	CISA KEV	2022-06-08
Critical	9.8	KEVEPSS 88%	CVE-2019-7192QNAP Photo Station Improper Access Control Vulnerability Critical9.8KEVEPSS 88%2022-06-08CISA KEVCVE-2019-7192 QNAP NAS devices running Photo Station have an improper access control vulnerability (CVE-2019-7192) that allows remote attackers to gain unauthorized access. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided. KEVEPSS 88%Vulnerability QNAP #exploited-in-the-wild	CISA KEV	2022-06-08
High	8.8	KEVEPSS 48%	CVE-2006-2492Microsoft Word Malformed Object Pointer Vulnerability High8.8KEVEPSS 48%2022-06-08CISA KEVCVE-2006-2492 CVE-2006-2492 is a vulnerability in Microsoft Word and Microsoft Works Suites involving a malformed object pointer that allows attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 48%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-06-08
Critical	9.8	KEVEPSS 89%	CVE-2019-7195QNAP Photo Station Path Traversal Vulnerability Critical9.8KEVEPSS 89%2022-06-08CISA KEVCVE-2019-7195 QNAP Photo Station contains a path traversal vulnerability that allows remote attackers to access or modify system files. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. It affects QNAP devices running Photo Station. No specific affected versions or patch information is provided. KEVEPSS 89%Vulnerability QNAP #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 63%	CVE-2011-0609Adobe Flash Player Unspecified Vulnerability High7.8KEVEPSS 63%2022-06-08CISA KEVCVE-2011-0609 Adobe Flash Player contains an unspecified vulnerability that enables remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 63%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	8.8	KEVEPSS 83%	CVE-2009-3953Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability High8.8KEVEPSS 83%2022-06-08CISA KEVCVE-2009-3953 Adobe Acrobat and Reader contain a vulnerability in the Universal 3D (U3D) support due to an array boundary issue that can lead to remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 83%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	8.8	KEVEPSS 88%	CVE-2011-2462Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability High8.8KEVEPSS 88%2022-06-08CISA KEVCVE-2011-2462 CVE-2011-2462 is a memory corruption vulnerability in the Universal 3D (U3D) component of Adobe Reader and Acrobat. This flaw could allow remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. It has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 88%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 81%	CVE-2009-4324Adobe Acrobat and Reader Use-After-Free Vulnerability High7.8KEVEPSS 81%2022-06-08CISA KEVCVE-2009-4324 CVE-2009-4324 is a use-after-free vulnerability in Adobe Acrobat and Reader that allows remote attackers to execute arbitrary code by opening a specially crafted PDF file. This vulnerability has been exploited in the wild. It affects Adobe Acrobat and Reader products, though specific affected versions are not detailed in the provided data. KEVEPSS 81%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-06-08
High	8.8	KEVEPSS 34%	CVE-2016-5198Google Chromium V8 Out-of-Bounds Memory Vulnerability High8.8KEVEPSS 34%2022-06-08CISA KEVCVE-2016-5198 CVE-2016-5198 is an out-of-bounds memory access vulnerability in the Google Chromium V8 JavaScript engine. This flaw allows remote attackers to perform arbitrary read and write operations, potentially leading to code execution when a user visits a crafted HTML page. Multiple web browsers that use Chromium, such as Google Chrome, Microsoft Edge, and Opera, may be affected. Exploits for this vulnerability have been observed in the wild. No specific affected versions or patch information are provided in the input data. KEVEPSS 34%Vulnerability Google #exploited-in-the-wild	CISA KEV	2022-06-08
High	7.8	KEVEPSS 87%	CVE-2012-0151Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability High7.8KEVEPSS 87%2022-06-08CISA KEVCVE-2012-0151 CVE-2012-0151 is a vulnerability in the Microsoft Windows Authenticode Signature Verification function (WinVerifyTrust) that improperly validates the digest of signed portable executable files. This flaw allows user-assisted remote attackers to execute arbitrary code on affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 87%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-06-08
Critical	9.8	KEVEPSS 99%	CVE-2022-26134Atlassian Confluence Server/Data Center · Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Critical9.8KEVEPSS 99%2022-06-02CISA KEVCVE-2022-26134 CVE-2022-26134 is a critical remote code execution vulnerability in Atlassian Confluence Server and Data Center. It allows unauthenticated attackers to execute arbitrary code remotely. The vulnerability has a CVSS score of 9.8, indicating high severity and impact. It has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information are provided in the input data. KEVEPSS 99%Vulnerability Atlassian #exploited-in-the-wild	CISA KEV	2022-06-02
High	8.8	KEVEPSS 22%	CVE-2014-0546Adobe Reader and Acrobat Sandbox Bypass Vulnerability High8.8KEVEPSS 22%2022-05-25CISA KEVCVE-2014-0546 CVE-2014-0546 is a vulnerability in Adobe Reader and Acrobat on Windows that allows attackers to bypass sandbox protections and execute native code with elevated privileges. This flaw has been exploited in the wild. No specific affected versions or patch information are provided in the input data. KEVEPSS 22%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-05-25
High	8.8	KEVEPSS 26%	CVE-2014-2817Microsoft Internet Explorer Privilege Escalation Vulnerability High8.8KEVEPSS 26%2022-05-25CISA KEVCVE-2014-2817 CVE-2014-2817 is a high-severity privilege escalation vulnerability in Microsoft Internet Explorer. It allows remote attackers to gain elevated privileges by tricking users into visiting a crafted website. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 26%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-25

Page 22 of 59