Threat database

1,164 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.0	KEVEPSS 22%	CVE-2018-19943QNAP Network Attached Storage (NAS) · QNAP NAS File Station Cross-Site Scripting Vulnerability High8.0KEVEPSS 22%2022-05-24CISA KEVCVE-2018-19943 CVE-2018-19943 is a cross-site scripting (XSS) vulnerability in QNAP NAS File Station that allows remote attackers to inject malicious code. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided. KEVEPSS 22%Vulnerability QNAP #exploited-in-the-wild	CISA KEV	2022-05-24
Critical	9.8	KEVEPSS 30%	CVE-2018-19949QNAP Network Attached Storage (NAS) · QNAP NAS File Station Command Injection Vulnerability Critical9.8KEVEPSS 30%2022-05-24CISA KEVCVE-2018-19949 CVE-2018-19949 is a command injection vulnerability in QNAP NAS File Station that allows remote attackers to execute arbitrary commands. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 30%Vulnerability QNAP #exploited-in-the-wild	CISA KEV	2022-05-24
Medium	6.1	KEVEPSS 30%	CVE-2018-19953QNAP Network Attached Storage (NAS) · QNAP NAS File Station Cross-Site Scripting Vulnerability Medium6.1KEVEPSS 30%2022-05-24CISA KEVCVE-2018-19953 CVE-2018-19953 is a cross-site scripting (XSS) vulnerability in QNAP NAS File Station that allows remote attackers to inject malicious code. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided. KEVEPSS 30%Vulnerability QNAP #exploited-in-the-wild	CISA KEV	2022-05-24
Medium	4.3	KEVEPSS 22%	CVE-2016-0162Microsoft Internet Explorer Information Disclosure Vulnerability Medium4.3KEVEPSS 22%2022-05-24CISA KEVCVE-2016-0162 CVE-2016-0162 is an information disclosure vulnerability in Microsoft Internet Explorer related to improper handling of JavaScript. This flaw allows attackers to detect specific files on a user's computer, potentially exposing sensitive information. The vulnerability has been exploited in the wild. No explicit patch or remediation details are provided in the available data. KEVEPSS 22%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-24
High	7.8	KEVEPSS 4.2%	CVE-2018-8611Microsoft Windows Kernel Privilege Escalation Vulnerability High7.8KEVEPSS 4.2%2022-05-24CISA KEVCVE-2018-8611 CVE-2018-8611 is a privilege escalation vulnerability in the Microsoft Windows kernel caused by improper handling of objects in memory. This flaw allows attackers to elevate privileges on affected systems. It has been exploited in the wild, indicating active use by threat actors. No specific affected Windows versions or patch information is provided in the available data. KEVEPSS 4.2%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-24
Medium	6.5	KEVEPSS 33%	CVE-2016-3298Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability Medium6.5KEVEPSS 33%2022-05-24CISA KEVCVE-2016-3298 CVE-2016-3298 is an information disclosure vulnerability in Microsoft Internet Explorer's Messaging API. It occurs due to improper handling of objects in memory, allowing an attacker to test for the presence of files on disk. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 33%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-24
Medium	6.5	KEVEPSS 26%	CVE-2016-3351Microsoft Internet Explorer and Edge Information Disclosure Vulnerability Medium6.5KEVEPSS 26%2022-05-24CISA KEVCVE-2016-3351 CVE-2016-3351 is an information disclosure vulnerability in Microsoft Internet Explorer and Edge browsers. It arises from the way certain functions handle objects in memory, potentially allowing attackers to detect specific files on a user's computer. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. KEVEPSS 26%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-24
Medium	5.5	KEVEPSS 33%	CVE-2016-4655Apple iOS Information Disclosure Vulnerability Medium5.5KEVEPSS 33%2022-05-24CISA KEVCVE-2016-4655 CVE-2016-4655 is an information disclosure vulnerability in the Apple iOS kernel that allows attackers to obtain sensitive information from memory by using a crafted application. This vulnerability has been exploited in the wild. No specific affected iOS versions or patch information is provided. KEVEPSS 33%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-05-24
High	7.8	KEVEPSS 23%	CVE-2016-4656Apple iOS Memory Corruption Vulnerability High7.8KEVEPSS 23%2022-05-24CISA KEVCVE-2016-4656 CVE-2016-4656 is a memory corruption vulnerability in the Apple iOS kernel that allows attackers to execute code with elevated privileges or cause a denial-of-service (DoS) by using a specially crafted application. This vulnerability has been exploited in the wild. No specific affected iOS versions or patch information is provided in the available data. KEVEPSS 23%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-05-24
High	8.8	KEVEPSS 66%	CVE-2016-4657Apple iOS Webkit Memory Corruption Vulnerability High8.8KEVEPSS 66%2022-05-24CISA KEVCVE-2016-4657 A memory corruption vulnerability in Apple iOS WebKit allows remote attackers to execute code or cause denial-of-service via crafted web content. This affects HTML parsers using WebKit, including Apple Safari and other products relying on WebKit. Exploits have been observed in the wild. No specific affected versions or patch information is provided. KEVEPSS 66%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-05-24
High	8.8	KEVEPSS 87%	CVE-2016-6366Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability High8.8KEVEPSS 87%2022-05-24CISA KEVCVE-2016-6366 CVE-2016-6366 is a high-severity buffer overflow vulnerability in the SNMP code of Cisco Adaptive Security Appliance (ASA) software. Exploitation of this flaw could allow an attacker to cause the affected device to reload or execute arbitrary code remotely. This vulnerability has been observed exploited in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 87%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2022-05-24
High	7.8	KEVEPSS 22%	CVE-2016-6367Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability High7.8KEVEPSS 22%2022-05-24CISA KEVCVE-2016-6367 CVE-2016-6367 is a high-severity vulnerability in the command-line interface (CLI) parser of Cisco Adaptive Security Appliance (ASA) software. It allows an authenticated local attacker to cause a denial-of-service (DoS) condition or potentially execute arbitrary code. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data. KEVEPSS 22%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2022-05-24
High	7.8	KEVEPSS 14%	CVE-2021-30883Apple Multiple Products Memory Corruption Vulnerability High7.8KEVEPSS 14%2022-05-23CISA KEVCVE-2021-30883 A memory corruption vulnerability exists in multiple Apple products including iOS, macOS, watchOS, and tvOS. This flaw could enable remote code execution, allowing an attacker to execute arbitrary code on affected devices. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data. KEVEPSS 14%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-05-23
Medium	6.5	KEVEPSS 11%	CVE-2022-20821Cisco IOS XR Open Port Vulnerability Medium6.5KEVEPSS 11%2022-05-23CISA KEVCVE-2022-20821 Cisco IOS XR software activates a health check feature that opens TCP port 6379 by default. This port exposes a Redis instance running within the NOSi container, which an attacker can connect to and potentially access. The vulnerability is known as CVE-2022-20821 and has been exploited in the wild. No specific affected versions or patch information are provided. KEVEPSS 11%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2022-05-23
Medium	6.4	KEVEPSS 0.9%	CVE-2021-0920Android Kernel Race Condition Vulnerability Medium6.4KEVEPSS 0.9%2022-05-23CISA KEVCVE-2021-0920 CVE-2021-0920 is a race condition vulnerability in the Android kernel that results in a use-after-free condition. This flaw can be exploited to escalate privileges on affected devices. The vulnerability has been observed in the wild, indicating active exploitation. No specific affected versions or patch information is provided in the available data. KEVEPSS 0.9%Vulnerability Android #exploited-in-the-wild	CISA KEV	2022-05-23
High	7.8	KEVEPSS 4.7%	CVE-2020-1027Microsoft Windows Kernel Privilege Escalation Vulnerability High7.8KEVEPSS 4.7%2022-05-23CISA KEVCVE-2020-1027 CVE-2020-1027 is a Windows Kernel elevation of privilege vulnerability that allows attackers to execute code with elevated permissions by exploiting how the kernel handles objects in memory. It has been exploited in the wild. No specific affected Windows versions are stated in the provided data. KEVEPSS 4.7%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-23
High	7.8	KEVEPSS 25%	CVE-2018-5002Adobe Flash Player Stack-based Buffer Overflow Vulnerability High7.8KEVEPSS 25%2022-05-23CISA KEVCVE-2018-5002 CVE-2018-5002 is a high-severity stack-based buffer overflow vulnerability in Adobe Flash Player that can lead to remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data. KEVEPSS 25%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-05-23
High	8.8	KEVEPSS 1.6%	CVE-2019-8720WebKitGTK Memory Corruption Vulnerability High8.8KEVEPSS 1.6%2022-05-23CISA KEVCVE-2019-8720 CVE-2019-8720 is a memory corruption vulnerability in WebKitGTK that can enable remote code execution by an attacker. It has been exploited in the wild, indicating active use by threat actors. The vulnerability is categorized under CWE-119, which relates to improper restriction of operations within the bounds of a memory buffer. No specific affected versions or patch information is provided in the available data. KEVEPSS 1.6%Vulnerability #exploited-in-the-wild	CISA KEV	2022-05-23
High	7.8	KEVEPSS 3.0%	CVE-2018-8589Microsoft Win32k Privilege Escalation Vulnerability High7.8KEVEPSS 3.0%2022-05-23CISA KEVCVE-2018-8589 CVE-2018-8589 is a privilege escalation vulnerability in Microsoft Windows Win32k.sys where improper handling of calls allows an attacker to execute code with local system privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the input data. KEVEPSS 3.0%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-23
Medium	6.5	KEVEPSS 8.1%	CVE-2019-0676Microsoft Internet Explorer Information Disclosure Vulnerability Medium6.5KEVEPSS 8.1%2022-05-23CISA KEVCVE-2019-0676 CVE-2019-0676 is an information disclosure vulnerability in Microsoft Internet Explorer where improper handling of objects in memory allows an attacker to test for the presence of files on disk. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 8.1%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-05-23

Page 25 of 59