# ke_vulns

cve_id: CVE-2021-27104
vendor_project: Accellion
product: FTA
vulnerability_name: Accellion FTA OS Command Injection Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints.


cve_id: CVE-2021-27102
vendor_project: Accellion
product: FTA
vulnerability_name: Accellion FTA OS Command Injection Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call.


cve_id: CVE-2021-27101
vendor_project: Accellion
product: FTA
vulnerability_name: Accellion FTA SQL Injection Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html.


cve_id: CVE-2021-27103
vendor_project: Accellion
product: FTA
vulnerability_name: Accellion FTA SSRF Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html.


cve_id: CVE-2021-21017
vendor_project: Adobe
product: Acrobat and Reader
vulnerability_name: Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


cve_id: CVE-2021-28550
vendor_project: Adobe
product: Acrobat and Reader
vulnerability_name: Adobe Acrobat and Reader Use-After-Free Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


cve_id: CVE-2018-4939
vendor_project: Adobe
product: ColdFusion
vulnerability_name: Adobe ColdFusion Deserialization of Untrusted Data vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution.


cve_id: CVE-2018-15961
vendor_project: Adobe
product: ColdFusion
vulnerability_name: Adobe ColdFusion Remote Code Execution
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution.


cve_id: CVE-2018-4878
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Use-After-Free Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.


cve_id: CVE-2020-5735
vendor_project: Amcrest
product: Cameras and Network Video Recorder (NVR)
vulnerability_name: Amcrest Camera and NVR Buffer Overflow Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.


cve_id: CVE-2017-9805
vendor_project: Apache
product: Struts
vulnerability_name: Apache Struts Multiple Versions Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 contains a vulnerability which can lead to Remote Code Execution.


cve_id: CVE-2021-42013
vendor_project: Apache
product: HTTP Server
vulnerability_name: Apache HTTP Server 2.4.49 and 2.4.50 Path Traversal
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Apache HTTP server vulnerabilities allow an attacker to use a path traversal attack to map URLs to files outside the expected document root and perform Remote Code Execution.


cve_id: CVE-2021-41773
vendor_project: Apache
product: HTTP Server
vulnerability_name: Apache HTTP Server Path Traversal Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.


cve_id: CVE-2019-0211
vendor_project: Apache
product: HTTP Server
vulnerability_name: Apache HTTP Server scoreboard vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.


cve_id: CVE-2016-4437
vendor_project: Apache
product: Shiro
vulnerability_name: Apache Shiro 1.2.4 Cookie RememberME Deserial Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.


cve_id: CVE-2019-17558
vendor_project: Apache
product: Solr
vulnerability_name: Apache Solr 5.0.0-8.3.1 Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configset could contain renderable, potentially malicious, templates. Parameter provided templates are disabled by default, but can be enabled by setting `params.resource.loader.enabled` by defining a response writer with that setting set to `true`. Defining a response writer requires configuration API access. Solr 8.4 removed the params resource loader entirely, and only enables the configset-provided template rendering when the configset is `trusted` (has been uploaded by an authenticated user).


cve_id: CVE-2020-17530
vendor_project: Apache
product: Struts
vulnerability_name: Apache Struts Forced OGNL Double Evaluation Remote Code Execution
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.


cve_id: CVE-2017-5638
vendor_project: Apache
product: Struts
vulnerability_name: Apache Struts Jakarta Multipart parser exception handling vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.


cve_id: CVE-2018-11776
vendor_project: Apache
product: Struts
vulnerability_name: Apache Struts 2.3 to 2.3.34 and 2.5 to 2.5.16 Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 contain a vulnerability which can allow for remote code execution.


cve_id: CVE-2019-6223
vendor_project: Apple
product: FaceTime
vulnerability_name: Apple FaceTime Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.


cve_id: CVE-2021-30860
vendor_project: Apple
product: iOS
vulnerability_name: Apple iOS "FORCEDENTRY" Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
An integer overflow was addressed with improved input validation vulnerability affecting iOS devices that allows for remote code execution.


cve_id: CVE-2020-27930
vendor_project: Apple
product: iOS and macOS
vulnerability_name: Apple iOS and macOS FontParser Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A memory corruption issue was addressed with improved input validation. Processing a maliciously crafted font may lead to arbitrary code execution.


cve_id: CVE-2020-9818
vendor_project: Apple
product: iOS Mail
vulnerability_name: Apple iOS Mail OOB Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.


cve_id: CVE-2021-30762
vendor_project: Apple
product: iOS
vulnerability_name: Apple WebKit Browser Engine Use-After-Free Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Use after free issue. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.


cve_id: CVE-2021-1782
vendor_project: Apple
product: iOS
vulnerability_name: Apple iOS Privilege Escalation and Code Execution Chain
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited.


cve_id: CVE-2021-1870
vendor_project: Apple
product: iOS
vulnerability_name: Apple iOS Privilege Escalation and Code Execution Chain
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.


cve_id: CVE-2021-1879
vendor_project: Apple
product: iOS
vulnerability_name: Apple iOS Webkit Browser Engine XSS
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited.


cve_id: CVE-2021-30661
vendor_project: Apple
product: iOS
vulnerability_name: Apple iOS Webkit Storage Use-After-Free Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.


cve_id: CVE-2021-30713
vendor_project: Apple
product: macOS
vulnerability_name: Apple macOS Input Validation Error
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited.


cve_id: CVE-2021-30657
vendor_project: Apple
product: macOS
vulnerability_name: Apple macOS Policy Subsystem Gatekeeper Bypass
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited.


cve_id: CVE-2021-30761
vendor_project: Apple
product: iOS
vulnerability_name: Apple WebKit Browser Engine Memory Corruption Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Memory corruption issue. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.


cve_id: CVE-2021-30869
vendor_project: Apple
product: iOS, macOS, and iPadOS
vulnerability_name: Apple XNU Kernel Type Confusion
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Apple XNU kernel contains a type confusion vulnerability which allows a malicious application to execute arbitrary code with kernel privileges.


cve_id: CVE-2020-9859
vendor_project: Apple
product: iOS and iPadOS
vulnerability_name: Apple 11-13.5 XNU Kernel Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A memory consumption issue was addressed with improved memory handling. An application may be able to execute arbitrary code with kernel privileges.


cve_id: CVE-2021-20090
vendor_project: Arcadyan
product: Buffalo WSR-2533DHPL2 and WSR-2533DHP3 firmware
vulnerability_name: Arcadyan Buffalo Firmware Multiple Versions Path Traversal
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
A path traversal vulnerability in Arcadyan firmware could allow unauthenticated remote attackers to bypass authentication. It impacts many routers.


cve_id: CVE-2021-27562
vendor_project: Arm
product: Arm Trusted Firmware
vulnerability_name: Arm Trusted Firmware M through 1.2 Denial-of-Service
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode. This vulnerability has known active exploitation against Yealink Device Management servers. It is assessed this product utilizes the affected Arm firmware.


cve_id: CVE-2021-28664
vendor_project: Arm
product: Mali Graphics Processing Unit (GPU)
vulnerability_name: Arm Mali GPU Kernel Boundary Error Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r8p0 through r30p0.


cve_id: CVE-2021-28663
vendor_project: Arm
product: Mali Graphics Processing Unit (GPU)
vulnerability_name: Arm Mali GPU Kernel Use-After-Free Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0.


cve_id: CVE-2019-3398
vendor_project: Atlassian
product: Confluence
vulnerability_name: Atlassian Confluence Path Traversal Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this path traversal vulnerability to write files to arbitrary locations which can lead to remote code execution on systems that run a vulnerable version of Confluence Server or Data Center. All versions of Confluence Server from 2.0.0 before 6.6.13 (the fixed version for 6.6.x), from 6.7.0 before 6.12.4 (the fixed version for 6.12.x), from 6.13.0 before 6.13.4 (the fixed version for 6.13.x), from 6.14.0 before 6.14.3 (the fixed version for 6.14.x), and from 6.15.0 before 6.15.2 are affected by this vulnerability.


cve_id: CVE-2021-26084
vendor_project: Atlassian
product: Confluence Server
vulnerability_name: Atlassian Confluence Server < 6.13.23, 6.14.0 - 7.12.5 Arbitrary Code Execution
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Atlassian Confluence Server The affected versions are before version 6.13.23, from version 6.14.0 before 7.4.11, from version 7.5.0 before 7.11.6, and from version 7.12.0 before 7.12.5 contains an OGNL injection vulnerability which allows an attacker to execute arbitrary code.


cve_id: CVE-2019-11580
vendor_project: Atlassian
product: Crowd and Crowd Data Center
vulnerability_name: Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins, which permits remote code execution on systems running a vulnerable version of Crowd or Crowd Data Center. All versions of Crowd from version 2.1.0 before 3.0.5, from version 3.1.0 before 3.1.6, from version 3.2.0 before 3.2.8, from version 3.3.0 before 3.3.5, and from version 3.4.0 before 3.4.4 are affected by this vulnerability.


cve_id: CVE-2019-3396
vendor_project: Atlassian
product: Atlassian Confluence Server
vulnerability_name: Remote code execution via Widget Connector macro Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection.


cve_id: CVE-2021-42258
vendor_project: BQE
product: BillQuick Web Suite
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
vulnerability_name:
BQE BillQuick Web Suite Versions Prior to 22.0.9.1 (from 2018 through 2021) Remote Code Execution Vulnerability

short_description:
BQE BillQuick Web Suite 2018 through 2021 prior to 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation.


cve_id: CVE-2020-3452
vendor_project: Cisco
product: Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
vulnerability_name:
Cisco Adaptive Security Appliance and Cisco Fire Power Threat Defense directory traversal sensitive file read

short_description:
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files on a targeted system. The vulnerability is due to a lack of proper input validation of URLs in HTTP requests processed by an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device. The web services file system is enabled when the affected device is configured with either WebVPN or AnyConnect features. This vulnerability cannot be used to obtain access to ASA or FTD system files or underlying operating system (OS) files.


cve_id: CVE-2020-3580
vendor_project: Cisco
product: Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
vulnerability_name: Cisco ASA and FTD XSS Vulnerabilities
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web services interface of an affected device. The vulnerabilities are due to insufficient validation of user-supplied input by the web services interface of an affected device. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive, browser-based information. Note: These vulnerabilities affect only specific AnyConnect and WebVPN configurations.


cve_id: CVE-2021-1497
vendor_project: Cisco
product: HyperFlex HX
vulnerability_name: Cisco HyperFlex HX Command Injection Vulnerabilities
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device.


cve_id: CVE-2018-0171
vendor_project: Cisco
product: IOS and IOS XE
vulnerability_name: Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device, which could have the following impacts: Triggering a reload of the device, Allowing the attacker to execute arbitrary code on the device, Causing an indefinite loop on the affected device that triggers a watchdog crash. Cisco Bug IDs: CSCvg76186.


cve_id: CVE-2020-3118
vendor_project: Cisco
product: IOS XR
vulnerability_name: Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of string input from certain fields in Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to cause a stack overflow, which could allow the attacker to execute arbitrary code with administrative privileges on an affected device. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).


cve_id: CVE-2020-3566
vendor_project: Cisco
product: IOS XR
vulnerability_name: Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue management for Internet Group Management Protocol (IGMP) packets. An attacker could exploit this vulnerability by sending crafted IGMP traffic to an affected device. A successful exploit could allow the attacker to cause memory exhaustion, resulting in instability of other processes. These processes may include, but are not limited to, interior and exterior routing protocols.


cve_id: CVE-2020-3569
vendor_project: Cisco
product: IOS XR
vulnerability_name: Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol (IGMP) process or make it consume available memory and eventually crash. The memory consumption may negatively impact other processes that are running on the device. These vulnerabilities are due to the incorrect handling of IGMP packets. An attacker could exploit these vulnerabilities by sending crafted IGMP traffic to an affected device. A successful exploit could allow the attacker to immediately crash the IGMP process or cause memory exhaustion, resulting in other processes becoming unstable. These processes may include, but are not limited to, interior and exterior routing protocols.


cve_id: CVE-2020-3161
vendor_project: Cisco
product: IP Phones
vulnerability_name: Cisco IP Phones Web Server DoS and Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.


cve_id: CVE-2019-1653
vendor_project: Cisco
product: RV320 and RV325 Routers
vulnerability_name: Cisco RV320 and RV325 Routers Improper Access Control Vulnerability (COVID-19-CTI list)
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information.


cve_id: CVE-2018-0296
vendor_project: Cisco
product: Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
vulnerability_name:
Cisco Adaptive Security Appliance Firepower Threat Defense Denial-of-Service/Directory Traversal vulnerability

short_description:
A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. It is also possible on certain software releases that the ASA will not reload, but an attacker could view sensitive system information without authentication by using directory traversal techniques. The vulnerability is due to lack of proper input validation of the HTTP URL. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. An exploit could allow the attacker to cause a DoS condition or unauthenticated disclosure of information. This vulnerability applies to IPv4 and IPv6 HTTP traffic. This vulnerability affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software that is running on the following Cisco products: 3000 Series Industrial Security Appliance (ISA), ASA 1000V Cloud Firewall, ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Adaptive Security Virtual Appliance (ASAv), Firepower 2100 Series Security Appliance, Firepower 4100 Series Security Appliance, Firepower 9300 ASA Security Module, FTD Virtual (FTDv). Cisco Bug IDs: CSCvi16029.


cve_id: CVE-2019-13608
vendor_project: Citrix
product: StoreFront Server
vulnerability_name: Citrix StoreFront Server Multiple Versions XML External Entity (XXE)
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Citrix StoreFront Server contains a XXE processing vulnerability that could allow an unauthenticated attacker to retrieve potentially sensitive information.


cve_id: CVE-2020-8193
vendor_project: Citrix
product: Application Delivery Controller (ADC), Gateway, and SDWAN WANOP
vulnerability_name: Citrix ADC, Citrix Gateway, Citrix SDWAN WANOP Unauthenticated Authorization Bypass
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.


cve_id: CVE-2020-8196
vendor_project: Citrix
product: Application Delivery Controller (ADC), Gateway, and SDWAN WANOP
vulnerability_name: Citrix ADC, Citrix Gateway, Citrix SDWAN WANOP Unauthenticated Authorization Bypass
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.


cve_id: CVE-2019-19781
vendor_project: Citrix
product: Application Delivery Controller (ADC) and Gateway
vulnerability_name: Citrix Application Delivery Controller and Citrix Gateway Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Issue in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0 allowing Directory Traversal.


cve_id: CVE-2019-11634
vendor_project: Citrix
product: Workspace (for Windows)
vulnerability_name: Citrix Workspace (for Windows) Prior to 1904 Improper Access Control
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Citrix Workspace app and Receiver for Windows prior to version 1904 contains an incorrect access control vulnerability which allows for code execution.


cve_id: CVE-2020-29557
vendor_project: D-Link
product: DIR-825 R1
vulnerability_name: D-Link DIR-825 R1 Through 3.0.1 Before 11/2020 Buffer Overflow
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20 contain a vulnerability in the web interface allowing for remote code execution.


cve_id: CVE-2020-25506
vendor_project: D-Link
product: DNS-320
vulnerability_name: D-Link DNS-320 Command Injection Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution.


cve_id: CVE-2018-15811
vendor_project: DNN
product: DotNetNuke (DNN)
vulnerability_name: DotNetNuke 9.2-9.2.2 Encryption Algorithm Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.


cve_id: CVE-2018-18325
vendor_project: DNN
product: DotNetNuke (DNN)
vulnerability_name: DotNetNuke 9.2-9.2.2 Encryption Algorithm Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.


cve_id: CVE-2017-9822
vendor_project: DNN
product: DotNetNuke (DNN)
vulnerability_name: DotNetNuke before 9.1.1 Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."


cve_id: CVE-2019-15752
vendor_project: Docker
product: Desktop Community Edition
vulnerability_name: Docker Desktop Community Edition Privilege Escalation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.


cve_id: CVE-2020-8515
vendor_project: DrayTek
product: Vigor Router(s)
vulnerability_name: DrayTek Vigor Router Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI.


cve_id: CVE-2018-7600
vendor_project: Drupal
product: Drupal
vulnerability_name: Drupal module configuration vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.


cve_id: CVE-2021-22205
vendor_project: ExifTool
product: ExifTool
vulnerability_name: GitLab Community and Enterprise Editions From 11.9 Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Anyone with the ability to upload an image that goes through the GitLab Workhorse could achieve Remote Code Execution via a specially crafted file.


cve_id: CVE-2018-6789
vendor_project: Exim
product: Exim
vulnerability_name: Exim Buffer Overflow Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Issue in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.


cve_id: CVE-2020-8657
vendor_project: EyesOfNetwork
product: EyesOfNetwork
vulnerability_name: EyesOfNetwork 5.3 Insufficient Credential Protection
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Issue in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.


cve_id: CVE-2020-8655
vendor_project: EyesOfNetwork
product: EyesOfNetwork
vulnerability_name: EyesOfNetwork 5.3 Privilege Escalation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Issue in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.


cve_id: CVE-2020-5902
vendor_project: F5
product: BIG-IP
vulnerability_name: F5 BIG-IP Traffic Management User Interface Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.


cve_id: CVE-2021-35464
vendor_project: ForgeRock
product: Access Management server
vulnerability_name: ForgeRock Access Management Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* request to the server.


cve_id: CVE-2019-5591
vendor_project: Fortinet
product: FortiOS
vulnerability_name: Fortinet FortiOS Default Configuration Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.


cve_id: CVE-2020-12812
vendor_project: Fortinet
product: FortiOS
vulnerability_name: Fortinet FortiOS SSL VPN 2FA Authentication Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username.


cve_id: CVE-2018-13379
vendor_project: Fortinet
product: FortiOS
vulnerability_name: Fortinet FortiOS SSL VPN credential exposure vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.


cve_id: CVE-2020-16010
vendor_project: Google
product: Chrome for Android
vulnerability_name: Google Chrome for Android Heap Overflow Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.


cve_id: CVE-2020-15999
vendor_project: Google
product: Chrome
vulnerability_name: Google Chrome FreeType Memory Corruption
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


cve_id: CVE-2021-21166
vendor_project: Google
product: Chrome
vulnerability_name: Google Chrome Heap Buffer Overflow in WebAudio Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


cve_id: CVE-2020-16017
vendor_project: Google
product: Chrome
vulnerability_name: Google Chrome Site Isolation Component Use-After-Free Remote Code Execution vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.


cve_id: CVE-2020-16009
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Chromium V8 Implementation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


cve_id: CVE-2020-16013
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Chromium V8 Incorrect Implementation Vulnerabililty
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


cve_id: CVE-2021-21148
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Chromium V8 JavaScript Rendering Engine Heap Buffer Overflow Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


cve_id: CVE-2021-37973
vendor_project: Google
product: Chrome
vulnerability_name: Google Chrome Use-After-Free Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Use-after-free weakness in Portals, Google's new web page navigation system for Chrome. Successful exploitation can let attackers to execute code.


cve_id: CVE-2021-30551
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Chromium V8 Type Confusion Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


cve_id: CVE-2020-6418
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Chromium V8 Type Confusion Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


cve_id: CVE-2021-30554
vendor_project: Google
product: Chrome
vulnerability_name: Google Chrome WebGL Use-After-Free Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


cve_id: CVE-2021-21206
vendor_project: Google
product: Chromium Blink
vulnerability_name: Chromium Blink Use-After-Free Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


cve_id: CVE-2021-21224
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Chromium V8 JavaScript Engine Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.


cve_id: CVE-2021-21193
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Chromium V8 Use-After-Free Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


cve_id: CVE-2021-21220
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Chromium V8 Input Validation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


cve_id: CVE-2021-30563
vendor_project: Google
product: Chrome
vulnerability_name: Google Chrome Browser V8 Arbitrary Code Execution
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


cve_id: CVE-2020-4430
vendor_project: IBM
product: IBM Data Risk Manager
vulnerability_name: IBM Data Risk Manager Arbritary File Download
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.


cve_id: CVE-2020-4427
vendor_project: IBM
product: IBM Data Risk Manager
vulnerability_name: IBM Data Risk Manager Authentication Bypass
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.


cve_id: CVE-2020-4428
vendor_project: IBM
product: IBM Data Risk Manager
vulnerability_name: IBM Data Risk Manager Command Injection
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533.


cve_id: CVE-2019-4716
vendor_project: IBM
product: IBM Planning Analytics
vulnerability_name: IBM Planning Analytics configuration overwrite vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.


cve_id: CVE-2016-3715
vendor_project: ImageMagick
product: ImageMagick
vulnerability_name: ImageMagick Ephemeral Coder Arbitrary File Deletion Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.


cve_id: CVE-2016-3718
vendor_project: ImageMagick
product: ImageMagick
vulnerability_name: ImageMagick SSRF Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.


cve_id: CVE-2020-15505
vendor_project: Ivanti
product: MobileIron Core & Connector
vulnerability_name: MobileIron Core, Connector, Sentry, and RDM Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability that allows remote attackers to execute arbitrary code via unspecified vectors.


cve_id: CVE-2020-7961
vendor_project: LifeRay
product: Liferay Portal
vulnerability_name: Liferay Portal prior to 7.2.1 CE GA2 Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).


cve_id: CVE-2021-23874
vendor_project: McAfee
product: McAfee Total Protection (MTP)
vulnerability_name: McAfee Total Protection MTP Arbitrary Process Execution
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.


cve_id: CVE-2021-22506
vendor_project: Micro Focus
product: Micro Focus Access Manager
vulnerability_name: Micro Focus Access Manager Earlier Than 5.0 Information Leakage
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Micro Focus Access Manager versions prior to 5.0 contain a vulnerability which allows for information leakage.


cve_id: CVE-2021-22502
vendor_project: Micro Focus
product: Micro Focus Operation Bridge Reporter (OBR)
vulnerability_name: Micro Focus Operation Bridge Report (OBR) Server Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.


cve_id: CVE-2014-1812
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Group Policy Privilege Escalation
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows remote authenticated users to obtain sensitive credential information and consequently gain privileges by leveraging access to the SYSVOL share, as exploited in the wild in May 2014, aka "Group Policy Preferences Password Elevation of Privilege Vulnerability."


cve_id: CVE-2016-0167
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Kernel 'Win32k.sys' Local Privilege Escalation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The kernel-mode driver allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0165.


cve_id: CVE-2020-0878
vendor_project: Microsoft
product: Microsoft Edge, Internet Explorer
vulnerability_name: Microsoft Browser Memory Corruption Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory.


cve_id: CVE-2016-0185
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Media Center Remote Code Execution vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Media Center allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka "Windows Media Center Remote Code Execution Vulnerability."


cve_id: CVE-2020-0683
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Installer Privilege Escalation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.


cve_id: CVE-2021-31199
vendor_project: Microsoft
product: Microsoft Enhanced Cryptographic Provider
vulnerability_name: Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerabilities
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability. This CVE ID is unique from CVE-2021-31201.


cve_id: CVE-2021-33771
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Kernel Privilege Escalation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Windows Kernel Privilege Escalation Vulnerability. This CVE ID is unique from CVE-2021-31979, CVE-2021-34514.


cve_id: CVE-2021-31201
vendor_project: Microsoft
product: Microsoft Enhanced Cryptographic Provider
vulnerability_name: Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerabilities
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability. This CVE ID is unique from CVE-2021-31199.


cve_id: CVE-2021-31979
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Kernel Privilege Escalation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Windows Kernel Privilege Escalation Vulnerability. This CVE ID is unique from CVE-2021-33771, CVE-2021-34514.


cve_id: CVE-2020-0938
vendor_project: Microsoft
product: Windows, Windows Adobe Type Manager Library
vulnerability_name: Microsoft Windows Type 1 Font Parsing Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format. This CVE ID is unique from CVE-2020-1020.


cve_id: CVE-2020-17144
vendor_project: Microsoft
product: Microsoft Exchange Server
vulnerability_name: Microsoft Exchange Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Microsoft Exchange Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2020-17117, CVE-2020-17132, CVE-2020-17141, CVE-2020-17142.


cve_id: CVE-2020-0986
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Kernel Privilege Escalation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.


cve_id: CVE-2020-1020
vendor_project: Microsoft
product: Windows, Windows Adobe Type Manager Library
vulnerability_name: Microsoft Windows Type 1 Font Parsing Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format. This CVE ID is unique from CVE-2020-0938.


cve_id: CVE-2021-34523
vendor_project: Microsoft
product: Microsoft Exchange Server
vulnerability_name: Microsoft Exchange Server Privilege Escalation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Microsoft Exchange Server Privilege Escalation Vulnerability. This CVE ID is unique from CVE-2021-33768, CVE-2021-34470.


cve_id: CVE-2017-7269
vendor_project: Microsoft
product: Internet Information Services (IIS)
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
vulnerability_name:
Microsft Windows Server 2003 R2 IIS WEBDAV buffer overflow Remote Code Execution vulnerability (COVID-19-CTI list)

short_description:
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request.


cve_id: CVE-2020-0688
vendor_project: Microsoft
product: Microsoft Exchange Server
vulnerability_name: Microsoft Exchange Server Key Validation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.


cve_id: CVE-2017-0143
vendor_project: Microsoft
product: SMBv1 server
vulnerability_name: Microsoft Windows SMBv1 Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The SMBv1 server allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.


cve_id: CVE-2016-7255
vendor_project: Microsoft
product: Windows
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
vulnerability_name:
Microsoft Windows Vista, 7, 8.1, 10 and Windows Server 2008, 2012, and 2016 Win32k Privilege Escalation Vulnerability

short_description:
The kernel-mode drivers allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability"


cve_id: CVE-2019-0708
vendor_project: Microsoft
product: Remote Desktop Services
vulnerability_name: "BlueKeep" Microsoft Windows Remote Desktop Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests.


cve_id: CVE-2021-34473
vendor_project: Microsoft
product: Microsoft Exchange Server
vulnerability_name: Microsoft Exchange Server Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2021-31196, CVE-2021-31206.


cve_id: CVE-2019-0803
vendor_project: Microsoft
product: Win32k
vulnerability_name: Microsoft Win32k Escalation Kernel Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.


cve_id: CVE-2020-1040
vendor_project: Microsoft
product: Hyper-V RemoteFX vGPU
vulnerability_name: Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.


cve_id: CVE-2020-1350
vendor_project: Microsoft
product: Windows
vulnerability_name: "SigRed" - Microsoft Windows Domain Name System (DNS) Server Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2020-07-24 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests.


cve_id: CVE-2019-0859
vendor_project: Microsoft
product: Win32k
vulnerability_name: Microsoft Win32k Escalation Kernel Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.


cve_id: CVE-2017-8759
vendor_project: Microsoft
product: Microsoft .NET Framework
vulnerability_name: .NET Framework Remote Code Execution vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application.


cve_id: CVE-2018-8653
vendor_project: Microsoft
product: Internet Explorer Scripting Engine
vulnerability_name: Microsoft Internet Explorer Scripting Engine JScript Memory Corruption Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2018-8643.


cve_id: CVE-2019-0797
vendor_project: Microsoft
product: Win32k
vulnerability_name: Microsoft Win32k.sys Driver Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.


cve_id: CVE-2019-1215
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Winsock (ws2ifsl.sys) Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.


cve_id: CVE-2018-0798
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office 2007 - 2016 Backdoor Exploitation Chain
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".


cve_id: CVE-2018-0802
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office 2007 - 2016 Backdoor Exploitation Chain
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.


cve_id: CVE-2012-0158
vendor_project: Microsoft
product: MSCOMCTL.OCX
vulnerability_name: Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document, or (c) .rtf file that triggers "system state" corruption, as exploited in the wild in April 2012, aka "MSCOMCTL.OCX Remote Code Execution Vulnerability.


cve_id: CVE-2015-1641
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office Memory Corruption vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."


cve_id: CVE-2019-0541
vendor_project: Microsoft
product: MSHTML engine
vulnerability_name: Microsoft MSHTML Engine Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability.


cve_id: CVE-2017-11882
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office memory corruption vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11884.


cve_id: CVE-2020-0674
vendor_project: Microsoft
product: Internet Explorer Scripting Engine
vulnerability_name: Internet Explorer 9-11 Scripting Engine Memory Corruption Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.


cve_id: CVE-2021-27059
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Microsoft Office Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2021-24108, CVE-2021-27057.


cve_id: CVE-2019-1367
vendor_project: Microsoft
product: Internet Explorer Scripting Engine
vulnerability_name: Internet Explorer 9-11 Scripting Engine Memory Corruption Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. This CVE ID is unique from CVE-2019-1221.


cve_id: CVE-2017-0199
vendor_project: Microsoft
product: Windows, Windows Server, Office
vulnerability_name: Microsoft Office/WordPad Remote Code Execution Vulnerability with Windows API
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."


cve_id: CVE-2020-1380
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Scripting Engine Memory Corruption Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1555, CVE-2020-1570.


cve_id: CVE-2019-1429
vendor_project: Microsoft
product: Internet Explorer Scripting Engine
vulnerability_name: Internet Explorer 9-11 Scripting Engine Memory Corruption Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. This CVE ID is unique from CVE-2019-1426, CVE-2019-1427, CVE-2019-1428.


cve_id: CVE-2017-11774
vendor_project: Microsoft
product: Microsoft Outlook
vulnerability_name: Microsoft Outlook Security Feature Bypass Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."


cve_id: CVE-2020-0968
vendor_project: Microsoft
product: Internet Explorer Scripting Engine
vulnerability_name: Internet Explorer Scripting Engine Memory Corruption Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. This CVE ID is unique from CVE-2020-0970.


cve_id: CVE-2020-1472
vendor_project: Microsoft
product: Netlogon Remote Protocol (MS-NRPC)
vulnerability_name: NetLogon Privilege Escalation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2020-09-21 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC), aka 'Netlogon Elevation of Privilege Vulnerability'.


cve_id: CVE-2021-26855
vendor_project: Microsoft
product: Microsoft Exchange Server
vulnerability_name: Microsoft OWA Exchange Control Panel (ECP) Exploit Chain
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-04-16 00:00:00+00:00
short_description:
Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2021-26412, CVE-2021-26854, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065, CVE-2021-27078.


cve_id: CVE-2021-26858
vendor_project: Microsoft
product: Microsoft Exchange Server
vulnerability_name: Microsoft OWA Exchange Control Panel (ECP) Exploit Chain
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-04-16 00:00:00+00:00
short_description:
Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26857, CVE-2021-27065, CVE-2021-27078.


cve_id: CVE-2021-27065
vendor_project: Microsoft
product: Microsoft Exchange Server
vulnerability_name: Microsoft OWA Exchange Control Panel (ECP) Exploit Chain
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-04-16 00:00:00+00:00
short_description:
Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27078.


cve_id: CVE-2020-1054
vendor_project: Microsoft
product: Win32k
vulnerability_name: Microsoft Win32k Privilege Escalation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory


cve_id: CVE-2020-0601
vendor_project: Microsoft
product: Windows CryptoAPI
vulnerability_name: Microsoft Windows 10 API/ECC Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2020-01-29 00:00:00+00:00
short_description:
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.


cve_id: CVE-2019-0604
vendor_project: Microsoft
product: SharePoint
vulnerability_name: Microsoft SharePoint Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.


cve_id: CVE-2020-0646
vendor_project: Microsoft
product: Microsoft .NET Framework
vulnerability_name: Microsoft .NET Framework Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.


cve_id: CVE-2019-0808
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows 7 win32k.sys Driver Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.


cve_id: CVE-2021-26857
vendor_project: Microsoft
product: Microsoft Exchange Server
vulnerability_name: Microsoft Unified Messaging Deserialization Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-04-16 00:00:00+00:00
short_description:
Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26858, CVE-2021-27065, CVE-2021-27078.


cve_id: CVE-2020-1147
vendor_project: Microsoft
product: Microsoft .NET Framework, Microsoft SharePoint, Visual Studio
vulnerability_name: Microsoft .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input.


cve_id: CVE-2019-1214
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Common Log File System (CLFS) Driver Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.


cve_id: CVE-2016-3235
vendor_project: Microsoft
product: Microsoft Visio/Office
vulnerability_name: Microsoft Visio/Office OLE DLL Side Loading vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."


cve_id: CVE-2019-0863
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Error Reporting (WER) Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.


cve_id: CVE-2021-36955
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Microsoft Windows Common Log File System Driver contains an unspecified vulnerability which allows for privilege escalation.


cve_id: CVE-2020-6819
vendor_project: Mozilla
product: nsDocShell destructor
vulnerability_name: Mozilla Firefox 74 and Firefox ESR 68.6 nsDocShell vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A race condition can cause a use-after-free when running the nsDocShell destructor. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.


cve_id: CVE-2020-6820
vendor_project: Mozilla
product: ReadableStream
vulnerability_name: Mozilla Firefox 74 and Firefox ESR 68.6 ReadableStream vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A race condition can cause a use-after-free when handling a ReadableStream. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.


cve_id: CVE-2019-17026
vendor_project: Mozilla
product: IonMonkey JIT compiler
vulnerability_name: Mozilla Firefox IonMonkey JIT compiler Type Confusion Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. This vulnerability affects Firefox ESR < 68.4.1, Thunderbird < 68.4.1, and Firefox < 72.0.1


cve_id: CVE-2019-15949
vendor_project: Nagios
product: Nagios XI
vulnerability_name: Nagios XI Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile (profile.php?cmd=download), is executed as root via a passwordless sudo entry; the script executes check_plugin, which is owned by the nagios user


cve_id: CVE-2020-26919
vendor_project: Netgear
product: NETGEAR JGS516PE devices
vulnerability_name: Netgear ProSAFE Plus JGS516PE Remote Code Execution vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.


cve_id: CVE-2019-19356
vendor_project: Netis
product: Netis WF2419
vulnerability_name: Netis WF2419 Router Tracert Remote Code Execution vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123


cve_id: CVE-2020-2555
vendor_project: Oracle
product: Oracle Coherence
vulnerability_name: Oracle Coherence Deserialization Remote Code Execution
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence


cve_id: CVE-2012-3152
vendor_project: Oracle
product: Oracle Reports Developer
vulnerability_name: Oracle Reports Developer Arbitrary File Read and Upload vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component.


cve_id: CVE-2020-14871
vendor_project: Oracle
product: Oracle Solaris
vulnerability_name: Oracle Solaris Pluggable Authentication Module vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris.


cve_id: CVE-2015-4852
vendor_project: Oracle
product: Oracle WebLogic Server
vulnerability_name: Oracle WebLogic Server Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar.


cve_id: CVE-2020-14750
vendor_project: Oracle
product: Oracle WebLogic Server
vulnerability_name: Oracle WebLogic Server Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.


cve_id: CVE-2020-14883
vendor_project: Oracle
product: Oracle WebLogic Server
vulnerability_name: Oracle WebLogic Server Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server.


cve_id: CVE-2019-18935
vendor_project: Progess
product: ASP.NET AJAX
vulnerability_name: Progress Telerik UI for ASP.NET deserialization bug
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Contains a .NET deserialization vulnerability in the RadAsyncUpload function that can result in remote code execution.


cve_id: CVE-2021-22893
vendor_project: Pulse Secure
product: Pulse Connect Secure
vulnerability_name: Pulse Connect Secure Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-04-23 00:00:00+00:00
short_description:
Vulnerability to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway.


cve_id: CVE-2020-8243
vendor_project: Pulse Secure
product: Pulse Connect Secure
vulnerability_name: Pulse Connect Secure Arbitrary Code Execution
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-04-23 00:00:00+00:00
short_description:
A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution.


cve_id: CVE-2021-22900
vendor_project: Pulse Secure
product: Pulse Connect Secure
vulnerability_name: Pulse Connect Secure Arbitrary File Upload Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-04-23 00:00:00+00:00
short_description:
A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.


cve_id: CVE-2021-22894
vendor_project: Pulse Secure
product: Pulse Connect Secure
vulnerability_name: Pulse Connect Secure Collaboration Suite Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-04-23 00:00:00+00:00
short_description:
A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously crafted meeting room.


cve_id: CVE-2020-8260
vendor_project: Pulse Secure
product: Pulse Connect Secure
vulnerability_name: Pulse Connect Secure Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-04-23 00:00:00+00:00
short_description:
A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction.


cve_id: CVE-2021-22899
vendor_project: Pulse Secure
product: Pulse Connect Secure
vulnerability_name: Pulse Connect Secure Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-04-23 00:00:00+00:00
short_description:
Allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature.


cve_id: CVE-2019-11510
vendor_project: Pulse Secure
product: Pulse Connect Secure
vulnerability_name: Pulse Connect Secure VPN Arbitrary File Reading Vulnerability (COVID-19-CTI List)
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-04-23 00:00:00+00:00
short_description:
An unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability.


cve_id: CVE-2019-11539
vendor_project: Pulse Secure
product: Pulse Connect Secure, Policy Secure
vulnerability_name: Pulse Connect Secure and Policy Secure Multiple Versions Code Execution
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Pulse Secure's Connect and Policy secure platforms contain a vulnerability in the admin web interface which allows an attacker to inject and execute commands.


cve_id: CVE-2021-1906
vendor_project: Qualcomm
vulnerability_name: Qualcomm Improper Error Handling Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
product:
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

short_description:
Improper handling of address deregistration on failure can lead to new GPU address allocation failure.


cve_id: CVE-2021-1905
vendor_project: Qualcomm
vulnerability_name: Qualcomm Use-After-Free Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
product:
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

short_description:
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously


cve_id: CVE-2020-10221
vendor_project: rConfig
product: rConfig
vulnerability_name: rConfig Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter.


cve_id: CVE-2017-16651
vendor_project: Roundcube
product: Roundcube Webmail
vulnerability_name: Roundcube Webmail File Disclosure Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows unauthorized access to arbitrary files on the host's filesystem, including configuration files. The issue is related to file-based attachment plugins and _task=settings&_action=upload-display&_from=timezone requests.


cve_id: CVE-2020-11652
vendor_project: SaltStack
product: Salt
vulnerability_name: SaltStack directory traversal failure to sanitize untrusted input
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.


cve_id: CVE-2020-11651
vendor_project: SaltStack
product: Salt
vulnerability_name: SaltStack Salt Authentication Bypass
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication.


cve_id: CVE-2020-16846
vendor_project: SaltStack
product: Salt
vulnerability_name: SaltStack Through 3002 Shell Injection Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.


cve_id: CVE-2018-2380
vendor_project: SAP
product: SAP CRM
vulnerability_name: SAP NetWeaver AS JAVA CRM Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs.


cve_id: CVE-2010-5326
vendor_project: SAP
product: SAP NetWeaver Application Server Java platforms
vulnerability_name: SAP NetWeaver AS JAVA Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary code via an HTTP or HTTPS request.


cve_id: CVE-2016-9563
vendor_project: SAP
product: SAP NetWeaver AS JAVA
vulnerability_name: SAP NetWeaver AS JAVA XXE Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwlconn URI, aka SAP Security Note 2296909.


cve_id: CVE-2020-6287
vendor_project: SAP
product: SAP NetWeaver AS JAVA (LM Configuration Wizard)
vulnerability_name: SAP Netweaver JAVA remote unauthenticated access vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system.


cve_id: CVE-2020-6207
vendor_project: SAP
product: SAP Solution Manager (User Experience Monitoring)
vulnerability_name: SAP Solution Manager Missing Authentication Check Complete Compromise of SMD Agents vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager.


cve_id: CVE-2016-3976
vendor_project: SAP
product: SAP NetWeaver AS Java
vulnerability_name: SAP NetWeaver AS Java 7.1 - 7.5 Directory Traversal Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the fileName parameter to CrashFileDownloadServlet, aka SAP Security Note 2234971.


cve_id: CVE-2019-16256
vendor_project: SIMalliance
product: SIMalliance Toolbox (S@T) Browser
vulnerability_name: SIMalliance Toolbox (S@T) Browser Command and Control Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.


cve_id: CVE-2020-10148
vendor_project: SolarWinds
product: SolarWinds Orion Platform
vulnerability_name: SolarWinds Orion API Authentication Bypass Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.


cve_id: CVE-2021-35211
vendor_project: SolarWinds
product: SolarWinds nServ-U
vulnerability_name: SolarWinds Serv-U Remote Memory Escape Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability.


cve_id: CVE-2016-3643
vendor_project: SolarWinds
product: SolarWinds Virtualization Manager
vulnerability_name: SolarWinds Virtualization Manager Privilege Escalation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."


cve_id: CVE-2021-20021
vendor_project: SonicWall
product: SonicWall Email Security
vulnerability_name: SonicWall Email Security Privilege Escalation Exploit Chain
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.


cve_id: CVE-2019-7481
vendor_project: SonicWall
product: SMA100
vulnerability_name: SonicWall SMA100 9.0.0.3 and Earlier SQL Injection
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Vulnerability in SonicWall SMA100 versions 9.0.0.3 and earlier allow an unauthenticated user to gain read-only access to unauthorized resources.


cve_id: CVE-2021-20022
vendor_project: SonicWall
product: SonicWall Email Security
vulnerability_name: SonicWall Email Security Privilege Escalation Exploit Chain
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.


cve_id: CVE-2021-20023
vendor_project: SonicWall
product: SonicWall Email Security
vulnerability_name: SonicWall Email Security Privilege Escalation Exploit Chain
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.


cve_id: CVE-2021-20016
vendor_project: SonicWall
product: SonicWall SSLVPN SMA100
vulnerability_name: SonicWall SSL VPN SMA100 SQL Injection Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information in SMA100 build version 10.x.


cve_id: CVE-2020-12271
vendor_project: Sophos
product: Sophos XG Firewall devices
vulnerability_name: Sophos XG Firewall SQL Injection Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A SQL injection issue that causes affected devices configured with either the administration (HTTPS) service or the User Portal exposed on the WAN zone.


cve_id: CVE-2020-10181
vendor_project: Sumavision
product: Sumavision Enhanced Multimedia Router (EMR)
vulnerability_name: Sumavision EMR 3.0 CSRF Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_user<*1*>administrator<*1*>123456 request.


cve_id: CVE-2019-18988
vendor_project: TeamViewer
product: TeamViewer Desktop
vulnerability_name: TeamViewer Desktop Bypass Remote Login
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Allows a bypass of remote-login access control because the same key is used for different customers' installations.


cve_id: CVE-2017-9248
vendor_project: Telerik
product: ASP.NET AJAX and Sitefinity
vulnerability_name: Telerik UI for ASP.NET AJAX and Progress Sitefinity Cryptographic Weakness Vuln
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey.


cve_id: CVE-2021-31755
vendor_project: Tenda
product: Tenda AC11 devices
vulnerability_name: Tenda AC11 Up to 02.03.01.104_CN Stack Buffer Overflow
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Tenda AC11 devices with firmware through 02.03.01.104_CN contain a stack buffer overflow vulnerability in /goform/setmac which allows for arbitrary execution.


cve_id: CVE-2020-10987
vendor_project: Tenda
product: Tenda AC15 AC1900
vulnerability_name: Tenda Router Code Execution
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.


cve_id: CVE-2018-14558
vendor_project: Tenda
product: Tenda AC7, AC9, and AC10 devices
vulnerability_name: Tenda Router Command Injection Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Issue on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input.


cve_id: CVE-2018-20062
vendor_project: ThinkPHP
product: NoneCms
vulnerability_name: ThinkPHP Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Issue in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the s=index/\think\Request/input&filter=phpinfo&data=1 query string.


cve_id: CVE-2019-9082
vendor_project: ThinkPHP
product: ThinkPHP
vulnerability_name: ThinkPHP Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.


cve_id: CVE-2019-18187
vendor_project: Trend Micro
product: Trend Micro OfficeScan
vulnerability_name: Trend Micro Antivirus 0day Traversal Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE).


cve_id: CVE-2020-8467
vendor_project: Trend Micro
product: Trend Micro Apex One and OfficeScan XG
vulnerability_name: Trend Micro Apex One (2019) and OfficeScan XG migration tool remote code execution vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE).


cve_id: CVE-2020-8468
vendor_project: Trend Micro
product: Trend Micro Apex One, OfficeScan XG and Worry-Free Business Security
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
vulnerability_name:
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agent content validation escape vulnerability

short_description:
Agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components.


cve_id: CVE-2020-24557
vendor_project: Trend Micro
product: Trend Micro Apex One and Worry-Free Business Security
vulnerability_name: Trend Micro Apex One and OfficeScan XG Improper Access Control Privilege Escalation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation


cve_id: CVE-2020-8599
vendor_project: Trend Micro
product: Trend Micro Apex One and OfficeScan XG server
vulnerability_name: Trend Micro Apex One and OfficeScan XG Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login.


cve_id: CVE-2021-36742
vendor_project: Trend Micro
product: Trend Micro Multiple Products
vulnerability_name: Trend Micro Systems Multiple Products Improper Input Validation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security allows a local attacker to escalate privileges.


cve_id: CVE-2021-36741
vendor_project: Trend Micro
product: Trend Micro Multiple Products
vulnerability_name: Trend Micro Systems Multiple Products Improper Input Validation Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security allows for upload of arbitrary files.


cve_id: CVE-2019-16759
vendor_project: vBulletin
product: vBulletin
vulnerability_name: vBulletin PHP Module Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.


cve_id: CVE-2020-17496
vendor_project: vBulletin
product: vBulletin
vulnerability_name: vBulletin PHP Module Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759.


cve_id: CVE-2019-5544
vendor_project: VMware
product: ESXi, Horizon DaaS Appliances
vulnerability_name: VMware ESXi/Horizon DaaS Appliances Heap-Overwrite Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
OpenSLP as used in ESXi and the Horizon DaaS appliances have a heap overwrite issue. A malicious actor with network access to port 427 on an ESXi host or on any Horizon DaaS management appliance may be able to overwrite the heap of the OpenSLP service resulting in remote code execution.


cve_id: CVE-2020-3992
vendor_project: VMware
product: ESXi
vulnerability_name: OpenSLP as used in VMware ESXi
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.


cve_id: CVE-2021-22005
vendor_project: VMware
product: vCenter Server
vulnerability_name: VMware vCenter Server File Upload
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
VMware vCenter Server file upload vulnerability in the VMware-analytics service that allows to execute code on vCenter Server.


cve_id: CVE-2020-3952
vendor_project: VMware
product: vCenter Server
vulnerability_name: VMware vCenter Server Info Disclosure Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.


cve_id: CVE-2021-21972
vendor_project: VMware
product: vCenter Server
vulnerability_name: VMware vCenter Server Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.


cve_id: CVE-2021-21985
vendor_project: VMware
product: vCenter Server
vulnerability_name: VMware vCenter Server Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.


cve_id: CVE-2020-4006
vendor_project: VMware
product: VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
vulnerability_name:
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector Command Injection vulnerability

short_description:
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.


cve_id: CVE-2020-25213
vendor_project: WordPress
product: File Manager
vulnerability_name: WordPress File Manager Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension.


cve_id: CVE-2020-11738
vendor_project: WordPress
product: Snap Creek Duplicator
vulnerability_name: WordPress Snap Creek Duplicator and Duplicator Pro plugins Directory Traversal
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.


cve_id: CVE-2019-9978
vendor_project: WordPress
product: Social-Warfare
vulnerability_name: WordPress Social-Warfare plugin XSS
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro.


cve_id: CVE-2021-27561
vendor_project: Yealink
product: Device Management Platform
vulnerability_name: Yealink Device Management Server Pre-Authorization SSRF
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication


cve_id: CVE-2021-40539
vendor_project: Zoho
product: ManageEngine ADSelfServicePlus
vulnerability_name: Zoho Corp. ManageEngine ADSelfService Plus Version 6113 and Earlier Authentication Bypass
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-11-17 00:00:00+00:00
short_description:
Zoho ManageEngine ADSelfService Plus versions 6113 and earlier contain an authentication bypass vulnerability which allows for Remote Code Execution.


cve_id: CVE-2020-10189
vendor_project: Zoho
product: ManageEngine Desktop Central
vulnerability_name: Zoho ManageEngine Desktop Central Remote Code Execution Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. This is related to the CewolfServlet and MDMLogUploaderServlet servlets.


cve_id: CVE-2019-8394
vendor_project: Zoho
product: ManageEngine ServiceDesk Plus (SDP)
vulnerability_name: Zoho ManageEngine ServiceDesk Plus Arbitrary File Upload Vulnerability
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.


cve_id: CVE-2020-29583
vendor_project: Zyxel
product: Unified Security Gateway (USG)
vulnerability_name: Zyxel Unified Security Gateway Undocumented Administrator Account with Default Credentials
date_added: 2021-11-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-03 00:00:00+00:00
short_description:
Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password.


cve_id: CVE-2021-22204
vendor_project: Perl
product: Exiftool
vulnerability_name: ExifTool Remote Code Execution Vulnerability
date_added: 2021-11-17 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-12-01 00:00:00+00:00
short_description:
Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image


cve_id: CVE-2021-42321
vendor_project: Microsoft
product: Exchange
vulnerability_name: Microsoft Exchange Server Remote Code Execution Vulnerability
date_added: 2021-11-17 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-12-01 00:00:00+00:00
short_description:
An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.


cve_id: CVE-2021-42292
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Excel Security Feature Bypass
date_added: 2021-11-17 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-12-01 00:00:00+00:00
short_description:
A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.


cve_id: CVE-2020-11261
vendor_project: Qualcomm
vulnerability_name: Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
date_added: 2021-12-01 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-01 00:00:00+00:00
product:
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

short_description:
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables


cve_id: CVE-2018-14847
vendor_project: MikroTik
product: RouterOS
vulnerability_name: MikroTik Router OS Directory Traversal Vulnerability
date_added: 2021-12-01 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-01 00:00:00+00:00
short_description:
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.


cve_id: CVE-2021-37415
vendor_project: Zoho
product: ManageEngine ServiceDesk Plus (SDP)
vulnerability_name: Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
date_added: 2021-12-01 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-12-15 00:00:00+00:00
short_description:
Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication


cve_id: CVE-2021-40438
vendor_project: Apache
product: Apache
vulnerability_name: Apache HTTP Server-Side Request Forgery (SSRF)
date_added: 2021-12-01 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-12-15 00:00:00+00:00
short_description:
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.


cve_id: CVE-2021-44077
vendor_project: Zoho
product: ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus
vulnerability_name: Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
date_added: 2021-12-01 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-12-15 00:00:00+00:00
short_description:
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution


cve_id: CVE-2021-44515
vendor_project: Zoho
product: Desktop Central
vulnerability_name: Zoho Desktop Central Authentication Bypass Vulnerability
date_added: 2021-12-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-12-24 00:00:00+00:00
short_description:
Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server.


cve_id: CVE-2019-13272
vendor_project: Linux
product: Kernel
vulnerability_name: Linux Kernel Improper Privilege Management Vulnerability
date_added: 2021-12-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-10 00:00:00+00:00
short_description:
Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability which allows local users to obtain root access.


cve_id: CVE-2021-35394
vendor_project: Realtek
product: Jungle Software Development Kit (SDK)
vulnerability_name: Realtek Jungle SDK Remote Code Execution Vulnerability
date_added: 2021-12-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-12-24 00:00:00+00:00
short_description:
RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.


cve_id: CVE-2019-7238
vendor_project: Sonatype
product: Nexus Repository Manager
vulnerability_name: Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
date_added: 2021-12-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-10 00:00:00+00:00
short_description:
Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.


cve_id: CVE-2021-44168
vendor_project: Fortinet
product: FortiOS
vulnerability_name: Fortinet FortiOS Arbitrary File Download
date_added: 2021-12-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-12-24 00:00:00+00:00
short_description:
Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files.


cve_id: CVE-2017-17562
vendor_project: Embedthis
product: GoAhead
vulnerability_name: Embedthis GoAhead Remote Code Execution Vulnerability
date_added: 2021-12-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-10 00:00:00+00:00
short_description:
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.


cve_id: CVE-2017-12149
vendor_project: Red Hat
product: JBoss Application Server
vulnerability_name: Red Hat JBoss Application Server Remote Code Execution Vulnerability
date_added: 2021-12-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-10 00:00:00+00:00
short_description:
The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.


cve_id: CVE-2010-1871
vendor_project: Red Hat
product: JBoss Seam 2
vulnerability_name: Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
date_added: 2021-12-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-10 00:00:00+00:00
short_description:
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.


cve_id: CVE-2020-17463
vendor_project: Fuel CMS
vulnerability_name: Fuel CMS SQL Injection Vulnerability
date_added: 2021-12-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-10 00:00:00+00:00
short_description:
FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.


cve_id: CVE-2020-8816
vendor_project: Pi-hole
product: AdminLTE
vulnerability_name: Pi-Hole AdminLTE Remote Code Execution Vulnerability
date_added: 2021-12-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-10 00:00:00+00:00
short_description:
Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.


cve_id: CVE-2019-10758
vendor_project: MongoDB
product: mongo-express
vulnerability_name: MongoDB mongo-express Remote Code Execution Vulnerability
date_added: 2021-12-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-10 00:00:00+00:00
short_description:
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method.


cve_id: CVE-2021-44228
vendor_project: Apache
product: Log4j2
vulnerability_name: Apache Log4j2 Remote Code Execution Vulnerability
date_added: 2021-12-10 00:00:00+00:00
due_date: 2021-12-24 00:00:00+00:00
short_description:
Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.

required_action:
For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.


cve_id: CVE-2021-43890
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows AppX Installer Spoofing Vulnerability
date_added: 2021-12-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-12-29 00:00:00+00:00
short_description:
Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.


cve_id: CVE-2021-4102
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Google Chromium V8 Use-After-Free Vulnerability
date_added: 2021-12-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2021-12-29 00:00:00+00:00
short_description:
Google Chromium V8 Engine contains a use-after-free vulnerability which can allow a remote attacker to execute arbitrary code on the target system.


cve_id: CVE-2021-22017
vendor_project: VMware
product: vCenter Server
vulnerability_name: VMware vCenter Server Improper Access Control
date_added: 2022-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-01-24 00:00:00+00:00
short_description:
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.


cve_id: CVE-2021-36260
vendor_project: Hikvision
product: Security cameras web server
vulnerability_name: Hikvision Improper Input Validation
date_added: 2022-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-01-24 00:00:00+00:00
short_description:
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation.


cve_id: CVE-2020-6572
vendor_project: Google
product: Chrome
vulnerability_name: Google Chrome Prior to 81.0.4044.92 Use-After-Free Vulnerability
date_added: 2022-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-10 00:00:00+00:00
short_description:
Use-after-free vulnerability in Media in Google Chrome prior to 81.0.4044.92 allowed a Remote attacker to execute arbitrary code via a crafted HTML page.


cve_id: CVE-2019-1458
vendor_project: Microsoft
product: Win32k
vulnerability_name: Microsoft Win32k Privilege Escalation Vulnerability
date_added: 2022-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-10 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.


cve_id: CVE-2013-3900
vendor_project: Microsoft
product: WinVerifyTrust function
vulnerability_name: Microsoft WinVerifyTrust function Remote Code Execution
date_added: 2022-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-10 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.


cve_id: CVE-2019-2725
vendor_project: Oracle
product: WebLogic Server
vulnerability_name: Oracle WebLogic Server, Injection
date_added: 2022-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-10 00:00:00+00:00
short_description:
Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).


cve_id: CVE-2019-9670
vendor_project: Synacor
product: Zimbra Collaboration (ZCS)
vulnerability_name: Synacor Zimbra Collaboration (ZCS) Improper Restriction of XML External Entity Reference
date_added: 2022-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-10 00:00:00+00:00
short_description:
Improper Restriction of XML External Entity Reference vulnerability affecting Synacor Zimbra Collaboration (ZCS).


cve_id: CVE-2018-13382
vendor_project: Fortinet
product: FortiOS and FortiProxy
vulnerability_name: Fortinet FortiOS and FortiProxy Improper Authorization
date_added: 2022-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-10 00:00:00+00:00
short_description:
An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.


cve_id: CVE-2018-13383
vendor_project: Fortinet
product: FortiOS and FortiProxy
vulnerability_name: Fortinet FortiOS and FortiProxy Out-of-bounds Write
date_added: 2022-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-10 00:00:00+00:00
short_description:
A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.


cve_id: CVE-2019-1579
vendor_project: Palo Alto Networks
product: PAN-OS
vulnerability_name: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
date_added: 2022-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-10 00:00:00+00:00
short_description:
Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.


cve_id: CVE-2019-10149
vendor_project: Exim
product: Mail Transfer Agent (MTA)
vulnerability_name: Exim Mail Transfer Agent (MTA) Improper Input Validation
date_added: 2022-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-10 00:00:00+00:00
short_description:
Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.


cve_id: CVE-2015-7450
vendor_project: IBM
product: WebSphere Application Server and Server Hypervisor Edition
vulnerability_name: IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
date_added: 2022-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-10 00:00:00+00:00
short_description:
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands


cve_id: CVE-2021-27860
vendor_project: FatPipe
product: WARP, IPVPN, and MPVPN software
vulnerability_name: FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit
date_added: 2022-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-01-24 00:00:00+00:00
short_description:
A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.


cve_id: CVE-2021-32648
vendor_project: October CMS
product: October CMS
vulnerability_name: October CMS Improper Authentication
date_added: 2022-01-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-02-01 00:00:00+00:00
short_description:
In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request.


cve_id: CVE-2021-40870
vendor_project: Aviatrix
product: Aviatrix Controller
vulnerability_name: Aviatrix Controller Unrestricted Upload of File
date_added: 2022-01-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-02-01 00:00:00+00:00
short_description:
Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.


cve_id: CVE-2021-33766
vendor_project: Microsoft
product: Exchange Server
vulnerability_name: Microsoft Exchange Server Information Disclosure
date_added: 2022-01-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-02-01 00:00:00+00:00
short_description:
Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.


cve_id: CVE-2021-21975
vendor_project: VMware
product: vRealize Operations Manager API
vulnerability_name: VMware Server Side Request Forgery in vRealize Operations Manager API
date_added: 2022-01-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-02-01 00:00:00+00:00
short_description:
Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.


cve_id: CVE-2021-21315
vendor_project: Npm package
product: System Information Library for Node.JS
vulnerability_name: System Information Library for Node.JS Command Injection
date_added: 2022-01-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-02-01 00:00:00+00:00
short_description:
In this vulnerability, an attacker can send a malicious payload that will exploit the name parameter. After successful exploitation, attackers can execute remote.


cve_id: CVE-2021-22991
vendor_project: F5
product: BIG-IP Traffic Management Microkernel
vulnerability_name: F5 BIG-IP Traffic Management Microkernel Buffer Overflow
date_added: 2022-01-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-02-01 00:00:00+00:00
short_description:
The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls.


cve_id: CVE-2020-14864
vendor_project: Oracle
product: Intelligence Enterprise Edition
vulnerability_name: Oracle Business Intelligence Enterprise Edition Path Transversal
date_added: 2022-01-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-18 00:00:00+00:00
short_description:
Path traversal vulnerability, where an attacker can target the preview FilePath parameter of the getPreviewImage function to get access to arbitrary system file.


cve_id: CVE-2020-11978
vendor_project: Apache
product: Airflow
vulnerability_name: Apache Airflow Command Injection
date_added: 2022-01-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-18 00:00:00+00:00
short_description:
A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow.


cve_id: CVE-2020-13927
vendor_project: Apache
product: Airflow's Experimental API
vulnerability_name: Apache Airflow's Experimental API Authentication Bypass
date_added: 2022-01-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-18 00:00:00+00:00
short_description:
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.


cve_id: CVE-2006-1547
vendor_project: Apache
product: Struts 1
vulnerability_name: Apache Struts 1 ActionForm Denial-of-Service Vulnerability
date_added: 2022-01-21 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-21 00:00:00+00:00
short_description:
ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability which allows for denial-of-service.


cve_id: CVE-2012-0391
vendor_project: Apache
product: Struts 2
vulnerability_name: Apache Struts 2 Improper Input Validation Vulnerability
date_added: 2022-01-21 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-21 00:00:00+00:00
short_description:
The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability which allows for remote code execution.


cve_id: CVE-2021-35247
vendor_project: SolarWinds
product: Serv-U
vulnerability_name: SolarWinds Serv-U Improper Input Validation Vulnerability
date_added: 2022-01-21 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-02-04 00:00:00+00:00
short_description:
SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability which allows attackers to build and send queries without sanitization.


cve_id: CVE-2022-22587
vendor_project: Apple
product: iOS and macOS
vulnerability_name: Apple Memory Corruption Vulnerability
date_added: 2022-01-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-02-11 00:00:00+00:00
short_description:
Apple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code with kernel privileges.


cve_id: CVE-2021-20038
vendor_project: SonicWall
product: SMA 100 Appliances
vulnerability_name: SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
date_added: 2022-01-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-02-11 00:00:00+00:00
short_description:
SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution.


cve_id: CVE-2020-5722
vendor_project: Grandstream
product: UCM6200
vulnerability_name: Grandstream Networks UCM6200 Series SQL Injection Vulnerability
date_added: 2022-01-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-28 00:00:00+00:00
short_description:
Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.


cve_id: CVE-2020-0787
vendor_project: Microsoft
product: Windows
date_added: 2022-01-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-28 00:00:00+00:00
vulnerability_name:
Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

short_description:
Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.


cve_id: CVE-2017-5689
vendor_project: Intel
product: Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability
date_added: 2022-01-28 00:00:00+00:00
short_description: Intel products contain a vulnerability which can allow attackers to perform privilege escalation.
required_action: Apply updates per vendor instructions.
due_date: 2022-07-28 00:00:00+00:00
vulnerability_name:
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability


cve_id: CVE-2014-1776
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Use-After-Free Vulnerability
date_added: 2022-01-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-28 00:00:00+00:00
short_description:
Microsoft Internet Explorer 6 - 11 contains a use-after-free vulnerability which can allow for arbitrary code execution or denial of service.


cve_id: CVE-2014-6271
vendor_project: GNU
product: Bourne-Again Shell (Bash)
vulnerability_name: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
date_added: 2022-01-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-28 00:00:00+00:00
short_description:
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.


cve_id: CVE-2014-7169
vendor_project: GNU
product: Bourne-Again Shell (Bash)
vulnerability_name: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
date_added: 2022-01-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-28 00:00:00+00:00
short_description:
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.


cve_id: CVE-2021-36934
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows SAM Local Privilege Escalation Vulnerability
date_added: 2022-02-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-02-24 00:00:00+00:00
short_description:
If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.


cve_id: CVE-2020-0796
vendor_project: Microsoft
product: SMBv3
vulnerability_name: Microsoft SMBv3 Remote Code Execution Vulnerability
date_added: 2022-02-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-10 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.


cve_id: CVE-2017-9791
vendor_project: Apache
product: Struts 1
vulnerability_name: Apache Struts 1 Improper Input Validation Vulnerability
date_added: 2022-02-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-10 00:00:00+00:00
short_description:
The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.


cve_id: CVE-2017-8464
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
date_added: 2022-02-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-10 00:00:00+00:00
short_description:
Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file


cve_id: CVE-2017-0263
vendor_project: Microsoft
product: Win32k
vulnerability_name: Microsoft Win32k Privilege Escalation Vulnerability
date_added: 2022-02-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-10 00:00:00+00:00
short_description:
Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.


cve_id: CVE-2017-0145
vendor_project: Microsoft
product: SMBv1
vulnerability_name: Microsoft SMBv1 Remote Code Execution Vulnerability
date_added: 2022-02-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-10 00:00:00+00:00
short_description:
The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.


cve_id: CVE-2016-3088
vendor_project: Apache
product: ActiveMQ
vulnerability_name: Apache ActiveMQ Improper Input Validation Vulnerability
date_added: 2022-02-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-10 00:00:00+00:00
short_description:
The Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request


cve_id: CVE-2015-2051
vendor_project: D-Link
product: DIR-645 Router
vulnerability_name: D-Link DIR-645 Router Remote Code Execution Vulnerability
date_added: 2022-02-10 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-08-10 00:00:00+00:00
short_description:
D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.


cve_id: CVE-2015-1635
vendor_project: Microsoft
product: HTTP.sys
vulnerability_name: Microsoft HTTP.sys Remote Code Execution Vulnerability
date_added: 2022-02-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-10 00:00:00+00:00
short_description:
Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability which allows for remote code execution.


cve_id: CVE-2015-1130
vendor_project: Apple
product: OS X
vulnerability_name: Apple OS X Authentication Bypass Vulnerability
date_added: 2022-02-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-10 00:00:00+00:00
short_description:
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.


cve_id: CVE-2014-4404
vendor_project: Apple
product: OS X
vulnerability_name: Apple OS X Heap-Based Buffer Overflow Vulnerability
date_added: 2022-02-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-10 00:00:00+00:00
short_description:
Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context.


cve_id: CVE-2022-22620
vendor_project: Apple
product: Webkit
vulnerability_name: Apple Webkit Remote Code Execution Vulnerability
date_added: 2022-02-11 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-02-25 00:00:00+00:00
short_description:
Apple Webkit, which impacts iOS, iPadOS, and macOS, contains a vulnerability which allows for remote code execution.


cve_id: CVE-2022-24086
vendor_project: Adobe
product: Commerce and Magento Open Source
vulnerability_name: Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability
date_added: 2022-02-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-01 00:00:00+00:00
short_description:
Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.


cve_id: CVE-2022-0609
vendor_project: Google
product: Chrome
vulnerability_name: Google Chrome Use-After-Free Vulnerability
date_added: 2022-02-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-01 00:00:00+00:00
short_description:
The vulnerability exists due to a use-after-free error within the Animation component in Google Chrome.


cve_id: CVE-2019-0752
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Type Confusion Vulnerability
date_added: 2022-02-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-15 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer


cve_id: CVE-2018-8174
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
date_added: 2022-02-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-15 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"


cve_id: CVE-2017-9841
vendor_project: PHPUnit
product: PHPUnit
vulnerability_name: PHPUnit Command Injection Vulnerability
date_added: 2022-02-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-15 00:00:00+00:00
short_description:
PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.


cve_id: CVE-2014-1761
vendor_project: Microsoft
product: Word
vulnerability_name: Microsoft Word Memory Corruption Vulnerability
date_added: 2022-02-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-15 00:00:00+00:00
short_description:
Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.


cve_id: CVE-2013-3906
vendor_project: Microsoft
product: Graphics Component
vulnerability_name: Microsoft Graphics Component Memory Corruption Vulnerability
date_added: 2022-02-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-15 00:00:00+00:00
short_description:
Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution.


cve_id: CVE-2022-23131
vendor_project: Zabbix
product: Frontend
vulnerability_name: Zabbix Frontend Authentication Bypass Vulnerability
date_added: 2022-02-22 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-08 00:00:00+00:00
short_description:
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.


cve_id: CVE-2022-24682
vendor_project: Zimbra
product: Webmail
vulnerability_name: Zimbra Webmail Cross-Site Scripting Vulnerability
date_added: 2022-02-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-11 00:00:00+00:00
short_description:
Zimbra webmail clients running versions 8.8.15 P29 & P30 contain a XSS vulnerability that would allow attackers to steal session cookie files.


cve_id: CVE-2017-8570
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office Remote Code Execution Vulnerability
date_added: 2022-02-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-25 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.


cve_id: CVE-2017-0222
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Remote Code Execution Vulnerability
date_added: 2022-02-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-25 00:00:00+00:00
short_description:
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.


cve_id: CVE-2022-20708
vendor_project: Cisco
product: Small Business RV160, RV260, RV340, and RV345 Series Routers
vulnerability_name: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).


cve_id: CVE-2021-41379
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Installer Privilege Escalation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
Microsoft Windows Installer contains an unspecified vulnerability which allows for privilege escalation.


cve_id: CVE-2020-1938
vendor_project: Apache
product: Tomcat
vulnerability_name: Apache Tomcat Improper Privilege Management Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.


cve_id: CVE-2019-1652
vendor_project: Cisco
product: Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers
vulnerability_name: Cisco Small Business Routers Improper Input Validation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands.


cve_id: CVE-2019-1297
vendor_project: Microsoft
product: Excel
vulnerability_name: Microsoft Excel Remote Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.


cve_id: CVE-2018-8581
vendor_project: Microsoft
product: Exchange Server
vulnerability_name: Microsoft Exchange Server Privilege Escalation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.


cve_id: CVE-2018-8298
vendor_project: ChakraCore
product: ChakraCore scripting engine
vulnerability_name: ChakraCore Scripting Engine Type Confusion Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.


cve_id: CVE-2018-0180
vendor_project: Cisco
product: IOS Software
vulnerability_name: Cisco IOS Software Denial-of-Service Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.


cve_id: CVE-2018-0175
vendor_project: Cisco
product: IOS, XR, and XE Software
vulnerability_name: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device.


cve_id: CVE-2018-0174
vendor_project: Cisco
product: IOS XE Software
vulnerability_name: Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service.


cve_id: CVE-2018-0173
vendor_project: Cisco
product: IOS and IOS XE Software
vulnerability_name: Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets can allow for denial-of-service.


cve_id: CVE-2018-0167
vendor_project: Cisco
product: IOS, XR, and XE Software
vulnerability_name: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code.


cve_id: CVE-2018-0161
vendor_project: Cisco
product: IOS Software
vulnerability_name: Cisco IOS Software Resource Management Errors Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition.


cve_id: CVE-2018-0159
vendor_project: CIsco
product: IOS Software and Cisco IOS XE Software
vulnerability_name: Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.


cve_id: CVE-2018-0156
vendor_project: Cisco
product: IOS Software and Cisco IOS XE Software
vulnerability_name: Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial-of-service (DoS) condition.


cve_id: CVE-2018-0155
vendor_project: Cisco
product: Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches
vulnerability_name: Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial-of-service (DoS) condition.


cve_id: CVE-2018-0154
vendor_project: Cisco
product: IOS Software
vulnerability_name: Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition.


cve_id: CVE-2018-0151
vendor_project: Cisco
product: IOS and IOS XE Software
vulnerability_name: Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-17 00:00:00+00:00
short_description:
A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges.


cve_id: CVE-2017-8540
vendor_project: Microsoft
product: Malware Protection Engine
vulnerability_name: Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability".


cve_id: CVE-2017-6744
vendor_project: Cisco
product: IOS software
vulnerability_name: Cisco IOS Software SNMP Remote Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 1 contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6.


cve_id: CVE-2017-6743
vendor_project: Cisco
product: IOS and IOS XE Software
vulnerability_name: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.


cve_id: CVE-2017-6740
vendor_project: Cisco
product: IOS and IOS XE Software
vulnerability_name: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.


cve_id: CVE-2017-6663
vendor_project: Cisco
product: IOS and IOS XE Software
vulnerability_name: Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in denial-of-service (DoS).


cve_id: CVE-2017-6627
vendor_project: Cisco
product: IOS and IOS XE Software
vulnerability_name: Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A vulnerability in the UDP processing code of Cisco IOS and IOS XE could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and denial of service.


cve_id: CVE-2017-12319
vendor_project: Cisco
product: IOS XE Software
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
vulnerability_name:
Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability

short_description:
A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition, or potentially corrupt the BGP routing table, which could result in network instability.


cve_id: CVE-2017-12240
vendor_project: Cisco
product: IOS and IOS XE Software
vulnerability_name: Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
The Dynamic Host Configuration Protocol (DHCP) relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system.


cve_id: CVE-2017-12238
vendor_project: Cisco
product: Catalyst 6800 Series Switches
vulnerability_name: Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a denial of service.


cve_id: CVE-2017-12237
vendor_project: Cisco
product: IOS and IOS XE Software
vulnerability_name: Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS and Cisco IOS XE could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service.


cve_id: CVE-2017-12235
vendor_project: Cisco
product: IOS software
vulnerability_name: Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.


cve_id: CVE-2017-12234
vendor_project: Cisco
product: IOS software
vulnerability_name: Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.


cve_id: CVE-2017-12232
vendor_project: Cisco
product: IOS software
vulnerability_name: Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service.


cve_id: CVE-2017-12231
vendor_project: Cisco
product: IOS software
vulnerability_name: Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS could allow an unauthenticated, remote attacker to cause a denial of service.


cve_id: CVE-2017-11826
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office Remote Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.


cve_id: CVE-2017-11292
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Type Confusion Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.


cve_id: CVE-2017-0001
vendor_project: Microsoft
product: Graphics Device Interface (GDI)
vulnerability_name: Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges


cve_id: CVE-2016-8562
vendor_project: Siemens
product: SIMATIC CP
vulnerability_name: Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
An improper privilege management vulnerability exists within the Siemens SIMATIC Communication Processor (CP) that allows a privileged attacker to remotely cause a denial of service.


cve_id: CVE-2016-7855
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Use-After-Free Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.


cve_id: CVE-2016-7262
vendor_project: Microsoft
product: Excel
vulnerability_name: Microsoft Office Security Feature Bypass Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.


cve_id: CVE-2016-7193
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office Memory Corruption Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.


cve_id: CVE-2016-4117
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Arbitrary Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-03-24 00:00:00+00:00
short_description:
An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.


cve_id: CVE-2016-1019
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Arbitrary Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.


cve_id: CVE-2016-0099
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.


cve_id: CVE-2015-5119
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Use-After-Free Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.


cve_id: CVE-2015-4902
vendor_project: Oracle
product: Java SE
vulnerability_name: Oracle Java SE Integrity Check Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via unknown vectors related to deployment.


cve_id: CVE-2015-3043
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Memory Corruption Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.


cve_id: CVE-2015-2590
vendor_project: Oracle
product: Java SE
vulnerability_name: Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.


cve_id: CVE-2015-2424
vendor_project: Microsoft
product: PowerPoint
vulnerability_name: Microsoft PowerPoint Memory Corruption Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.


cve_id: CVE-2015-2387
vendor_project: Microsoft
product: ATM Font Driver
vulnerability_name: Microsoft ATM Font Driver Privilege Escalation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.


cve_id: CVE-2015-1701
vendor_project: Microsoft
product: Win32k
vulnerability_name: Microsoft Win32k Privilege Escalation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.


cve_id: CVE-2015-1642
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office Memory Corruption Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Microsoft Office contains a memory corruption vulnerability which allows remote attackers to execute arbitrary code via a crafted document.


cve_id: CVE-2014-4114
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.


cve_id: CVE-2013-5065
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Kernel Privilege Escalation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.


cve_id: CVE-2013-3897
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Use-After-Free Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.


cve_id: CVE-2013-3346
vendor_project: Adobe
product: Reader and Acrobat
vulnerability_name: Adobe Reader and Acrobat Memory Corruption Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.


cve_id: CVE-2013-1675
vendor_project: Mozilla
product: Firefox
vulnerability_name: Mozilla Firefox Information Disclosure Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.


cve_id: CVE-2013-1347
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Remote Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.


cve_id: CVE-2013-0641
vendor_project: Adobe
product: Reader
vulnerability_name: Adobe Reader Buffer Overflow Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.


cve_id: CVE-2013-0640
vendor_project: Adobe
product: Reader and Acrobat
vulnerability_name: Adobe Reader and Acrobat Memory Corruption Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.


cve_id: CVE-2013-0632
vendor_project: Adobe
product: ColdFusion
vulnerability_name: Adobe ColdFusion Authentication Bypass Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access.


cve_id: CVE-2012-1856
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.


cve_id: CVE-2012-1723
vendor_project: Oracle
product: Java SE
vulnerability_name: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.


cve_id: CVE-2012-1535
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Arbitrary Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.


cve_id: CVE-2012-0507
vendor_project: Oracle
product: Java SE
vulnerability_name: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.


cve_id: CVE-2011-3544
vendor_project: Oracle
product: Java SE JDK and JRE
vulnerability_name: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.


cve_id: CVE-2011-1889
vendor_project: Microsoft
product: Forefront Threat Management Gateway (TMG)
vulnerability_name: Microsoft Forefront TMG Remote Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.


cve_id: CVE-2011-0611
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Remote Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Adobe Flash Player contains a vulnerability which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.


cve_id: CVE-2010-3333
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office Stack-based Buffer Overflow Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.


cve_id: CVE-2010-0232
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Kernel Exception Handler Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges.


cve_id: CVE-2010-0188
vendor_project: Adobe
product: Reader and Acrobat
vulnerability_name: Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.


cve_id: CVE-2009-3129
vendor_project: Microsoft
product: Excel
vulnerability_name: Microsoft Excel Featheader Record Memory Corruption Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.


cve_id: CVE-2009-1123
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Improper Input Validation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.


cve_id: CVE-2008-3431
vendor_project: Oracle
product: VirtualBox
vulnerability_name: Oracle VirtualBox Insufficient Input Validation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.


cve_id: CVE-2008-2992
vendor_project: Adobe
product: Acrobat and Reader
vulnerability_name: Adobe Reader and Acrobat Input Validation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.


cve_id: CVE-2004-0210
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Privilege Escalation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.


cve_id: CVE-2002-0367
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Privilege Escalation Vulnerability
date_added: 2022-03-03 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-24 00:00:00+00:00
short_description:
smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.


cve_id: CVE-2022-26486
vendor_project: Mozilla
product: Firefox
vulnerability_name: Mozilla Firefox Use-After-Free Vulnerability
date_added: 2022-03-07 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-21 00:00:00+00:00
short_description:
Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.


cve_id: CVE-2022-26485
vendor_project: Mozilla
product: Firefox
vulnerability_name: Mozilla Firefox Use-After-Free Vulnerability
date_added: 2022-03-07 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-21 00:00:00+00:00
short_description:
Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.


cve_id: CVE-2021-21973
vendor_project: VMware
product: vCenter Server and Cloud Foundation
vulnerability_name: VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
date_added: 2022-03-07 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-03-21 00:00:00+00:00
short_description:
VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.


cve_id: CVE-2020-8218
vendor_project: Pulse Secure
product: Pulse Connect Secure
vulnerability_name: Pulse Connect Secure Code Injection Vulnerability
date_added: 2022-03-07 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-07 00:00:00+00:00
short_description:
A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.


cve_id: CVE-2019-11581
vendor_project: Atlassian
product: Jira Server and Data Center
vulnerability_name: Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
date_added: 2022-03-07 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-07 00:00:00+00:00
short_description:
Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.


cve_id: CVE-2016-6277
vendor_project: NETGEAR
product: Multiple Routers
vulnerability_name: NETGEAR Multiple Routers Remote Code Execution Vulnerability
date_added: 2022-03-07 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-07 00:00:00+00:00
short_description:
NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.


cve_id: CVE-2013-0631
vendor_project: Adobe
product: ColdFusion
vulnerability_name: Adobe ColdFusion Information Disclosure Vulnerability
date_added: 2022-03-07 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-07 00:00:00+00:00
short_description:
Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.


cve_id: CVE-2013-0629
vendor_project: Adobe
product: ColdFusion
vulnerability_name: Adobe ColdFusion Directory Traversal Vulnerability
date_added: 2022-03-07 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-07 00:00:00+00:00
short_description:
Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.


cve_id: CVE-2013-0625
vendor_project: Adobe
product: ColdFusion
vulnerability_name: Adobe ColdFusion Authentication Bypass Vulnerability
date_added: 2022-03-07 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-07 00:00:00+00:00
short_description:
Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.


cve_id: CVE-2009-3960
vendor_project: Adobe
product: BlazeDS
vulnerability_name: Adobe BlazeDS Information Disclosure Vulnerability
date_added: 2022-03-07 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-07 00:00:00+00:00
short_description:
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability which allows for information disclosure.


cve_id: CVE-2020-5135
vendor_project: SonicWall
product: SonicOS
vulnerability_name: SonicWall SonicOS Buffer Overflow Vulnerability
date_added: 2022-03-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-05 00:00:00+00:00
short_description:
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.


cve_id: CVE-2019-1405
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
date_added: 2022-03-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-05 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.


cve_id: CVE-2019-1322
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Privilege Escalation Vulnerability
date_added: 2022-03-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-05 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.


cve_id: CVE-2019-1315
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
date_added: 2022-03-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-05 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.


cve_id: CVE-2019-1253
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability
date_added: 2022-03-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-05 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.


cve_id: CVE-2019-1132
vendor_project: Microsoft
product: Win32k
vulnerability_name: Microsoft Win32k Privilege Escalation Vulnerability
date_added: 2022-03-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-05 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.


cve_id: CVE-2019-1129
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
date_added: 2022-03-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-05 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.


cve_id: CVE-2019-1069
vendor_project: Microsoft
product: Task Scheduler
vulnerability_name: Microsoft Task Scheduler Privilege Escalation Vulnerability
date_added: 2022-03-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-05 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.


cve_id: CVE-2017-0101
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Transaction Manager Privilege Escalation Vulnerability
date_added: 2022-03-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-05 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.


cve_id: CVE-2016-3309
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Kernel Privilege Escalation Vulnerability
date_added: 2022-03-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-05 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.


cve_id: CVE-2015-2546
vendor_project: Microsoft
product: Win32k
vulnerability_name: Microsoft Win32k Memory Corruption Vulnerability
date_added: 2022-03-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-05 00:00:00+00:00
short_description:
The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.


cve_id: CVE-2022-26143
vendor_project: Mitel
product: MiCollab, MiVoice Business Express
vulnerability_name: MiCollab, MiVoice Business Express Access Control Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system.


cve_id: CVE-2022-21999
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Print Spooler Privilege Escalation Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.


cve_id: CVE-2021-42237
vendor_project: Sitecore
product: XP
vulnerability_name: Sitecore XP Remote Command Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execution.


cve_id: CVE-2021-22941
vendor_project: Citrix
product: ShareFile
vulnerability_name: Citrix ShareFile Improper Access Control Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller.


cve_id: CVE-2020-9054
vendor_project: Zyxel
product: Multiple Network-Attached Storage (NAS) Devices
vulnerability_name: Zyxel Multiple NAS Devices OS Command Injection Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code.


cve_id: CVE-2020-7247
vendor_project: OpenBSD
product: OpenSMTPD
vulnerability_name: OpenSMTPD Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
smtp_mailaddr in smtp_session.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session.


cve_id: CVE-2020-5410
vendor_project: VMware Tanzu
product: Spring Cloud Configuration (Config) Server
vulnerability_name: VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability which allows applications to serve arbitrary configuration files.


cve_id: CVE-2020-2506
vendor_project: QNAP Systems
product: Helpdesk
vulnerability_name: QNAP Helpdesk Improper Access Control Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive information.


cve_id: CVE-2020-2021
vendor_project: Palo Alto Networks
product: PAN-OS
vulnerability_name: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.


cve_id: CVE-2020-1956
vendor_project: Apache
product: Kylin
vulnerability_name: Apache Kylin OS Command Injection Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Apache Kylin contains an OS command injection vulnerability which could permit an attacker to perform remote code execution.


cve_id: CVE-2020-1631
vendor_project: Juniper
product: Junos OS
vulnerability_name: Juniper Junos OS Path Traversal Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform remote code execution.


cve_id: CVE-2019-6340
vendor_project: Drupal
product: Core
vulnerability_name: Drupal Core Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases.


cve_id: CVE-2019-2616
vendor_project: Oracle
product: BI Publisher (Formerly XML Publisher)
vulnerability_name: Oracle BI Publisher Unauthorized Access Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability which allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass.


cve_id: CVE-2019-16920
vendor_project: D-Link
product: Multiple Routers
vulnerability_name: D-Link Multiple Routers Command Injection Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise.


cve_id: CVE-2019-15107
vendor_project: Webmin
product: Webmin
vulnerability_name: Webmin Command Injection Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.


cve_id: CVE-2019-11043
vendor_project: PHP
product: FastCGI Process Manager (FPM)
vulnerability_name: PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.


cve_id: CVE-2019-10068
vendor_project: Kentico
product: Xperience
vulnerability_name: Kentico Xperience Deserialization of Untrusted Data Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution.


cve_id: CVE-2019-1003030
vendor_project: Jenkins
product: Matrix Project Plugin
vulnerability_name: Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Jenkins Matrix Project plugin contains a vulnerability which can allow users to escape the sandbox, opening opportunity to perform remote code execution.


cve_id: CVE-2019-0903
vendor_project: Microsoft
product: Graphics Device Interface (GDI)
vulnerability_name: Microsoft GDI Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.


cve_id: CVE-2018-8414
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Shell Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.


cve_id: CVE-2018-8373
vendor_project: Microsoft
product: Internet Explorer Scripting Engine
vulnerability_name: Microsoft Scripting Engine Memory Corruption Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.


cve_id: CVE-2018-6961
vendor_project: VMware
product: SD-WAN Edge
vulnerability_name: VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution.


cve_id: CVE-2018-1273
vendor_project: VMware Tanzu
product: Spring Data Commons
vulnerability_name: VMware Tanzu Spring Data Commons Property Binder Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution.


cve_id: CVE-2018-11138
vendor_project: Quest
product: KACE System Management Appliance
vulnerability_name: Quest KACE System Management Appliance Remote Command Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance is accessible by anonymous users and can be abused to perform remote code execution.


cve_id: CVE-2018-0147
vendor_project: Cisco
product: Secure Access Control System (ACS)
vulnerability_name: Cisco Secure Access Control System Java Deserialization Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software.


cve_id: CVE-2018-0125
vendor_project: Cisco
product: VPN Routers
vulnerability_name: Cisco VPN Routers Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
A vulnerability in the web interface of the Cisco VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as root and gain full control of an affected system.


cve_id: CVE-2017-6334
vendor_project: NETGEAR
product: DGN2200 Devices
vulnerability_name: NETGEAR DGN2200 Devices OS Command Injection Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-04-15 00:00:00+00:00
short_description:
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands


cve_id: CVE-2017-6316
vendor_project: Citrix
product: NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server
vulnerability_name: Citrix Multiple Products Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
A vulnerability has been identified in the management interface of Citrix NetScaler SD-WAN Enterprise and Standard Edition and Citrix CloudBridge Virtual WAN Edition that could result in an unauthenticated, remote attacker being able to execute arbitrary code as a root user. This vulnerability also affects XenMobile Server.


cve_id: CVE-2017-3881
vendor_project: Cisco
product: IOS and IOS XE
vulnerability_name: Cisco IOS and IOS XE Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges.


cve_id: CVE-2017-12617
vendor_project: Apache
product: Tomcat
vulnerability_name: Apache Tomcat Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.


cve_id: CVE-2017-12615
vendor_project: Apache
product: Tomcat
vulnerability_name: Apache Tomcat on Windows Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.


cve_id: CVE-2016-1555
vendor_project: NETGEAR
product: Wireless Access Point (WAP) Devices
vulnerability_name: NETGEAR Multiple WAP Devices Command Injection Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution.


cve_id: CVE-2016-11021
vendor_project: D-Link
product: DCS-930L Devices
vulnerability_name: D-Link DCS-930L Devices OS Command Injection Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-04-15 00:00:00+00:00
short_description:
setSystemCommand on D-Link DCS-930L devices allows a remote attacker to execute code via an OS command.


cve_id: CVE-2016-10174
vendor_project: NETGEAR
product: WNR2000v5 Router
vulnerability_name: NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.


cve_id: CVE-2016-0752
vendor_project: Rails
product: Ruby on Rails
vulnerability_name: Ruby on Rails Directory Traversal Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.


cve_id: CVE-2015-4068
vendor_project: Arcserve
product: Unified Data Protection (UDP)
vulnerability_name: Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service.


cve_id: CVE-2015-3035
vendor_project: TP-Link
product: Multiple Archer Devices
vulnerability_name: TP-Link Multiple Archer Devices Directory Traversal Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.


cve_id: CVE-2015-1427
vendor_project: Elastic
product: Elasticsearch
vulnerability_name: Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.


cve_id: CVE-2015-1187
vendor_project: D-Link and TRENDnet
product: Multiple Devices
vulnerability_name: D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-04-15 00:00:00+00:00
short_description:
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to perform remote code execution.


cve_id: CVE-2015-0666
vendor_project: Cisco
product: Prime Data Center Network Manager (DCNM)
vulnerability_name: Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read arbitrary files.


cve_id: CVE-2014-6332
vendor_project: Microsoft
product: Windows
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
vulnerability_name:
Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

short_description:
OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site.


cve_id: CVE-2014-6324
vendor_project: Microsoft
product: Kerberos Key Distribution Center (KDC)
vulnerability_name: Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.


cve_id: CVE-2014-6287
vendor_project: Rejetto
product: HTTP File Server (HFS)
vulnerability_name: Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (HFS or HttpFileServer) allows remote attackers to execute arbitrary programs.


cve_id: CVE-2014-3120
vendor_project: Elastic
product: Elasticsearch
vulnerability_name: Elasticsearch Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.


cve_id: CVE-2014-0130
vendor_project: Rails
product: Ruby on Rails
vulnerability_name: Ruby on Rails Directory Traversal Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.


cve_id: CVE-2013-5223
vendor_project: D-Link
product: DSL-2760U
vulnerability_name: D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
A cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gateway, allowing remote authenticated users to inject arbitrary web script or HTML.


cve_id: CVE-2013-4810
vendor_project: Hewlett Packard (HP)
product: ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management
vulnerability_name: HP Multiple Products Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet.


cve_id: CVE-2013-2251
vendor_project: Apache
product: Struts
vulnerability_name: Apache Struts Improper Input Validation Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.


cve_id: CVE-2012-1823
vendor_project: PHP
product: PHP
vulnerability_name: PHP-CGI Query String Parameter Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.


cve_id: CVE-2010-4345
vendor_project: Exim
product: Exim
vulnerability_name: Exim Privilege Escalation Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.


cve_id: CVE-2010-4344
vendor_project: Exim
product: Exim
vulnerability_name: Exim Heap-Based Buffer Overflow Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.


cve_id: CVE-2010-3035
vendor_project: Cisco
product: IOS XR
vulnerability_name: Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service.


cve_id: CVE-2010-2861
vendor_project: Adobe
product: ColdFusion
vulnerability_name: Adobe ColdFusion Directory Traversal Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.


cve_id: CVE-2009-2055
vendor_project: Cisco
product: IOS XR
vulnerability_name: Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service.


cve_id: CVE-2009-1151
vendor_project: phpMyAdmin
product: phpMyAdmin
vulnerability_name: phpMyAdmin Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.


cve_id: CVE-2009-0927
vendor_project: Adobe
product: Reader and Acrobat
vulnerability_name: Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.


cve_id: CVE-2005-2773
vendor_project: Hewlett Packard (HP)
product: OpenView Network Node Manager
vulnerability_name: HP OpenView Network Node Manager Remote Code Execution Vulnerability
date_added: 2022-03-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-15 00:00:00+00:00
short_description:
HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.


cve_id: CVE-2022-1096
vendor_project: Google
product: Chromium V8
vulnerability_name: Google Chromium V8 Type Confusion Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
The vulnerability exists due to a type confusion error within the V8 component in Chromium, affecting all Chromium-based browsers.


cve_id: CVE-2022-0543
vendor_project: Redis
product: Debian-specific Redis Servers
vulnerability_name: Debian-specific Redis Server Lua Sandbox Escape Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.


cve_id: CVE-2021-38646
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.


cve_id: CVE-2021-34486
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Event Tracing Privilege Escalation Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.


cve_id: CVE-2021-26085
vendor_project: Atlassian
product: Confluence Server
vulnerability_name: Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.


cve_id: CVE-2021-20028
vendor_project: SonicWall
product: Secure Remote Access (SRA)
vulnerability_name: SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-04-18 00:00:00+00:00
short_description:
SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.


cve_id: CVE-2019-7483
vendor_project: SonicWall
product: SMA100
vulnerability_name: SonicWall SMA100 Directory Traversal Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.


cve_id: CVE-2018-8440
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Privilege Escalation Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).


cve_id: CVE-2018-8406
vendor_project: Microsoft
product: DirectX Graphics Kernel (DXGKRNL)
vulnerability_name: Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.


cve_id: CVE-2017-0213
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Privilege Escalation Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.


cve_id: CVE-2017-0059
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Information Disclosure Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site.


cve_id: CVE-2017-0037
vendor_project: Microsoft
product: Edge and Internet Explorer
vulnerability_name: Microsoft Edge and Internet Explorer Type Confusion Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution.


cve_id: CVE-2016-7201
vendor_project: Microsoft
product: Edge
vulnerability_name: Microsoft Edge Memory Corruption Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.


cve_id: CVE-2016-0189
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Memory Corruption Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.


cve_id: CVE-2016-0151
vendor_project: Microsoft
product: Client-Server Run-time Subsystem (CSRSS)
vulnerability_name: Microsoft Windows CSRSS Security Feature Bypass Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.


cve_id: CVE-2015-2426
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts.


cve_id: CVE-2015-2419
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Memory Corruption Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.


cve_id: CVE-2013-3660
vendor_project: Microsoft
product: Win32k
vulnerability_name: Microsoft Win32k Privilege Escalation Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.


cve_id: CVE-2013-2551
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Use-After-Free Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.


cve_id: CVE-2013-2465
vendor_project: Oracle
product: Java SE
vulnerability_name: Oracle Java SE Unspecified Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D


cve_id: CVE-2013-1690
vendor_project: Mozilla
product: Firefox and Thunderbird
vulnerability_name: Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service or possibly execute arbitrary code via a crafted web site.


cve_id: CVE-2012-5076
vendor_project: Oracle
product: Java SE
vulnerability_name: Oracle Java SE Sandbox Bypass Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.


cve_id: CVE-2012-2539
vendor_project: Microsoft
product: Word
vulnerability_name: Microsoft Word Remote Code Execution Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
Microsoft Word allows attackers to execute remote code or cause a denial-of-service via crafted RTF data.


cve_id: CVE-2012-2034
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Memory Corruption Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-04-18 00:00:00+00:00
short_description:
Adobe Flash Player contains a memory corruption vulnerability which allows for remote code execution or denial-of-service.


cve_id: CVE-2012-0518
vendor_project: Oracle
product: Fusion Middleware
vulnerability_name: Oracle Fusion Middleware Unspecified Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via unknown vectors


cve_id: CVE-2011-2005
vendor_project: Microsoft
product: Ancillary Function Driver (afd.sys)
vulnerability_name: Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-18 00:00:00+00:00
short_description:
afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.


cve_id: CVE-2010-4398
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
date_added: 2022-03-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-21 00:00:00+00:00
short_description:
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.


cve_id: CVE-2022-26871
vendor_project: Trend Micro
product: Apex Central
vulnerability_name: Trend Micro Apex Central Arbitrary File Upload Vulnerability
date_added: 2022-03-31 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-21 00:00:00+00:00
short_description:
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution.


cve_id: CVE-2022-1040
vendor_project: Sophos
product: Firewall
vulnerability_name: Sophos Firewall Authentication Bypass Vulnerability
date_added: 2022-03-31 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-21 00:00:00+00:00
short_description:
An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution.


cve_id: CVE-2021-34484
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows User Profile Service Privilege Escalation Vulnerability
date_added: 2022-03-31 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-21 00:00:00+00:00
short_description:
Microsoft Windows User Profile Service contains an unspecified vulnerability which allows for privilege escalation.


cve_id: CVE-2021-28799
vendor_project: QNAP
product: Network Attached Storage (NAS)
vulnerability_name: QNAP NAS Improper Authorization Vulnerability
date_added: 2022-03-31 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-21 00:00:00+00:00
short_description:
QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.


cve_id: CVE-2021-21551
vendor_project: Dell
product: dbutil Driver
vulnerability_name: Dell dbutil Driver Insufficient Access Control Vulnerability
date_added: 2022-03-31 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-21 00:00:00+00:00
short_description:
Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service, or information disclosure.


cve_id: CVE-2018-10562
vendor_project: Dasan
product: Gigabit Passive Optical Network (GPON) Routers
vulnerability_name: Dasan GPON Routers Command Injection Vulnerability
date_added: 2022-03-31 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-04-21 00:00:00+00:00
short_description:
Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution.


cve_id: CVE-2018-10561
vendor_project: Dasan
product: Gigabit Passive Optical Network (GPON) Routers
vulnerability_name: Dasan GPON Routers Authentication Bypass Vulnerability
date_added: 2022-03-31 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-04-21 00:00:00+00:00
short_description:
Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to perform remote code execution.


cve_id: CVE-2022-22965
vendor_project: VMware
product: Spring Framework
vulnerability_name: Spring Framework JDK 9+ Remote Code Execution Vulnerability
date_added: 2022-04-04 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-25 00:00:00+00:00
short_description:
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.


cve_id: CVE-2022-22675
vendor_project: Apple
product: macOS
vulnerability_name: Apple macOS Out-of-Bounds Write Vulnerability
date_added: 2022-04-04 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-25 00:00:00+00:00
short_description:
macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.


cve_id: CVE-2022-22674
vendor_project: Apple
product: macOS
vulnerability_name: Apple macOS Out-of-Bounds Read Vulnerability
date_added: 2022-04-04 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-25 00:00:00+00:00
short_description:
macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.


cve_id: CVE-2021-45382
vendor_project: D-Link
product: Multiple Routers
vulnerability_name: D-Link Multiple Routers Remote Code Execution Vulnerability
date_added: 2022-04-04 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-04-25 00:00:00+00:00
short_description:
A remote code execution vulnerability exists in all series H/W revisions routers via the DDNS function in ncc2 binary file.


cve_id: CVE-2021-3156
vendor_project: Sudo
product: Sudo
vulnerability_name: Sudo Heap-Based Buffer Overflow Vulnerability
date_added: 2022-04-06 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-27 00:00:00+00:00
short_description:
Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.


cve_id: CVE-2021-31166
vendor_project: Microsoft
product: HTTP Protocol Stack
vulnerability_name: Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability
date_added: 2022-04-06 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-27 00:00:00+00:00
short_description:
Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.


cve_id: CVE-2017-0148
vendor_project: Microsoft
product: SMBv1 server
vulnerability_name: Microsoft SMBv1 Server Remote Code Execution Vulnerability
date_added: 2022-04-06 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-04-27 00:00:00+00:00
short_description:
The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.


cve_id: CVE-2022-23176
vendor_project: WatchGuard
product: Firebox and XTM
vulnerability_name: WatchGuard Firebox and XTM Privilege Escalation Vulnerability
date_added: 2022-04-11 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-02 00:00:00+00:00
short_description:
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access.


cve_id: CVE-2021-42287
vendor_project: Microsoft
product: Active Directory
vulnerability_name: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
date_added: 2022-04-11 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-02 00:00:00+00:00
short_description:
Microsoft Active Directory Domain Services contains an unspecified vulnerability which allows for privilege escalation.


cve_id: CVE-2021-39793
vendor_project: Google
product: Pixel
vulnerability_name: Google Pixel Out-of-Bounds Write Vulnerability
date_added: 2022-04-11 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-02 00:00:00+00:00
short_description:
Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege.


cve_id: CVE-2021-27852
vendor_project: Checkbox
product: Checkbox Survey
vulnerability_name: Checkbox Survey Deserialization of Untrusted Data Vulnerability
date_added: 2022-04-11 00:00:00+00:00
due_date: 2022-05-02 00:00:00+00:00
short_description:
Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code.

required_action:
Versions 6 and earlier for this product are end-of-life and must be removed from agency networks. Versions 7 and later are not considered vulnerable.


cve_id: CVE-2021-22600
vendor_project: Linux
product: Kernel
vulnerability_name: Linux Kernel Privilege Escalation Vulnerability
date_added: 2022-04-11 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-02 00:00:00+00:00
short_description:
Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service or possibly for privilege escalation.


cve_id: CVE-2020-2509
vendor_project: QNAP
product: QNAP Network-Attached Storage (NAS)
vulnerability_name: QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
date_added: 2022-04-11 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-02 00:00:00+00:00
short_description:
QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution.


cve_id: CVE-2017-11317
vendor_project: Telerik
product: User Interface (UI) for ASP.NET AJAX
vulnerability_name: Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability
date_added: 2022-04-11 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-02 00:00:00+00:00
short_description:
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code.


cve_id: CVE-2022-24521
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows CLFS Driver Privilege Escalation Vulnerability
date_added: 2022-04-13 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-04 00:00:00+00:00
short_description:
Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.


cve_id: CVE-2018-7602
vendor_project: Drupal
product: Core
vulnerability_name: Drupal Core Remote Code Execution Vulnerability
date_added: 2022-04-13 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-04 00:00:00+00:00
short_description:
A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site.


cve_id: CVE-2018-20753
vendor_project: Kaseya
product: Virtual System/Server Administrator (VSA)
vulnerability_name: Kaseya VSA Remote Code Execution Vulnerability
date_added: 2022-04-13 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-04 00:00:00+00:00
short_description:
Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices.


cve_id: CVE-2015-5123
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Use-After-Free Vulnerability
date_added: 2022-04-13 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-05-04 00:00:00+00:00
short_description:
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service.


cve_id: CVE-2015-5122
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Use-After-Free Vulnerability
date_added: 2022-04-13 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-05-04 00:00:00+00:00
short_description:
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service.


cve_id: CVE-2015-3113
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
date_added: 2022-04-13 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-05-04 00:00:00+00:00
short_description:
Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.


cve_id: CVE-2015-2502
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Memory Corruption Vulnerability
date_added: 2022-04-13 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-04 00:00:00+00:00
short_description:
Microsoft Internet Explorer contains a memory corruption vulnerability which allows an attacker to execute code or cause a denial-of-service.


cve_id: CVE-2022-22954
vendor_project: VMware
product: Workspace ONE Access and Identity Manager
vulnerability_name: VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
date_added: 2022-04-14 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-05 00:00:00+00:00
short_description:
VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.


cve_id: CVE-2022-22960
vendor_project: VMware
product: Multiple Products
vulnerability_name: VMware Multiple Products Privilege Escalation Vulnerability
date_added: 2022-04-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-06 00:00:00+00:00
short_description:
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.


cve_id: CVE-2019-3929
vendor_project: Crestron
product: Multiple Products
vulnerability_name: Crestron Multiple Products Command Injection Vulnerability
date_added: 2022-04-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-06 00:00:00+00:00
short_description:
Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.


cve_id: CVE-2018-7841
vendor_project: Schneider Electric
product: U.motion Builder
vulnerability_name: Schneider Electric U.motion Builder SQL Injection Vulnerability
date_added: 2022-04-15 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-05-06 00:00:00+00:00
short_description:
A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.


cve_id: CVE-2016-4523
vendor_project: Trihedral
product: VTScada (formerly VTS)
vulnerability_name: Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
date_added: 2022-04-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-06 00:00:00+00:00
short_description:
The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service.


cve_id: CVE-2014-0780
vendor_project: InduSoft
product: Web Studio
vulnerability_name: InduSoft Web Studio NTWebServer Directory Traversal Vulnerability
date_added: 2022-04-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-06 00:00:00+00:00
short_description:
InduSoft Web Studio NTWebServer contains a directory traversal vulnerability which allows remote attackers to read administrative passwords in APP files, allowing for remote code execution.


cve_id: CVE-2010-5330
vendor_project: Ubiquiti
product: AirOS
vulnerability_name: Ubiquiti AirOS Command Injection Vulnerability
date_added: 2022-04-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-06 00:00:00+00:00
short_description:
Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.


cve_id: CVE-2007-3010
vendor_project: Alcatel
product: OmniPCX Enterprise
vulnerability_name: Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability
date_added: 2022-04-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-06 00:00:00+00:00
short_description:
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows remote attackers to execute arbitrary commands.


cve_id: CVE-2018-6882
vendor_project: Zimbra
product: Collaboration Suite (ZCS)
vulnerability_name: Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
date_added: 2022-04-19 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-10 00:00:00+00:00
short_description:
Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML.


cve_id: CVE-2019-3568
vendor_project: Meta Platforms
product: WhatsApp
vulnerability_name: WhatsApp VOIP Stack Buffer Overflow Vulnerability
date_added: 2022-04-19 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-10 00:00:00+00:00
short_description:
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.


cve_id: CVE-2022-22718
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Print Spooler Privilege Escalation Vulnerability
date_added: 2022-04-19 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-10 00:00:00+00:00
short_description:
Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.


cve_id: CVE-2022-26904
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows User Profile Service Privilege Escalation Vulnerability
date_added: 2022-04-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-16 00:00:00+00:00
short_description:
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.


cve_id: CVE-2022-0847
vendor_project: Linux
product: Kernel
vulnerability_name: Linux Kernel Privilege Escalation Vulnerability
date_added: 2022-04-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-16 00:00:00+00:00
short_description:
Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."


cve_id: CVE-2019-1003029
vendor_project: Jenkins
product: Script Security Plugin
vulnerability_name: Jenkins Script Security Plugin Sandbox Bypass Vulnerability
date_added: 2022-04-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-16 00:00:00+00:00
short_description:
Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.


cve_id: CVE-2021-1789
vendor_project: Apple
product: Multiple Products
vulnerability_name: Apple Multiple Products Type Confusion Vulnerability
date_added: 2022-05-04 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-25 00:00:00+00:00
short_description:
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.


cve_id: CVE-2014-0322
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Use-After-Free Vulnerability
date_added: 2022-05-04 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-25 00:00:00+00:00
short_description:
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.


cve_id: CVE-2014-0160
vendor_project: OpenSSL
product: OpenSSL
vulnerability_name: OpenSSL Information Disclosure Vulnerability
date_added: 2022-05-04 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-25 00:00:00+00:00
short_description:
The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.


cve_id: CVE-2022-1388
vendor_project: F5
product: BIG-IP
vulnerability_name: F5 BIG-IP Missing Authentication Vulnerability
date_added: 2022-05-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-05-31 00:00:00+00:00
short_description:
F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.


cve_id: CVE-2022-30525
vendor_project: Zyxel
product: Multiple Firewalls
vulnerability_name: Zyxel Multiple Firewalls OS Command Injection Vulnerability
date_added: 2022-05-16 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-06 00:00:00+00:00
short_description:
A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.


cve_id: CVE-2022-22947
vendor_project: VMware
product: Spring Cloud Gateway
vulnerability_name: VMware Spring Cloud Gateway Code Injection Vulnerability
date_added: 2022-05-16 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-06 00:00:00+00:00
short_description:
Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.


cve_id: CVE-2022-20821
vendor_project: Cisco
product: IOS XR
vulnerability_name: Cisco IOS XR Open Port Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.


cve_id: CVE-2021-0920
vendor_project: Android
product: Kernel
vulnerability_name: Android Kernel Race Condition Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.


cve_id: CVE-2021-30883
vendor_project: Apple
product: Multiple Products
vulnerability_name: Apple Multiple Products Memory Corruption Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution.


cve_id: CVE-2020-1027
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Kernel Privilege Escalation Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.


cve_id: CVE-2020-0638
vendor_project: Microsoft
product: Update Notification Manager
vulnerability_name: Microsoft Update Notification Manager Privilege Escalation Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.


cve_id: CVE-2019-7286
vendor_project: Apple
product: Multiple Products
vulnerability_name: Apple Multiple Products Memory Corruption Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.


cve_id: CVE-2019-7287
vendor_project: Apple
product: iOS
vulnerability_name: Apple iOS Memory Corruption Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.


cve_id: CVE-2019-0676
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Information Disclosure Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.


cve_id: CVE-2019-5786
vendor_project: Google
product: Chrome
vulnerability_name: Google Chrome Use-After-Free Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
Google Chrome contains a heap use-after-free vulnerability which allows an attacker to potentially perform out of bounds memory access.


cve_id: CVE-2019-0703
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows SMB Information Disclosure Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.


cve_id: CVE-2019-0880
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Privilege Escalation Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.


cve_id: CVE-2019-13720
vendor_project: Google
product: Chrome
vulnerability_name: Google Chrome Use-After-Free Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
Use-after-free in WebAudio in Google Chrome allows a remote attacker to potentially exploit heap corruption.


cve_id: CVE-2019-11707
vendor_project: Mozilla
product: Firefox and Thunderbird
vulnerability_name: Mozilla Firefox and Thunderbird Type Confusion Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.


cve_id: CVE-2019-11708
vendor_project: Mozilla
product: Firefox and Thunderbird
vulnerability_name: Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.


cve_id: CVE-2019-8720
vendor_project: WebKitGTK
product: WebKitGTK
vulnerability_name: WebKitGTK Memory Corruption Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.


cve_id: CVE-2019-18426
vendor_project: Meta Platforms
product: WhatsApp
vulnerability_name: WhatsApp Cross-Site Scripting Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.


cve_id: CVE-2019-1385
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.


cve_id: CVE-2019-1130
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.


cve_id: CVE-2018-5002
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Stack-based Buffer Overflow Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-06-13 00:00:00+00:00
short_description:
Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.


cve_id: CVE-2018-8589
vendor_project: Microsoft
product: Win32k
vulnerability_name: Microsoft Win32k Privilege Escalation Vulnerability
date_added: 2022-05-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-13 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.


cve_id: CVE-2018-8611
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Kernel Privilege Escalation Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory.


cve_id: CVE-2018-19953
vendor_project: QNAP
product: Network Attached Storage (NAS)
vulnerability_name: QNAP NAS File Station Cross-Site Scripting Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.


cve_id: CVE-2018-19949
vendor_project: QNAP
product: Network Attached Storage (NAS)
vulnerability_name: QNAP NAS File Station Command Injection Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.


cve_id: CVE-2017-0147
vendor_project: Microsoft
product: SMBv1 server
vulnerability_name: Microsoft Windows SMBv1 Information Disclosure Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.


cve_id: CVE-2017-0022
vendor_project: Microsoft
product: XML Core Services
vulnerability_name: Microsoft XML Core Services Information Disclosure Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.


cve_id: CVE-2017-0005
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.


cve_id: CVE-2017-0149
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Memory Corruption Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
Microsoft Internet Explorer allows remote attackers to execute code or cause a denial-of-service (memory corruption) via a crafted web site.


cve_id: CVE-2017-0210
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Privilege Escalation Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information.


cve_id: CVE-2017-8291
vendor_project: Artifex
product: Ghostscript
vulnerability_name: Artifex Ghostscript Type Confusion Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
Artifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile.


cve_id: CVE-2017-8543
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Search Remote Code Execution Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory.


cve_id: CVE-2017-18362
vendor_project: Kaseya
product: Virtual System/Server Administrator (VSA)
vulnerability_name: Kaseya VSA SQL Injection Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-06-14 00:00:00+00:00
short_description:
ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.


cve_id: CVE-2016-0162
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Information Disclosure Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.


cve_id: CVE-2016-3351
vendor_project: Microsoft
product: Internet Explorer and Edge
vulnerability_name: Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.


cve_id: CVE-2016-4655
vendor_project: Apple
product: iOS
vulnerability_name: Apple iOS Information Disclosure Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application.


cve_id: CVE-2016-4656
vendor_project: Apple
product: iOS
vulnerability_name: Apple iOS Memory Corruption Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
A memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a denial-of-service via a crafted application.


cve_id: CVE-2016-4657
vendor_project: Apple
product: iOS
vulnerability_name: Apple iOS Webkit Memory Corruption Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
WebKit in Apple iOS contains a memory corruption vulnerability which allows attackers to execute remote code or cause a denial-of-service via a crafted web site.


cve_id: CVE-2016-6366
vendor_project: Cisco
product: Adaptive Security Appliance (ASA)
vulnerability_name: Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause a reload of the affected system or to remotely execute code.


cve_id: CVE-2016-6367
vendor_project: Cisco
product: Adaptive Security Appliance (ASA)
vulnerability_name: Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service condition or potentially execute code.


cve_id: CVE-2016-3298
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability
date_added: 2022-05-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-14 00:00:00+00:00
short_description:
An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.


cve_id: CVE-2019-3010
vendor_project: Oracle
product: Solaris
vulnerability_name: Oracle Solaris Privilege Escalation Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Oracle Solaris component: XScreenSaver contains an unspecified vulnerability which allows for privilege escalation.


cve_id: CVE-2016-3393
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.


cve_id: CVE-2016-7256
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Open Type Font Remote Code Execution Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.


cve_id: CVE-2016-0034
vendor_project: Microsoft
product: Silverlight
vulnerability_name: Microsoft Silverlight Runtime Remote Code Execution Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: The impacted products are end-of-life and should be disconnected if still in use.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service.


cve_id: CVE-2015-0310
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player ASLR Bypass Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.


cve_id: CVE-2015-0016
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows TS WebProxy Directory Traversal Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privileges.


cve_id: CVE-2015-0071
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer ASLR Bypass Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site.


cve_id: CVE-2015-2360
vendor_project: Microsoft
product: Win32k
vulnerability_name: Microsoft Win32k Privilege Escalation Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service.


cve_id: CVE-2015-2425
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Memory Corruption Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service.


cve_id: CVE-2015-1769
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Mount Manager Privilege Escalation Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.


cve_id: CVE-2015-4495
vendor_project: Mozilla
product: Firefox
vulnerability_name: Mozilla Firefox Security Feature Bypass Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.


cve_id: CVE-2015-6175
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Kernel Privilege Escalation Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application.


cve_id: CVE-2015-1671
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Remote Code Execution Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.


cve_id: CVE-2014-4148
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Remote Code Execution Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts.


cve_id: CVE-2014-8439
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Dereferenced Pointer Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.


cve_id: CVE-2014-4123
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Privilege Escalation Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.


cve_id: CVE-2014-0546
vendor_project: Adobe
product: Acrobat and Reader
vulnerability_name: Adobe Acrobat and Reader Sandbox Bypass Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Adobe Acrobat and Reader on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.


cve_id: CVE-2014-2817
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Privilege Escalation Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Microsoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.


cve_id: CVE-2014-4077
vendor_project: Microsoft
product: Input Method Editor (IME) Japanese
vulnerability_name: Microsoft IME Japanese Privilege Escalation Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation.


cve_id: CVE-2014-3153
vendor_project: Linux
product: Kernel
vulnerability_name: Linux Kernel Privilege Escalation Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
The futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.


cve_id: CVE-2013-7331
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Information Disclosure Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications.


cve_id: CVE-2013-3993
vendor_project: IBM
product: InfoSphere BigInsights
vulnerability_name: IBM InfoSphere BigInsights Invalid Input Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.


cve_id: CVE-2013-3896
vendor_project: Microsoft
product: Silverlight
vulnerability_name: Microsoft Silverlight Information Disclosure Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.


cve_id: CVE-2013-2423
vendor_project: Oracle
product: Java Runtime Environment (JRE)
vulnerability_name: Oracle JRE Unspecified Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity.


cve_id: CVE-2013-0431
vendor_project: Oracle
product: Java Runtime Environment (JRE)
vulnerability_name: Oracle JRE Sandbox Bypass Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.


cve_id: CVE-2013-0422
vendor_project: Oracle
product: Java Runtime Environment (JRE)
vulnerability_name: Oracle JRE Remote Code Execution Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.


cve_id: CVE-2013-0074
vendor_project: Microsoft
product: Silverlight
vulnerability_name: Microsoft Silverlight Double Dereference Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.


cve_id: CVE-2012-1710
vendor_project: Oracle
product: Fusion Middleware
vulnerability_name: Oracle Fusion Middleware Unspecified Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer.


cve_id: CVE-2010-1428
vendor_project: Red Hat
product: JBoss
vulnerability_name: Red Hat JBoss Information Disclosure Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information.


cve_id: CVE-2010-0840
vendor_project: Oracle
product: Java Runtime Environment (JRE)
vulnerability_name: Oracle JRE Unspecified Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.


cve_id: CVE-2010-0738
vendor_project: Red Hat
product: JBoss
vulnerability_name: Red Hat JBoss Authentication Bypass Vulnerability
date_added: 2022-05-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-15 00:00:00+00:00
short_description:
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.


cve_id: CVE-2022-26134
vendor_project: Atlassian
product: Confluence Server/Data Center
vulnerability_name: Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
date_added: 2022-06-02 00:00:00+00:00
due_date: 2022-06-06 00:00:00+00:00
short_description:
Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.

required_action:
Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.


cve_id: CVE-2022-31460
vendor_project: Owl Labs
product: Meeting Owl Pro and Whiteboard Owl
vulnerability_name: Meeting Owl Pro and Whiteboard Owl Hard-Coded Credentials Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Owl Labs Meeting Owl and Whiteboard Owl allow attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value.


cve_id: CVE-2019-7195
vendor_project: QNAP
product: Photo Station
vulnerability_name: QNAP Photo Station Path Traversal Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.


cve_id: CVE-2019-7193
vendor_project: QNAP
product: QTS
vulnerability_name: QNAP QTS Improper Input Validation Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system.


cve_id: CVE-2019-7192
vendor_project: QNAP
product: Photo Station
vulnerability_name: QNAP Photo Station Improper Access Control Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.


cve_id: CVE-2019-5825
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Google Chromium V8 Out-of-Bounds Write Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Google Chromium V8 Engine contains an out-of-bounds write vulnerability which allows a remote attacker to potentially exploit heap corruption.


cve_id: CVE-2019-15271
vendor_project: Cisco
product: RV Series Routers
vulnerability_name: Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an attacker to execute code with root privileges.


cve_id: CVE-2018-6065
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Google Chromium V8 Integer Overflow Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Google Chromium V8 Engine contains an integer overflow vulnerability which allows a remote attacker to potentially exploit heap corruption.


cve_id: CVE-2018-17480
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Google Chromium V8 Out-of-Bounds Write Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Google Chromium V8 Engine contains an out-of-bounds write vulnerability which allows a remote attacker to execute code inside a sandbox.


cve_id: CVE-2018-17463
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Google Chromium V8 Remote Code Execution Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Google Chromium V8 Engine contains an unspecified vulnerability which allows for remote code execution.


cve_id: CVE-2017-6862
vendor_project: NETGEAR
product: Multiple Devices
vulnerability_name: NETGEAR Multiple Devices Buffer Overflow Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.


cve_id: CVE-2017-5070
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Google Chromium V8 Type Confusion Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Google Chromium V8 Engine contains a type confusion vulnerability which allows a remote attacker to execute code inside a sandbox.


cve_id: CVE-2017-5030
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Google Chromium V8 Memory Corruption Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Google Chromium V8 Engine contains a memory corruption vulnerability which allows a remote attacker to execute code.


cve_id: CVE-2013-1331
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office Buffer Overflow Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Microsoft Office contains a buffer overflow vulnerability which allows remote attackers to execute code via crafted PNG data in an Office document.


cve_id: CVE-2012-5054
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Integer Overflow Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Adobe Flash Player contains an integer overflow vulnerability which allows remote attackers to execute code via malformed arguments.


cve_id: CVE-2012-4969
vendor_project: Microsoft
product: Internet Explorer
vulnerability_name: Microsoft Internet Explorer Use-After-Free Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Microsoft Internet Explorer contains a use-after-free vulnerability which allows remote attackers to execute code via a crafted web site.


cve_id: CVE-2012-1889
vendor_project: Microsoft
product: XML Core Services
vulnerability_name: Microsoft XML Core Services Memory Corruption Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.


cve_id: CVE-2012-0767
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Adobe Flash Player contains a XSS vulnerability which allows remote attackers to inject web script or HTML.


cve_id: CVE-2012-0754
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Memory Corruption Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Adobe Flash Player contains a memory corruption vulnerability which allows remote attackers to execute code or cause denial-of-service.


cve_id: CVE-2012-0151
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.


cve_id: CVE-2011-2462
vendor_project: Adobe
product: Acrobat and Reader
vulnerability_name: Adobe Acrobat and Reader Universal 3D Memory Corruption Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
The Universal 3D (U3D) component in Adobe Acrobat and Reader contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service.


cve_id: CVE-2011-0609
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Unspecified Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Adobe Flash Player contains an unspecified vulnerability which allows remote attackers to execute code or cause denial-of-service.


cve_id: CVE-2010-2883
vendor_project: Adobe
product: Reader and Acrobat
vulnerability_name: Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability which allows remote attackers to execute code or cause denial-of-service.


cve_id: CVE-2010-2572
vendor_project: Microsoft
product: PowerPoint
vulnerability_name: Microsoft PowerPoint Buffer Overflow Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.


cve_id: CVE-2010-1297
vendor_project: Adobe
product: Flash Player
vulnerability_name: Adobe Flash Player Memory Corruption Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service.


cve_id: CVE-2009-4324
vendor_project: Adobe
product: Acrobat and Reader
vulnerability_name: Adobe Acrobat and Reader Use-After-Free Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.


cve_id: CVE-2009-3953
vendor_project: Adobe
product: Acrobat and Reader
vulnerability_name: Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.


cve_id: CVE-2009-1862
vendor_project: Adobe
product: Acrobat and Reader, Flash Player
vulnerability_name: Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
date_added: 2022-06-08 00:00:00+00:00
due_date: 2022-06-22 00:00:00+00:00
short_description:
Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service.

required_action:
For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.


cve_id: CVE-2009-0563
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office Buffer Overflow Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.


cve_id: CVE-2009-0557
vendor_project: Microsoft
product: Office
vulnerability_name: Microsoft Office Object Record Corruption Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Microsoft Office contains an object record corruption vulnerability which allows remote attackers to execute code via a crafted Excel file with a malformed record object.


cve_id: CVE-2008-0655
vendor_project: Adobe
product: Acrobat and Reader
vulnerability_name: Adobe Acrobat and Reader Unspecified Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.


cve_id: CVE-2007-5659
vendor_project: Adobe
product: Acrobat and Reader
vulnerability_name: Adobe Acrobat and Reader Buffer Overflow Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Adobe Acrobat and Reader contain a buffer overflow vulnerability which allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.


cve_id: CVE-2006-2492
vendor_project: Microsoft
product: Word
vulnerability_name: Microsoft Word Malformed Object Pointer Vulnerability
date_added: 2022-06-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-22 00:00:00+00:00
short_description:
Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.


cve_id: CVE-2016-2386
vendor_project: SAP
product: NetWeaver
vulnerability_name: SAP NetWeaver SQL Injection Vulnerability
date_added: 2022-06-09 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-30 00:00:00+00:00
short_description:
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.


cve_id: CVE-2016-2388
vendor_project: SAP
product: NetWeaver
vulnerability_name: SAP NetWeaver Information Disclosure Vulnerability
date_added: 2022-06-09 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-06-30 00:00:00+00:00
short_description:
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.


cve_id: CVE-2022-30190
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
date_added: 2022-06-14 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-05 00:00:00+00:00
short_description:
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.


cve_id: CVE-2022-29499
vendor_project: Mitel
product: MiVoice Connect
vulnerability_name: Mitel MiVoice Connect Data Validation Vulnerability
date_added: 2022-06-27 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-18 00:00:00+00:00
short_description:
The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.


cve_id: CVE-2021-30533
vendor_project: Google
product: Chromium
vulnerability_name: Google Chromium Security Bypass Vulnerability
date_added: 2022-06-27 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-18 00:00:00+00:00
short_description:
Insufficient policy enforcement in the PopupBlocker for Chromium allows an attacker to remotely bypass security mechanisms. This vulnerability impacts web browsers using Chromium such as Chrome and Edge.


cve_id: CVE-2021-4034
vendor_project: Red Hat
product: Polkit
vulnerability_name: Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
date_added: 2022-06-27 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-18 00:00:00+00:00
short_description:
The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability which allows for privilege escalation with administrative rights.


cve_id: CVE-2021-30983
vendor_project: Apple
product: iOS and iPadOS
vulnerability_name: Apple iOS and iPadOS Buffer Overflow Vulnerability
date_added: 2022-06-27 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-18 00:00:00+00:00
short_description:
Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges.


cve_id: CVE-2020-3837
vendor_project: Apple
product: Multiple Products
vulnerability_name: Apple Multiple Products Memory Corruption Vulnerability
date_added: 2022-06-27 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-18 00:00:00+00:00
short_description:
Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.


cve_id: CVE-2020-9907
vendor_project: Apple
product: Multiple Products
vulnerability_name: Apple Multiple Products Memory Corruption Vulnerability
date_added: 2022-06-27 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-18 00:00:00+00:00
short_description:
Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.


cve_id: CVE-2019-8605
vendor_project: Apple
product: Multiple Products
vulnerability_name: Apple Multiple Products Use-After-Free Vulnerability
date_added: 2022-06-27 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-18 00:00:00+00:00
short_description:
A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges.


cve_id: CVE-2018-4344
vendor_project: Apple
product: Multiple Products
vulnerability_name: Apple Multiple Products Memory Corruption Vulnerability
date_added: 2022-06-27 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-07-18 00:00:00+00:00
short_description:
Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.


cve_id: CVE-2022-26925
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows LSA Spoofing Vulnerability
date_added: 2022-07-01 00:00:00+00:00
due_date: 2022-07-22 00:00:00+00:00
short_description:
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.

required_action:
Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].


cve_id: CVE-2022-22047
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability
date_added: 2022-07-12 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-02 00:00:00+00:00
short_description:
Microsoft Windows CSRSS contains an unspecified vulnerability which allows for privilege escalation to SYSTEM privileges.


cve_id: CVE-2022-26138
vendor_project: Atlassian
product: Confluence
vulnerability_name: Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
date_added: 2022-07-29 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-19 00:00:00+00:00
short_description:
Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into Confluence and access all content accessible to users in the confluence-users group.


cve_id: CVE-2022-27924
vendor_project: Zimbra
product: Collaboration (ZCS)
vulnerability_name: Zimbra Collaboration (ZCS) Command Injection Vulnerability
date_added: 2022-08-04 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-25 00:00:00+00:00
short_description:
Zimbra Collaboration (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries.


cve_id: CVE-2022-34713
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
date_added: 2022-08-09 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-30 00:00:00+00:00
short_description:
A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.


cve_id: CVE-2022-30333
vendor_project: RARLAB
product: UnRAR
vulnerability_name: RARLAB UnRAR Directory Traversal Vulnerability
date_added: 2022-08-09 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-08-30 00:00:00+00:00
short_description:
RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.


cve_id: CVE-2022-27925
vendor_project: Zimbra
product: Collaboration (ZCS)
vulnerability_name: Zimbra Collaboration (ZCS) Arbitrary File Upload Vulnerability
date_added: 2022-08-11 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-01 00:00:00+00:00
short_description:
Zimbra Collaboration (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.


cve_id: CVE-2022-37042
vendor_project: Zimbra
product: Collaboration (ZCS)
vulnerability_name: Zimbra Collaboration (ZCS) Authentication Bypass Vulnerability
date_added: 2022-08-11 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-01 00:00:00+00:00
short_description:
Zimbra Collaboration (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was chained with CVE-2022-27925 which allows for unauthenticated remote code execution.


cve_id: CVE-2022-22536
vendor_project: SAP
product: Multiple Products
vulnerability_name: SAP Multiple Products HTTP Request Smuggling Vulnerability
date_added: 2022-08-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-08 00:00:00+00:00
short_description:
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches.


cve_id: CVE-2022-32894
vendor_project: Apple
product: iOS and macOS
vulnerability_name: Apple iOS and macOS Out-of-Bounds Write Vulnerability
date_added: 2022-08-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-08 00:00:00+00:00
short_description:
Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges.


cve_id: CVE-2022-32893
vendor_project: Apple
product: iOS and macOS
vulnerability_name: Apple iOS and macOS Out-of-Bounds Write Vulnerability
date_added: 2022-08-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-08 00:00:00+00:00
short_description:
Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.


cve_id: CVE-2022-2856
vendor_project: Google
product: Chrome
vulnerability_name: Google Chrome Intents Insufficient Input Validation Vulnerability
date_added: 2022-08-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-08 00:00:00+00:00
short_description:
Google Chrome Intents allows for insufficient validation of untrusted input, causing unknown impacts. CISA will update this description if more information becomes available.


cve_id: CVE-2022-26923
vendor_project: Microsoft
product: Active Directory
vulnerability_name: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
date_added: 2022-08-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-08 00:00:00+00:00
short_description:
An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.


cve_id: CVE-2022-21971
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Runtime Remote Code Execution Vulnerability
date_added: 2022-08-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-08 00:00:00+00:00
short_description:
Microsoft Windows Runtime contains an unspecified vulnerability which allows for remote code execution.


cve_id: CVE-2017-15944
vendor_project: Palo Alto Networks
product: PAN-OS
vulnerability_name: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
date_added: 2022-08-18 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-08 00:00:00+00:00
short_description:
Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which can allow for remote code execution when chained.


cve_id: CVE-2022-0028
vendor_project: Palo Alto Networks
product: PAN-OS
vulnerability_name: Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
date_added: 2022-08-22 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-12 00:00:00+00:00
short_description:
A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks.


cve_id: CVE-2022-26352
vendor_project: dotCMS
product: dotCMS
vulnerability_name: dotCMS Unrestricted Upload of File Vulnerability
date_added: 2022-08-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-15 00:00:00+00:00
short_description:
dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage location. Exploitation allows for remote code execution.


cve_id: CVE-2022-24706
vendor_project: Apache
product: CouchDB
vulnerability_name: Apache CouchDB Insecure Default Initialization of Resource Vulnerability
date_added: 2022-08-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-15 00:00:00+00:00
short_description:
Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges.


cve_id: CVE-2022-24112
vendor_project: Apache
product: APISIX
vulnerability_name: Apache APISIX Authentication Bypass Vulnerability
date_added: 2022-08-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-15 00:00:00+00:00
short_description:
Apache APISIX contains an authentication bypass vulnerability that allows for remote code execution.


cve_id: CVE-2022-22963
vendor_project: VMware Tanzu
product: Spring Cloud
vulnerability_name: VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
date_added: 2022-08-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-15 00:00:00+00:00
short_description:
When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.


cve_id: CVE-2022-2294
vendor_project: WebRTC
product: WebRTC
vulnerability_name: WebRTC Heap Buffer Overflow Vulnerability
date_added: 2022-08-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-15 00:00:00+00:00
short_description:
WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability which allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.


cve_id: CVE-2021-39226
vendor_project: Grafana Labs
product: Grafana
vulnerability_name: Grafana Authentication Bypass Vulnerability
date_added: 2022-08-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-15 00:00:00+00:00
short_description:
Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss.


cve_id: CVE-2021-38406
vendor_project: Delta Electronics
product: DOPSoft 2
vulnerability_name: Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability
date_added: 2022-08-25 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-09-15 00:00:00+00:00
short_description:
Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files (improper input validation) resulting in an out-of-bounds write that allows for code execution.


cve_id: CVE-2021-31010
vendor_project: Apple
product: iOS, macOS, watchOS
vulnerability_name: Apple iOS, macOS, watchOS Sanbox Bypass Vulnerability
date_added: 2022-08-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-15 00:00:00+00:00
short_description:
In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions.


cve_id: CVE-2020-36193
vendor_project: PEAR
product: Archive_Tar
vulnerability_name: PEAR Archive_Tar Improper Link Resolution Vulnerability
date_added: 2022-08-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-15 00:00:00+00:00
short_description:
PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.


cve_id: CVE-2020-28949
vendor_project: PEAR
product: Archive_Tar
vulnerability_name: PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
date_added: 2022-08-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-15 00:00:00+00:00
short_description:
PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.


cve_id: CVE-2022-3075
vendor_project: Google
product: Chromium
vulnerability_name: Google Chromium Insufficient Data Validation Vulnerability
date_added: 2022-09-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-29 00:00:00+00:00
short_description:
Google Chromium Mojo contains an insufficient data validation vulnerability. Impacts from exploitation are not yet known. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.


cve_id: CVE-2022-28958
vendor_project: D-Link
product: DIR-816L
vulnerability_name: D-Link DIR-816L Remote Code Execution Vulnerability
date_added: 2022-09-08 00:00:00+00:00
due_date: 2022-09-29 00:00:00+00:00
short_description:
D-Link DIR-816L contains an unspecified vulnerability in the shareport.php value parameter which allows for remote code execution.

required_action:
This CVE is currently in disputed status. During the review process, agencies should update per vendor instructions.


cve_id: CVE-2022-27593
vendor_project: QNAP
product: Photo Station
vulnerability_name: QNAP Photo Station Externally Controlled Reference Vulnerability
date_added: 2022-09-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-29 00:00:00+00:00
short_description:
Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign.


cve_id: CVE-2022-26258
vendor_project: D-Link
product: DIR-820L
vulnerability_name: D-Link DIR-820L Remote Code Execution Vulnerability
date_added: 2022-09-08 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-09-29 00:00:00+00:00
short_description:
D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.


cve_id: CVE-2020-9934
vendor_project: Apple
product: iOS, iPadOS, and macOS
vulnerability_name: Apple iOS, iPadOS, and macOS Input Validation Vulnerability
date_added: 2022-09-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-29 00:00:00+00:00
short_description:
Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information.


cve_id: CVE-2018-7445
vendor_project: MikroTik
product: RouterOS
vulnerability_name: MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
date_added: 2022-09-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-29 00:00:00+00:00
short_description:
In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.


cve_id: CVE-2018-6530
vendor_project: D-Link
product: Multiple Routers
vulnerability_name: D-Link Multiple Routers OS Command Injection Vulnerability
date_added: 2022-09-08 00:00:00+00:00
due_date: 2022-09-29 00:00:00+00:00
short_description:
Multiple D-Link routers contain an unspecified vulnerability which allows for execution of OS commands.

required_action:
The vendor D-Link published an advisory stating the fix under CVE-2018-20114 properly patches KEV entry CVE-2018-6530. If the device is still supported, apply updates per vendor instructions. If the affected device has since entered its end-of-life, it should be disconnected if still in use.


cve_id: CVE-2018-2628
vendor_project: Oracle
product: WebLogic Server
vulnerability_name: Oracle WebLogic Server Unspecified Vulnerability
date_added: 2022-09-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-29 00:00:00+00:00
short_description:
Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.


cve_id: CVE-2018-13374
vendor_project: Fortinet
product: FortiOS and FortiADC
vulnerability_name: Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
date_added: 2022-09-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-29 00:00:00+00:00
short_description:
Fortinet FortiOS and FortiADC contain an improper access control vulnerability which allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server.


cve_id: CVE-2017-5521
vendor_project: NETGEAR
product: Multiple Devices
vulnerability_name: NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
date_added: 2022-09-08 00:00:00+00:00
due_date: 2022-09-29 00:00:00+00:00
short_description:
Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.

required_action:
Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.


cve_id: CVE-2011-4723
vendor_project: D-Link
product: DIR-300 Router
vulnerability_name: D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
date_added: 2022-09-08 00:00:00+00:00
required_action: The impacted product is end-of-life and should be disconnected if still in use.
due_date: 2022-09-29 00:00:00+00:00
short_description:
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information.


cve_id: CVE-2011-1823
vendor_project: Android
product: Android OS
vulnerability_name: Android OS Privilege Escalation Vulnerability
date_added: 2022-09-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-09-29 00:00:00+00:00
short_description:
The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor.


cve_id: CVE-2022-37969
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
date_added: 2022-09-14 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-10-05 00:00:00+00:00
short_description:
Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability which allows for privilege escalation.


cve_id: CVE-2022-32917
vendor_project: Apple
product: iOS, iPadOS, and macOS
vulnerability_name: Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability
date_added: 2022-09-14 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-10-05 00:00:00+00:00
short_description:
Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges.


cve_id: CVE-2022-40139
vendor_project: Trend Micro
product: Apex One and Apex One as a Service
vulnerability_name: Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
date_added: 2022-09-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-10-06 00:00:00+00:00
short_description:
Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.


cve_id: CVE-2013-6282
vendor_project: Linux
product: Kernel
vulnerability_name: Linux Kernel Improper Input Validation Vulnerability
date_added: 2022-09-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-10-06 00:00:00+00:00
short_description:
The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.


cve_id: CVE-2013-2597
vendor_project: Code Aurora
product: ACDB Audio Driver
vulnerability_name: Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability
date_added: 2022-09-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-10-06 00:00:00+00:00
short_description:
The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability which allows for privilege escalation. Code Aurora is used in third-party products such as Qualcomm and Android.


cve_id: CVE-2013-2596
vendor_project: Linux
product: Kernel
vulnerability_name: Linux Kernel Integer Overflow Vulnerability
date_added: 2022-09-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-10-06 00:00:00+00:00
short_description:
Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability which allows for privilege escalation.


cve_id: CVE-2013-2094
vendor_project: Linux
product: Kernel
vulnerability_name: Linux Kernel Privilege Escalation Vulnerability
date_added: 2022-09-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-10-06 00:00:00+00:00
short_description:
Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation.


cve_id: CVE-2010-2568
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Remote Code Execution Vulnerability
date_added: 2022-09-15 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-10-06 00:00:00+00:00
short_description:
Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user.


cve_id: CVE-2022-35405
vendor_project: Zoho
product: ManageEngine
vulnerability_name: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
date_added: 2022-09-22 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-10-13 00:00:00+00:00
short_description:
Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability which allows for remote code execution.


cve_id: CVE-2022-3236
vendor_project: Sophos
product: Firewall
vulnerability_name: Sophos Firewall Code Injection Vulnerability
date_added: 2022-09-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-10-14 00:00:00+00:00
short_description:
A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.


cve_id: CVE-2022-41082
vendor_project: Microsoft
product: Exchange Server
vulnerability_name: Microsoft Exchange Server Remote Code Execution Vulnerability
date_added: 2022-09-30 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-10-21 00:00:00+00:00
short_description:
Microsoft Exchange Server contains an unspecified vulnerability which allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.


cve_id: CVE-2022-41040
vendor_project: Microsoft
product: Exchange Server
vulnerability_name: Microsoft Exchange Server Server-Side Request Forgery Vulnerability
date_added: 2022-09-30 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-10-21 00:00:00+00:00
short_description:
Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.


cve_id: CVE-2022-36804
vendor_project: Atlassian
product: Bitbucket Server and Data Center
vulnerability_name: Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
date_added: 2022-09-30 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-10-21 00:00:00+00:00
short_description:
Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access to a public Bitbucket repository, or with read permissions to a private one, can execute code by sending a malicious HTTP request.


cve_id: CVE-2022-40684
vendor_project: Fortinet
product: Multiple Products
vulnerability_name: Fortinet Multiple Products Authentication Bypass Vulnerability
date_added: 2022-10-11 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-01 00:00:00+00:00
short_description:
Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.


cve_id: CVE-2022-41033
vendor_project: Microsoft
product: Windows COM+ Event System Service
vulnerability_name: Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability
date_added: 2022-10-11 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-01 00:00:00+00:00
short_description:
Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation.


cve_id: CVE-2022-41352
vendor_project: Zimbra
product: Collaboration (ZCS)
vulnerability_name: Zimbra Collaboration (ZCS) Arbitrary File Upload Vulnerability
date_added: 2022-10-20 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-10 00:00:00+00:00
short_description:
Zimbra Collaboration (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.


cve_id: CVE-2021-3493
vendor_project: Linux
product: Kernel
vulnerability_name: Linux Kernel Privilege Escalation Vulnerability
date_added: 2022-10-20 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-10 00:00:00+00:00
short_description:
The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.


cve_id: CVE-2020-3433
vendor_project: Cisco
product: AnyConnect Secure
vulnerability_name: Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
date_added: 2022-10-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-14 00:00:00+00:00
short_description:
Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges.


cve_id: CVE-2020-3153
vendor_project: Cisco
product: AnyConnect Secure
vulnerability_name: Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
date_added: 2022-10-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-14 00:00:00+00:00
short_description:
Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.


cve_id: CVE-2018-19323
vendor_project: GIGABYTE
product: Multiple Products
vulnerability_name: GIGABYTE Multiple Products Privilege Escalation Vulnerability
date_added: 2022-10-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-14 00:00:00+00:00
short_description:
The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.


cve_id: CVE-2018-19322
vendor_project: GIGABYTE
product: Multiple Products
vulnerability_name: GIGABYTE Multiple Products Code Execution Vulnerability
date_added: 2022-10-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-14 00:00:00+00:00
short_description:
The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.


cve_id: CVE-2018-19321
vendor_project: GIGABYTE
product: Multiple Products
vulnerability_name: GIGABYTE Multiple Products Privilege Escalation Vulnerability
date_added: 2022-10-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-14 00:00:00+00:00
short_description:
The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.


cve_id: CVE-2018-19320
vendor_project: GIGABYTE
product: Multiple Products
vulnerability_name: GIGABYTE Multiple Products Unspecified Vulnerability
date_added: 2022-10-24 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-14 00:00:00+00:00
short_description:
The GDrv low-level driver in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.


cve_id: CVE-2022-42827
vendor_project: Apple
product: iOS and iPadOS
vulnerability_name: Apple iOS and iPadOS Out-of-Bounds Write Vulnerability
date_added: 2022-10-25 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-15 00:00:00+00:00
short_description:
Apple iOS and iPadOS kernel contain an out-of-bounds write vulnerability which can allow an application to perform code execution with kernel privileges.


cve_id: CVE-2022-3723
vendor_project: Google
product: Chromium V8 Engine
vulnerability_name: Google Chromium V8 Type Confusion Vulnerability
date_added: 2022-10-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-18 00:00:00+00:00
short_description:
Google Chromium V8 contains a type confusion vulnerability. Specific impacts from exploitation are not available at this time.


cve_id: CVE-2022-41091
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
date_added: 2022-11-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-12-09 00:00:00+00:00
short_description:
Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.


cve_id: CVE-2022-41073
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Print Spooler Privilege Escalation Vulnerability
date_added: 2022-11-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-12-09 00:00:00+00:00
short_description:
Microsoft Windows Print Spooler contains an unspecified vulnerability which allows an attacker to gain SYSTEM-level privileges.


cve_id: CVE-2022-41125
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
date_added: 2022-11-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-12-09 00:00:00+00:00
short_description:
Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability which allows an attacker to gain SYSTEM-level privileges.


cve_id: CVE-2022-41128
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Scripting Languages Remote Code Execution Vulnerability
date_added: 2022-11-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-12-09 00:00:00+00:00
short_description:
Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which allows for remote code execution.


cve_id: CVE-2021-25337
vendor_project: Samsung
product: Mobile Devices
vulnerability_name: Samsung Mobile Devices Improper Access Control Vulnerability
date_added: 2022-11-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-29 00:00:00+00:00
short_description:
Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.


cve_id: CVE-2021-25369
vendor_project: Samsung
product: Mobile Devices
vulnerability_name: Samsung Mobile Devices Improper Access Control Vulnerability
date_added: 2022-11-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-29 00:00:00+00:00
short_description:
Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25370.


cve_id: CVE-2021-25370
vendor_project: Samsung
product: Mobile Devices
vulnerability_name: Samsung Mobile Devices Memory Corruption Vulnerability
date_added: 2022-11-08 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-11-29 00:00:00+00:00
short_description:
Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.


cve_id: CVE-2021-35587
vendor_project: Oracle
product: Fusion Middleware
vulnerability_name: Oracle Fusion Middleware Unspecified Vulnerability
date_added: 2022-11-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-12-19 00:00:00+00:00
short_description:
Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager product.


cve_id: CVE-2022-4135
vendor_project: Google
product: Chromium
vulnerability_name: Google Chromium Heap Buffer Overflow Vulnerability
date_added: 2022-11-28 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2022-12-19 00:00:00+00:00
short_description:
Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.


cve_id: CVE-2022-42475
vendor_project: Fortinet
product: FortiOS
vulnerability_name: Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
date_added: 2022-12-13 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-01-03 00:00:00+00:00
short_description:
Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.


cve_id: CVE-2022-44698
vendor_project: Microsoft
product: Defender
vulnerability_name: Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
date_added: 2022-12-13 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-01-03 00:00:00+00:00
short_description:
Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.


cve_id: CVE-2022-27518
vendor_project: Citrix
product: Application Delivery Controller (ADC) and Gateway
vulnerability_name: Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
date_added: 2022-12-13 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-01-03 00:00:00+00:00
short_description:
Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability which allows an attacker to execute code as administrator.


cve_id: CVE-2022-26500
vendor_project: Veeam
product: Backup & Replication
vulnerability_name: Veeam Backup & Replication Remote Code Execution Vulnerability
date_added: 2022-12-13 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-01-03 00:00:00+00:00
short_description:
The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.


cve_id: CVE-2022-42856
vendor_project: Apple
product: iOS
vulnerability_name: Apple iOS Type Confusion Vulnerability
date_added: 2022-12-14 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-01-04 00:00:00+00:00
short_description:
Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution.


cve_id: CVE-2018-5430
vendor_project: TIBCO
product: JasperReports
vulnerability_name: TIBCO JasperReports Server Information Disclosure Vulnerability
date_added: 2022-12-29 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-01-19 00:00:00+00:00
short_description:
TIBCO JasperReports Server contain a vulnerability which may allow any authenticated user read-only access to the contents of the web application, including key configuration files.


cve_id: CVE-2018-18809
vendor_project: TIBCO
product: JasperReports
vulnerability_name: TIBCO JasperReports Library Directory Traversal Vulnerability
date_added: 2022-12-29 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-01-19 00:00:00+00:00
short_description:
TIBCO JasperReports Library contains a directory-traversal vulnerability that may allow web server users to access contents of the host system.


cve_id: CVE-2022-41080
vendor_project: Microsoft
product: Exchange Server
vulnerability_name: Microsoft Exchange Server Privilege Escalation Vulnerability
date_added: 2023-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-01-31 00:00:00+00:00
short_description:
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.


cve_id: CVE-2023-21674
vendor_project: Microsoft
product: Windows
vulnerability_name: Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
date_added: 2023-01-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-01-31 00:00:00+00:00
short_description:
Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.


cve_id: CVE-2022-44877
vendor_project: CWP
product: Control Web Panel
vulnerability_name: CWP Control Web Panel OS Command Injection Vulnerability
date_added: 2023-01-17 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-02-07 00:00:00+00:00
short_description:
CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter.


cve_id: CVE-2022-47966
vendor_project: Zoho
product: ManageEngine
vulnerability_name: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
date_added: 2023-01-23 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-02-13 00:00:00+00:00
short_description:
Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.


cve_id: CVE-2017-11357
vendor_project: Telerik
product: User Interface (UI) for ASP.NET AJAX
vulnerability_name: Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
date_added: 2023-01-26 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-02-16 00:00:00+00:00
short_description:
Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.


cve_id: CVE-2022-21587
vendor_project: Oracle
product: E-Business Suite
vulnerability_name: Oracle E-Business Suite Unspecified Vulnerability
date_added: 2023-02-02 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-02-23 00:00:00+00:00
short_description:
Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.


cve_id: CVE-2023-22952
vendor_project: SugarCRM
product: Multiple Products
vulnerability_name: Multiple SugarCRM Products Remote Code Execution Vulnerability
date_added: 2023-02-02 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-02-23 00:00:00+00:00
short_description:
Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates.


cve_id: CVE-2015-2291
vendor_project: Intel
product: Ethernet Diagnostics Driver for Windows
vulnerability_name: Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
date_added: 2023-02-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-03-03 00:00:00+00:00
short_description:
Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service.


cve_id: CVE-2022-24990
vendor_project: TerraMaster
product: TerraMaster OS
vulnerability_name: TerraMaster OS Remote Command Execution Vulnerability
date_added: 2023-02-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-03-03 00:00:00+00:00
short_description:
TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target endpoint.


cve_id: CVE-2023-0669
vendor_project: Fortra
product: GoAnywhere MFT
vulnerability_name: Fortra GoAnywhere MFT Remote Code Execution Vulnerability
date_added: 2023-02-10 00:00:00+00:00
required_action: Apply updates per vendor instructions.
due_date: 2023-03-03 00:00:00+00:00
short_description:
Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.


