#CTF

AI 가속기·네오클라우드 보안 사각지대: GPU 워크로드 격리 점검 가이드

Januscape(CVE-2026-53359)를 통해 x86 KVM 중첩 가상화 환경의 실제 취약점과 네오클라우드 보안 사각지대를 구분해 설명한다. CVE의 공식 PR:L 및 AV:L 게스트-호스트 경계 조건만 기술하고, 근거 없는 LPE 주장은 삭제했다.

[CVE-2026-68820] Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

CISA

[CVE-2026-72898] Metabase SQL Injection Vulnerability

CISA

[CVE-2026-20349] Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

CISA

[CVE-2026-8037] Progress LoadMaster Command Injection Vulnerability

CISA

[CVE-2026-63077] JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2026-18556] N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2026-34486] Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

CISA

[CVE-2026-9198] IBM Langflow Code Injection Vulnerability

CISA

[CVE-2026-18577] N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

Information & Glory of Garden | PicoCTF | Forensics in CTF

Medium

맹목적인 검증 프로토콜 의존을 끊고 검증되지 않은 공급망과 비인간 신원을 엄격히 격리하는 제로 트러스트와 포스트퀀텀 암호화 도입을 지체 없이 실행하라

2026-07-31 보안 인사이트

맹목적인 검증 프로토콜 의존을 끊고 검증되지 않은 공급망과 비인간 신원을 엄격히 격리하는 제로 트러스트와 포스트퀀텀 암호화 도입을 지체 없이 실행하라

2026-07-31 보안 인사이트

SK쉴더스 EQST, 세계 최고 해킹대회 데프콘(DEC CON) CTF 본선 진출로 검증한 사이버보안 기술력

SK쉴더스

BYUCTF RSA Dreams Writeup 2026

Medium

Phantom 5: File Authority — Escalating from Group Membership to Root (A Linux Privilege Escalation CTF Walkthrough)

Medium

무력화된 경계 모델 대신 하드웨어 공급망 검증과 아키텍처 분리를 핵심으로 MLOps 거버넌스를 즉시 전면 재구축하라

2026-07-28 보안 인사이트

[CVE-2026-20316] Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

CISA

[CVE-2025-68686] Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

CISA

[CVE-2026-16812] Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

CISA

Eviction — TryHackMe SOC Level 1 CTF Walkthrough 2/12

Medium

세계 최고 해커들은 왜 라스베이거스로 모일까? DEF CON CTF 2026 해킹 대회

SK쉴더스

[CVE-2026-16232] Check Point SmartConsole Improper Authentication Vulnerability

CISA

[CVE-2026-50522] Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2026-60137] WordPress Core SQL Injection Vulnerability

CISA

[CVE-2026-63030] WordPress Core Interpretation Conflict Vulnerability

CISA

[CVE-2026-0770] Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

CISA

[CVE-2021-27137] DD-WRT Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2026-58644] Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2026-25089] Fortinet FortiSandbox OS Command Injection Vulnerability

CISA

[CVE-2026-39808] Fortinet FortiSandbox OS Command Injection Vulnerability

CISA

[CVE-2026-46817] Oracle E-Business Suite Improper Privilege Management Vulnerability

CISA

[CVE-2023-4346] KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

CISA

[CVE-2026-56155] Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

CISA

[CVE-2026-56164] Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2026-15409] SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

CISA

[CVE-2026-15410] SonicWall SMA1000 Appliances Code Injection Vulnerability

CISA

[CVE-2008-4128] Cisco IOS Cross-Site Request Forgery Vulnerability

CISA

[CVE-2026-56291] Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2026-48939] iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

CTF Write-Up: TechSolutions — IP Spoofing Challenge

Medium

[CVE-2026-48908] JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2026-55255] Langflow Authorization Bypass Through User-Controlled Key Vulnerability

CISA

[CVE-2026-56290] Joomlack Page Builder Improper Access Control Vulnerability

CISA

[CVE-2026-48282] Adobe ColdFusion Path Traversal Vulnerability

CISA

Hidden in Plainsight | PicoCTF Forensics

Medium

CTF Write-Up: Legacy of Ezio

Medium

My Day 3 ENIGMA CTF Bootcamp 2026 | Multi-Stage Web & OSINT Challenge

Medium

ENIGMA CTF BOOTCAMP DAY 2-Web TASK

Medium

From CTF to Contested Network: A Threat Hunter’s Field Notes #1

Medium

[CVE-2026-45659] Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

CISA

# A 4-Line HTML File Stole the Admin’s Secret — Intigriti LeakyJar CTF Writeup

Medium

[CVE-2026-48558] SimpleHelp Authentication Bypass Vulnerability

CISA

Netanix CTF Writeup: Orpheus (Web Exploitation)

Medium

[CVE-2026-12569] PTC Windchill and FlexPLM Improper Input Validation Vulnerability

CISA

[CVE-2026-20230] Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2025-67038] Lantronix EDS5000 Code Injection Vulnerability

CISA

[CVE-2026-34910] Ubiquiti UniFi OS Improper Input Validation Vulnerability

CISA

[CVE-2026-34909] Ubiquiti UniFi OS Path Traversal Vulnerability

CISA

[CVE-2026-34908] Ubiquiti UniFi OS Improper Access Control Vulnerability

CISA

CTF Writeup — hashcrack | PicoCTF Cryptography

Medium

[CVE-2026-20253] Splunk Enterprise Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2026-48907] Widget Factory Joomla Content Editor Improper Access Control Vulnerability

CISA

[CVE-2026-54420] LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

CISA

[CVE-2026-20262] Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

CISA

Corrupted File — picoCTF Forensics Writeupby Shreya Tiwari

Medium

[CVE-2026-35273] Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2026-10520] Ivanti Sentry OS Command Injection Vulnerability

CISA

[CVE-2026-11645] Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

CISA

[CVE-2026-7473] Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability

CISA

[CVE-2026-20245] Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

CISA

[CVE-2026-42271] BerriAI LiteLLM Command Injection Vulnerability

CISA

[CVE-2026-50751] Check Point Security Gateway Improper Authentication Vulnerability

CISA

[CVE-2026-28318] SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

CISA

[CVE-2010-0249] Microsoft Internet Explorer Use-After-Free Vulnerability

CISA

[CVE-2026-45247] Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2022-0492] Linux Kernel Improper Authentication Vulnerability

CISA

[CVE-2025-48595] Android Framework Integer Overflow Vulnerability

CISA

[CVE-2024-21182] Oracle WebLogic Server Unspecified Vulnerability

CISA

[CVE-2026-0257] Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

CISA

확장되는 공격 표면과 양자 위협, 보안 패러다임 전환과 선제적 규제 대응만이 기업 생존을 보장한다

2026-05-26 보안 인사이트

[CVE-2026-48027] Nx Console Embedded Malicious Code Vulnerability

CISA

[CVE-2026-45321] TanStack Unspecified Vulnerability

CISA

[CVE-2026-8398] Daemon Tools Lite Embedded Malicious Code Vulnerability

CISA

[CVE-2026-48172] LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

CISA

[CVE-2026-9082] Drupal Core SQL Injection Vulnerability

CISA

[CVE-2025-34291] Langflow Origin Validation Error Vulnerability

CISA

[CVE-2026-34926] Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

CISA

[CVE-2008-4250] Microsoft Windows Buffer Overflow Vulnerability

CISA

[CVE-2009-1537] Microsoft DirectX NULL Byte Overwrite Vulnerability

CISA

[CVE-2009-3459] Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2010-0806] Microsoft Internet Explorer Use-After-Free Vulnerability

CISA

[CVE-2026-41091] Microsoft Defender Link Following Vulnerability

CISA

[CVE-2026-45498] Microsoft Defender Denial of Service Vulnerability

CISA

붕괴된 경계 기반 방어를 제로 트러스트와 지속적 위협 관리로 혁신하고 비즈니스 연속성을 위한 통제권을 확보해야 합니다.

2026-05-14 보안 인사이트

[CVE-2026-42897] Microsoft Exchange Server Cross-Site Scripting Vulnerability

CISA

[CVE-2026-20182] Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

CISA

AI 에이전트가 사이버 공격 도구로 진화하는 방식과 방어 전략

AI 에이전트가 사이버 공격의 전 과정을 자동화하며 공격 속도가 시간 단위로 단축되고 있다. 이에 대응하기 위해 기업은 지속적 검증, 외부 위협 인텔리전스 통합, 자율형 SOC 구축, AI 기반 취약점 분석 …

[CVE-2026-42208] BerriAI LiteLLM SQL Injection Vulnerability

CISA

[CVE-2026-6973] Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

CISA

[CVE-2026-0300] Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

CISA

[CVE-2026-31431] Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

CISA

[CVE-2026-41940] WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2024-1708] ConnectWise ScreenConnect Path Traversal Vulnerability

CISA

[CVE-2026-32202] Microsoft Windows Protection Mechanism Failure Vulnerability

CISA

[CVE-2025-29635] D-Link DIR-823X Command Injection Vulnerability

CISA

[CVE-2024-7399] Samsung MagicINFO 9 Server Path Traversal Vulnerability

CISA

[CVE-2024-57728] SimpleHelp Path Traversal Vulnerability

CISA

[CVE-2024-57726] SimpleHelp Missing Authorization Vulnerability

CISA

[CVE-2026-39987] Marimo Remote Code Execution Vulnerability

CISA

[CVE-2026-33825] Microsoft Defender Insufficient Granularity of Access Control Vulnerability

CISA

[CVE-2026-20122] Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

CISA

[CVE-2026-20133] Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

CISA

[CVE-2025-2749] Kentico Xperience Path Traversal Vulnerability

CISA

[CVE-2023-27351] PaperCut NG/MF Improper Authentication Vulnerability

CISA

[CVE-2025-48700] Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

CISA

[CVE-2026-20128] Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

CISA

[CVE-2025-32975] Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

CISA

[CVE-2024-27199] JetBrains TeamCity Relative Path Traversal Vulnerability

CISA

[CVE-2026-34197] Apache ActiveMQ Improper Input Validation Vulnerability

CISA

[CVE-2009-0238] Microsoft Office Remote Code Execution

CISA

[CVE-2026-32201] Microsoft SharePoint Server Improper Input Validation Vulnerability

CISA

[CVE-2012-1854] Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

CISA

[CVE-2025-60710] Microsoft Windows Link Following Vulnerability

CISA

[CVE-2023-21529] Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-36424] Microsoft Windows Out-of-Bounds Read Vulnerability

CISA

[CVE-2020-9715] Adobe Acrobat Use-After-Free Vulnerability

CISA

[CVE-2026-21643] Fortinet SQL Injection Vulnerability

CISA

[CVE-2026-34621] Adobe Acrobat and Reader Prototype Pollution Vulnerability

CISA

[CVE-2026-1340] Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

CISA

[CVE-2026-35616] Fortinet FortiClient EMS Improper Access Control Vulnerability

CISA

[CVE-2026-3502] TrueConf Client Download of Code Without Integrity Check Vulnerability

CISA

[CVE-2026-5281] Google Dawn Use-After-Free Vulnerability

CISA

[CVE-2026-3055] Citrix NetScaler Out-of-Bounds Read Vulnerability

CISA

파편화된 방어의 한계를 넘어, 기술 주권과 AI 기반 풀스택 보안이 기업의 새로운 생존 전략이다.

2026-03-27 보안 인사이트

[CVE-2025-53521] F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2026-33634] Aquasecurity Trivy Embedded Malicious Code Vulnerability

CISA

소버린 AI와 제로 트러스트 거버넌스, 기술 주권 전쟁 속 기업 생존과 글로벌 주도권을 위한 필수 전략이다

2026-03-24 보안 인사이트

[CVE-2026-33017] Langflow Code Injection Vulnerability

CISA

[CVE-2025-32432] Craft CMS Code Injection Vulnerability

CISA

[CVE-2025-54068] Laravel Livewire Code Injection Vulnerability

CISA

[CVE-2025-43510] Apple Multiple Products Improper Locking Vulnerability

CISA

[CVE-2025-43520] Apple Multiple Products Classic Buffer Overflow Vulnerability

CISA

[CVE-2025-31277] Apple Multiple Products Buffer Overflow Vulnerability

CISA

[CVE-2026-20131] Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-66376] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

CISA

[CVE-2026-20963] Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-47813] Wing FTP Server Information Disclosure Vulnerability

CISA

[CVE-2026-3910] Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

CISA

[CVE-2026-3909] Google Skia Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-68613] n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

CISA

[CVE-2021-22054] Omnissa Workspace ONE Server-Side Request Forgery

CISA

[CVE-2025-26399] SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2026-1603] Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

CISA

[CVE-2017-7921] Hikvision Multiple Products Improper Authentication Vulnerability

CISA

[CVE-2021-22681] Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

CISA

[CVE-2023-43000] Apple Multiple products Use-After-Free Vulnerability

CISA

[CVE-2021-30952] Apple Multiple Products Integer Overflow or Wraparound Vulnerability

CISA

[CVE-2023-41974] Apple iOS and iPadOS Use-After-Free Vulnerability

CISA

물리와 디지털 경계가 붕괴된 시대, 보안 주권을 핵심 경쟁력으로 삼는 AI 네이티브 전략과 예측적 방어 체계의 구축

2026-03-03 보안 인사이트

[CVE-2026-22719] Broadcom VMware Aria Operations Command Injection Vulnerability

CISA

[CVE-2026-21385] Qualcomm Multiple Chipsets Memory Corruption Vulnerability

CISA

[CVE-2022-20775] Cisco SD-WAN Path Traversal Vulnerability

CISA

[CVE-2026-20127] Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

CISA

[CVE-2026-25108] Soliton Systems K.K FileZen OS Command Injection Vulnerability

CISA

[CVE-2025-49113] RoundCube Webmail Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-68461] RoundCube Webmail Cross-site Scripting Vulnerability

CISA

[CVE-2021-22175] GitLab Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2026-22769] Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

CISA

[CVE-2020-7796] Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

CISA

[CVE-2024-7694] TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2008-0015] Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

CISA

[CVE-2026-2441] Google Chromium CSS Use-After-Free Vulnerability

CISA

[CVE-2026-1731] BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

CISA

[CVE-2026-20700] Apple Multiple Buffer Overflow Vulnerability

CISA

[CVE-2024-43468] Microsoft Configuration Manager SQL Injection Vulnerability

CISA

[CVE-2025-15556] Notepad++ Download of Code Without Integrity Check Vulnerability

CISA

[CVE-2025-40536] SolarWinds Web Help Desk Security Control Bypass Vulnerability

CISA

[CVE-2026-21513] Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

CISA

[CVE-2026-21525] Microsoft Windows NULL Pointer Dereference Vulnerability

CISA

[CVE-2026-21510] Microsoft Windows Shell Protection Mechanism Failure Vulnerability

CISA

[CVE-2026-21533] Microsoft Windows Improper Privilege Management Vulnerability

CISA

[CVE-2026-21519] Microsoft Windows Type Confusion Vulnerability

CISA

[CVE-2026-21514] Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

CISA

[CVE-2025-11953] React Native Community CLI OS Command Injection Vulnerability

CISA

[CVE-2026-24423] SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2021-39935] GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2025-64328] Sangoma FreePBX OS Command Injection Vulnerability

CISA

[CVE-2019-19006] Sangoma FreePBX Improper Authentication Vulnerability

CISA

[CVE-2025-40551] SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2026-1281] Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

CISA

[CVE-2026-24858] Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2018-14634] Linux Kernel Integer Overflow Vulnerability

CISA

[CVE-2025-52691] SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2026-23760] SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2026-24061] GNU InetUtils Argument Injection Vulnerability

CISA

[CVE-2026-21509] Microsoft Office Security Feature Bypass Vulnerability

CISA

[CVE-2024-37079] Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

CISA

[CVE-2025-68645] Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

CISA

[CVE-2025-34026] Versa Concerto Improper Authentication Vulnerability

CISA

[CVE-2025-31125] Vite Vitejs Improper Access Control Vulnerability

CISA

[CVE-2025-54313] Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

CISA

[CVE-2026-20045] Cisco Unified Communications Products Code Injection Vulnerability

CISA

[CVE-2026-20805] Microsoft Windows Information Disclosure Vulnerability

CISA

[CVE-2025-8110] Gogs Path Traversal Vulnerability

CISA

[CVE-2009-0556] Microsoft Office PowerPoint Code Injection Vulnerability

CISA

[CVE-2025-37164] Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

CISA

[CVE-2025-14847] MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

CISA

[CVE-2023-52163] Digiever DS-2105 Pro Missing Authorization Vulnerability

CISA

[CVE-2025-14733] WatchGuard Firebox Out of Bounds Write Vulnerability

CISA

[CVE-2025-59374] ASUS Live Update Embedded Malicious Code Vulnerability

CISA

[CVE-2025-40602] SonicWall SMA1000 Missing Authorization Vulnerability

CISA

[CVE-2025-20393] Cisco Multiple Products Improper Input Validation Vulnerability

CISA

[CVE-2025-59718] Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

CISA

[CVE-2025-14611] Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability

CISA

[CVE-2025-43529] Apple Multiple Products Use-After-Free WebKit Vulnerability

CISA

[CVE-2018-4063] Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2025-14174] Google Chromium Out of Bounds Memory Access Vulnerability

CISA

[CVE-2025-58360] OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

CISA

[CVE-2025-6218] RARLAB WinRAR Path Traversal Vulnerability

CISA

[CVE-2025-62221] Microsoft Windows Use After Free Vulnerability

CISA

[CVE-2022-37055] D-Link Routers Buffer Overflow Vulnerability

CISA

[CVE-2025-66644] Array Networks ArrayOS AG OS Command Injection Vulnerability

CISA

[CVE-2025-55182] Meta React Server Components Remote Code Execution Vulnerability

CISA

[CVE-2021-26828] OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2025-48633] Android Framework Information Disclosure Vulnerability

CISA

[CVE-2025-48572] Android Framework Privilege Escalation Vulnerability

CISA

[CVE-2021-26829] OpenPLC ScadaBR Cross-site Scripting Vulnerability

CISA

[CVE-2025-61757] Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2025-13223] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2025-58034] Fortinet FortiWeb OS Command Injection Vulnerability

CISA

[CVE-2025-64446] Fortinet FortiWeb Path Traversal Vulnerability

CISA

[CVE-2025-12480] Gladinet Triofox Improper Access Control Vulnerability

CISA

[CVE-2025-62215] Microsoft Windows Race Condition Vulnerability

CISA

[CVE-2025-9242] WatchGuard Firebox Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-21042] Samsung Mobile Devices Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-48703] CWP Control Web Panel OS Command Injection Vulnerability

CISA

[CVE-2025-11371] Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

CISA

[CVE-2025-41244] Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

CISA

[CVE-2025-24893] XWiki Platform Eval Injection Vulnerability

CISA

[CVE-2025-6204] Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

CISA

[CVE-2025-6205] Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability

CISA

[CVE-2025-54236] Adobe Commerce and Magento Improper Input Validation Vulnerability

CISA

[CVE-2025-59287] Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-61932] Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

CISA

[CVE-2022-48503] Apple Multiple Products Unspecified Vulnerability

CISA

[CVE-2025-2746] Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2025-2747] Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2025-33073] Microsoft Windows SMB Client Improper Access Control Vulnerability

CISA

[CVE-2025-61884] Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2025-54253] Adobe Experience Manager Forms Code Execution Vulnerability

CISA

[CVE-2025-47827] IGEL OS Use of a Key Past its Expiration Date Vulnerability

CISA

[CVE-2025-24990] Microsoft Windows Untrusted Pointer Dereference Vulnerability

CISA

[CVE-2025-59230] Microsoft Windows Improper Access Control Vulnerability

CISA

[CVE-2016-7836] SKYSEA Client View Improper Authentication Vulnerability

CISA

[CVE-2021-43798] Grafana Path Traversal Vulnerability

CISA

[CVE-2025-27915] Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

CISA

[CVE-2021-22555] Linux Kernel Heap Out-of-Bounds Write Vulnerability

CISA

[CVE-2010-3962] Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

CISA

[CVE-2021-43226] Microsoft Windows Privilege Escalation Vulnerability

CISA

[CVE-2013-3918] Microsoft Windows Out-of-Bounds Write Vulnerability

CISA

[CVE-2011-3402] Microsoft Windows Remote Code Execution Vulnerability

CISA

[CVE-2010-3765] Mozilla Multiple Products Remote Code Execution Vulnerability

CISA

[CVE-2025-61882] Oracle E-Business Suite Unspecified Vulnerability

CISA

[CVE-2014-6278] GNU Bash OS Command Injection Vulnerability

CISA

[CVE-2017-1000353] Jenkins Remote Code Execution Vulnerability

CISA

[CVE-2015-7755] Juniper ScreenOS Improper Authentication Vulnerability

CISA

[CVE-2025-21043] Samsung Mobile Devices Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-4008] Smartbedded Meteobridge Command Injection Vulnerability

CISA

[CVE-2025-32463] Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

CISA

[CVE-2025-59689] Libraesva Email Security Gateway Command Injection Vulnerability

CISA

[CVE-2025-10035] Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-20352] Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

CISA

[CVE-2021-21311] Adminer Server-Side Request Forgery Vulnerability

CISA

[CVE-2025-20362] Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

CISA

[CVE-2025-20333] Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

CISA

[CVE-2025-10585] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2025-5086] Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-38352] Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

CISA

[CVE-2025-48543] Android Runtime Use-After-Free Vulnerability

CISA

[CVE-2025-53690] Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-50224] TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

CISA

[CVE-2025-9377] TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability

CISA

[CVE-2020-24363] TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2025-55177] Meta Platforms WhatsApp Incorrect Authorization Vulnerability

CISA

[CVE-2025-57819] Sangoma FreePBX Authentication Bypass Vulnerability

CISA

[CVE-2025-7775] Citrix NetScaler Memory Overflow Vulnerability

CISA

[CVE-2025-48384] Git Link Following Vulnerability

CISA

[CVE-2024-8068] Citrix Session Recording Improper Privilege Management Vulnerability

CISA

[CVE-2024-8069] Citrix Session Recording Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-43300] Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-54948] Trend Micro Apex One OS Command Injection Vulnerability

CISA

[CVE-2025-8876] N-able N-Central Command Injection Vulnerability

CISA

[CVE-2025-8875] N-able N-Central Insecure Deserialization Vulnerability

CISA

[CVE-2025-8088] RARLAB WinRAR Path Traversal Vulnerability

CISA

[CVE-2007-0671] Microsoft Office Excel Remote Code Execution Vulnerability

CISA

[CVE-2013-3893] Microsoft Internet Explorer Resource Management Errors Vulnerability

CISA

[CVE-2020-25078] D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability

CISA

[CVE-2020-25079] D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

CISA

[CVE-2022-40799] D-Link DNR-322L Download of Code Without Integrity Check Vulnerability

CISA

[CVE-2023-2533] PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

CISA

[CVE-2025-20337] Cisco Identity Services Engine Injection Vulnerability

CISA

[CVE-2025-20281] Cisco Identity Services Engine Injection Vulnerability

CISA

[CVE-2025-2775] SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

CISA

[CVE-2025-2776] SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

CISA

[CVE-2025-6558] Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

CISA

[CVE-2025-54309] CrushFTP Unprotected Alternate Channel Vulnerability

CISA

[CVE-2025-49704] Microsoft SharePoint Code Injection Vulnerability

CISA

[CVE-2025-49706] Microsoft SharePoint Improper Authentication Vulnerability

CISA

[CVE-2025-53770] Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-25257] Fortinet FortiWeb SQL Injection Vulnerability

CISA

[CVE-2025-47812] Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

CISA

[CVE-2025-5777] Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

CISA

[CVE-2019-9621] Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2019-5418] Rails Ruby on Rails Path Traversal Vulnerability

CISA

[CVE-2016-10033] PHPMailer Command Injection Vulnerability

CISA

[CVE-2014-3931] Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability

CISA

[CVE-2025-6554] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2025-48928] TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

CISA

[CVE-2025-48927] TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

CISA

[CVE-2025-6543] Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

CISA

[CVE-2019-6693] Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

CISA

[CVE-2024-0769] D-Link DIR-859 Router Path Traversal Vulnerability

CISA

[CVE-2024-54085] AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

CISA

[CVE-2023-0386] Linux Kernel Improper Ownership Management Vulnerability

CISA

[CVE-2023-33538] TP-Link Multiple Routers Command Injection Vulnerability

CISA

[CVE-2025-43200] Apple Multiple Products Unspecified Vulnerability

CISA

[CVE-2025-33053] Microsoft Windows External Control of File Name or Path Vulnerability

CISA

[CVE-2025-24016] Wazuh Server Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2024-42009] RoundCube Webmail Cross-Site Scripting Vulnerability

CISA

[CVE-2025-32433] Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2025-5419] Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

CISA

[CVE-2025-21479] Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

CISA

[CVE-2025-21480] Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

CISA

[CVE-2025-27038] Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CISA

[CVE-2021-32030] ASUS Routers Improper Authentication Vulnerability

CISA

[CVE-2025-3935] ConnectWise ScreenConnect Improper Authentication Vulnerability

CISA

[CVE-2025-35939] Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability

CISA

[CVE-2024-56145] Craft CMS Code Injection Vulnerability

CISA

[CVE-2023-39780] ASUS RT-AX55 Routers OS Command Injection Vulnerability

CISA

[CVE-2025-4632] Samsung MagicINFO 9 Server Path Traversal Vulnerability

CISA

[CVE-2023-38950] ZKTeco BioTime Path Traversal Vulnerability

CISA

[CVE-2024-27443] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2025-27920] Srimax Output Messenger Directory Traversal Vulnerability

CISA

[CVE-2024-11182] MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2025-4428] Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

CISA

[CVE-2025-4427] Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

CISA

[CVE-2025-42999] SAP NetWeaver Deserialization Vulnerability

CISA

[CVE-2024-12987] DrayTek Vigor Routers OS Command Injection Vulnerability

CISA

[CVE-2025-32756] Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-32709] Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

CISA

[CVE-2025-30397] Microsoft Windows Scripting Engine Type Confusion Vulnerability

CISA

[CVE-2025-32706] Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-32701] Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

CISA

[CVE-2025-30400] Microsoft Windows DWM Core Library Use-After-Free Vulnerability

CISA

[CVE-2025-47729] TeleMessage TM SGNL Hidden Functionality Vulnerability

CISA

[CVE-2024-11120] GeoVision Devices OS Command Injection Vulnerability

CISA

[CVE-2024-6047] GeoVision Devices OS Command Injection Vulnerability

CISA

[CVE-2025-27363] FreeType Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-3248] Langflow Missing Authentication Vulnerability

CISA

[CVE-2025-34028] Commvault Command Center Path Traversal Vulnerability

CISA

[CVE-2024-58136] Yiiframework Yii Improper Protection of Alternate Path Vulnerability

CISA

[CVE-2024-38475] Apache HTTP Server Improper Escaping of Output Vulnerability

CISA

[CVE-2023-44221] SonicWall SMA100 Appliances OS Command Injection Vulnerability

CISA

[CVE-2025-31324] SAP NetWeaver Unrestricted File Upload Vulnerability

CISA

[CVE-2025-1976] Broadcom Brocade Fabric OS Code Injection Vulnerability

CISA

[CVE-2025-42599] Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-3928] Commvault Web Server Unspecified Vulnerability

CISA

[CVE-2025-24054] Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

CISA

[CVE-2025-31201] Apple Multiple Products Arbitrary Read and Write Vulnerability

CISA

[CVE-2025-31200] Apple Multiple Products Memory Corruption Vulnerability

CISA

[CVE-2021-20035] SonicWall SMA100 Appliances OS Command Injection Vulnerability

CISA

[CVE-2024-53150] Linux Kernel Out-of-Bounds Read Vulnerability

CISA

[CVE-2024-53197] Linux Kernel Out-of-Bounds Access Vulnerability

CISA

[CVE-2025-29824] Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

CISA

[CVE-2025-30406] Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability

CISA

[CVE-2025-31161] CrushFTP Authentication Bypass Vulnerability

CISA

[CVE-2025-22457] Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-24813] Apache Tomcat Path Equivalence Vulnerability

CISA

[CVE-2024-20439] Cisco Smart Licensing Utility Static Credential Vulnerability

CISA

[CVE-2025-2783] Google Chromium Mojo Sandbox Escape Vulnerability

CISA

[CVE-2019-9875] Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

CISA

[CVE-2019-9874] Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

CISA

[CVE-2025-30154] reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability

CISA

[CVE-2017-12637] SAP NetWeaver Directory Traversal Vulnerability

CISA

[CVE-2024-48248] NAKIVO Backup and Replication Absolute Path Traversal Vulnerability

CISA

[CVE-2025-1316] Edimax IC-7100 IP Camera OS Command Injection Vulnerability

CISA

[CVE-2025-30066] tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability

CISA

[CVE-2025-24472] Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

CISA

[CVE-2025-21590] Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

CISA

[CVE-2025-24201] Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-24993] Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-24991] Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

CISA

[CVE-2025-24985] Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

CISA

[CVE-2025-24984] Microsoft Windows NTFS Information Disclosure Vulnerability

CISA

[CVE-2025-24983] Microsoft Windows Win32k Use-After-Free Vulnerability

CISA

[CVE-2025-26633] Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

CISA

[CVE-2024-13161] Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CISA

[CVE-2024-13160] Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CISA

[CVE-2024-13159] Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CISA

[CVE-2024-57968] Advantive VeraCore Unrestricted File Upload Vulnerability

CISA

[CVE-2025-25181] Advantive VeraCore SQL Injection Vulnerability

CISA

[CVE-2025-22226] VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

CISA

[CVE-2025-22225] VMware ESXi Arbitrary Write Vulnerability

CISA

[CVE-2025-22224] VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

CISA

[CVE-2024-50302] Linux Kernel Use of Uninitialized Resource Vulnerability

CISA

[CVE-2024-4885] Progress WhatsUp Gold Path Traversal Vulnerability

CISA

[CVE-2018-8639] Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

CISA

[CVE-2022-43769] Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

CISA

[CVE-2022-43939] Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

CISA

[CVE-2023-20118] Cisco Small Business RV Series Routers Command Injection Vulnerability

CISA

[CVE-2023-34192] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-49035] Microsoft Partner Center Improper Access Control Vulnerability

CISA

[CVE-2024-20953] Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

CISA

[CVE-2017-3066] Adobe ColdFusion Deserialization Vulnerability

CISA

[CVE-2025-24989] Microsoft Power Pages Improper Access Control Vulnerability

CISA

[CVE-2025-0111] Palo Alto Networks PAN-OS File Read Vulnerability

CISA

[CVE-2025-23209] Craft CMS Code Injection Vulnerability

CISA

[CVE-2025-0108] Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

CISA

[CVE-2024-53704] SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

CISA

[CVE-2024-57727] SimpleHelp Path Traversal Vulnerability

CISA

[CVE-2025-24200] Apple iOS and iPadOS Incorrect Authorization Vulnerability

CISA

[CVE-2024-41710] Mitel SIP Phones Argument Injection Vulnerability

CISA

[CVE-2024-40891] Zyxel DSL CPE OS Command Injection Vulnerability

CISA

[CVE-2024-40890] Zyxel DSL CPE OS Command Injection Vulnerability

CISA

[CVE-2025-21418] Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-21391] Microsoft Windows Storage Link Following Vulnerability

CISA

[CVE-2025-0994] Trimble Cityworks Deserialization Vulnerability

CISA

[CVE-2020-15069] Sophos XG Firewall Buffer Overflow Vulnerability

CISA

[CVE-2020-29574] CyberoamOS (CROS) SQL Injection Vulnerability

CISA

[CVE-2024-21413] Microsoft Outlook Improper Input Validation Vulnerability

CISA

[CVE-2022-23748] Dante Discovery Process Control Vulnerability

CISA

[CVE-2025-0411] 7-Zip Mark of the Web Bypass Vulnerability

CISA

[CVE-2024-53104] Linux Kernel Out-of-Bounds Write Vulnerability

CISA

[CVE-2018-19410] Paessler PRTG Network Monitor Local File Inclusion Vulnerability

CISA

[CVE-2018-9276] Paessler PRTG Network Monitor OS Command Injection Vulnerability

CISA

[CVE-2024-29059] Microsoft .NET Framework Information Disclosure Vulnerability

CISA

[CVE-2024-45195] Apache OFBiz Forced Browsing Vulnerability

CISA

[CVE-2025-24085] Apple Multiple Products Use-After-Free Vulnerability

CISA

[CVE-2025-23006] SonicWall SMA1000 Appliances Deserialization Vulnerability

CISA

[CVE-2020-11023] JQuery Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-50603] Aviatrix Controllers OS Command Injection Vulnerability

CISA

[CVE-2025-21335] Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CISA

[CVE-2025-21334] Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CISA

[CVE-2025-21333] Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

CISA

[CVE-2024-55591] Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

CISA

[CVE-2023-48365] Qlik Sense HTTP Tunneling Vulnerability

CISA

[CVE-2024-12686] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CISA

[CVE-2025-0282] Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2020-2883] Oracle WebLogic Server Unspecified Vulnerability

CISA

[CVE-2024-55550] Mitel MiCollab Path Traversal Vulnerability

CISA

[CVE-2024-41713] Mitel MiCollab Path Traversal Vulnerability

CISA

[CVE-2024-3393] Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

CISA

[CVE-2021-44207] Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CISA

[CVE-2024-12356] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CISA

[CVE-2021-40407] Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CISA

[CVE-2019-11001] Reolink Multiple IP Cameras OS Command Injection Vulnerability

CISA

[CVE-2022-23227] NUUO NVRmini2 Devices Missing Authentication Vulnerability

CISA

[CVE-2018-14933] NUUO NVRmini Devices OS Command Injection Vulnerability

CISA

[CVE-2024-55956] Cleo Multiple Products Unauthenticated File Upload Vulnerability

CISA

[CVE-2024-35250] Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CISA

[CVE-2024-20767] Adobe ColdFusion Improper Access Control Vulnerability

CISA

[CVE-2024-50623] Cleo Multiple Products Unrestricted File Upload Vulnerability

CISA

[CVE-2024-49138] Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2024-51378] CyberPanel Incorrect Default Permissions Vulnerability

CISA

[CVE-2024-11667] Zyxel Multiple Firewalls Path Traversal Vulnerability

CISA

[CVE-2024-11680] ProjectSend Improper Authentication Vulnerability

CISA

[CVE-2023-45727] North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability

CISA

[CVE-2023-28461] Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2024-21287] Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

CISA

[CVE-2024-44309] Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-44308] Apple Multiple Products Code Execution Vulnerability

CISA

[CVE-2024-38813] VMware vCenter Server Privilege Escalation Vulnerability

CISA

[CVE-2024-38812] VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2024-9474] Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

CISA

[CVE-2024-0012] Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

CISA

[CVE-2024-1212] Progress Kemp LoadMaster OS Command Injection Vulnerability

CISA

[CVE-2024-9465] Palo Alto Networks Expedition SQL Injection Vulnerability

CISA

[CVE-2024-9463] Palo Alto Networks Expedition OS Command Injection Vulnerability

CISA

[CVE-2021-26086] Atlassian Jira Server and Data Center Path Traversal Vulnerability

CISA

[CVE-2014-2120] Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2021-41277] Metabase GeoJSON API Local File Inclusion Vulnerability

CISA

[CVE-2024-43451] Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

CISA

[CVE-2024-49039] Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

CISA

[CVE-2019-16278] Nostromo nhttpd Directory Traversal Vulnerability

CISA

[CVE-2024-51567] CyberPanel Incorrect Default Permissions Vulnerability

CISA

[CVE-2024-43093] Android Framework Privilege Escalation Vulnerability

CISA

[CVE-2024-5910] Palo Alto Networks Expedition Missing Authentication Vulnerability

CISA

[CVE-2024-8956] PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

CISA

[CVE-2024-8957] PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

CISA

[CVE-2024-37383] RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-20481] Cisco ASA and FTD Denial-of-Service Vulnerability

CISA

[CVE-2024-47575] Fortinet FortiManager Missing Authentication Vulnerability

CISA

[CVE-2024-38094] Microsoft SharePoint Deserialization Vulnerability

CISA

[CVE-2024-9537] ScienceLogic SL1 Unspecified Vulnerability

CISA

[CVE-2024-40711] Veeam Backup and Replication Deserialization Vulnerability

CISA

[CVE-2024-28987] SolarWinds Web Help Desk Hardcoded Credential Vulnerability

CISA

[CVE-2024-9680] Mozilla Firefox Use-After-Free Vulnerability

CISA

[CVE-2024-30088] Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

CISA

[CVE-2024-9380] Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

CISA

[CVE-2024-9379] Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

CISA

[CVE-2024-23113] Fortinet Multiple Products Format String Vulnerability

CISA

[CVE-2024-43573] Microsoft Windows MSHTML Platform Spoofing Vulnerability

CISA

[CVE-2024-43572] Microsoft Windows Management Console Remote Code Execution Vulnerability

CISA

[CVE-2024-43047] Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CISA

[CVE-2024-45519] Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

CISA

[CVE-2024-29824] Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

CISA

[CVE-2019-0344] SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2020-15415] DrayTek Multiple Vigor Routers OS Command Injection Vulnerability

CISA

[CVE-2023-25280] D-Link DIR-820 Router OS Command Injection Vulnerability

CISA

[CVE-2024-7593] Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

CISA

[CVE-2024-8963] Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

CISA

[CVE-2020-14644] Oracle WebLogic Server Remote Code Execution Vulnerability

CISA

[CVE-2022-21445] Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2020-0618] Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

CISA

[CVE-2024-27348] Apache HugeGraph-Server Improper Access Control Vulnerability

CISA

[CVE-2014-0502] Adobe Flash Player Double Free Vulnerablity

CISA

[CVE-2013-0648] Adobe Flash Player Code Execution Vulnerability

CISA

[CVE-2013-0643] Adobe Flash Player Incorrect Default Permissions Vulnerability

CISA

[CVE-2014-0497] Adobe Flash Player Integer Underflow Vulnerablity

CISA

[CVE-2024-6670] Progress WhatsUp Gold SQL Injection Vulnerability

CISA

[CVE-2024-43461] Microsoft Windows MSHTML Platform Spoofing Vulnerability

CISA

[CVE-2024-8190] Ivanti Cloud Services Appliance OS Command Injection Vulnerability

CISA

[CVE-2024-38217] Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

CISA

[CVE-2024-38014] Microsoft Windows Installer Improper Privilege Management Vulnerability

CISA

[CVE-2024-38226] Microsoft Publisher Protection Mechanism Failure Vulnerability

CISA

[CVE-2024-40766] SonicWall SonicOS Improper Access Control Vulnerability

CISA

[CVE-2017-1000253] Linux Kernel PIE Stack Buffer Corruption Vulnerability

CISA

[CVE-2016-3714] ImageMagick Improper Input Validation Vulnerability

CISA

[CVE-2024-7262] Kingsoft WPS Office Path Traversal Vulnerability

CISA

[CVE-2021-20124] Draytek VigorConnect Path Traversal Vulnerability

CISA

[CVE-2021-20123] Draytek VigorConnect Path Traversal Vulnerability

CISA

[CVE-2024-7965] Google Chromium V8 Inappropriate Implementation Vulnerability

CISA

[CVE-2024-38856] Apache OFBiz Incorrect Authorization Vulnerability

CISA

[CVE-2024-7971] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2024-39717] Versa Director Dangerous File Type Upload Vulnerability

CISA

[CVE-2021-31196] Microsoft Exchange Server Information Disclosure Vulnerability

CISA

[CVE-2022-0185] Linux Kernel Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2021-33045] Dahua IP Camera Authentication Bypass Vulnerability

CISA

[CVE-2021-33044] Dahua IP Camera Authentication Bypass Vulnerability

CISA

[CVE-2024-23897] Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

CISA

[CVE-2024-28986] SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2024-38107] Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

CISA

[CVE-2024-38106] Microsoft Windows Kernel Privilege Escalation Vulnerability

CISA

[CVE-2024-38193] Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

CISA

[CVE-2024-38213] Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2024-38178] Microsoft Windows Scripting Engine Memory Corruption Vulnerability

CISA

[CVE-2024-38189] Microsoft Project Remote Code Execution Vulnerability

CISA

[CVE-2024-32113] Apache OFBiz Path Traversal Vulnerability

CISA

[CVE-2024-36971] Android Kernel Remote Code Execution Vulnerability

CISA

[CVE-2018-0824] Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2024-37085] VMware ESXi Authentication Bypass Vulnerability

CISA

[CVE-2023-45249] Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability

CISA

[CVE-2024-5217] ServiceNow Incomplete List of Disallowed Inputs Vulnerability

CISA

[CVE-2024-4879] ServiceNow Improper Input Validation Vulnerability

CISA

[CVE-2024-39891] Twilio Authy Information Disclosure Vulnerability

CISA

[CVE-2012-4792] Microsoft Internet Explorer Use-After-Free Vulnerability

CISA

[CVE-2022-22948] VMware vCenter Server Incorrect Default File Permissions Vulnerability

CISA

[CVE-2024-28995] SolarWinds Serv-U Path Traversal Vulnerability

CISA

[CVE-2024-34102] Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability

CISA

[CVE-2024-36401] OSGeo GeoServer GeoTools Eval Injection Vulnerability

CISA

[CVE-2024-23692] Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

CISA

[CVE-2024-38080] Microsoft Windows Hyper-V Privilege Escalation Vulnerability

CISA

[CVE-2024-38112] Microsoft Windows MSHTML Platform Spoofing Vulnerability

CISA

[CVE-2024-20399] Cisco NX-OS Command Injection Vulnerability

CISA

[CVE-2020-13965] Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2022-2586] Linux Kernel Use-After-Free Vulnerability

CISA

[CVE-2022-24816] OSGeo GeoServer JAI-EXT Code Injection Vulnerability

CISA

[CVE-2024-4358] Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability

CISA

[CVE-2024-26169] Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

CISA

[CVE-2024-32896] Android Pixel Privilege Escalation Vulnerability

CISA

[CVE-2024-4577] PHP-CGI OS Command Injection Vulnerability

CISA

[CVE-2024-4610] Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CISA

[CVE-2017-3506] Oracle WebLogic Server OS Command Injection Vulnerability

CISA

[CVE-2024-1086] Linux Kernel Use-After-Free Vulnerability

CISA

[CVE-2024-24919] Check Point Quantum Security Gateways Information Disclosure Vulnerability

CISA

[CVE-2024-4978] Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability

CISA

[CVE-2024-5274] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2020-17519] Apache Flink Improper Access Control Vulnerability

CISA

[CVE-2024-4947] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2023-43208] NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2024-4761] Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

CISA

[CVE-2021-40655] D-Link DIR-605 Router Information Disclosure Vulnerability

CISA

[CVE-2014-100005] D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability

CISA

[CVE-2024-30040] Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

CISA

[CVE-2024-30051] Microsoft DWM Core Library Privilege Escalation Vulnerability

CISA

[CVE-2024-4671] Google Chromium Visuals Use-After-Free Vulnerability

CISA

[CVE-2023-7028] GitLab Community and Enterprise Editions Improper Access Control Vulnerability

CISA

[CVE-2024-29988] Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

CISA

[CVE-2024-4040] CrushFTP VFS Sandbox Escape Vulnerability

CISA

[CVE-2024-20359] Cisco ASA and FTD Privilege Escalation Vulnerability

CISA

[CVE-2024-20353] Cisco ASA and FTD Denial of Service Vulnerability

CISA

[CVE-2022-38028] Microsoft Windows Print Spooler Privilege Escalation Vulnerability

CISA

[CVE-2024-3400] Palo Alto Networks PAN-OS Command Injection Vulnerability

CISA

[CVE-2024-3273] D-Link Multiple NAS Devices Command Injection Vulnerability

CISA

[CVE-2024-3272] D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability

CISA

[CVE-2024-29748] Android Pixel Privilege Escalation Vulnerability

CISA

[CVE-2024-29745] Android Pixel Information Disclosure Vulnerability

CISA

[CVE-2023-24955] Microsoft SharePoint Server Code Injection Vulnerability

CISA

[CVE-2019-7256] Nice Linear eMerge E3-Series OS Command Injection Vulnerability

CISA

[CVE-2021-44529] Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

CISA

[CVE-2023-48788] Fortinet FortiClient EMS SQL Injection Vulnerability

CISA

[CVE-2024-27198] JetBrains TeamCity Authentication Bypass Vulnerability

CISA

[CVE-2024-23225] Apple Multiple Products Memory Corruption Vulnerability

CISA

[CVE-2024-23296] Apple Multiple Products Memory Corruption Vulnerability

CISA

[CVE-2023-21237] Android Pixel Information Disclosure Vulnerability

CISA

[CVE-2021-36380] Sunhillo SureLine OS Command Injection Vulnerablity

CISA

[CVE-2024-21338] Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

CISA

[CVE-2023-29360] Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

CISA

[CVE-2024-1709] ConnectWise ScreenConnect Authentication Bypass Vulnerability

CISA

[CVE-2020-3259] Cisco ASA and FTD Information Disclosure Vulnerability

CISA

[CVE-2024-21410] Microsoft Exchange Server Privilege Escalation Vulnerability

CISA

[CVE-2024-21412] Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

CISA

[CVE-2024-21351] Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2023-43770] Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-21762] Fortinet FortiOS Out-of-Bound Write Vulnerability

CISA

[CVE-2023-4762] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2022-48618] Apple Multiple Products Memory Corruption Vulnerability

CISA

[CVE-2024-21893] Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2023-22527] Atlassian Confluence Data Center and Server Template Injection Vulnerability

CISA

[CVE-2024-23222] Apple Multiple Products WebKit Type Confusion Vulnerability

CISA

[CVE-2023-34048] VMware vCenter Server Out-of-Bounds Write Vulnerability

CISA

[CVE-2023-35082] Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

CISA

[CVE-2024-0519] Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

CISA

[CVE-2023-6549] Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

CISA

[CVE-2023-6548] Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

CISA

[CVE-2018-15133] Laravel Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-29357] Microsoft SharePoint Server Privilege Escalation Vulnerability

CISA

[CVE-2023-46805] Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

CISA

[CVE-2024-21887] Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

CISA

[CVE-2023-23752] Joomla! Improper Access Control Vulnerability

CISA

[CVE-2016-20017] D-Link DSL-2750B Devices Command Injection Vulnerability

CISA

[CVE-2023-41990] Apple Multiple Products Code Execution Vulnerability

CISA

[CVE-2023-27524] Apache Superset Insecure Default Initialization of Resource Vulnerability

CISA

[CVE-2023-29300] Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-38203] Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-7101] Spreadsheet::ParseExcel Remote Code Execution Vulnerability

CISA

[CVE-2023-7024] Google Chromium WebRTC Heap Buffer Overflow Vulnerability

CISA

[CVE-2023-49897] FXC AE1021, AE1021PE OS Command Injection Vulnerability

CISA

[CVE-2023-47565] QNAP VioStor NVR OS Command Injection Vulnerability

CISA

[CVE-2023-6448] Unitronics Vision PLC and HMI Insecure Default Password Vulnerability

CISA

[CVE-2023-41266] Qlik Sense Path Traversal Vulnerability

CISA

[CVE-2023-41265] Qlik Sense HTTP Tunneling Vulnerability

CISA

[CVE-2023-33107] Qualcomm Multiple Chipsets Integer Overflow Vulnerability

CISA

[CVE-2023-33106] Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

CISA

[CVE-2023-33063] Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CISA

[CVE-2022-22071] Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CISA

[CVE-2023-42917] Apple Multiple Products WebKit Memory Corruption Vulnerability

CISA

[CVE-2023-42916] Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

CISA

[CVE-2023-6345] Google Skia Integer Overflow Vulnerability

CISA

[CVE-2023-49103] ownCloud graphapi Information Disclosure Vulnerability

CISA

[CVE-2023-4911] GNU C Library Buffer Overflow Vulnerability

CISA

[CVE-2023-36584] Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

CISA

[CVE-2023-1671] Sophos Web Appliance Command Injection Vulnerability

CISA

[CVE-2020-2551] Oracle Fusion Middleware Unspecified Vulnerability

CISA

[CVE-2023-36033] Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

CISA

[CVE-2023-36025] Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2023-36036] Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

CISA

[CVE-2023-47246] SysAid Server Path Traversal Vulnerability

CISA

[CVE-2023-36844] Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

CISA

[CVE-2023-36845] Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

CISA

[CVE-2023-36846] Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2023-36847] Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2023-36851] Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2023-29552] Service Location Protocol (SLP) Denial-of-Service Vulnerability

CISA

[CVE-2023-22518] Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

CISA

[CVE-2023-46604] Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-46748] F5 BIG-IP Configuration Utility SQL Injection Vulnerability

CISA

[CVE-2023-46747] F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability

CISA

[CVE-2023-5631] Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2023-20273] Cisco IOS XE Web UI Command Injection Vulnerability

CISA

[CVE-2023-4966] Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

CISA

[CVE-2023-20198] Cisco IOS XE Web UI Privilege Escalation Vulnerability

CISA

[CVE-2023-21608] Adobe Acrobat and Reader Use-After-Free Vulnerability

CISA

[CVE-2023-20109] Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

CISA

[CVE-2023-41763] Microsoft Skype for Business Privilege Escalation Vulnerability

CISA

[CVE-2023-36563] Microsoft WordPad Information Disclosure Vulnerability

CISA

[CVE-2023-44487] HTTP/2 Rapid Reset Attack Vulnerability

CISA

[CVE-2023-22515] Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

CISA

[CVE-2023-40044] Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-42824] Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability

CISA

[CVE-2023-42793] JetBrains TeamCity Authentication Bypass Vulnerability

CISA

[CVE-2023-28229] Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

CISA

[CVE-2023-4211] Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CISA

[CVE-2023-5217] Google Chromium libvpx Heap Buffer Overflow Vulnerability

CISA

[CVE-2018-14667] Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability

CISA

[CVE-2023-41991] Apple Multiple Products Improper Certificate Validation Vulnerability

CISA

[CVE-2023-41992] Apple Multiple Products Kernel Privilege Escalation Vulnerability

CISA

[CVE-2023-41993] Apple Multiple Products WebKit Code Execution Vulnerability

CISA

[CVE-2023-41179] Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

CISA

[CVE-2023-28434] MinIO Security Feature Bypass Vulnerability

CISA

[CVE-2022-22265] Samsung Mobile Devices Use-After-Free Vulnerability

CISA

[CVE-2014-8361] Realtek SDK Improper Input Validation Vulnerability

CISA

[CVE-2017-6884] Zyxel EMG2926 Routers Command Injection Vulnerability

CISA

[CVE-2021-3129] Laravel Ignition File Upload Vulnerability

CISA

[CVE-2023-26369] Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability

CISA

[CVE-2023-35674] Android Framework Privilege Escalation Vulnerability

CISA

[CVE-2023-20269] Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

CISA

[CVE-2023-4863] Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2023-36761] Microsoft Word Information Disclosure Vulnerability

CISA

[CVE-2023-36802] Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

CISA

[CVE-2023-41064] Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

CISA

[CVE-2023-41061] Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

CISA

[CVE-2023-33246] Apache RocketMQ Command Execution Vulnerability

CISA

[CVE-2023-38831] RARLAB WinRAR Code Execution Vulnerability

CISA

[CVE-2023-32315] Ignite Realtime Openfire Path Traversal Vulnerability

CISA

[CVE-2023-38035] Ivanti Sentry Authentication Bypass Vulnerability

CISA

[CVE-2023-27532] Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2023-26359] Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-24489] Citrix Content Collaboration ShareFile Improper Access Control Vulnerability

CISA

[CVE-2023-38180] Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

CISA

[CVE-2017-18368] Zyxel P660HN-T1A Routers Command Injection Vulnerability

CISA

[CVE-2023-35081] Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

CISA

[CVE-2023-37580] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2023-38606] Apple Multiple Products Kernel Unspecified Vulnerability

CISA

[CVE-2023-35078] Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

CISA

[CVE-2023-29298] Adobe ColdFusion Improper Access Control Vulnerability

CISA

[CVE-2023-38205] Adobe ColdFusion Improper Access Control Vulnerability

CISA

[CVE-2023-3519] Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

CISA

[CVE-2023-36884] Microsoft Windows Search Remote Code Execution Vulnerability

CISA

[CVE-2022-29303] SolarView Compact Command Injection Vulnerability

CISA

[CVE-2023-37450] Apple Multiple Products WebKit Code Execution Vulnerability

CISA

[CVE-2023-32046] Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

CISA

[CVE-2023-32049] Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2023-35311] Microsoft Outlook Security Feature Bypass Vulnerability

CISA

[CVE-2023-36874] Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

CISA

[CVE-2022-31199] Netwrix Auditor Insecure Object Deserialization Vulnerability

CISA

[CVE-2021-29256] Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CISA

[CVE-2019-17621] D-Link DIR-859 Router Command Execution Vulnerability

CISA

[CVE-2019-20500] D-Link DWL-2600AP Access Point Command Injection Vulnerability

CISA

[CVE-2021-25487] Samsung Mobile Devices Out-of-Bounds Read Vulnerability

CISA

[CVE-2021-25489] Samsung Mobile Devices Improper Input Validation Vulnerability

CISA

[CVE-2021-25394] Samsung Mobile Devices Race Condition Vulnerability

CISA

[CVE-2021-25395] Samsung Mobile Devices Race Condition Vulnerability

CISA

[CVE-2021-25371] Samsung Mobile Devices Unspecified Vulnerability

CISA

[CVE-2021-25372] Samsung Mobile Devices Improper Boundary Check Vulnerability

CISA

[CVE-2023-32434] Apple Multiple Products Integer Overflow Vulnerability

CISA

[CVE-2023-32435] Apple Multiple Products WebKit Memory Corruption Vulnerability

CISA

[CVE-2023-32439] Apple Multiple Products WebKit Type Confusion Vulnerability

CISA

[CVE-2023-20867] VMware Tools Authentication Bypass Vulnerability

CISA

[CVE-2023-27992] Zyxel Multiple NAS Devices Command Injection Vulnerability

CISA

[CVE-2023-20887] Vmware Aria Operations for Networks Command Injection Vulnerability

CISA

[CVE-2020-35730] Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2020-12641] Roundcube Webmail Remote Code Execution Vulnerability

CISA

[CVE-2021-44026] Roundcube Webmail SQL Injection Vulnerability

CISA

[CVE-2016-9079] Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

CISA

[CVE-2016-0165] Microsoft Win32k Privilege Escalation Vulnerability

CISA

[CVE-2023-27997] Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2023-3079] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2023-33009] Zyxel Multiple Firewalls Buffer Overflow Vulnerability

CISA

[CVE-2023-33010] Zyxel Multiple Firewalls Buffer Overflow Vulnerability

CISA

[CVE-2023-34362] Progress MOVEit Transfer SQL Injection Vulnerability

CISA

[CVE-2023-28771] Zyxel Multiple Firewalls OS Command Injection Vulnerability

CISA

[CVE-2023-2868] Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

CISA

[CVE-2023-32409] Apple Multiple Products WebKit Sandbox Escape Vulnerability

CISA

[CVE-2023-28204] Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

CISA

[CVE-2023-32373] Apple Multiple Products WebKit Use-After-Free Vulnerability

CISA

[CVE-2004-1464] Cisco IOS Denial-of-Service Vulnerability

CISA

[CVE-2016-6415] Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

CISA

[CVE-2023-21492] Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

CISA

[CVE-2023-25717] Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

CISA

[CVE-2021-3560] Red Hat Polkit Incorrect Authorization Vulnerability

CISA

[CVE-2014-0196] Linux Kernel Race Condition Vulnerability

CISA

[CVE-2010-3904] Linux Kernel Improper Input Validation Vulnerability

CISA

[CVE-2015-5317] Jenkins User Interface (UI) Information Disclosure Vulnerability

CISA

[CVE-2016-3427] Oracle Java SE and JRockit Unspecified Vulnerability

CISA

[CVE-2016-8735] Apache Tomcat Remote Code Execution Vulnerability

CISA

[CVE-2023-29336] Microsoft Win32K Privilege Escalation Vulnerability

CISA

[CVE-2023-1389] TP-Link Archer AX-21 Command Injection Vulnerability

CISA

[CVE-2021-45046] Apache Log4j2 Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-21839] Oracle WebLogic Server Unspecified Vulnerability

CISA

[CVE-2023-28432] MinIO Information Disclosure Vulnerability

CISA

[CVE-2023-27350] PaperCut MF/NG Improper Access Control Vulnerability

CISA

[CVE-2023-2136] Google Chrome Skia Integer Overflow Vulnerability

CISA

[CVE-2017-6742] Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CISA

[CVE-2019-8526] Apple macOS Use-After-Free Vulnerability

CISA

[CVE-2023-2033] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2023-20963] Android Framework Privilege Escalation Vulnerability

CISA

[CVE-2023-29492] Novi Survey Insecure Deserialization Vulnerability

CISA

[CVE-2023-28252] Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

CISA

[CVE-2023-28205] Apple Multiple Products WebKit Use-After-Free Vulnerability

CISA

[CVE-2023-28206] Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

CISA

[CVE-2021-27876] Veritas Backup Exec Agent File Access Vulnerability

CISA

[CVE-2021-27877] Veritas Backup Exec Agent Improper Authentication Vulnerability

CISA

[CVE-2021-27878] Veritas Backup Exec Agent Command Execution Vulnerability

CISA

[CVE-2019-1388] Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

CISA

[CVE-2023-26083] Arm Mali GPU Kernel Driver Information Disclosure Vulnerability

CISA

[CVE-2022-27926] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2013-3163] Microsoft Internet Explorer Memory Corruption Vulnerability

CISA

[CVE-2017-7494] Samba Remote Code Execution Vulnerability

CISA

[CVE-2022-42948] Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

CISA

[CVE-2022-39197] Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2021-30900] Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

CISA

[CVE-2022-38181] Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CISA

[CVE-2023-0266] Linux Kernel Use-After-Free Vulnerability

CISA

[CVE-2022-3038] Google Chromium Network Service Use-After-Free Vulnerability

CISA

[CVE-2022-22706] Arm Mali GPU Kernel Driver Unspecified Vulnerability

CISA

[CVE-2023-26360] Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-23397] Microsoft Office Outlook Privilege Escalation Vulnerability

CISA

[CVE-2023-24880] Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2022-41328] Fortinet FortiOS Path Traversal Vulnerability

CISA

[CVE-2021-39144] XStream Remote Code Execution Vulnerability

CISA

[CVE-2020-5741] Plex Media Server Remote Code Execution Vulnerability

CISA

[CVE-2022-28810] Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability

CISA

[CVE-2022-33891] Apache Spark Command Injection Vulnerability

CISA

[CVE-2022-35914] Teclib GLPI Remote Code Execution Vulnerability

CISA

[CVE-2022-36537] ZK Framework AuUploader Unspecified Vulnerability

CISA

[CVE-2022-47986] IBM Aspera Faspex Code Execution Vulnerability

CISA

[CVE-2022-41223] Mitel MiVoice Connect Code Injection Vulnerability

CISA

[CVE-2022-40765] Mitel MiVoice Connect Command Injection Vulnerability

CISA

[CVE-2022-46169] Cacti Command Injection Vulnerability

CISA

[CVE-2023-21715] Microsoft Office Publisher Security Feature Bypass Vulnerability

CISA

[CVE-2023-23376] Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

CISA

[CVE-2023-23529] Apple Multiple Products WebKit Type Confusion Vulnerability

CISA

[CVE-2023-21823] Microsoft Windows Graphic Component Privilege Escalation Vulnerability

CISA

[CVE-2015-2291] Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

CISA

[CVE-2022-24990] TerraMaster OS Remote Command Execution Vulnerability

CISA

[CVE-2023-0669] Fortra GoAnywhere MFT Remote Code Execution Vulnerability

CISA

[CVE-2022-21587] Oracle E-Business Suite Unspecified Vulnerability

CISA

[CVE-2023-22952] Multiple SugarCRM Products Remote Code Execution Vulnerability

CISA

[CVE-2017-11357] Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

CISA

[CVE-2022-47966] Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

CISA

[CVE-2022-44877] CWP Control Web Panel OS Command Injection Vulnerability

CISA

[CVE-2022-41080] Microsoft Exchange Server Privilege Escalation Vulnerability

CISA

[CVE-2023-21674] Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

CISA

[CVE-2018-5430] TIBCO JasperReports Server Information Disclosure Vulnerability

CISA

[CVE-2018-18809] TIBCO JasperReports Library Directory Traversal Vulnerability

CISA

[CVE-2022-42856] Apple iOS Type Confusion Vulnerability

CISA

[CVE-2022-42475] Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2022-44698] Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2022-27518] Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

CISA

[CVE-2022-26500] Veeam Backup & Replication Remote Code Execution Vulnerability

CISA

[CVE-2022-26501] Veeam Backup & Replication Remote Code Execution Vulnerability

CISA

[CVE-2022-4262] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2021-35587] Oracle Fusion Middleware Unspecified Vulnerability

CISA

[CVE-2022-4135] Google Chromium GPU Heap Buffer Overflow Vulnerability

CISA

[CVE-2022-41049] Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

CISA

[CVE-2022-41091] Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

CISA

[CVE-2022-41073] Microsoft Windows Print Spooler Privilege Escalation Vulnerability

CISA

[CVE-2022-41125] Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

CISA

[CVE-2022-41128] Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

CISA

[CVE-2021-25337] Samsung Mobile Devices Improper Access Control Vulnerability

CISA

[CVE-2021-25369] Samsung Mobile Devices Improper Access Control Vulnerability

CISA

[CVE-2021-25370] Samsung Mobile Devices Memory Corruption Vulnerability

CISA

[CVE-2022-3723] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2022-42827] Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

CISA

[CVE-2020-3433] Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

CISA

[CVE-2020-3153] Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

CISA

[CVE-2018-19323] GIGABYTE Multiple Products Privilege Escalation Vulnerability

CISA

[CVE-2018-19322] GIGABYTE Multiple Products Code Execution Vulnerability

CISA

[CVE-2018-19321] GIGABYTE Multiple Products Privilege Escalation Vulnerability

CISA

[CVE-2018-19320] GIGABYTE Multiple Products Unspecified Vulnerability

CISA

[CVE-2022-41352] Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

CISA

[CVE-2021-3493] Linux Kernel Privilege Escalation Vulnerability

CISA

[CVE-2022-40684] Fortinet Multiple Products Authentication Bypass Vulnerability

CISA

[CVE-2022-41033] Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

CISA

[CVE-2022-41082] Microsoft Exchange Server Remote Code Execution Vulnerability

CISA

[CVE-2022-41040] Microsoft Exchange Server Server-Side Request Forgery Vulnerability

CISA

[CVE-2022-36804] Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

CISA

[CVE-2022-3236] Sophos Firewall Code Injection Vulnerability

CISA

[CVE-2022-35405] Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

CISA

[CVE-2022-40139] Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

CISA

[CVE-2013-6282] Linux Kernel Improper Input Validation Vulnerability

CISA

[CVE-2013-2597] Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability

CISA

[CVE-2013-2596] Linux Kernel Integer Overflow Vulnerability

CISA

[CVE-2013-2094] Linux Kernel Privilege Escalation Vulnerability

CISA

[CVE-2010-2568] Microsoft Windows Remote Code Execution Vulnerability

CISA

[CVE-2022-37969] Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

CISA

[CVE-2022-32917] Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

CISA

[CVE-2022-3075] Google Chromium Mojo Insufficient Data Validation Vulnerability

CISA

[CVE-2022-27593] QNAP Photo Station Externally Controlled Reference Vulnerability

CISA

[CVE-2022-26258] D-Link DIR-820L Remote Code Execution Vulnerability

CISA

[CVE-2020-9934] Apple iOS, iPadOS, and macOS Input Validation Vulnerability

CISA

[CVE-2018-7445] MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2018-6530] D-Link Multiple Routers OS Command Injection Vulnerability

CISA

[CVE-2018-2628] Oracle WebLogic Server Unspecified Vulnerability

CISA

[CVE-2018-13374] Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

CISA

[CVE-2017-5521] NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability

CISA

[CVE-2011-4723] D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability

CISA

[CVE-2011-1823] Android OS Privilege Escalation Vulnerability

CISA

[CVE-2022-26352] dotCMS Unrestricted Upload of File Vulnerability

CISA

[CVE-2022-24706] Apache CouchDB Insecure Default Initialization of Resource Vulnerability

CISA

[CVE-2022-24112] Apache APISIX Authentication Bypass Vulnerability

CISA

[CVE-2022-22963] VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

CISA

[CVE-2022-2294] WebRTC Heap Buffer Overflow Vulnerability

CISA

[CVE-2021-39226] Grafana Authentication Bypass Vulnerability

CISA

[CVE-2021-38406] Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability

CISA

[CVE-2021-31010] Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

CISA

[CVE-2020-36193] PEAR Archive_Tar Improper Link Resolution Vulnerability

CISA

[CVE-2020-28949] PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability