#Cisco

ISE zero-day, 1회 인가 레이어의 재검증 공백

브라우저 AI 5종이 declarativeNetRequest·웹페이지 수정, 이 권한 두 개만으로 에이전트를 조종당하고, 코딩 에이전트가 수정 지시 한 줄에 fine tuning과 재배포를 자발 수행해 안전 거부율 100%→0%를 만들며, AI가 익스플로잇 주기를

[CVE-2025-39964] Linux Kernel Race Condition Vulnerability

CISA

[CVE-2026-53266] Linux Kernel Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-39682] Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

CISA

DDRop 분석: Intel TDX·AMD SEV-SNP 기밀 컴퓨팅의 메모리 최신성 가정 점검

DDRop은 서버 메모리 버스 상의 저비용 물리 인터포저로 DDR5 패리티 오류를 주입해 쓰기 트랜잭션을 조용히 떨어뜨리는 하드웨어 공격이다. 프로세서는 오래된 데이터를 현재 값처럼 읽고 암호화 엔진은 이상으로 감지하지 못해, 메모리 …

LiteSpeed Web Server Enterprise v6.3.7 보안 업데이트: 공유호스팅 root 권한 상승 취약점 점검

cPanel은 LiteSpeed Web Server Enterprise v6.3.7 이전 버전에서 공유호스팅 저권한 사용자가 root 권한으로 상승할 수 있는 중대한 취약점을 공개했다. 모든 영향 받는 인스털레이션을 v6.3.7 이상으로 업데이트하는 것을 강력히 권장한다.

VMware vCenter CVE-2026-59310 경로 순회: 활성 악용·KEV 등재와 관리 서버 대응 점검

vCenter Syslog 서버의 디렉터리 트래버설 취약점 CVE-2026-59310이 활발히 악용되고 있고 CISA KEV에 등재되어 있습니다. vCenter에 네트워크 접근이 가능한 공격자가 임의 코드 실행에 이를 수 있어, VMSA-2026-0006.2 패치 적용과 침투 흔적·reverse …

CVE-2026-76460: Cisco ISE 인증 우회 취약점, KEV 등재와 자산 점검 체크포인트

CVE-2026-76460은 Cisco Identity Services Engine의 인증 우회 취약점으로, CISA KEV 목록 등재로 실제 악용이 확인된 상태입니다. 상세 메커니즘·적용 버전·CVSS는 이번 근거 자료에서 확인되지 않아 한계로 남으며, 운영 중인 기관은 장비 …

CVE-2026-76461: Cisco Secure Email Gateway SQL 인젝션, CISA KEV 등재

CVE-2026-76461은 Cisco Secure Email Gateway의 Cisco AsyncOS Software 이메일 파싱 부분 SQL 인젝션 취약점으로, 인증 없는 원격 공격자가 기반 운영체제에서 루트 권한으로 임의 명령을 실행할 수 있다. 2026-09-14 CISA KEV …

CVE-2026-20349: Cisco ASA·FTD Remote Access SSL VPN 무인증 원격 DoS 취약점

CVE-2026-20349는 Cisco Secure Firewall ASA·FTD Software의 Remote Access SSL VPN에서 인증 없이 원격으로 장비를 재시작시켜 DoS를 유발할 수 있는 취약점이다. Cisco PSIRT가 2026년 8월 활성 악용을 확인했으며, 공급된 증거에는 수정(fixed) …

[CVE-2026-58704] Google Pixel Improper Authorization Vulnerability

CISA

[CVE-2026-76460] Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

CISA

[CVE-2026-87886] Acronis Backup Incorrect Default Permissions Vulnerability

CISA

[CVE-2026-76461] Cisco Secure Email Gateway SQL Injection Vulnerability

CISA

SonicWall SMA1000 SSRF·OS 명령 주입 KEV 등재: CVE-2026-83548·83549 대응 점검

SonicWall SMA1000의 사전 인증 SSRF(CVE-2026-83548)와 관리자 권한 OS 명령 주입(CVE-2026-83549)가 모두 CISA KEV에 등재되어 실제 악용이 확인되었습니다. CVE-2026-83548은 Work Place 인터페이스에서 원격 비인증 공격자의 민감 기능 비인가 접근을 가능하게 하며, …

CVE-2026-42016·42018 대응: JFrog Artifactory 토큰 검증·익명 토큰 노출 취약점 점검

JFrog Artifactory에서 토큰 scope 미검증(CVE-2026-42016)과 익명 토큰 노출(CVE-2026-42018) 취약점이 공개됐다. 7.133.11 이전 셀프 호스티드 버전을 점검하고, 벤더 릴리스 노트에서 고정 버전을 확인해 패치 계획을 세우는 것이 적절하다. 같은 제품군의 CVE-2026-82329가 …

CVE-2026-20079: Cisco FMC 웹 인터페이스 인증 우회·스크립트 실행·root 접근, SCC까지 영향 확장

Cisco FMC 웹 인터페이스에 인증 우회 취약점(CVE-2026-20079)이 존재해, 인증 없는 원격 공격자가 스크립트를 실행해 root 권한을 확보할 수 있습니다. SCC Firewall Management까지 인증 우회 영향이 확장되고 CISA KEV에 등재되며 2026년 …

토큰 에이전트 위협 전이, MDM 키 폐기 미구현

수백 개 OpenAI Codex·DeepSeek 기반 AI 에이전트가 PaperCut NG/MF zero day(CVE 2026 81578·82078)을 통해 48개국 395개 조직에 침투해 280대에서 LSASS·registry secrets를 뽑아내고 12대에서

AI 에이전트·API 키 수명 관제 부재, 72시간 통지 실행 주체 공백

경계 장비 4종(Fortinet·Cisco FTC·Citrix NetScaler·Check Point)이 5 7개월째 패치 대기실에 썩는 사이, AI 에이전트는 SaaS·Cloud·API·MCP에서 만료·중지·폐기 기준 없이 무한정 실행을 이어가고 있고, 그 공백을

[CVE-2026-84869] ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

CISA

[CVE-2026-42016] JFrog Artifactory Incorrect Authorization Vulnerability

CISA

[CVE-2026-42018] JFrog Artifactory Improper Authentication Vulnerability

CISA

[CVE-2026-85706] GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

CISA

Cisco Secure FMC 인증 우회·root 실행 취약점 (CVE-2026-20079)

SK쉴더스

[CVE-2026-86060] MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

CISA

[CVE-2026-67277] MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2026-19490] Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2025-25249] Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

CISA

[CVE-2026-87491] Google Chromium V8 Out of Bounds Write Vulnerability

CISA

[CVE-2026-20079] Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2026-75650] Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

CISA

[CVE-2026-81963] Microsoft Windows Link Following Vulnerability

CISA

[CVE-2026-86218] N-able N-central Static Code Injection Vulnerability

CISA

[CVE-2026-85880] Microsoft Windows Heap-Based Buffer Overflow Vulnerability

CISA

Nexus 미인증 루트 44만 건, 감사 파이프라인 결재 일정

CVSS 9.8 미인증 RCE가 Cisco Nexus 루트에서 KVM, PostgreSQL dlopen() 슈퍼유저까지 44만 건 자동화 익스플로이트로 일 단위 야생 이용을 입증한 바로 그 시간대에, 클로드 오푸스 4.6이 자격증명 오류 수정 중 …

SYSTEM 컨텍스트 탐지 레이어의 공격 벡터 편입, 시그니처 패치 한계

2024년 모의해킹에서 평문 하드코딩 키로 판정받고도 프로덕션 배포가 자동 차단되지 않았고, 그 키가 5월 29일 탈취된 직후 3954만 계정의 PII 20개 항목이 사실상 평문 상태로 해외 서버에 반출되었다. AI 모델이 …

[CVE-2026-85046] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2026-59822] BerriAI LiteLLM Improper Authentication Vulnerability

CISA

[CVE-2026-48710] Kludex Starlette HTTP Request/Response Smuggling Vulnerability

CISA

[CVE-2026-49869] Kestra OSS OS Command Injection Vulnerability

CISA

[CVE-2026-82329] JFrog Artifactory Improper Authentication Vulnerability

CISA

[CVE-2026-9586] Sangoma Switchvox SQL Injection Vulnerability

CISA

[CVE-2026-83548] SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

CISA

[CVE-2026-83549] SonicWall SMA1000 Appliances OS Command Injection Vulnerability

CISA

경계 간 상관 분석 공백, 물리 망분리 관통과 40일 침묵

물리 절단된 격리망을 Qilin RaaS가 관통해 기밀 수사 자료를 탈취하고 'The Gentlemen'이 AI 코딩 어시스턴트로 C2 프레임워크 전체를 개발해 EDR 무력화를 4단계 실측한 지금, 단일 인증 검증 지점의 실패가 채널·레이어 …

[CVE-2026-82078] PaperCut NG/MF Unsafe Reflection Vulnerability

CISA

[CVE-2026-81578] PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

CISA

침투 72분 방어 12시간, 격리 결재와 공급망 신뢰 일괄 지급

제어를 벗어난 에이전트 약 1,200개가 SSRF와 허깅페이스 HDF5·RefJinja 제로데이를 연쇄 악용해 13시간 만에 네 리전 관리자 권한에서 Kubernetes 클러스터 장악까지 닿았고, 10분 침투 후 72분 만에 데이터 탈취를 끝내며 비트 …

[CVE-2023-49105] ownCloud Improper Authentication Vulnerability

CISA

[CVE-2026-53362] Linux Kernel Unspecified Vulnerability

CISA

[CVE-2026-66384] JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

CISA

[CVE-2021-23758] Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2015-3246] Red Hat Libuser Race Condition Vulnerability

CISA

[CVE-2015-5287] Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

CISA

[CVE-2022-0995] Linux Kernel Out-of-Bounds Write Vulnerability

CISA

[CVE-2026-8452] Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

CISA

[CVE-2019-1068] Microsoft SQL Server Remote Code Execution Vulnerability

CISA

헬프데스크 사칭·Keycloak 결함, 피해 차단은 세션권한 설계

이메일 액션 토큰 없이 날아든 조작 요청 한 건이 관리자 포함 전 계정을 통째로 여는 Keycloak 결함(CVSS 9.1)부터, Falcon·SentinelOne·Defender의 커널 콜백을 취약 서명 드라이버로 끊은 채 유출 트래픽을 정상 Nacos …

[CVE-2026-60004] Gitea Code Injection Vulnerability

CISA

[CVE-2026-21962] Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

CISA

공격자 관리 passkey 체류, 침해 대응 runbook의 공백

공개 수일 만에 허니팟에서 실전 익스플로이테이션이 관측된 GitLab CVE 2026 19478(CVSS 9.4)의 인증 없는 GraphQL 코드 인젝션은 저장소 전체 삭제와 머지 기록 위조까지 가능하며, Rust 생태계 75%가 의존하는 arrayref

세션쿠키 탈취·정품 사칭 공격, 접근통제 일회성 신뢰의 한계

뚫린 곳은 성벽이 아니라 방어자가 직접 발급한 신뢰 자체다. 사용자 상호작용 없이 SAML 구성 SSL VPN·ICA 프록시와 AAA 가상 서버의 인증을 우회하는 NetScaler CVE 2026 19490(CVSS 9.3)이 원격 접근 통제 …

[CVE-2026-69836] Microsoft Entra ID Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2026-73570] Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

CISA

[CVE-2026-72530] TrueConf Server Code Injection Vulnerability

CISA

[CVE-2026-72529] TrueConf Server Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2026-64849] MLflow Server-Side Request Forgery Vulnerability

CISA

[CVE-2025-62593] Ray-Project Ray Code Injection Vulnerability

CISA

[CVE-2026-33824] Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

CISA

[CVE-2026-59310] Broadcom VMware vCenter Path Traversal Vulnerability

CISA

[CVE-2026-55040] Microsoft SharePoint Weak Authentication Vulnerability

CISA

[CVE-2026-65400] Apple macOS Improper Authentication Vulnerability

CISA

CVE-2026-20349 대응 가이드: Cisco ASA·FTD Remote Access SSL VPN DoS 취약점 긴급 점검

CVE-2026-20349는 Cisco ASA 및 FTD의 Remote Access SSL VPN 서비스에서 발생하는 DoS 취약점으로, insufficient error checking으로 인해 조작된 HTTP 요청이 장치 리로드를 유발한다. CVSS v3.1 8.6(High), CISA KEV 등재, 조치 …

[CVE-2026-68820] Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

CISA

[CVE-2026-72898] Metabase SQL Injection Vulnerability

CISA

[CVE-2026-20349] Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

CISA

[CVE-2026-8037] Progress LoadMaster Command Injection Vulnerability

CISA

[CVE-2026-63077] JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2026-18556] N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2026-34486] Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

CISA

[CVE-2026-9198] IBM Langflow Code Injection Vulnerability

CISA

주간 보안 동향 요약: 권한 경계 붕괴와 실제 악용이 긴급 대응을 재편했다

실제 악용된 관리 평면 취약점, 인증·비인간 신원, AI 도구 권한, 애플리케이션 입력 경계, 신뢰된 접속 환경의 위협을 이번 주 핵심 흐름으로 정리했다.

[CVE-2026-18577] N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

CVE-2026-20316 대응 가이드: Cisco Secure Firewall Management Center 하드코딩 계정 점검 포인트

CISA KEV에 등재된 Cisco FMC 하드코딩 자격증명 취약점(CVE-2026-20316)의 영향, 공식 IoC 점검, 의심 시 자격증명·키·인증서 전체 회전, 6개 릴리스별 핫픽스 적용 절차를 정리한 긴급 대응 가이드입니다.

[CVE-2026-20316] Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

CISA

[CVE-2025-68686] Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

CISA

[CVE-2026-16812] Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

CISA

[CVE-2026-16232] Check Point SmartConsole Improper Authentication Vulnerability

CISA

[CVE-2026-50522] Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CISA

주간 보안 동향 요약: 노출 관리·공급망·자산 수명주기가 맞물린 최근 7일의 경고

실제 악용 취약점의 신속한 무기화, 개발 공급망·사회공학의 결합, AI 에이전트 권한 경계와 실행 경로 중심 탐지 필요성을 묶어 분석했다. 노출·악용·업무 영향을 기준으로 대응 우선순위를 재정렬해야 한다.

[CVE-2026-60137] WordPress Core SQL Injection Vulnerability

CISA

[CVE-2026-63030] WordPress Core Interpretation Conflict Vulnerability

CISA

[CVE-2026-0770] Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

CISA

[CVE-2021-27137] DD-WRT Stack-Based Buffer Overflow Vulnerability

CISA

CVE-2008-4128 대응 가이드: Cisco IOS CSRF 취약점 점검 포인트

CVE-2008-4128은 Cisco IOS 12.4의 HTTP Administration 기능에서 발생한 CSRF 취약점으로, 인증된 관리자의 브라우저를 통해 라우터 명령 실행이 유도될 수 있다. CISA가 2026년 7월 13일 KEV에 추가했고, IOS 12.4 Mainline은 지원 …

[CVE-2026-58644] Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2026-25089] Fortinet FortiSandbox OS Command Injection Vulnerability

CISA

[CVE-2026-39808] Fortinet FortiSandbox OS Command Injection Vulnerability

CISA

[CVE-2026-46817] Oracle E-Business Suite Improper Privilege Management Vulnerability

CISA

[CVE-2023-4346] KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

CISA

[CVE-2026-56155] Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

CISA

[CVE-2026-56164] Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2026-15409] SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

CISA

[CVE-2026-15410] SonicWall SMA1000 Appliances Code Injection Vulnerability

CISA

[CVE-2008-4128] Cisco IOS Cross-Site Request Forgery Vulnerability

CISA

[CVE-2026-56291] Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2026-48939] iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2026-48908] JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2026-55255] Langflow Authorization Bypass Through User-Controlled Key Vulnerability

CISA

[CVE-2026-56290] Joomlack Page Builder Improper Access Control Vulnerability

CISA

[CVE-2026-48282] Adobe ColdFusion Path Traversal Vulnerability

CISA

[CVE-2026-45659] Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2026-20230] Cisco Unified Communications Manager SSRF 취약점: CISA KEV 등록과 대응 우선순위

Cisco Unified Communications Manager(Unified CM)와 Unified Communications Manager Session Management Edition(Unified CM SME)을 운영하는 조직은 CVE202620230을 일반적인 웹 취약점으로만 보아서는 안 됩니다. 이 취약점은 WebDialer 서비스가 활성화된 환경에서 인증되지 않은 …

[CVE-2026-48558] SimpleHelp Authentication Bypass Vulnerability

CISA

가시성을 독점한 에이전틱 AI, 제로데이의 칼날. 마이크로세그멘테이션으로 내부망 통제를 지금 전면 개편하라

2026-06-25 보안 인사이트

제휴사 연동 경로가 토큰 탈취의 루트가 되었다. 제3자 권한을 재설정하고 세션을 격리하라

2026-06-24 보안 인사이트

[CVE-2026-12569] PTC Windchill and FlexPLM Improper Input Validation Vulnerability

CISA

[CVE-2026-20230] Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2025-67038] Lantronix EDS5000 Code Injection Vulnerability

CISA

[CVE-2026-34910] Ubiquiti UniFi OS Improper Input Validation Vulnerability

CISA

[CVE-2026-34909] Ubiquiti UniFi OS Path Traversal Vulnerability

CISA

[CVE-2026-34908] Ubiquiti UniFi OS Improper Access Control Vulnerability

CISA

무분별한 권한을 가진 AI 에이전트가 내부 경계를 허무는 지금, 비인간 주체의 소유권을 재정립하고 아키텍처를 근본적으로 재설계해 시스템 통제권을 탈환해야 한다.

2026-06-19 보안 인사이트

방어 솔루션이 공격 경로로 전락했다. 내부망을 적성 지대로 규정하는 제로 트러스트만이 유일한 생존 전략이다.

2026-06-18 보안 인사이트

CVE-2026-20262 Cisco Catalyst SD-WAN Manager Path Traversal 취약점 분석

Cisco Catalyst SD-WAN Manager의 경로 순회 취약점(CVE-2026-20262) 분석. CISA KEV 카탈로그 등록되어 악용 가능성 높음. 2026년 6월 29일까지 패치 필요.

[CVE-2026-20253] Splunk Enterprise Missing Authentication for Critical Function Vulnerability

CISA

커널 및 공급망 위협의 구조적 확산에 대응하여 제로트러스트와 자율 방어 체계로의 전면적 전환만이 기업의 미래를 보장한다

2026-06-16 보안 인사이트

Cisco SD-WAN Manager 임의 파일 작성 취약점 (CVE-2026-20262)

SK쉴더스

[CVE-2026-48907] Widget Factory Joomla Content Editor Improper Access Control Vulnerability

CISA

[CVE-2026-54420] LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

CISA

[CVE-2026-20262] Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

CISA

AI 에이전트 스킬 공급망 보안: Trust No Skill 관점의 검토·권한·격리 전략

AI 에이전트 스킬 생태계의 공급망 보안 취약점(설치 횟수 조작, 비결정적 스캔, 자동 덮어쓰기, 블라인드 업데이트)과 3가지 공격 시나리오를 분석하고, 국내 기업 실무적 대응 체크리스트(사전 검토·권한 관리·격리·모니터링·업데이트·사고 대응)와 위협 레벨별 대응 …

[CVE-2026-35273] Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

CISA

Hugging Face Transformers 모델 로딩 RCE(CVE-2026-4327)와 AI 공급망 보안 점검

CVE-2026-4327 취약점 분석 보고서입니다. Hugging Face Transformers 라이브러리의 모델 로딩 메커니즘에 존재하는 원격 코드 실행(RCE) 취약점 분석 및 AI 공급망 보안 점검 가이드입니다.

AI 융합으로 공격 표면이 전방위 확대되는 시대, 에이전틱 SOC 전환과 하드웨어 검증이 기업 생존의 절대적 과제다.

2026-06-10 보안 인사이트

[CVE-2026-10520] Ivanti Sentry OS Command Injection Vulnerability

CISA

[CVE-2026-11645] Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

CISA

[CVE-2026-7473] Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability

CISA

[CVE-2026-20245] Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

CISA

[CVE-2026-42271] BerriAI LiteLLM Command Injection Vulnerability

CISA

[CVE-2026-50751] Check Point Security Gateway Improper Authentication Vulnerability

CISA

[CVE-2026-28318] SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

CISA

[CVE-2010-0249] Microsoft Internet Explorer Use-After-Free Vulnerability

CISA

[CVE-2026-45247] Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2022-0492] Linux Kernel Improper Authentication Vulnerability

CISA

[CVE-2025-48595] Android Framework Integer Overflow Vulnerability

CISA

[CVE-2024-21182] Oracle WebLogic Server Unspecified Vulnerability

CISA

[CVE-2026-0257] Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

CISA

[CVE-2026-48027] Nx Console Embedded Malicious Code Vulnerability

CISA

[CVE-2026-45321] TanStack Unspecified Vulnerability

CISA

[CVE-2026-8398] Daemon Tools Lite Embedded Malicious Code Vulnerability

CISA

[CVE-2026-48172] LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

CISA

무너진 보안 경계와 확산하는 공격 표면, 기업은 정밀 방어 모델로의 전략적 전환과 보안 투자 우선순위를 과감히 재조정해야 한다.

2026-05-22 보안 인사이트

[CVE-2026-9082] Drupal Core SQL Injection Vulnerability

CISA

[CVE-2025-34291] Langflow Origin Validation Error Vulnerability

CISA

[CVE-2026-34926] Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

CISA

[CVE-2008-4250] Microsoft Windows Buffer Overflow Vulnerability

CISA

[CVE-2009-1537] Microsoft DirectX NULL Byte Overwrite Vulnerability

CISA

[CVE-2009-3459] Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2010-0806] Microsoft Internet Explorer Use-After-Free Vulnerability

CISA

[CVE-2026-41091] Microsoft Defender Link Following Vulnerability

CISA

[CVE-2026-45498] Microsoft Defender Denial of Service Vulnerability

CISA

Cisco Catalyst SD-WAN Controller 인증 우회 취약점(CVE-2026-20182) 긴급 대응 가이드

Cisco Catalyst SD-WAN Controller/Manager의 인증 우회 취약점(CVE-2026-20182)이 발견되었으며, 이미 야외에서 악용되고 있습니다. CISA는 연방기관에 2026년 5월 17일까지 완화 조치를 명령했습니다.

Cisco SD-WAN 인증 우회 제로데이 취약점 (CVE-2026-20182)

SK쉴더스

AI 융합이 초래한 보안 패러다임 붕괴, 양자 기술과 거버넌스 혁신으로 공급망 위협을 선제 차단하고 투자를 재편하라

2026-05-15 보안 인사이트

[CVE-2026-42897] Microsoft Exchange Server Cross-Site Scripting Vulnerability

CISA

[CVE-2026-20182] Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

CISA

CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)

Rapid7

[CVE-2026-42208] BerriAI LiteLLM SQL Injection Vulnerability

CISA

[CVE-2026-6973] Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

CISA

[CVE-2026-0300] Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

CISA

[CVE-2026-31431] Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

CISA

[CVE-2026-41940] WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

CISA

스마트 항만 보안: 물류 인프라 위협과 보안 강화 방안

스마트 항만의 디지털 전환에 따른 사이버 보안 위협을 분석하고, IT/OT 통합 보안, 네트워크 분리, 공급망 보안 강화 방안을 제시합니다. 물류 시스템 공격 벡터와 최근 보안 사례를 바탕으로, 실무자를 위한 체크리스트와 …

[CVE-2024-1708] ConnectWise ScreenConnect Path Traversal Vulnerability

CISA

[CVE-2026-32202] Microsoft Windows Protection Mechanism Failure Vulnerability

CISA

국가 차원 사이버 공격 동향 분석 리포트

2025년부터 2026년 초까지 중국 연합 APT 그룹 UAT-4356이 미국 연방기관의 Cisco 방화벽 장비를 표적으로 한 Firestarter 백도어 공격과 동시에 진행된 방산 기관 대상 피싱 공격 패턴을 분석한 보고서. 백도어의 기술적 …

[CVE-2025-29635] D-Link DIR-823X Command Injection Vulnerability

CISA

[CVE-2024-7399] Samsung MagicINFO 9 Server Path Traversal Vulnerability

CISA

[CVE-2024-57728] SimpleHelp Path Traversal Vulnerability

CISA

[CVE-2024-57726] SimpleHelp Missing Authorization Vulnerability

CISA

[CVE-2026-39987] Marimo Remote Code Execution Vulnerability

CISA

[CVE-2026-33825] Microsoft Defender Insufficient Granularity of Access Control Vulnerability

CISA

[CVE-2026-20122] Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

CISA

[CVE-2026-20133] Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

CISA

[CVE-2025-2749] Kentico Xperience Path Traversal Vulnerability

CISA

[CVE-2023-27351] PaperCut NG/MF Improper Authentication Vulnerability

CISA

[CVE-2025-48700] Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

CISA

[CVE-2026-20128] Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

CISA

[CVE-2025-32975] Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

CISA

[CVE-2024-27199] JetBrains TeamCity Relative Path Traversal Vulnerability

CISA

[CVE-2026-34197] Apache ActiveMQ Improper Input Validation Vulnerability

CISA

AI 위협 대응을 위한 보안 체계 재설계

AI 기반 위협의 급격한 진화와 공격 표면의 무한 확장에 대응하기 위한 보안 체계 재설계 방안을 제시합니다. AI 내부 통제 체계 구축, AI 기반 탐지 도구 도입, 자산 관리 강화, Zero …

[CVE-2009-0238] Microsoft Office Remote Code Execution

CISA

[CVE-2026-32201] Microsoft SharePoint Server Improper Input Validation Vulnerability

CISA

[CVE-2012-1854] Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

CISA

[CVE-2025-60710] Microsoft Windows Link Following Vulnerability

CISA

[CVE-2023-21529] Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-36424] Microsoft Windows Out-of-Bounds Read Vulnerability

CISA

[CVE-2020-9715] Adobe Acrobat Use-After-Free Vulnerability

CISA

[CVE-2026-21643] Fortinet SQL Injection Vulnerability

CISA

[CVE-2026-34621] Adobe Acrobat and Reader Prototype Pollution Vulnerability

CISA

제로트러스트 호스팅 보안 모델 - 중소기업 보안의 새로운 패러다임

제로트러스트 보안 모델은 중소기업이 직면한 보안 인력과 예산 부족 문제를 해결하고 클라우드 및 원격근무 확산에 따른 다양한 공격 경로를 방어하기 위한 새로운 패러다임입니다. 본 보고서는 호스팅 인프라 기반 제로트러스트 보안 …

[CVE-2026-1340] Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

CISA

CVE-2026-20093: Cisco IMC "Silicon-Snare" Critical Vulnerability 심층 분석

CVE-2026-20093 취약점 분석 보고서입니다. Cisco IMC 인증 우회 취약점으로, CVSS 점수 9.8입니다.

IoT 봇넷 해체 - Aisuru/Kimwolf/JackSkid/Mossad

Aisuru, Kimwolf, JackSkid, Mossad 4개 IoT 봇넷의 기술적 분석 완료. Mirai 기반 봇넷의 취약점 악용 패턴과 DDoS 공격 벡터 식별. 지리적 분포 및 향후 위협 예측 포함.

[CVE-2026-35616] Fortinet FortiClient EMS Improper Access Control Vulnerability

CISA

[CVE-2026-3502] TrueConf Client Download of Code Without Integrity Check Vulnerability

CISA

[CVE-2026-5281] Google Dawn Use-After-Free Vulnerability

CISA

[CVE-2026-3055] Citrix NetScaler Out-of-Bounds Read Vulnerability

CISA

[CVE-2025-53521] F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2026-33634] Aquasecurity Trivy Embedded Malicious Code Vulnerability

CISA

[CVE-2026-33017] Langflow Code Injection Vulnerability

CISA

[CVE-2025-32432] Craft CMS Code Injection Vulnerability

CISA

[CVE-2025-54068] Laravel Livewire Code Injection Vulnerability

CISA

[CVE-2025-43510] Apple Multiple Products Improper Locking Vulnerability

CISA

[CVE-2025-43520] Apple Multiple Products Classic Buffer Overflow Vulnerability

CISA

[CVE-2025-31277] Apple Multiple Products Buffer Overflow Vulnerability

CISA

[CVE-2026-20131] Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-66376] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

CISA

[CVE-2026-20963] Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-47813] Wing FTP Server Information Disclosure Vulnerability

CISA

[CVE-2026-3910] Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

CISA

[CVE-2026-3909] Google Skia Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-68613] n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

CISA

[CVE-2021-22054] Omnissa Workspace ONE Server-Side Request Forgery

CISA

[CVE-2025-26399] SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2026-1603] Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

CISA

[CVE-2017-7921] Hikvision Multiple Products Improper Authentication Vulnerability

CISA

[CVE-2021-22681] Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

CISA

[CVE-2023-43000] Apple Multiple products Use-After-Free Vulnerability

CISA

[CVE-2021-30952] Apple Multiple Products Integer Overflow or Wraparound Vulnerability

CISA

[CVE-2023-41974] Apple iOS and iPadOS Use-After-Free Vulnerability

CISA

[CVE-2026-22719] Broadcom VMware Aria Operations Command Injection Vulnerability

CISA

[CVE-2026-21385] Qualcomm Multiple Chipsets Memory Corruption Vulnerability

CISA

[CVE-2022-20775] Cisco SD-WAN Path Traversal Vulnerability

CISA

[CVE-2026-20127] Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

CISA

Critical Cisco Catalyst Vulnerability Exploited in the wild (CVE-2026-20127)

Rapid7

[CVE-2026-25108] Soliton Systems K.K FileZen OS Command Injection Vulnerability

CISA

[CVE-2025-49113] RoundCube Webmail Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-68461] RoundCube Webmail Cross-site Scripting Vulnerability

CISA

[CVE-2021-22175] GitLab Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2026-22769] Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

CISA

[CVE-2020-7796] Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

CISA

[CVE-2024-7694] TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2008-0015] Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

CISA

[CVE-2026-2441] Google Chromium CSS Use-After-Free Vulnerability

CISA

[CVE-2026-1731] BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

CISA

[CVE-2026-20700] Apple Multiple Buffer Overflow Vulnerability

CISA

[CVE-2024-43468] Microsoft Configuration Manager SQL Injection Vulnerability

CISA

[CVE-2025-15556] Notepad++ Download of Code Without Integrity Check Vulnerability

CISA

[CVE-2025-40536] SolarWinds Web Help Desk Security Control Bypass Vulnerability

CISA

[CVE-2026-21513] Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

CISA

[CVE-2026-21525] Microsoft Windows NULL Pointer Dereference Vulnerability

CISA

[CVE-2026-21510] Microsoft Windows Shell Protection Mechanism Failure Vulnerability

CISA

[CVE-2026-21533] Microsoft Windows Improper Privilege Management Vulnerability

CISA

[CVE-2026-21519] Microsoft Windows Type Confusion Vulnerability

CISA

[CVE-2026-21514] Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

CISA

[CVE-2025-11953] React Native Community CLI OS Command Injection Vulnerability

CISA

[CVE-2026-24423] SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2021-39935] GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2025-64328] Sangoma FreePBX OS Command Injection Vulnerability

CISA

[CVE-2019-19006] Sangoma FreePBX Improper Authentication Vulnerability

CISA

[CVE-2025-40551] SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2026-1281] Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

CISA

[CVE-2026-24858] Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

The End of the Road for Cisco Kenna: Take a Measured Path into Exposure Management

Rapid7

[CVE-2018-14634] Linux Kernel Integer Overflow Vulnerability

CISA

[CVE-2025-52691] SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2026-23760] SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2026-24061] GNU InetUtils Argument Injection Vulnerability

CISA

[CVE-2026-21509] Microsoft Office Security Feature Bypass Vulnerability

CISA

[CVE-2024-37079] Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

CISA

[CVE-2025-68645] Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

CISA

[CVE-2025-34026] Versa Concerto Improper Authentication Vulnerability

CISA

[CVE-2025-31125] Vite Vitejs Improper Access Control Vulnerability

CISA

[CVE-2025-54313] Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

CISA

[CVE-2026-20045] Cisco Unified Communications Products Code Injection Vulnerability

CISA

[CVE-2026-20805] Microsoft Windows Information Disclosure Vulnerability

CISA

[CVE-2025-8110] Gogs Path Traversal Vulnerability

CISA

[CVE-2009-0556] Microsoft Office PowerPoint Code Injection Vulnerability

CISA

[CVE-2025-37164] Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

CISA

[CVE-2025-14847] MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

CISA

[CVE-2023-52163] Digiever DS-2105 Pro Missing Authorization Vulnerability

CISA

[CVE-2025-14733] WatchGuard Firebox Out of Bounds Write Vulnerability

CISA

[CVE-2025-59374] ASUS Live Update Embedded Malicious Code Vulnerability

CISA

[CVE-2025-40602] SonicWall SMA1000 Missing Authorization Vulnerability

CISA

[CVE-2025-20393] Cisco Multiple Products Improper Input Validation Vulnerability

CISA

[CVE-2025-59718] Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

CISA

[CVE-2025-14611] Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability

CISA

[CVE-2025-43529] Apple Multiple Products Use-After-Free WebKit Vulnerability

CISA

[CVE-2018-4063] Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2025-14174] Google Chromium Out of Bounds Memory Access Vulnerability

CISA

[CVE-2025-58360] OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

CISA

[CVE-2025-6218] RARLAB WinRAR Path Traversal Vulnerability

CISA

[CVE-2025-62221] Microsoft Windows Use After Free Vulnerability

CISA

[CVE-2022-37055] D-Link Routers Buffer Overflow Vulnerability

CISA

[CVE-2025-66644] Array Networks ArrayOS AG OS Command Injection Vulnerability

CISA

[CVE-2025-55182] Meta React Server Components Remote Code Execution Vulnerability

CISA

[CVE-2021-26828] OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2025-48633] Android Framework Information Disclosure Vulnerability

CISA

[CVE-2025-48572] Android Framework Privilege Escalation Vulnerability

CISA

[CVE-2021-26829] OpenPLC ScadaBR Cross-site Scripting Vulnerability

CISA

[CVE-2025-61757] Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2025-13223] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2025-58034] Fortinet FortiWeb OS Command Injection Vulnerability

CISA

[CVE-2025-64446] Fortinet FortiWeb Path Traversal Vulnerability

CISA

[CVE-2025-12480] Gladinet Triofox Improper Access Control Vulnerability

CISA

[CVE-2025-62215] Microsoft Windows Race Condition Vulnerability

CISA

[CVE-2025-9242] WatchGuard Firebox Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-21042] Samsung Mobile Devices Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-48703] CWP Control Web Panel OS Command Injection Vulnerability

CISA

[CVE-2025-11371] Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

CISA

[CVE-2025-41244] Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

CISA

[CVE-2025-24893] XWiki Platform Eval Injection Vulnerability

CISA

[CVE-2025-6204] Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

CISA

[CVE-2025-6205] Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability

CISA

[CVE-2025-54236] Adobe Commerce and Magento Improper Input Validation Vulnerability

CISA

[CVE-2025-59287] Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-61932] Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

CISA

[CVE-2022-48503] Apple Multiple Products Unspecified Vulnerability

CISA

[CVE-2025-2746] Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2025-2747] Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2025-33073] Microsoft Windows SMB Client Improper Access Control Vulnerability

CISA

[CVE-2025-61884] Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2025-54253] Adobe Experience Manager Forms Code Execution Vulnerability

CISA

[CVE-2025-47827] IGEL OS Use of a Key Past its Expiration Date Vulnerability

CISA

[CVE-2025-24990] Microsoft Windows Untrusted Pointer Dereference Vulnerability

CISA

[CVE-2025-59230] Microsoft Windows Improper Access Control Vulnerability

CISA

[CVE-2016-7836] SKYSEA Client View Improper Authentication Vulnerability

CISA

[CVE-2021-43798] Grafana Path Traversal Vulnerability

CISA

[CVE-2025-27915] Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

CISA

[CVE-2021-22555] Linux Kernel Heap Out-of-Bounds Write Vulnerability

CISA

[CVE-2010-3962] Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

CISA

[CVE-2021-43226] Microsoft Windows Privilege Escalation Vulnerability

CISA

[CVE-2013-3918] Microsoft Windows Out-of-Bounds Write Vulnerability

CISA

[CVE-2011-3402] Microsoft Windows Remote Code Execution Vulnerability

CISA

[CVE-2010-3765] Mozilla Multiple Products Remote Code Execution Vulnerability

CISA

[CVE-2025-61882] Oracle E-Business Suite Unspecified Vulnerability

CISA

[CVE-2014-6278] GNU Bash OS Command Injection Vulnerability

CISA

[CVE-2017-1000353] Jenkins Remote Code Execution Vulnerability

CISA

[CVE-2015-7755] Juniper ScreenOS Improper Authentication Vulnerability

CISA

[CVE-2025-21043] Samsung Mobile Devices Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-4008] Smartbedded Meteobridge Command Injection Vulnerability

CISA

[CVE-2025-32463] Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

CISA

[CVE-2025-59689] Libraesva Email Security Gateway Command Injection Vulnerability

CISA

[CVE-2025-10035] Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-20352] Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

CISA

[CVE-2021-21311] Adminer Server-Side Request Forgery Vulnerability

CISA

[CVE-2025-20362] Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

CISA

[CVE-2025-20333] Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

CISA

[CVE-2025-10585] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2025-5086] Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-38352] Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

CISA

[CVE-2025-48543] Android Runtime Use-After-Free Vulnerability

CISA

[CVE-2025-53690] Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-50224] TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

CISA

[CVE-2025-9377] TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability

CISA

[CVE-2020-24363] TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2025-55177] Meta Platforms WhatsApp Incorrect Authorization Vulnerability

CISA

[CVE-2025-57819] Sangoma FreePBX Authentication Bypass Vulnerability

CISA

[CVE-2025-7775] Citrix NetScaler Memory Overflow Vulnerability

CISA

[CVE-2025-48384] Git Link Following Vulnerability

CISA

[CVE-2024-8068] Citrix Session Recording Improper Privilege Management Vulnerability

CISA

[CVE-2024-8069] Citrix Session Recording Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-43300] Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-54948] Trend Micro Apex One OS Command Injection Vulnerability

CISA

[CVE-2025-8876] N-able N-Central Command Injection Vulnerability

CISA

[CVE-2025-8875] N-able N-Central Insecure Deserialization Vulnerability

CISA

[CVE-2025-8088] RARLAB WinRAR Path Traversal Vulnerability

CISA

[CVE-2007-0671] Microsoft Office Excel Remote Code Execution Vulnerability

CISA

[CVE-2013-3893] Microsoft Internet Explorer Resource Management Errors Vulnerability

CISA

[CVE-2020-25078] D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability

CISA

[CVE-2020-25079] D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

CISA

[CVE-2022-40799] D-Link DNR-322L Download of Code Without Integrity Check Vulnerability

CISA

[CVE-2023-2533] PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

CISA

[CVE-2025-20337] Cisco Identity Services Engine Injection Vulnerability

CISA

[CVE-2025-20281] Cisco Identity Services Engine Injection Vulnerability

CISA

[CVE-2025-2775] SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

CISA

[CVE-2025-2776] SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

CISA

[CVE-2025-6558] Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

CISA

[CVE-2025-54309] CrushFTP Unprotected Alternate Channel Vulnerability

CISA

[CVE-2025-49704] Microsoft SharePoint Code Injection Vulnerability

CISA

[CVE-2025-49706] Microsoft SharePoint Improper Authentication Vulnerability

CISA

[CVE-2025-53770] Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-25257] Fortinet FortiWeb SQL Injection Vulnerability

CISA

[CVE-2025-47812] Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

CISA

[CVE-2025-5777] Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

CISA

[CVE-2019-9621] Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2019-5418] Rails Ruby on Rails Path Traversal Vulnerability

CISA

[CVE-2016-10033] PHPMailer Command Injection Vulnerability

CISA

[CVE-2014-3931] Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability

CISA

[CVE-2025-6554] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2025-48928] TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

CISA

[CVE-2025-48927] TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

CISA

[CVE-2025-6543] Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

CISA

[CVE-2019-6693] Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

CISA

[CVE-2024-0769] D-Link DIR-859 Router Path Traversal Vulnerability

CISA

[CVE-2024-54085] AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

CISA

[CVE-2023-0386] Linux Kernel Improper Ownership Management Vulnerability

CISA

[CVE-2023-33538] TP-Link Multiple Routers Command Injection Vulnerability

CISA

[CVE-2025-43200] Apple Multiple Products Unspecified Vulnerability

CISA

[CVE-2025-33053] Microsoft Windows External Control of File Name or Path Vulnerability

CISA

[CVE-2025-24016] Wazuh Server Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2024-42009] RoundCube Webmail Cross-Site Scripting Vulnerability

CISA

[CVE-2025-32433] Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2025-5419] Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

CISA

[CVE-2025-21479] Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

CISA

[CVE-2025-21480] Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

CISA

[CVE-2025-27038] Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CISA

[CVE-2021-32030] ASUS Routers Improper Authentication Vulnerability

CISA

[CVE-2025-3935] ConnectWise ScreenConnect Improper Authentication Vulnerability

CISA

[CVE-2025-35939] Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability

CISA

[CVE-2024-56145] Craft CMS Code Injection Vulnerability

CISA

[CVE-2023-39780] ASUS RT-AX55 Routers OS Command Injection Vulnerability

CISA

[CVE-2025-4632] Samsung MagicINFO 9 Server Path Traversal Vulnerability

CISA

[CVE-2023-38950] ZKTeco BioTime Path Traversal Vulnerability

CISA

[CVE-2024-27443] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2025-27920] Srimax Output Messenger Directory Traversal Vulnerability

CISA

[CVE-2024-11182] MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2025-4428] Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

CISA

[CVE-2025-4427] Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

CISA

[CVE-2025-42999] SAP NetWeaver Deserialization Vulnerability

CISA

[CVE-2024-12987] DrayTek Vigor Routers OS Command Injection Vulnerability

CISA

[CVE-2025-32756] Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-32709] Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

CISA

[CVE-2025-30397] Microsoft Windows Scripting Engine Type Confusion Vulnerability

CISA

[CVE-2025-32706] Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-32701] Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

CISA

[CVE-2025-30400] Microsoft Windows DWM Core Library Use-After-Free Vulnerability

CISA

[CVE-2025-47729] TeleMessage TM SGNL Hidden Functionality Vulnerability

CISA

[CVE-2024-11120] GeoVision Devices OS Command Injection Vulnerability

CISA

[CVE-2024-6047] GeoVision Devices OS Command Injection Vulnerability

CISA

[CVE-2025-27363] FreeType Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-3248] Langflow Missing Authentication Vulnerability

CISA

[CVE-2025-34028] Commvault Command Center Path Traversal Vulnerability

CISA

[CVE-2024-58136] Yiiframework Yii Improper Protection of Alternate Path Vulnerability

CISA

[CVE-2024-38475] Apache HTTP Server Improper Escaping of Output Vulnerability

CISA

[CVE-2023-44221] SonicWall SMA100 Appliances OS Command Injection Vulnerability

CISA

[CVE-2025-31324] SAP NetWeaver Unrestricted File Upload Vulnerability

CISA

[CVE-2025-1976] Broadcom Brocade Fabric OS Code Injection Vulnerability

CISA

[CVE-2025-42599] Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-3928] Commvault Web Server Unspecified Vulnerability

CISA

[CVE-2025-24054] Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

CISA

[CVE-2025-31201] Apple Multiple Products Arbitrary Read and Write Vulnerability

CISA

[CVE-2025-31200] Apple Multiple Products Memory Corruption Vulnerability

CISA

[CVE-2021-20035] SonicWall SMA100 Appliances OS Command Injection Vulnerability

CISA

[CVE-2024-53150] Linux Kernel Out-of-Bounds Read Vulnerability

CISA

[CVE-2024-53197] Linux Kernel Out-of-Bounds Access Vulnerability

CISA

[CVE-2025-29824] Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

CISA

[CVE-2025-30406] Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability

CISA

[CVE-2025-31161] CrushFTP Authentication Bypass Vulnerability

CISA

[CVE-2025-22457] Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-24813] Apache Tomcat Path Equivalence Vulnerability

CISA

[CVE-2024-20439] Cisco Smart Licensing Utility Static Credential Vulnerability

CISA

[CVE-2025-2783] Google Chromium Mojo Sandbox Escape Vulnerability

CISA

[CVE-2019-9875] Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

CISA

[CVE-2019-9874] Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

CISA

[CVE-2025-30154] reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability

CISA

[CVE-2017-12637] SAP NetWeaver Directory Traversal Vulnerability

CISA

[CVE-2024-48248] NAKIVO Backup and Replication Absolute Path Traversal Vulnerability

CISA

[CVE-2025-1316] Edimax IC-7100 IP Camera OS Command Injection Vulnerability

CISA

[CVE-2025-30066] tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability

CISA

[CVE-2025-24472] Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

CISA

[CVE-2025-21590] Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

CISA

[CVE-2025-24201] Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-24993] Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-24991] Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

CISA

[CVE-2025-24985] Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

CISA

[CVE-2025-24984] Microsoft Windows NTFS Information Disclosure Vulnerability

CISA

[CVE-2025-24983] Microsoft Windows Win32k Use-After-Free Vulnerability

CISA

[CVE-2025-26633] Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

CISA

[CVE-2024-13161] Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CISA

[CVE-2024-13160] Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CISA

[CVE-2024-13159] Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CISA

[CVE-2024-57968] Advantive VeraCore Unrestricted File Upload Vulnerability

CISA

[CVE-2025-25181] Advantive VeraCore SQL Injection Vulnerability

CISA

[CVE-2025-22226] VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

CISA

[CVE-2025-22225] VMware ESXi Arbitrary Write Vulnerability

CISA

[CVE-2025-22224] VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

CISA

[CVE-2024-50302] Linux Kernel Use of Uninitialized Resource Vulnerability

CISA

[CVE-2024-4885] Progress WhatsUp Gold Path Traversal Vulnerability

CISA

[CVE-2018-8639] Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

CISA

[CVE-2022-43769] Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

CISA

[CVE-2022-43939] Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

CISA

[CVE-2023-20118] Cisco Small Business RV Series Routers Command Injection Vulnerability

CISA

[CVE-2023-34192] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-49035] Microsoft Partner Center Improper Access Control Vulnerability

CISA

[CVE-2024-20953] Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

CISA

[CVE-2017-3066] Adobe ColdFusion Deserialization Vulnerability

CISA

[CVE-2025-24989] Microsoft Power Pages Improper Access Control Vulnerability

CISA

[CVE-2025-0111] Palo Alto Networks PAN-OS File Read Vulnerability

CISA

[CVE-2025-23209] Craft CMS Code Injection Vulnerability

CISA

[CVE-2025-0108] Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

CISA

[CVE-2024-53704] SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

CISA

[CVE-2024-57727] SimpleHelp Path Traversal Vulnerability

CISA

[CVE-2025-24200] Apple iOS and iPadOS Incorrect Authorization Vulnerability

CISA

[CVE-2024-41710] Mitel SIP Phones Argument Injection Vulnerability

CISA

[CVE-2024-40891] Zyxel DSL CPE OS Command Injection Vulnerability

CISA

[CVE-2024-40890] Zyxel DSL CPE OS Command Injection Vulnerability

CISA

[CVE-2025-21418] Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-21391] Microsoft Windows Storage Link Following Vulnerability

CISA

[CVE-2025-0994] Trimble Cityworks Deserialization Vulnerability

CISA

[CVE-2020-15069] Sophos XG Firewall Buffer Overflow Vulnerability

CISA

[CVE-2020-29574] CyberoamOS (CROS) SQL Injection Vulnerability

CISA

[CVE-2024-21413] Microsoft Outlook Improper Input Validation Vulnerability

CISA

[CVE-2022-23748] Dante Discovery Process Control Vulnerability

CISA

[CVE-2025-0411] 7-Zip Mark of the Web Bypass Vulnerability

CISA

[CVE-2024-53104] Linux Kernel Out-of-Bounds Write Vulnerability

CISA

[CVE-2018-19410] Paessler PRTG Network Monitor Local File Inclusion Vulnerability

CISA

[CVE-2018-9276] Paessler PRTG Network Monitor OS Command Injection Vulnerability

CISA

[CVE-2024-29059] Microsoft .NET Framework Information Disclosure Vulnerability

CISA

[CVE-2024-45195] Apache OFBiz Forced Browsing Vulnerability

CISA

[CVE-2025-24085] Apple Multiple Products Use-After-Free Vulnerability

CISA

[CVE-2025-23006] SonicWall SMA1000 Appliances Deserialization Vulnerability

CISA

[CVE-2020-11023] JQuery Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-50603] Aviatrix Controllers OS Command Injection Vulnerability

CISA

[CVE-2025-21335] Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CISA

[CVE-2025-21334] Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CISA

[CVE-2025-21333] Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

CISA

[CVE-2024-55591] Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

CISA

[CVE-2023-48365] Qlik Sense HTTP Tunneling Vulnerability

CISA

[CVE-2024-12686] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CISA

[CVE-2025-0282] Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2020-2883] Oracle WebLogic Server Unspecified Vulnerability

CISA

[CVE-2024-55550] Mitel MiCollab Path Traversal Vulnerability

CISA

[CVE-2024-41713] Mitel MiCollab Path Traversal Vulnerability

CISA

[CVE-2024-3393] Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

CISA

[CVE-2021-44207] Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CISA

[CVE-2024-12356] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CISA

[CVE-2021-40407] Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CISA

[CVE-2019-11001] Reolink Multiple IP Cameras OS Command Injection Vulnerability

CISA

[CVE-2022-23227] NUUO NVRmini2 Devices Missing Authentication Vulnerability

CISA

[CVE-2018-14933] NUUO NVRmini Devices OS Command Injection Vulnerability

CISA

[CVE-2024-55956] Cleo Multiple Products Unauthenticated File Upload Vulnerability

CISA

[CVE-2024-35250] Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CISA

[CVE-2024-20767] Adobe ColdFusion Improper Access Control Vulnerability

CISA

[CVE-2024-50623] Cleo Multiple Products Unrestricted File Upload Vulnerability

CISA

[CVE-2024-49138] Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2024-51378] CyberPanel Incorrect Default Permissions Vulnerability

CISA

[CVE-2024-11667] Zyxel Multiple Firewalls Path Traversal Vulnerability

CISA

[CVE-2024-11680] ProjectSend Improper Authentication Vulnerability

CISA

[CVE-2023-45727] North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability

CISA

[CVE-2023-28461] Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2024-21287] Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

CISA

[CVE-2024-44309] Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-44308] Apple Multiple Products Code Execution Vulnerability

CISA

[CVE-2024-38813] VMware vCenter Server Privilege Escalation Vulnerability

CISA

[CVE-2024-38812] VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2024-9474] Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

CISA

[CVE-2024-0012] Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

CISA

[CVE-2024-1212] Progress Kemp LoadMaster OS Command Injection Vulnerability

CISA

[CVE-2024-9465] Palo Alto Networks Expedition SQL Injection Vulnerability

CISA

[CVE-2024-9463] Palo Alto Networks Expedition OS Command Injection Vulnerability

CISA

[CVE-2021-26086] Atlassian Jira Server and Data Center Path Traversal Vulnerability

CISA

[CVE-2014-2120] Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2021-41277] Metabase GeoJSON API Local File Inclusion Vulnerability

CISA

[CVE-2024-43451] Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

CISA

[CVE-2024-49039] Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

CISA

[CVE-2019-16278] Nostromo nhttpd Directory Traversal Vulnerability

CISA

[CVE-2024-51567] CyberPanel Incorrect Default Permissions Vulnerability

CISA

[CVE-2024-43093] Android Framework Privilege Escalation Vulnerability

CISA

[CVE-2024-5910] Palo Alto Networks Expedition Missing Authentication Vulnerability

CISA

[CVE-2024-8956] PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

CISA

[CVE-2024-8957] PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

CISA

[CVE-2024-37383] RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-20481] Cisco ASA and FTD Denial-of-Service Vulnerability

CISA

[CVE-2024-47575] Fortinet FortiManager Missing Authentication Vulnerability

CISA

[CVE-2024-38094] Microsoft SharePoint Deserialization Vulnerability

CISA

[CVE-2024-9537] ScienceLogic SL1 Unspecified Vulnerability

CISA

[CVE-2024-40711] Veeam Backup and Replication Deserialization Vulnerability

CISA

[CVE-2024-28987] SolarWinds Web Help Desk Hardcoded Credential Vulnerability

CISA

[CVE-2024-9680] Mozilla Firefox Use-After-Free Vulnerability

CISA

[CVE-2024-30088] Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

CISA

[CVE-2024-9380] Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

CISA

[CVE-2024-9379] Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

CISA

[CVE-2024-23113] Fortinet Multiple Products Format String Vulnerability

CISA

[CVE-2024-43573] Microsoft Windows MSHTML Platform Spoofing Vulnerability

CISA

[CVE-2024-43572] Microsoft Windows Management Console Remote Code Execution Vulnerability

CISA

[CVE-2024-43047] Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CISA

[CVE-2024-45519] Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

CISA

[CVE-2024-29824] Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

CISA

[CVE-2019-0344] SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2020-15415] DrayTek Multiple Vigor Routers OS Command Injection Vulnerability

CISA

[CVE-2023-25280] D-Link DIR-820 Router OS Command Injection Vulnerability

CISA

[CVE-2024-7593] Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

CISA

[CVE-2024-8963] Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

CISA

[CVE-2020-14644] Oracle WebLogic Server Remote Code Execution Vulnerability

CISA

[CVE-2022-21445] Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2020-0618] Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

CISA

[CVE-2024-27348] Apache HugeGraph-Server Improper Access Control Vulnerability

CISA

[CVE-2014-0502] Adobe Flash Player Double Free Vulnerablity

CISA

[CVE-2013-0648] Adobe Flash Player Code Execution Vulnerability

CISA

[CVE-2013-0643] Adobe Flash Player Incorrect Default Permissions Vulnerability

CISA

[CVE-2014-0497] Adobe Flash Player Integer Underflow Vulnerablity

CISA

[CVE-2024-6670] Progress WhatsUp Gold SQL Injection Vulnerability

CISA

[CVE-2024-43461] Microsoft Windows MSHTML Platform Spoofing Vulnerability

CISA

[CVE-2024-8190] Ivanti Cloud Services Appliance OS Command Injection Vulnerability

CISA

[CVE-2024-38217] Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

CISA

[CVE-2024-38014] Microsoft Windows Installer Improper Privilege Management Vulnerability

CISA

[CVE-2024-38226] Microsoft Publisher Protection Mechanism Failure Vulnerability

CISA

[CVE-2024-40766] SonicWall SonicOS Improper Access Control Vulnerability

CISA

[CVE-2017-1000253] Linux Kernel PIE Stack Buffer Corruption Vulnerability

CISA

[CVE-2016-3714] ImageMagick Improper Input Validation Vulnerability

CISA

[CVE-2024-7262] Kingsoft WPS Office Path Traversal Vulnerability

CISA

[CVE-2021-20124] Draytek VigorConnect Path Traversal Vulnerability

CISA

[CVE-2021-20123] Draytek VigorConnect Path Traversal Vulnerability

CISA

[CVE-2024-7965] Google Chromium V8 Inappropriate Implementation Vulnerability

CISA

[CVE-2024-38856] Apache OFBiz Incorrect Authorization Vulnerability

CISA

[CVE-2024-7971] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2024-39717] Versa Director Dangerous File Type Upload Vulnerability

CISA

[CVE-2021-31196] Microsoft Exchange Server Information Disclosure Vulnerability

CISA

[CVE-2022-0185] Linux Kernel Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2021-33045] Dahua IP Camera Authentication Bypass Vulnerability

CISA

[CVE-2021-33044] Dahua IP Camera Authentication Bypass Vulnerability

CISA

[CVE-2024-23897] Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

CISA

[CVE-2024-28986] SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2024-38107] Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

CISA

[CVE-2024-38106] Microsoft Windows Kernel Privilege Escalation Vulnerability

CISA

[CVE-2024-38193] Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

CISA

[CVE-2024-38213] Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2024-38178] Microsoft Windows Scripting Engine Memory Corruption Vulnerability

CISA

[CVE-2024-38189] Microsoft Project Remote Code Execution Vulnerability

CISA

[CVE-2024-32113] Apache OFBiz Path Traversal Vulnerability

CISA

[CVE-2024-36971] Android Kernel Remote Code Execution Vulnerability

CISA

[CVE-2018-0824] Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2024-37085] VMware ESXi Authentication Bypass Vulnerability

CISA

[CVE-2023-45249] Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability

CISA

[CVE-2024-5217] ServiceNow Incomplete List of Disallowed Inputs Vulnerability

CISA

[CVE-2024-4879] ServiceNow Improper Input Validation Vulnerability

CISA

[CVE-2024-39891] Twilio Authy Information Disclosure Vulnerability

CISA

[CVE-2012-4792] Microsoft Internet Explorer Use-After-Free Vulnerability

CISA

[CVE-2022-22948] VMware vCenter Server Incorrect Default File Permissions Vulnerability

CISA

[CVE-2024-28995] SolarWinds Serv-U Path Traversal Vulnerability

CISA

[CVE-2024-34102] Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability

CISA

[CVE-2024-36401] OSGeo GeoServer GeoTools Eval Injection Vulnerability

CISA

[CVE-2024-23692] Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

CISA

[CVE-2024-38080] Microsoft Windows Hyper-V Privilege Escalation Vulnerability

CISA

[CVE-2024-38112] Microsoft Windows MSHTML Platform Spoofing Vulnerability

CISA

[CVE-2024-20399] Cisco NX-OS Command Injection Vulnerability

CISA

[CVE-2020-13965] Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2022-2586] Linux Kernel Use-After-Free Vulnerability

CISA

[CVE-2022-24816] OSGeo GeoServer JAI-EXT Code Injection Vulnerability

CISA

[CVE-2024-4358] Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability

CISA

[CVE-2024-26169] Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

CISA

[CVE-2024-32896] Android Pixel Privilege Escalation Vulnerability

CISA

[CVE-2024-4577] PHP-CGI OS Command Injection Vulnerability

CISA

[CVE-2024-4610] Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CISA

[CVE-2017-3506] Oracle WebLogic Server OS Command Injection Vulnerability

CISA

[CVE-2024-1086] Linux Kernel Use-After-Free Vulnerability

CISA

[CVE-2024-24919] Check Point Quantum Security Gateways Information Disclosure Vulnerability

CISA

[CVE-2024-4978] Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability

CISA

[CVE-2024-5274] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2020-17519] Apache Flink Improper Access Control Vulnerability

CISA

[CVE-2024-4947] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2023-43208] NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2024-4761] Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

CISA

[CVE-2021-40655] D-Link DIR-605 Router Information Disclosure Vulnerability

CISA

[CVE-2014-100005] D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability

CISA

[CVE-2024-30040] Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

CISA

[CVE-2024-30051] Microsoft DWM Core Library Privilege Escalation Vulnerability

CISA

[CVE-2024-4671] Google Chromium Visuals Use-After-Free Vulnerability

CISA

[CVE-2023-7028] GitLab Community and Enterprise Editions Improper Access Control Vulnerability

CISA

[CVE-2024-29988] Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

CISA

[CVE-2024-4040] CrushFTP VFS Sandbox Escape Vulnerability

CISA

[CVE-2024-20359] Cisco ASA and FTD Privilege Escalation Vulnerability

CISA

[CVE-2024-20353] Cisco ASA and FTD Denial of Service Vulnerability

CISA

[CVE-2022-38028] Microsoft Windows Print Spooler Privilege Escalation Vulnerability

CISA

[CVE-2024-3400] Palo Alto Networks PAN-OS Command Injection Vulnerability

CISA

[CVE-2024-3273] D-Link Multiple NAS Devices Command Injection Vulnerability

CISA

[CVE-2024-3272] D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability

CISA

[CVE-2024-29748] Android Pixel Privilege Escalation Vulnerability

CISA

[CVE-2024-29745] Android Pixel Information Disclosure Vulnerability

CISA

[CVE-2023-24955] Microsoft SharePoint Server Code Injection Vulnerability

CISA

[CVE-2019-7256] Nice Linear eMerge E3-Series OS Command Injection Vulnerability

CISA

[CVE-2021-44529] Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

CISA

[CVE-2023-48788] Fortinet FortiClient EMS SQL Injection Vulnerability

CISA

[CVE-2024-27198] JetBrains TeamCity Authentication Bypass Vulnerability

CISA

[CVE-2024-23225] Apple Multiple Products Memory Corruption Vulnerability

CISA

[CVE-2024-23296] Apple Multiple Products Memory Corruption Vulnerability

CISA

[CVE-2023-21237] Android Pixel Information Disclosure Vulnerability

CISA

[CVE-2021-36380] Sunhillo SureLine OS Command Injection Vulnerablity

CISA

[CVE-2024-21338] Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

CISA

[CVE-2023-29360] Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

CISA

[CVE-2024-1709] ConnectWise ScreenConnect Authentication Bypass Vulnerability

CISA

[CVE-2020-3259] Cisco ASA and FTD Information Disclosure Vulnerability

CISA

[CVE-2024-21410] Microsoft Exchange Server Privilege Escalation Vulnerability

CISA

[CVE-2024-21412] Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

CISA

[CVE-2024-21351] Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2023-43770] Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-21762] Fortinet FortiOS Out-of-Bound Write Vulnerability

CISA

[CVE-2023-4762] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2022-48618] Apple Multiple Products Memory Corruption Vulnerability

CISA

[CVE-2024-21893] Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2023-22527] Atlassian Confluence Data Center and Server Template Injection Vulnerability

CISA

[CVE-2024-23222] Apple Multiple Products WebKit Type Confusion Vulnerability

CISA

[CVE-2023-34048] VMware vCenter Server Out-of-Bounds Write Vulnerability

CISA

[CVE-2023-35082] Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

CISA

[CVE-2024-0519] Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

CISA

[CVE-2023-6549] Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

CISA

[CVE-2023-6548] Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

CISA

[CVE-2018-15133] Laravel Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-29357] Microsoft SharePoint Server Privilege Escalation Vulnerability

CISA

[CVE-2023-46805] Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

CISA

[CVE-2024-21887] Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

CISA

[CVE-2023-23752] Joomla! Improper Access Control Vulnerability

CISA

[CVE-2016-20017] D-Link DSL-2750B Devices Command Injection Vulnerability

CISA

[CVE-2023-41990] Apple Multiple Products Code Execution Vulnerability

CISA

[CVE-2023-27524] Apache Superset Insecure Default Initialization of Resource Vulnerability

CISA

[CVE-2023-29300] Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-38203] Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-7101] Spreadsheet::ParseExcel Remote Code Execution Vulnerability

CISA

[CVE-2023-7024] Google Chromium WebRTC Heap Buffer Overflow Vulnerability

CISA

[CVE-2023-49897] FXC AE1021, AE1021PE OS Command Injection Vulnerability

CISA

[CVE-2023-47565] QNAP VioStor NVR OS Command Injection Vulnerability

CISA

[CVE-2023-6448] Unitronics Vision PLC and HMI Insecure Default Password Vulnerability

CISA

[CVE-2023-41266] Qlik Sense Path Traversal Vulnerability

CISA

[CVE-2023-41265] Qlik Sense HTTP Tunneling Vulnerability

CISA

[CVE-2023-33107] Qualcomm Multiple Chipsets Integer Overflow Vulnerability

CISA

[CVE-2023-33106] Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

CISA

[CVE-2023-33063] Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CISA

[CVE-2022-22071] Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CISA

[CVE-2023-42917] Apple Multiple Products WebKit Memory Corruption Vulnerability

CISA

[CVE-2023-42916] Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

CISA

[CVE-2023-6345] Google Skia Integer Overflow Vulnerability

CISA

[CVE-2023-49103] ownCloud graphapi Information Disclosure Vulnerability

CISA

[CVE-2023-4911] GNU C Library Buffer Overflow Vulnerability

CISA

[CVE-2023-36584] Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

CISA

[CVE-2023-1671] Sophos Web Appliance Command Injection Vulnerability

CISA

[CVE-2020-2551] Oracle Fusion Middleware Unspecified Vulnerability

CISA

[CVE-2023-36033] Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

CISA

[CVE-2023-36025] Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2023-36036] Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

CISA

[CVE-2023-47246] SysAid Server Path Traversal Vulnerability

CISA

[CVE-2023-36844] Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

CISA

[CVE-2023-36845] Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

CISA

[CVE-2023-36846] Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2023-36847] Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2023-36851] Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2023-29552] Service Location Protocol (SLP) Denial-of-Service Vulnerability

CISA

[CVE-2023-22518] Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

CISA

[CVE-2023-46604] Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-46748] F5 BIG-IP Configuration Utility SQL Injection Vulnerability

CISA

[CVE-2023-46747] F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability

CISA

[CVE-2023-5631] Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2023-20273] Cisco IOS XE Web UI Command Injection Vulnerability

CISA

[CVE-2023-4966] Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

CISA

CVE-2023-20198: Active Exploitation of Cisco IOS XE Zero-Day Vulnerability

Rapid7

[CVE-2023-20198] Cisco IOS XE Web UI Privilege Escalation Vulnerability

CISA

[CVE-2023-21608] Adobe Acrobat and Reader Use-After-Free Vulnerability

CISA

[CVE-2023-20109] Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

CISA

[CVE-2023-41763] Microsoft Skype for Business Privilege Escalation Vulnerability

CISA

[CVE-2023-36563] Microsoft WordPad Information Disclosure Vulnerability

CISA

[CVE-2023-44487] HTTP/2 Rapid Reset Attack Vulnerability

CISA

[CVE-2023-22515] Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

CISA

[CVE-2023-40044] Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-42824] Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability

CISA

[CVE-2023-42793] JetBrains TeamCity Authentication Bypass Vulnerability

CISA

[CVE-2023-28229] Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

CISA

[CVE-2023-4211] Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CISA

[CVE-2023-5217] Google Chromium libvpx Heap Buffer Overflow Vulnerability

CISA

[CVE-2018-14667] Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability

CISA

[CVE-2023-41991] Apple Multiple Products Improper Certificate Validation Vulnerability

CISA

[CVE-2023-41992] Apple Multiple Products Kernel Privilege Escalation Vulnerability

CISA

[CVE-2023-41993] Apple Multiple Products WebKit Code Execution Vulnerability

CISA

[CVE-2023-41179] Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

CISA

[CVE-2023-28434] MinIO Security Feature Bypass Vulnerability

CISA

[CVE-2022-22265] Samsung Mobile Devices Use-After-Free Vulnerability

CISA

[CVE-2014-8361] Realtek SDK Improper Input Validation Vulnerability

CISA

[CVE-2017-6884] Zyxel EMG2926 Routers Command Injection Vulnerability

CISA

[CVE-2021-3129] Laravel Ignition File Upload Vulnerability

CISA

[CVE-2023-26369] Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability

CISA

[CVE-2023-35674] Android Framework Privilege Escalation Vulnerability

CISA

[CVE-2023-20269] Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

CISA

[CVE-2023-4863] Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2023-36761] Microsoft Word Information Disclosure Vulnerability

CISA

[CVE-2023-36802] Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

CISA

[CVE-2023-41064] Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

CISA

[CVE-2023-41061] Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

CISA

[CVE-2023-33246] Apache RocketMQ Command Execution Vulnerability

CISA

Under Siege: Rapid7-Observed Exploitation of Cisco ASA SSL VPNs

Rapid7

[CVE-2023-38831] RARLAB WinRAR Code Execution Vulnerability

CISA

[CVE-2023-32315] Ignite Realtime Openfire Path Traversal Vulnerability

CISA

[CVE-2023-38035] Ivanti Sentry Authentication Bypass Vulnerability

CISA

[CVE-2023-27532] Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2023-26359] Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-24489] Citrix Content Collaboration ShareFile Improper Access Control Vulnerability

CISA

[CVE-2023-38180] Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

CISA

[CVE-2017-18368] Zyxel P660HN-T1A Routers Command Injection Vulnerability

CISA

[CVE-2023-35081] Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

CISA

[CVE-2023-37580] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2023-38606] Apple Multiple Products Kernel Unspecified Vulnerability

CISA

[CVE-2023-35078] Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

CISA

[CVE-2023-29298] Adobe ColdFusion Improper Access Control Vulnerability

CISA

[CVE-2023-38205] Adobe ColdFusion Improper Access Control Vulnerability

CISA

[CVE-2023-3519] Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

CISA

[CVE-2023-36884] Microsoft Windows Search Remote Code Execution Vulnerability

CISA

[CVE-2022-29303] SolarView Compact Command Injection Vulnerability

CISA

[CVE-2023-37450] Apple Multiple Products WebKit Code Execution Vulnerability

CISA

[CVE-2023-32046] Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

CISA

[CVE-2023-32049] Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2023-35311] Microsoft Outlook Security Feature Bypass Vulnerability

CISA

[CVE-2023-36874] Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

CISA

[CVE-2022-31199] Netwrix Auditor Insecure Object Deserialization Vulnerability

CISA

[CVE-2021-29256] Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CISA

[CVE-2019-17621] D-Link DIR-859 Router Command Execution Vulnerability

CISA

[CVE-2019-20500] D-Link DWL-2600AP Access Point Command Injection Vulnerability

CISA

[CVE-2021-25487] Samsung Mobile Devices Out-of-Bounds Read Vulnerability

CISA

[CVE-2021-25489] Samsung Mobile Devices Improper Input Validation Vulnerability

CISA

[CVE-2021-25394] Samsung Mobile Devices Race Condition Vulnerability

CISA

[CVE-2021-25395] Samsung Mobile Devices Race Condition Vulnerability

CISA

[CVE-2021-25371] Samsung Mobile Devices Unspecified Vulnerability

CISA

[CVE-2021-25372] Samsung Mobile Devices Improper Boundary Check Vulnerability

CISA

[CVE-2023-32434] Apple Multiple Products Integer Overflow Vulnerability

CISA

[CVE-2023-32435] Apple Multiple Products WebKit Memory Corruption Vulnerability

CISA

[CVE-2023-32439] Apple Multiple Products WebKit Type Confusion Vulnerability

CISA

[CVE-2023-20867] VMware Tools Authentication Bypass Vulnerability

CISA

[CVE-2023-27992] Zyxel Multiple NAS Devices Command Injection Vulnerability

CISA

[CVE-2023-20887] Vmware Aria Operations for Networks Command Injection Vulnerability

CISA

[CVE-2020-35730] Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2020-12641] Roundcube Webmail Remote Code Execution Vulnerability

CISA

[CVE-2021-44026] Roundcube Webmail SQL Injection Vulnerability

CISA

[CVE-2016-9079] Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

CISA

[CVE-2016-0165] Microsoft Win32k Privilege Escalation Vulnerability

CISA

[CVE-2023-27997] Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2023-3079] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2023-33009] Zyxel Multiple Firewalls Buffer Overflow Vulnerability

CISA

[CVE-2023-33010] Zyxel Multiple Firewalls Buffer Overflow Vulnerability

CISA

[CVE-2023-34362] Progress MOVEit Transfer SQL Injection Vulnerability

CISA

[CVE-2023-28771] Zyxel Multiple Firewalls OS Command Injection Vulnerability

CISA

[CVE-2023-2868] Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

CISA

[CVE-2023-32409] Apple Multiple Products WebKit Sandbox Escape Vulnerability

CISA

[CVE-2023-28204] Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

CISA

[CVE-2023-32373] Apple Multiple Products WebKit Use-After-Free Vulnerability

CISA

[CVE-2004-1464] Cisco IOS Denial-of-Service Vulnerability

CISA

[CVE-2016-6415] Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

CISA

[CVE-2023-21492] Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

CISA

[CVE-2023-25717] Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

CISA

[CVE-2021-3560] Red Hat Polkit Incorrect Authorization Vulnerability

CISA

[CVE-2014-0196] Linux Kernel Race Condition Vulnerability

CISA

[CVE-2010-3904] Linux Kernel Improper Input Validation Vulnerability

CISA

[CVE-2015-5317] Jenkins User Interface (UI) Information Disclosure Vulnerability

CISA

[CVE-2016-3427] Oracle Java SE and JRockit Unspecified Vulnerability

CISA

[CVE-2016-8735] Apache Tomcat Remote Code Execution Vulnerability

CISA

[CVE-2023-29336] Microsoft Win32K Privilege Escalation Vulnerability

CISA

[CVE-2023-1389] TP-Link Archer AX-21 Command Injection Vulnerability

CISA

[CVE-2021-45046] Apache Log4j2 Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-21839] Oracle WebLogic Server Unspecified Vulnerability

CISA

[CVE-2023-28432] MinIO Information Disclosure Vulnerability

CISA

[CVE-2023-27350] PaperCut MF/NG Improper Access Control Vulnerability

CISA

[CVE-2023-2136] Google Chrome Skia Integer Overflow Vulnerability

CISA

[CVE-2017-6742] Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CISA

[CVE-2019-8526] Apple macOS Use-After-Free Vulnerability

CISA

[CVE-2023-2033] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2023-20963] Android Framework Privilege Escalation Vulnerability

CISA

[CVE-2023-29492] Novi Survey Insecure Deserialization Vulnerability

CISA

[CVE-2023-28252] Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

CISA

[CVE-2023-28205] Apple Multiple Products WebKit Use-After-Free Vulnerability

CISA

[CVE-2023-28206] Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

CISA

[CVE-2021-27876] Veritas Backup Exec Agent File Access Vulnerability

CISA

[CVE-2021-27877] Veritas Backup Exec Agent Improper Authentication Vulnerability

CISA

[CVE-2021-27878] Veritas Backup Exec Agent Command Execution Vulnerability

CISA

[CVE-2019-1388] Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

CISA

[CVE-2023-26083] Arm Mali GPU Kernel Driver Information Disclosure Vulnerability

CISA

[CVE-2022-27926] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2013-3163] Microsoft Internet Explorer Memory Corruption Vulnerability

CISA

[CVE-2017-7494] Samba Remote Code Execution Vulnerability

CISA

[CVE-2022-42948] Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

CISA

[CVE-2022-39197] Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2021-30900] Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

CISA

[CVE-2022-38181] Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CISA

[CVE-2023-0266] Linux Kernel Use-After-Free Vulnerability

CISA

[CVE-2022-3038] Google Chromium Network Service Use-After-Free Vulnerability

CISA

[CVE-2022-22706] Arm Mali GPU Kernel Driver Unspecified Vulnerability

CISA

[CVE-2023-26360] Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-23397] Microsoft Office Outlook Privilege Escalation Vulnerability

CISA

[CVE-2023-24880] Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2022-41328] Fortinet FortiOS Path Traversal Vulnerability

CISA

[CVE-2021-39144] XStream Remote Code Execution Vulnerability

CISA

[CVE-2020-5741] Plex Media Server Remote Code Execution Vulnerability

CISA

[CVE-2022-28810] Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability

CISA

[CVE-2022-33891] Apache Spark Command Injection Vulnerability

CISA

[CVE-2022-35914] Teclib GLPI Remote Code Execution Vulnerability

CISA

[CVE-2022-36537] ZK Framework AuUploader Unspecified Vulnerability

CISA

[CVE-2022-47986] IBM Aspera Faspex Code Execution Vulnerability

CISA

[CVE-2022-41223] Mitel MiVoice Connect Code Injection Vulnerability

CISA

[CVE-2022-40765] Mitel MiVoice Connect Command Injection Vulnerability

CISA

[CVE-2022-46169] Cacti Command Injection Vulnerability

CISA

[CVE-2023-21715] Microsoft Office Publisher Security Feature Bypass Vulnerability