CVE Records

Openfire administration console authentication bypass

Remote Code injection in Barracuda Email Security Gateway

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

Zyxel Multiple Firewalls Buffer Overflow Vulnerability

Zyxel Multiple Firewalls Buffer Overflow Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

Service Location Protocol (SLP) Denial-of-Service Vulnerability

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

PaperCut NG/MF Improper Authentication Vulnerability

PaperCut MF/NG Improper Access Control Vulnerability

Google Chrome Skia Integer Overflow Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Novi Survey Insecure Deserialization Vulnerability

Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

Apple Multiple Products WebKit Use-After-Free Vulnerability

Arm Mali GPU Kernel Driver Information Disclosure Vulnerability

Cisco Small Business RV Series Routers Command Injection Vulnerability

Sophos Web Appliance Command Injection Vulnerability

Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions

Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Android Framework Privilege Escalation Vulnerability

Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

Adobe ColdFusion Improper Access Control Arbitrary code execution

Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution

MinIO is vulnerable to privilege escalation on Linux/MacOS

Minio Information Disclosure in Cluster Deployment

Linux Kernel Improper Ownership Management Vulnerability

D-Link DIR-820 Router OS Command Injection Vulnerability

Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

TP-Link Archer AX-21 Command Injection Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft Outlook Elevation of Privilege Vulnerability

Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

Fortinet FortiOS Path Traversal Vulnerability

WebKitGTK Memory Corruption Vulnerability

Apple Multiple Products WebKit Type Confusion Vulnerability

IBM Aspera Faspex code execution

[20230201] - Core - Improper access check in webservice endpoints

Windows Graphics Component Remote Code Execution Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Publisher Security Feature Bypass Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

TerraMaster OS Remote Command Execution Vulnerability

Fortra GoAnywhere MFT License Response Servlet Command Injection

Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel

Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability

Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

Oracle WebLogic Server Unspecified Vulnerability

Multiple SugarCRM Products Remote Code Execution Vulnerability

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CWP Control Web Panel OS Command Injection Vulnerability

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

Mozilla Firefox Use-After-Free Vulnerability

Mozilla Firefox Use-After-Free Vulnerability

Apple iOS Type Confusion Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Unauthenticated remote arbitrary code execution

Unauthenticated Command Injection

Google Chromium V8 Type Confusion Vulnerability

D-Link DNR-322L Download of Code Without Integrity Check Vulnerability

Google Chromium GPU Heap Buffer Overflow Vulnerability

Mitel MiVoice Connect Code Injection Vulnerability

Mitel MiVoice Connect Command Injection Vulnerability

Dante Discovery Process Control Vulnerability

Windows Scripting Languages Remote Code Execution Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Netwrix Auditor Insecure Object Deserialization Vulnerability

Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

D-Link DSL-2750B Devices Command Injection Vulnerability

Fortinet Multiple Products Authentication Bypass Vulnerability

Oracle E-Business Suite Unspecified Vulnerability

Windows COM+ Event System Service Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Cisco SD-WAN Software Privilege Escalation Vulnerability

Google Chromium Mojo Insufficient Data Validation Vulnerability

Google Chromium Network Service Use-After-Free Vulnerability

Google Chromium Intents Insufficient Input Validation Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

Sophos Firewall Code Injection Vulnerability

Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability

Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

Teclib GLPI Remote Code Execution Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

DeadBolt Ransomware

D-Link Routers Buffer Overflow Vulnerability