# cisa_products

name:
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables


# cisa_vulns

name: Accellion FTA OS Command Injection Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints.


name: Accellion FTA OS Command Injection Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call.


name: Adobe ColdFusion Authentication Bypass Vulnerability
added_at: 2022-03-07
action: Apply updates per vendor instructions.
due_at: 2022-09-07
description:
Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.


name: Adobe BlazeDS Information Disclosure Vulnerability
added_at: 2022-03-07
action: Apply updates per vendor instructions.
due_at: 2022-09-07
description:
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability which allows for information disclosure.


name: Accellion FTA SQL Injection Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html.


name: Accellion FTA SSRF Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html.


name: Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


name: Adobe Acrobat and Reader Use-After-Free Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


name: Adobe ColdFusion Deserialization of Untrusted Data vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution.


name: Adobe ColdFusion RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution.


name: Adobe Flash Player Use after Free vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.


name: Amcrest Camera and NVR Buffer Overflow Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.


name: Apache Struts Multiple Versions Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 contains a vulnerability which can lead to RCE.


name: Apache HTTP Server 2.4.49 and 2.4.50 Path Traversal
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Apache HTTP server vulnerabilities allow an attacker to use a path traversal attack to map URLs to files outside the expected document root and perform RCE.


name: Apache HTTP Server Path Traversal Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.


name: Apache HTTP Server scoreboard vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.


name: Apache Shiro 1.2.4 Cookie RememberME Deserial RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.


name: Apache Solr 5.0.0-8.3.1 Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configset could contain renderable, potentially malicious, templates. Parameter provided templates are disabled by default, but can be enabled by setting `params.resource.loader.enabled` by defining a response writer with that setting set to `true`. Defining a response writer requires configuration API access. Solr 8.4 removed the params resource loader entirely, and only enables the configset-provided template rendering when the configset is `trusted` (has been uploaded by an authenticated user).


name: Apache Struts Forced OGNL Double Evaluation RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.


name: Apache Struts Jakarta Multipart parser exception handling vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.


name: Apache Struts 2.3 to 2.3.34 and 2.5 to 2.5.16 Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 contain a vulnerability which can allow for remote code execution.


name: Apple FaceTime Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.


name: Apple iOS "FORCEDENTRY" Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
An integer overflow was addressed with improved input validation vulnerability affecting iOS devices that allows for remote code execution.


name: Apple iOS and macOS FontParser RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A memory corruption issue was addressed with improved input validation. Processing a maliciously crafted font may lead to arbitrary code execution.


name: Apple iOS Mail OOB Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.


name: Apple WebKit Browser Engine Use After Free Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Use after free issue. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.


name: Apple iOS Privilege Escalation and Code Execution Chain
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited.


name: Apple iOS Privilege Escalation and Code Execution Chain
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.


name: Apple iOS Webkit Browser Engine XSS
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited.


name: Apple iOS Webkit Storage Use-After-Free RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.


name: Apple macOS Input Validation Error
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited.


name: Apple macOS Policy Subsystem Gatekeeper Bypass
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited.


name: Apple WebKit Browser Engine Memory Corruption Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Memory corruption issue. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.


name: Apple XNU Kernel Type Confusion
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Apple XNU kernel contains a type confusion vulnerability which allows a malicious application to execute arbitrary code with kernel privileges.


name: Apple 11-13.5 XNU Kernel Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A memory consumption issue was addressed with improved memory handling. An application may be able to execute arbitrary code with kernel privileges.


name: Arcadyan Buffalo Firmware Multiple Versions Path Traversal
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
A path traversal vulnerability in Arcadyan firmware could allow unauthenticated remote attackers to bypass authentication. It impacts many routers.


name: Arm Trusted Firmware M through 1.2 Denial of Service
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode. This vulnerability has known active exploitation against Yealink Device Management servers. It is assessed this product utilizes the affected Arm firmware.


name: Arm Mali GPU Kernel Boundary Error Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r8p0 through r30p0.


name: Arm Mali GPU Kernel Use-After-Free Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0.


name: Atlassian Confluence Path Traversal Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this path traversal vulnerability to write files to arbitrary locations which can lead to remote code execution on systems that run a vulnerable version of Confluence Server or Data Center. All versions of Confluence Server from 2.0.0 before 6.6.13 (the fixed version for 6.6.x), from 6.7.0 before 6.12.4 (the fixed version for 6.12.x), from 6.13.0 before 6.13.4 (the fixed version for 6.13.x), from 6.14.0 before 6.14.3 (the fixed version for 6.14.x), and from 6.15.0 before 6.15.2 are affected by this vulnerability.


name: Atlassian Confluence Server < 6.13.23, 6.14.0 - 7.12.5 Arbitrary Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Atlassian Confluence Server The affected versions are before version 6.13.23, from version 6.14.0 before 7.4.11, from version 7.5.0 before 7.11.6, and from version 7.12.0 before 7.12.5 contains an OGNL injection vulnerability which allows an attacker to execute arbitrary code.


name: Atlassian Crowd and Crowd Data Center RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins, which permits remote code execution on systems running a vulnerable version of Crowd or Crowd Data Center. All versions of Crowd from version 2.1.0 before 3.0.5, from version 3.1.0 before 3.1.6, from version 3.2.0 before 3.2.8, from version 3.3.0 before 3.3.5, and from version 3.4.0 before 3.4.4 are affected by this vulnerability.


name: Remote code execution via Widget Connector macro Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection.


name: BQE BillQuick Web Suite Versions Prior to 22.0.9.1 (from 2018 through 2021) Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
BQE BillQuick Web Suite 2018 through 2021 prior to 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation.


added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
name:
Cisco Adaptive Security Appliance and Cisco Fire Power Threat Defense directory traversal sensitive file read

description:
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files on a targeted system. The vulnerability is due to a lack of proper input validation of URLs in HTTP requests processed by an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device. The web services file system is enabled when the affected device is configured with either WebVPN or AnyConnect features. This vulnerability cannot be used to obtain access to ASA or FTD system files or underlying operating system (OS) files.


name: Cisco ASA and FTD XSS Vulnerabilities
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web services interface of an affected device. The vulnerabilities are due to insufficient validation of user-supplied input by the web services interface of an affected device. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive, browser-based information. Note: These vulnerabilities affect only specific AnyConnect and WebVPN configurations.


name: Cisco HyperFlex HX Command Injection Vulnerabilities
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device.


name: Cisco IOS and IOS XE Software Smart Install Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device, which could have the following impacts: Triggering a reload of the device, Allowing the attacker to execute arbitrary code on the device, Causing an indefinite loop on the affected device that triggers a watchdog crash. Cisco Bug IDs: CSCvg76186.


name: Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of string input from certain fields in Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to cause a stack overflow, which could allow the attacker to execute arbitrary code with administrative privileges on an affected device. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).


name: Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue management for Internet Group Management Protocol (IGMP) packets. An attacker could exploit this vulnerability by sending crafted IGMP traffic to an affected device. A successful exploit could allow the attacker to cause memory exhaustion, resulting in instability of other processes. These processes may include, but are not limited to, interior and exterior routing protocols.


name: Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol (IGMP) process or make it consume available memory and eventually crash. The memory consumption may negatively impact other processes that are running on the device. These vulnerabilities are due to the incorrect handling of IGMP packets. An attacker could exploit these vulnerabilities by sending crafted IGMP traffic to an affected device. A successful exploit could allow the attacker to immediately crash the IGMP process or cause memory exhaustion, resulting in other processes becoming unstable. These processes may include, but are not limited to, interior and exterior routing protocols.


name: Cisco IP Phones Web Server DoS and RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.


name: Cisco RV320 and RV325 Routers Improper Access Control Vulnerability (COVID-19-CTI list)
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information.


name: Cisco Adaptive Security Appliance Firepower Threat Defense DoS/Directory Traversal vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. It is also possible on certain software releases that the ASA will not reload, but an attacker could view sensitive system information without authentication by using directory traversal techniques. The vulnerability is due to lack of proper input validation of the HTTP URL. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. An exploit could allow the attacker to cause a DoS condition or unauthenticated disclosure of information. This vulnerability applies to IPv4 and IPv6 HTTP traffic. This vulnerability affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software that is running on the following Cisco products: 3000 Series Industrial Security Appliance (ISA), ASA 1000V Cloud Firewall, ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Adaptive Security Virtual Appliance (ASAv), Firepower 2100 Series Security Appliance, Firepower 4100 Series Security Appliance, Firepower 9300 ASA Security Module, FTD Virtual (FTDv). Cisco Bug IDs: CSCvi16029.


name: Citrix StoreFront Server Multiple Versions XML External Entity (XXE)
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Citrix StoreFront Server contains a XXE processing vulnerability that could allow an unauthenticated attacker to retrieve potentially sensitive information.


name: Citrix ADC, Citrix Gateway, Citrix SDWAN WANOP Unauthenticated Authorization Bypass
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.


name: Citrix ADC, Citrix Gateway, Citrix SDWAN WANOP Unauthenticated Authorization Bypass
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.


name: Citrix Application Delivery Controller and Citrix Gateway Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Issue in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0 allowing Directory Traversal.


name: Citrix Workspace (for Windows) Prior to 1904 Improper Access Control
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Citrix Workspace app and Receiver for Windows prior to version 1904 contains an incorrect access control vulnerability which allows for code execution.


name: D-Link DIR-825 R1 Through 3.0.1 Before 11/2020 Buffer Overflow
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20 contain a vulnerability in the web interface allowing for remote code execution.


name: D-Link DNS-320 Command Injection RCE Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution.


name: DotNetNuke 9.2-9.2.2 Encryption Algorithm Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.


name: DotNetNuke 9.2-9.2.2 Encryption Algorithm Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.


name: DotNetNuke before 9.1.1 Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."


name: Docker Desktop Community Edition Privilege Escalation
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.


name: DrayTek Vigor Router Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI.


name: Drupal module configuration vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.


name: GitLab Community and Enterprise Editions From 11.9 Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Anyone with the ability to upload an image that goes through the GitLab Workhorse could achieve RCE via a specially crafted file.


name: Exim Buffer Overflow Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Issue in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.


name: EyesOfNetwork 5.3 Insufficient Credential Protection
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Issue in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.


name: EyesOfNetwork 5.3 Privilege Escalation Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Issue in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.


name: F5 BIG IP Traffic Management User Interface RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.


name: ForgeRock Access Management Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* request to the server.


name: Fortinet FortiOS Default Configuration Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.


name: Fortinet FortiOS SSL VPN 2FA Authentication Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username.


name: Fortinet FortiOS SSL VPN credential exposure vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.


name: Google Chrome for Android Heap Overflow Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.


name: Google Chrome FreeType Memory Corruption
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


name: Google Chrome Heap Buffer Overflow in WebAudio Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


name: Google Chrome Site Isolation Component Use-After-Free RCE vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.


name: Chromium V8 Implementation Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


name: Chromium V8 Engine Incorrect Implementation vulnerabililty
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


name: Chromium V8 JavaScript Rendering Engine Heap Buffer Overflow Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


name: Google Chrome Use-After-Free
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Use-after-free weakness in Portals, Google's new web page navigation system for Chrome. Successful exploitation can let attackers to execute code.


name: Chromium V8 Engine Type Confusion
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


name: Chromium V8 Engine Type Confusion Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


name: Google Chrome WebGL Use after Free
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


name: Chromium Blink Use-After-Free Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


name: Chromium V8 JavaScript Engine Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.


name: Chromium V8 Engine Use-After-Free Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


name: Chromium V8 Engine Input Validation Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


name: Google Chrome Browser V8 Arbitrary Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


name: IBM Data Risk Manager Arbritary File Download
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.


name: IBM Data Risk Manager Authentication Bypass
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.


name: IBM Data Risk Manager Command Injection
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533.


name: IBM Planning Analytics configuration overwrite vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.


name: ImageMagick Ephemeral Coder Arbitrary File Deletion Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.


name: ImageMagick SSRF Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.


name: MobileIron Core, Connector, Sentry, and RDM RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability that allows remote attackers to execute arbitrary code via unspecified vectors.


name: Liferay Portal prior to 7.2.1 CE GA2 RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).


name: McAfee Total Protection MTP Arbitrary Process Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.


name: Micro Focus Access Manager Earlier Than 5.0 Information Leakage
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Micro Focus Access Manager versions prior to 5.0 contain a vulnerability which allows for information leakage.


name: Micro Focus Operation Bridge Report (OBR) Server RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.


name: Microsoft Windows Group Policy Privilege Escalation
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows remote authenticated users to obtain sensitive credential information and consequently gain privileges by leveraging access to the SYSVOL share, as exploited in the wild in May 2014, aka "Group Policy Preferences Password Elevation of Privilege Vulnerability."


name: Microsoft Windows Kernel 'Win32k.sys' Local Privilege Escalation Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The kernel-mode driver allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0165.


name: Microsoft Browser Memory Corruption Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory.


name: Microsoft Windows Media Center RCE vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Media Center allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka "Windows Media Center Remote Code Execution Vulnerability."


name: Microsoft Elevation of Privilege Installer Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.


name: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerabilities
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2021-31201.


name: Windows Kernel Elevation of Privilege
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2021-31979, CVE-2021-34514.


name: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerabilities
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2021-31199.


name: Windows Kernel Elevation of Privilege Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2021-33771, CVE-2021-34514.


name: Microsoft Windows Type 1 Font Parsing Remote Code Execution Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format. This CVE ID is unique from CVE-2020-1020.


name: Microsoft Exchange RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Microsoft Exchange Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2020-17117, CVE-2020-17132, CVE-2020-17141, CVE-2020-17142.


name: Windows Kernel Elevation of Privilege vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.


name: Microsoft Windows Type 1 Font Parsing Remote Code Execution Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format. This CVE ID is unique from CVE-2020-0938.


name: Microsoft Exchange Server Elevation of Privilege Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Microsoft Exchange Server Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2021-33768, CVE-2021-34470.


name: Windows Server 2003 R2 IIS WEBDAV buffer overflow RCE vulnerability (COVID-19-CTI list)
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request.


name: Microsoft Exchange Server Key Validation Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.


name: Windows SMBv1 Remote Code Execution Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The SMBv1 server allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.


added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
name:
Microsoft Windows Vista, 7, 8.1, 10 and Windows Server 2008, 2012, and 2016 Win32k Privilege Escalation Vulnerability

description:
The kernel-mode drivers allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability"


name: "BlueKeep" Windows Remote Desktop RCE Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests.


name: Microsoft Exchange Server Remote Code Execution Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2021-31196, CVE-2021-31206.


name: Windows win32k Escalation Kernel Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.


name: Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.


name: "SigRed" - Windows DNS Server Remote Code Execution Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2020-07-24
description:
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests.


name: Windows win32k Escalation Kernel Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.


name: .NET Framework Remote Code Execution vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application.


name: Microsoft Internet Explorer Scripting Engine JScript Memory Corruption Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2018-8643.


name: Windows win32k.sys Driver Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.


name: Windows Winsock (ws2ifsl.sys) vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.


name: Microsoft Office 2007 - 2016 Backdoor Exploitation Chain
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".


name: Microsoft Office 2007 - 2016 Backdoor Exploitation Chain
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.


name: Microsoft MSCOMCTL.OCX RCE Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document, or (c) .rtf file that triggers "system state" corruption, as exploited in the wild in April 2012, aka "MSCOMCTL.OCX RCE Vulnerability.


name: Microsoft Office Memory Corruption vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."


name: Microsoft MSHTML Engine Remote Code Execution Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability.


name: Microsoft Office memory corruption vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11884.


name: Internet Explorer 9-11 Scripting Engine Memory Corruption Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.


name: Microsoft Office RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Microsoft Office Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2021-24108, CVE-2021-27057.


name: Internet Explorer 9-11 Scripting Engine Memory Corruption Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. This CVE ID is unique from CVE-2019-1221.


name: Microsoft Office/WordPad Remote Code Execution Vulnerability with Windows API
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."


name: Scripting Engine Memory Corruption Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1555, CVE-2020-1570.


name: Internet Explorer 9-11 Scripting Engine Memory Corruption Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. This CVE ID is unique from CVE-2019-1426, CVE-2019-1427, CVE-2019-1428.


name: Microsoft Outlook Security Feature Bypass Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."


name: Internet Explorer Scripting Engine Memory Corruption Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. This CVE ID is unique from CVE-2020-0970.


name: NetLogon Elevation of Privilege Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2020-09-21
description:
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC), aka 'Netlogon Elevation of Privilege Vulnerability'.


name: Microsoft OWA Exchange Control Panel (ECP) Exploit Chain
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-04-16
description:
Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2021-26412, CVE-2021-26854, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065, CVE-2021-27078.


name: Microsoft OWA Exchange Control Panel (ECP) Exploit Chain
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-04-16
description:
Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26857, CVE-2021-27065, CVE-2021-27078.


name: Microsoft OWA Exchange Control Panel (ECP) Exploit Chain
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-04-16
description:
Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27078.


name: Microsoft Windows Win32k Privilege Escalation Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory


name: Windows 10 API/ECC Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2020-01-29
description:
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.


name: Microsoft SharePoint Remote Code Execution Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.


name: Microsoft .NET Framework RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.


name: Windows 7 win32k.sys Driver Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.


name: Microsoft Unified Messaging Deserialization Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-04-16
description:
Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26858, CVE-2021-27065, CVE-2021-27078.


name: Microsoft .NET Framework, SharePoint Server, and Visual Studio RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input.


name: Windows CLFS vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.


name: Microsoft Visio/Office OLE DLL Side Loading vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."


name: Windows Error Reporting Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.


name: Microsoft Windows Common Log File System Driver Privilege Escalation
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Microsoft Windows Common Log File System Driver contains an unspecified vulnerability which allows for privilege escalation.


name: Mozilla Firefox 74 and Firefox ESR 68.6 nsDocShell vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A race condition can cause a use-after-free when running the nsDocShell destructor. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.


name: Mozilla Firefox 74 and Firefox ESR 68.6 ReadableStream vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A race condition can cause a use-after-free when handling a ReadableStream. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.


name: Mozilla Firefox IonMonkey JIT compiler Type Confusion Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. This vulnerability affects Firefox ESR < 68.4.1, Thunderbird < 68.4.1, and Firefox < 72.0.1


name: Nagios XI Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile (profile.php?cmd=download), is executed as root via a passwordless sudo entry; the script executes check_plugin, which is owned by the nagios user


name: Netgear ProSAFE Plus JGS516PE RCE vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.


name: Netis WF2419 Router Tracert RCE vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123


name: Oracle Coherence Deserialization RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence


name: Oracle Reports Developer Arbitrary File Read and Upload vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component.


name: Oracle Solaris Pluggable Authentication Module vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris.


name: Oracle WebLogic Server RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar.


name: Oracle WebLogic Server RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.


name: Oracle WebLogic Server RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server.


name: Progress Telerik UI for ASP.NET deserialization bug
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Contains a .NET deserialization vulnerability in the RadAsyncUpload function that can result in remote code execution.


name: Pulse Connect Secure (PCS) Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-04-23
description:
Vulnerability to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway.


name: Pulse Connect Secure Arbitrary Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-04-23
description:
A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution.


name: Pulse Connect Secure Arbitrary File Upload Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-04-23
description:
A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.


name: Pulse Connect Secure Collaboration Suite Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-04-23
description:
A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously crafted meeting room.


name: Pulse Connect Secure RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-04-23
description:
A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction.


name: Pulse Connect Secure Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-04-23
description:
Allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature.


name: Pulse Secure VPN arbitrary file reading vulnerability (COVID-19-CTI list)
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-04-23
description:
An unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability.


name: Pulse Secure Connect and Policy Secure Multiple Versions Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Pulse Secure's Connect and Policy secure platforms contain a vulnerability in the admin web interface which allows an attacker to inject and execute commands.


name: Qualcomm Improper Error Handling Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Improper handling of address deregistration on failure can lead to new GPU address allocation failure.


name: Qualcomm Use-After-Free Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously


name: rConfig RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter.


name: Roundcube Webmail File Disclosure Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows unauthorized access to arbitrary files on the host's filesystem, including configuration files. The issue is related to file-based attachment plugins and _task=settings&_action=upload-display&_from=timezone requests.


name: SaltStack directory traversal failure to sanitize untrusted input
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.


name: SaltStack Salt Authentication Bypass
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication.


name: SaltStack Through 3002 Shell Injection Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.


name: SAP NetWeaver AS JAVA CRM RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs.


name: SAP NetWeaver AS JAVA RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary code via an HTTP or HTTPS request.


name: SAP NetWeaver AS JAVA XXE Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwlconn URI, aka SAP Security Note 2296909.


name: SAP Netweaver JAVA remote unauthenticated access vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system.


name: SAP Solution Manager Missing Authentication Check Complete Compromise of SMD Agents vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager.


name: SAP NetWeaver AS Java 7.1 - 7.5 Directory Traversal Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the fileName parameter to CrashFileDownloadServlet, aka SAP Security Note 2234971.


name: SIMalliance Toolbox (S@T) Browser Command and Control Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.


name: SolarWinds Orion API Authentication Bypass Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.


name: SolarWinds Serv-U Remote Memory Escape Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability.


name: SolarWinds Virtualization Manager Privilege Escalation Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."


name: SonicWall Email Security Privilege Escalation Exploit Chain
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.


name: SonicWall SMA100 9.0.0.3 and Earlier SQL Injection
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Vulnerability in SonicWall SMA100 versions 9.0.0.3 and earlier allow an unauthenticated user to gain read-only access to unauthorized resources.


name: SonicWall Email Security Privilege Escalation Exploit Chain
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.


name: SonicWall Email Security Privilege Escalation Exploit Chain
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.


name: SonicWall SSL VPN SMA100 SQL Injection Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information in SMA100 build version 10.x.


name: Sophos XG Firewall SQL Injection Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A SQL injection issue that causes affected devices configured with either the administration (HTTPS) service or the User Portal exposed on the WAN zone.


name: Sumavision EMR 3.0 CSRF Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_user<*1*>administrator<*1*>123456 request.


name: TeamViewer Desktop Bypass Remote Login
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Allows a bypass of remote-login access control because the same key is used for different customers' installations.


name: Telerik UI for ASP.NET AJAX and Progress Sitefinity Cryptographic Weakness Vuln
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey.


name: Tenda AC11 Up to 02.03.01.104_CN Stack Buffer Overflow
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Tenda AC11 devices with firmware through 02.03.01.104_CN contain a stack buffer overflow vulnerability in /goform/setmac which allows for arbitrary execution.


name: Tenda Router Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.


name: Tenda Router Command Injection Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Issue on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input.


name: ThinkPHP Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Issue in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the s=index/\think\Request/input&filter=phpinfo&data=1 query string.


name: ThinkPHP Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.


name: Trend Micro Antivirus 0day Traversal Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE).


name: Trend Micro Apex One (2019) and OfficeScan XG migration tool remote code execution vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE).


added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
name:
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agent content validation escape vulnerability

description:
Agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components.


name: Trend Micro Apex One and OfficeScan XG Improper Access Control Privilege Escalation
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation


name: Trend Micro Apex One and OfficeScan XG Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login.


name: Trend Micro Systems Multiple Products Buffer Overflow - Arbitrary File Upload
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.


name: Trend Micro Systems Multiple Products Buffer Overflow - Arbitrary File Upload
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product's management console in order to exploit this vulnerability.


name: vBulletin PHP Module RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.


name: vBulletin PHP Module RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759.


name: VMWare ESXi/Horizon DaaS Appliances Heap-Overwrite Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
OpenSLP as used in ESXi and the Horizon DaaS appliances have a heap overwrite issue. A malicious actor with network access to port 427 on an ESXi host or on any Horizon DaaS management appliance may be able to overwrite the heap of the OpenSLP service resulting in remote code execution.


name: OpenSLP as used in VMware ESXi
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.


name: VMWare vCenter Server File Upload
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
VMWare vCenter Server file upload vulnerability in the vmware-analytics service that allows to execute code on vCenter Server.


name: VMWare vCenter Server Info Disclosure Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.


name: VMWare vCenter Server RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.


name: VMWare vCenter Server Remote Code Execution
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.


added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
name:
VMWare Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector Command Injection vulnerability

description:
VMWare Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.


name: WordPress File Manager RCE
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension.


name: WordPress Snap Creek Duplicator and Duplicator Pro plugins Directory Traversal
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.


name: WordPress Social-Warfare plugin XSS
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro.


name: Yealink Device Management Server Pre-Authorization SSRF
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication


name: Zoho Corp. ManageEngine ADSelfService Plus Version 6113 and Earlier Authentication Bypass
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2021-11-17
description:
Zoho ManageEngine ADSelfService Plus versions 6113 and earlier contain an authentication bypass vulnerability which allows for RCE.


name: Zoho ManageEngine Desktop Central Remote Code Execution Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. This is related to the CewolfServlet and MDMLogUploaderServlet servlets.


name: Zoho ManageEngine ServiceDesk Plus Arbitrary File Upload Vulnerability
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.


name: ZyXEL Unified Security Gateway Undocumented Administrator Account with Default Credentials
added_at: 2021-11-03
action: Apply updates per vendor instructions.
due_at: 2022-05-03
description:
Firmware version 4.60 of ZyXEL USG devices contains an undocumented account (zyfwp) with an unchangeable password.


name: ExifTool Remote Code Execution
added_at: 2021-11-17
action: Apply updates per vendor instructions.
due_at: 2021-12-01
description:
Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image


name: Microsoft Exchange Server Remote Code Execution
added_at: 2021-11-17
action: Apply updates per vendor instructions.
due_at: 2021-12-01
description:
An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.


name: Microsoft Excel Security Feature Bypass
added_at: 2021-11-17
action: Apply updates per vendor instructions.
due_at: 2021-12-01
description:
A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.


name: Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
added_at: 2021-12-01
action: Apply updates per vendor instructions.
due_at: 2022-06-01
description:
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables


name: MikroTik Router OS Directory Traversal Vulnerability
added_at: 2021-12-01
action: Apply updates per vendor instructions.
due_at: 2022-06-01
description:
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.


name: Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
added_at: 2021-12-01
action: Apply updates per vendor instructions.
due_at: 2021-12-15
description:
Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication


name: Apache HTTP Server-Side Request Forgery (SSRF)
added_at: 2021-12-01
action: Apply updates per vendor instructions.
due_at: 2021-12-15
description:
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.


name: Zoho ManageEngine ServiceDesk Plus Remote Code Execution
added_at: 2021-12-01
action: Apply updates per vendor instructions.
due_at: 2021-12-15
description:
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution


name: Zoho Corp. Desktop Central Authentication Bypass Vulnerability
added_at: 2021-12-10
action: Apply updates per vendor instructions.
due_at: 2021-12-24
description:
Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server.


name: Linux Kernel Improper Privilege Management Vulnerability
added_at: 2021-12-10
action: Apply updates per vendor instructions.
due_at: 2022-06-10
description:
Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability which allows local users to obtain root access.


name: Realtek Jungle SDK Remote Code Execution
added_at: 2021-12-10
action: Apply updates per vendor instructions.
due_at: 2021-12-24
description:
RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.


name: Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
added_at: 2021-12-10
action: Apply updates per vendor instructions.
due_at: 2022-06-10
description:
Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.


name: Fortinet FortiOS Arbitrary File Download
added_at: 2021-12-10
action: Apply updates per vendor instructions.
due_at: 2021-12-24
description:
Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files.


name: Embedthis GoAhead Remote Code Execution
added_at: 2021-12-10
action: Apply updates per vendor instructions.
due_at: 2022-06-10
description:
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.


name: Red Hat Jboss Application Server Remote Code Execution
added_at: 2021-12-10
action: Apply updates per vendor instructions.
due_at: 2022-06-10
description:
The Jboss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.


name: Red Hat Linux JBoss Seam 2 Remote Code Execution
added_at: 2021-12-10
action: Apply updates per vendor instructions.
due_at: 2022-06-10
description:
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.


name: Fuel CMS SQL Injection Vulnerability
added_at: 2021-12-10
action: Apply updates per vendor instructions.
due_at: 2022-06-10
description:
FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.


name: Pi-Hole AdminLTE Remote Code Execution
added_at: 2021-12-10
action: Apply updates per vendor instructions.
due_at: 2022-06-10
description:
Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.


name: MongoDB mongo-express Remote Code Execution
added_at: 2021-12-10
action: Apply updates per vendor instructions.
due_at: 2022-06-10
description:
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method.


name: Apache Log4j2 Remote Code Execution
added_at: 2021-12-10
action: Apply updates per vendor instructions.
due_at: 2021-12-24
description:
Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.


name: Microsoft Windows AppX Installer Spoofing Vulnerability
added_at: 2021-12-15
action: Apply updates per vendor instructions.
due_at: 2021-12-29
description:
Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.


name: Google Chromium V8 Engine Use-After-Free Vulnerability
added_at: 2021-12-15
action: Apply updates per vendor instructions.
due_at: 2021-12-29
description:
Google Chromium V8 Engine contains a use-after-free vulnerability which can allow a remote attacker to execute arbitrary code on the target system.


name: Vmware vCenter Server Improper Access Control
added_at: 2022-01-10
action: Apply updates per vendor instructions.
due_at: 2022-01-24
description:
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.


name: Hikvision Improper Input Validation
added_at: 2022-01-10
action: Apply updates per vendor instructions.
due_at: 2022-01-24
description:
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation.


name: Google Chrome Prior to 81.0.4044.92 Use-After-Free
added_at: 2022-01-10
action: Apply updates per vendor instructions.
due_at: 2022-07-10
description:
Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a Remote attacker to execute arbitrary code via a crafted HTML page.


name: Microsoft Win32K Elevation of Privilege
added_at: 2022-01-10
action: Apply updates per vendor instructions.
due_at: 2022-07-10
description:
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.


name: Microsoft WinVerifyTrust function Remote Code Execution
added_at: 2022-01-10
action: Apply updates per vendor instructions.
due_at: 2022-07-10
description:
A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.


name: Oracle WebLogic Server, Injection
added_at: 2022-01-10
action: Apply updates per vendor instructions.
due_at: 2022-07-10
description:
Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).


name: Synacor Zimbra Collaboration Suite Improper Restriction of XML External Entity Reference
added_at: 2022-01-10
action: Apply updates per vendor instructions.
due_at: 2022-07-10
description:
Improper Restriction of XML External Entity Reference vulnerability affecting Synacor Zimbra Collaboration Suite.


name: Fortinet FortiOS and FortiProxy Improper Authorization
added_at: 2022-01-10
action: Apply updates per vendor instructions.
due_at: 2022-07-10
description:
An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.


name: Fortinet FortiOS and FortiProxy Out-of-bounds Write
added_at: 2022-01-10
action: Apply updates per vendor instructions.
due_at: 2022-07-10
description:
A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.


name: Palo Alto Networks PAN-OS Remote Code Execution
added_at: 2022-01-10
action: Apply updates per vendor instructions.
due_at: 2022-07-10
description:
Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.


name: Exim Mail Transfer Agent (MTA) Improper Input Validation
added_at: 2022-01-10
action: Apply updates per vendor instructions.
due_at: 2022-07-10
description:
Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.


name: IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
added_at: 2022-01-10
action: Apply updates per vendor instructions.
due_at: 2022-07-10
description:
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands


name: FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit
added_at: 2022-01-10
action: Apply updates per vendor instructions.
due_at: 2022-01-24
description:
A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.


name: October CMS Improper Authentication
added_at: 2022-01-18
action: Apply updates per vendor instructions.
due_at: 2022-02-01
description:
In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request.


name: Aviatrix Controller Unrestricted Upload of File
added_at: 2022-01-18
action: Apply updates per vendor instructions.
due_at: 2022-02-01
description:
Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.


name: Microsoft Exchange Server Information Disclosure
added_at: 2022-01-18
action: Apply updates per vendor instructions.
due_at: 2022-02-01
description:
Microsoft Exchange Servers contain an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.


name: VMware Server Side Request Forgery in vRealize Operations Manager API
added_at: 2022-01-18
action: Apply updates per vendor instructions.
due_at: 2022-02-01
description:
Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.


name: System Information Library for Node.JS Command Injection
added_at: 2022-01-18
action: Apply updates per vendor instructions.
due_at: 2022-02-01
description:
In this vulnerability, an attacker can send a malicious payload that will exploit the name parameter. After successful exploitation, attackers can execute remote.


name: F5 BIG-IP Traffic Management Microkernel Buffer Overflow
added_at: 2022-01-18
action: Apply updates per vendor instructions.
due_at: 2022-02-01
description:
The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls.


name: Oracle Corporation Business Intelligence Enterprise Edition Path Transversal
added_at: 2022-01-18
action: Apply updates per vendor instructions.
due_at: 2022-07-18
description:
Path traversal vulnerability, where an attacker can target the preview FilePath parameter of the getPreviewImage function to get access to arbitrary system file.


name: Apache Airflow Command Injection
added_at: 2022-01-18
action: Apply updates per vendor instructions.
due_at: 2022-07-18
description:
A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow.


name: Apache Airflow's Experimental API Authentication Bypass
added_at: 2022-01-18
action: Apply updates per vendor instructions.
due_at: 2022-07-18
description:
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.


name: Apache Struts 1 ActionForm Denial of Service Vulnerability
added_at: 2022-01-21
action: Apply updates per vendor instructions.
due_at: 2022-07-21
description:
ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability which allows for denial-of-service.


name: Apache Struts 2 Improper Input Validation Vulnerability
added_at: 2022-01-21
action: Apply updates per vendor instructions.
due_at: 2022-07-21
description:
The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability which allows for remote code execution.


name: SolarWinds Serv-U Improper Input Validation Vulnerability
added_at: 2022-01-21
action: Apply updates per vendor instructions.
due_at: 2022-02-04
description:
SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability which allows attackers to build and send queries without sanitization.


name: Apple IOMobileFrameBuffer Memory Corruption Vulnerability
added_at: 2022-01-28
action: Apply updates per vendor instructions.
due_at: 2022-02-11
description:
Apple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code with kernel privileges.


name: SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
added_at: 2022-01-28
action: Apply updates per vendor instructions.
due_at: 2022-02-11
description:
SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution.


name: Grandstream Networks UCM6200 Series SQL Injection Vulnerability
added_at: 2022-01-28
action: Apply updates per vendor instructions.
due_at: 2022-07-28
description:
Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.


added_at: 2022-01-28
action: Apply updates per vendor instructions.
due_at: 2022-07-28
name:
Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

description:
Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.


added_at: 2022-01-28
description: Intel products contain a vulnerability which can allow attackers to perform privilege escalation.
action: Apply updates per vendor instructions.
due_at: 2022-07-28
name:
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability


name: Microsoft Internet Explorer Use-After-Free Vulnerability
added_at: 2022-01-28
action: Apply updates per vendor instructions.
due_at: 2022-07-28
description:
Microsoft Internet Explorer 6 - 11 contains a use-after-free vulnerability which can allow for arbitrary code execution or denial of service.


name: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
added_at: 2022-01-28
action: Apply updates per vendor instructions.
due_at: 2022-07-28
description:
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.


name: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
added_at: 2022-01-28
action: Apply updates per vendor instructions.
due_at: 2022-07-28
description:
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.


name: Microsoft Windows SAM Local Privilege Escalation Vulnerability
added_at: 2022-02-10
action: Apply updates per vendor instructions.
due_at: 2022-02-24
description:
If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.


name: Microsoft SMBv3 Remote Code Execution Vulnerability
added_at: 2022-02-10
action: Apply updates per vendor instructions.
due_at: 2022-08-10
description:
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.


name: Apache Struts 1 Improper Input Validation Vulnerability
added_at: 2022-02-10
action: Apply updates per vendor instructions.
due_at: 2022-08-10
description:
The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.


name: Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
added_at: 2022-02-10
action: Apply updates per vendor instructions.
due_at: 2022-08-10
description:
Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file


name: Microsoft Win32k Privilege Escalation Vulnerability
added_at: 2022-02-10
action: Apply updates per vendor instructions.
due_at: 2022-08-10
description:
Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory. 


name: Microsoft SMBv1 Remote Code Execution Vulnerability
added_at: 2022-02-10
action: Apply updates per vendor instructions.
due_at: 2022-08-10
description:
The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.


name: Apache ActiveMQ Improper Input Validation Vulnerability
added_at: 2022-02-10
action: Apply updates per vendor instructions.
due_at: 2022-08-10
description:
The Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request


name: D-Link DIR-645 Router Remote Code Execution
added_at: 2022-02-10
action: The impacted product is end-of-life and should be disconnected if still in use.
due_at: 2022-08-10
description:
D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.


name: Microsoft HTTP.sys Remote Code Execution Vulnerability
added_at: 2022-02-10
action: Apply updates per vendor instructions.
due_at: 2022-08-10
description:
Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability which allows for remote code execution.


name: Apple OS X Authentication Bypass Vulnerability
added_at: 2022-02-10
action: Apply updates per vendor instructions.
due_at: 2022-08-10
description:
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.


name: Apple OS X Heap-Based Buffer Overflow Vulnerability
added_at: 2022-02-10
action: Apply updates per vendor instructions.
due_at: 2022-08-10
description:
Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context.


name: Apple Webkit Remote Code Execution Vulnerability
added_at: 2022-02-11
action: Apply updates per vendor instructions.
due_at: 2022-02-25
description:
Apple Webkit, which impacts iOS, iPadOS, and macOS, contains a vulnerability which allows for remote code execution.


name: Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability
added_at: 2022-02-15
action: Apply updates per vendor instructions.
due_at: 2022-03-01
description:
Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.


name: Google Chrome Use-After-Free Vulnerability
added_at: 2022-02-15
action: Apply updates per vendor instructions.
due_at: 2022-03-01
description:
The vulnerability exists due to a use-after-free error within the Animation component in Google Chrome.


name: Microsoft Internet Explorer Type Confusion Vulnerability
added_at: 2022-02-15
action: Apply updates per vendor instructions.
due_at: 2022-08-15
description:
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer


name: Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
added_at: 2022-02-15
action: Apply updates per vendor instructions.
due_at: 2022-08-15
description:
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"


name: PHPUnit Command Injection Vulnerability
added_at: 2022-02-15
action: Apply updates per vendor instructions.
due_at: 2022-08-15
description:
PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.


name: Microsoft Word Memory Corruption Vulnerability
added_at: 2022-02-15
action: Apply updates per vendor instructions.
due_at: 2022-08-15
description:
Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.


name: Microsoft Graphics Component Memory Corruption Vulnerability
added_at: 2022-02-15
action: Apply updates per vendor instructions.
due_at: 2022-08-15
description:
Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution.


name: Zabbix Frontend Authentication Bypass Vulnerability
added_at: 2022-02-22
action: Apply updates per vendor instructions.
due_at: 2022-03-08
description:
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.


name: Zimbra Webmail Cross-Site Scripting Vulnerability
added_at: 2022-02-25
action: Apply updates per vendor instructions.
due_at: 2022-03-11
description:
Zimbra webmail clients running versions 8.8.15 P29 & P30 contain a XSS vulnerability that would allow attackers to steal session cookie files.


name: Microsoft Office Remote Code Execution Vulnerability
added_at: 2022-02-25
action: Apply updates per vendor instructions.
due_at: 2022-08-25
description:
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.


name: Microsoft Internet Explorer Remote Code Execution Vulnerability
added_at: 2022-02-25
action: Apply updates per vendor instructions.
due_at: 2022-08-25
description:
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.


name: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).


name: Microsoft Windows Installer Elevation of Privilege Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
Microsoft Windows Installer contains an unspecified vulnerability which allows for privilege escalation.


name: Apache Tomcat Improper Privilege Management Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.


name: Cisco Small Business Routers Improper Input Validation Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands.


name: Microsoft Excel Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.


name: Microsoft Exchange Server Privilege Escalation Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.


name: ChakraCore Scripting Engine Type Confusion Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.


name: CISCO IOS Software Denial of Service Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.


name: CISCO IOS, XR, and XE Software Buffer Overflow Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device.


name: CISCO IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service.


name: CISCO IOS and IOS XE Software Improper Input Validation Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets can allow for denial-of-service.


name: CISCO IOS, XR, and XE Software Buffer Overflow Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code. 


name: CISCO IOS Software Resource Management Errors Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition.


name: Cisco IOS and XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.


name: Cisco IOS Software and Cisco IOS XE Software Smart Install Denial of Service Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial-of-service (DoS) condition.


name: Cisco Catalyst Bidirectional Forwarding Detection Denial of Service Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial-of-service (DoS) condition.


name: Cisco IOS Software Integrated Services Module for VPN Denial of Service Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition.


name: Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-17
description:
A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges.


name: Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability".


name: Cisco IOS Software SNMP Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 1 contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. 


name: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.


name: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.


name: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. 


name: Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in denial-of-service (DoS).


name: Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial of Service Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A vulnerability in the UDP processing code of Cisco IOS and IOS XE could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and denial of service.


added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
name:
Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial of Service Vulnerability

description:
A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition, or potentially corrupt the BGP routing table, which could result in network instability.


name: Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
The Dynamic Host Configuration Protocol (DHCP) relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system.


name: Cisco Catalyst 6800 Series Switches VPLS Denial of Service Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a denial of service.


name: Cisco IOS and IOS XE Software Internet Key Exchange Denial of Service Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS and Cisco IOS XE could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service.


name: Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial of Service Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.


name: Cisco IOS Software Common Industrial Protocol Request Denial of Service Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.


name: Cisco IOS Software for Cisco Integrated Services Routers Denial of Service Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service.


name: Cisco IOS Software Network Address Translation Denial of Service Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS could allow an unauthenticated, remote attacker to cause a denial of service.


name: Microsoft Office Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.


name: Adobe Flash Player Type Confusion Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.


name: Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges


name: Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
An improper privilege management vulnerability exists within the Siemens SIMATIC Communication Processor (CP) that allows a privileged attacker to remotely cause a denial of service.


name: Adobe Flash Player Use-After-Free Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.


name: Microsoft Office Security Feature Bypass Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.


name: Microsoft Office Memory Corruption Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.


name: Adobe Flash Player Arbitrary Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.


name: Adobe Flash Player Arbitrary Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.


name: Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
An elevation of privilege vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.


name: Adobe Flash Player Use-After-Free Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.


name: Oracle Java SE Integrity Check Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via unknown vectors related to deployment.


name: Adobe Flash Player Memory Corruption Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.


name: Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.


name: Microsoft PowerPoint Memory Corruption Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.


name: Microsoft ATM Font Driver Elevation of Privilege Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.


name: Microsoft Win32K Elevation of Privilege Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.


name: Microsoft Office Memory Corruption Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Microsoft Office contains a memory corruption vulnerability which allows remote attackers to execute arbitrary code via a crafted document.


name: Microsoft Windows OLE Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.


name: Microsoft Windows Kernel Privilege Escalation Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.


name: Microsoft Internet Explorer Use-After-Free Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.


name: Adobe Reader and Acrobat Memory Corruption Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service. 


name: Mozilla Firefox Information Disclosure Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.


name: Microsoft Internet Explorer Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.


name: Adobe Reader Buffer Overflow Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.


name: Adobe Reader and Acrobat Memory Corruption Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.


name: Adobe ColdFusion Authentication Bypass Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access.


name: Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.


name: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.


name: Adobe Flash Player Arbitrary Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.


name: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.


name: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.


name: Microsoft Forefront TMG Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.


name: Adobe Flash Player Remote Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Adobe Flash Player contains a vulnerability which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.


name: Microsoft Office Stack-based Buffer Overflow Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.


name: Microsoft Windows Kernel Exception Handler Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges.


name: Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.


name: Microsoft Excel Featheader Record Memory Corruption Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.


name: Microsoft Windows Improper Input Validation Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.


name: Oracle VirtualBox Insufficient Input Validation Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.


name: Adobe Reader and Acrobat Input Validation Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.


name: Microsoft Windows Privilege Escalation Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.


name: Microsoft Windows Privilege Escalation Vulnerability
added_at: 2022-03-03
action: Apply updates per vendor instructions.
due_at: 2022-03-24
description:
smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.


name: Mozilla Firefox Use-After-Free Vulnerability
added_at: 2022-03-07
action: Apply updates per vendor instructions.
due_at: 2022-03-21
description:
Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.


name: Mozilla Firefox Use-After-Free Vulnerability
added_at: 2022-03-07
action: Apply updates per vendor instructions.
due_at: 2022-03-21
description:
Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.


name: VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
added_at: 2022-03-07
action: Apply updates per vendor instructions.
due_at: 2022-03-21
description:
VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.


name: Pulse Connect Secure Code Injection Vulnerability
added_at: 2022-03-07
action: Apply updates per vendor instructions.
due_at: 2022-09-07
description:
A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.


name: Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
added_at: 2022-03-07
action: Apply updates per vendor instructions.
due_at: 2022-09-07
description:
Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.


name: NETGEAR Multiple Routers Remote Code Execution Vulnerability
added_at: 2022-03-07
action: Apply updates per vendor instructions.
due_at: 2022-09-07
description:
NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.


name: Adobe ColdFusion Information Disclosure Vulnerability
added_at: 2022-03-07
action: Apply updates per vendor instructions.
due_at: 2022-09-07
description:
Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.


name: Adobe ColdFusion Directory Traversal Vulnerability
added_at: 2022-03-07
action: Apply updates per vendor instructions.
due_at: 2022-09-07
description:
Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.


