Sec Feed Reader

Navigation

Schnelluebersicht mit Zeitraum und Severity: Startseite
Erweiterte Filter und Listen: diese Seite (entries), inkl. Volltext/Titel-Suche wie unter Suche.

Erweiterte Filter

Quelle

Severity Kategorie CVE-ID

Suchbegriff

Suchbereich Suchmodus Von (Datum)

Bis (Datum)

Sortierung Reihenfolge

13358 Eintraege gefunden · 50 pro Seite · Seite 246 von 268.

Veroeffentlicht	Quelle	Titel	Severity	CVEs	Kategorie
2023-04-07 00:00	cisa_kev	CVE-2019-1388 — Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability	HIGH	CVE-2019-1388	threat_intel
2023-04-07 00:00	cisa_kev	CVE-2021-27876 — Veritas Backup Exec Agent File Access Vulnerability	HIGH	CVE-2021-27876	threat_intel
2023-04-07 00:00	cisa_kev	CVE-2021-27877 — Veritas Backup Exec Agent Improper Authentication Vulnerability	HIGH	CVE-2021-27877	threat_intel
2023-04-07 00:00	cisa_kev	CVE-2021-27878 — Veritas Backup Exec Agent Command Execution Vulnerability	HIGH	CVE-2021-27878	threat_intel
2023-04-03 00:00	cisa_kev	CVE-2022-27926 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability	MEDIUM	CVE-2022-27926	threat_intel
2023-03-30 00:00	cisa_kev	CVE-2021-30900 — Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability	HIGH	CVE-2021-30900	threat_intel
2023-03-30 00:00	cisa_kev	CVE-2022-42948 — Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability	CRITICAL	CVE-2022-42948	threat_intel
2023-03-30 00:00	cisa_kev	CVE-2022-39197 — Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability	MEDIUM	CVE-2022-39197	threat_intel
2023-03-30 00:00	cisa_kev	CVE-2017-7494 — Samba Remote Code Execution Vulnerability	CRITICAL	CVE-2017-7494	threat_intel
2023-03-30 00:00	cisa_kev	CVE-2013-3163 — Microsoft Internet Explorer Memory Corruption Vulnerability	HIGH	CVE-2013-3163	threat_intel
2023-03-30 00:00	cisa_kev	CVE-2022-22706 — Arm Mali GPU Kernel Driver Unspecified Vulnerability	HIGH	CVE-2022-22706	threat_intel
2023-03-30 00:00	cisa_kev	CVE-2022-3038 — Google Chromium Network Service Use-After-Free Vulnerability	HIGH	CVE-2022-3038	threat_intel
2023-03-30 00:00	cisa_kev	CVE-2022-38181 — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability	HIGH	CVE-2022-38181	threat_intel
2023-03-30 00:00	cisa_kev	CVE-2023-0266 — Linux Kernel Use-After-Free Vulnerability	HIGH	CVE-2023-0266	threat_intel
2023-03-15 00:00	cisa_kev	CVE-2023-26360 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability	HIGH	CVE-2023-26360	threat_intel
2023-03-14 00:00	cisa_kev	CVE-2022-41328 — Fortinet FortiOS Path Traversal Vulnerability	MEDIUM	CVE-2022-41328	threat_intel
2023-03-14 00:00	cisa_kev	CVE-2023-24880 — Microsoft Windows SmartScreen Security Feature Bypass Vulnerability	MEDIUM	CVE-2023-24880	threat_intel
2023-03-14 00:00	cisa_kev	CVE-2023-23397 — Microsoft Office Outlook Privilege Escalation Vulnerability	CRITICAL	CVE-2023-23397	threat_intel
2023-03-10 00:00	cisa_kev	CVE-2021-39144 — XStream Remote Code Execution Vulnerability	HIGH	CVE-2021-39144	threat_intel
2023-03-10 00:00	cisa_kev	CVE-2020-5741 — Plex Media Server Remote Code Execution Vulnerability	HIGH	CVE-2020-5741	threat_intel
2023-03-07 00:00	cisa_kev	CVE-2022-28810 — Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability	MEDIUM	CVE-2022-28810	threat_intel
2023-03-07 00:00	cisa_kev	CVE-2022-35914 — Teclib GLPI Remote Code Execution Vulnerability	CRITICAL	CVE-2022-35914	threat_intel
2023-03-07 00:00	cisa_kev	CVE-2022-33891 — Apache Spark Command Injection Vulnerability	HIGH	CVE-2022-33891	threat_intel
2023-03-07 00:00	apache_httpd_sec	CVE-2023-25690: Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when mod_proxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the user-supplied request-target (URL) data and is then re-inserted into the proxied request-target using variable substitution. For example, something like: RewriteEngine on RewriteRule "^/here/(.*)" "http://example.com:8080/elsewhere?$1"; [P] ProxyPassReverse /here/ http://example.com:8080/ Request splitting/smuggling could result in bypass of access controls in the proxy server, proxying unintended URLs to existing origin servers, and cache poisoning.	CRITICAL	CVE-2023-25690	vendor_advisory
2023-03-07 00:00	apache_httpd_sec	CVE-2023-27522: HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client.	HIGH	CVE-2023-27522	vendor_advisory
2023-02-27 00:00	cisa_kev	CVE-2022-36537 — ZK Framework AuUploader Unspecified Vulnerability	HIGH	CVE-2022-36537	threat_intel
2023-02-21 00:00	cisa_kev	CVE-2022-40765 — Mitel MiVoice Connect Command Injection Vulnerability	MEDIUM	CVE-2022-40765	threat_intel
2023-02-21 00:00	cisa_kev	CVE-2022-41223 — Mitel MiVoice Connect Code Injection Vulnerability	MEDIUM	CVE-2022-41223	threat_intel
2023-02-21 00:00	cisa_kev	CVE-2022-47986 — IBM Aspera Faspex Code Execution Vulnerability	CRITICAL	CVE-2022-47986	threat_intel
2023-02-16 00:00	cisa_kev	CVE-2022-46169 — Cacti Command Injection Vulnerability	CRITICAL	CVE-2022-46169	threat_intel
2023-02-15 20:37	php_sec	BCrypt hashes erroneously validate if the salt is cut short by `$`	HIGH	CVE-2023-0567	vendor_advisory
2023-02-15 20:32	php_sec	DoS vulnerability when parsing multipart request body	HIGH	CVE-2023-0662	vendor_advisory
2023-02-14 00:00	cisa_kev	CVE-2023-23529 — Apple Multiple Products WebKit Type Confusion Vulnerability	HIGH	CVE-2023-23529	threat_intel
2023-02-14 00:00	cisa_kev	CVE-2023-23376 — Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability	HIGH	CVE-2023-23376	threat_intel
2023-02-14 00:00	cisa_kev	CVE-2023-21823 — Microsoft Windows Graphic Component Privilege Escalation Vulnerability	HIGH	CVE-2023-21823	threat_intel
2023-02-14 00:00	cisa_kev	CVE-2023-21715 — Microsoft Office Publisher Security Feature Bypass Vulnerability	HIGH	CVE-2023-21715	threat_intel
2023-02-10 00:00	cisa_kev	CVE-2015-2291 — Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability	HIGH	CVE-2015-2291	threat_intel
2023-02-10 00:00	cisa_kev	CVE-2023-0669 — Fortra GoAnywhere MFT Remote Code Execution Vulnerability	HIGH	CVE-2023-0669	threat_intel
2023-02-10 00:00	cisa_kev	CVE-2022-24990 — TerraMaster OS Remote Command Execution Vulnerability	CRITICAL	CVE-2022-24990	threat_intel
2023-02-02 00:00	cisa_kev	CVE-2022-21587 — Oracle E-Business Suite Unspecified Vulnerability	CRITICAL	CVE-2022-21587	threat_intel
2023-02-02 00:00	cisa_kev	CVE-2023-22952 — Multiple SugarCRM Products Remote Code Execution Vulnerability	HIGH	CVE-2023-22952	threat_intel
2023-01-26 00:00	cisa_kev	CVE-2017-11357 — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability	CRITICAL	CVE-2017-11357	threat_intel
2023-01-23 00:00	cisa_kev	CVE-2022-47966 — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability	CRITICAL	CVE-2022-47966	threat_intel
2023-01-17 00:00	cisa_kev	CVE-2022-44877 — CWP Control Web Panel OS Command Injection Vulnerability	CRITICAL	CVE-2022-44877	threat_intel
2023-01-17 00:00	apache_httpd_sec	CVE-2022-37436: Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client.	MEDIUM	CVE-2022-37436	vendor_advisory
2023-01-17 00:00	apache_httpd_sec	CVE-2006-20001: A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier.	-	CVE-2006-20001	vendor_advisory
2023-01-17 00:00	apache_httpd_sec	CVE-2022-36760: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.	CRITICAL	CVE-2022-36760	vendor_advisory
2023-01-10 00:00	cisa_kev	CVE-2023-21674 — Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability	HIGH	CVE-2023-21674	threat_intel
2023-01-10 00:00	cisa_kev	CVE-2022-41080 — Microsoft Exchange Server Privilege Escalation Vulnerability	HIGH	CVE-2022-41080 CVE-2022-41082	threat_intel
2022-12-29 00:00	cisa_kev	CVE-2018-18809 — TIBCO JasperReports Library Directory Traversal Vulnerability	CRITICAL	CVE-2018-18809	threat_intel