Sec Feed Reader

Navigation

Schnelluebersicht mit Zeitraum und Severity: Startseite
Erweiterte Filter und Listen: diese Seite (entries), inkl. Volltext/Titel-Suche wie unter Suche.

Erweiterte Filter

Quelle

Severity Kategorie CVE-ID

Suchbegriff

Suchbereich Suchmodus Von (Datum)

Bis (Datum)

Sortierung Reihenfolge

1643 Eintraege gefunden · 50 pro Seite · Seite 28 von 33.

Veroeffentlicht	Quelle	Titel	Severity	CVEs	EPSS-Pctl	Kategorie
2023-05-31 00:00	cisa_kev	CVE-2023-28771 — Zyxel Multiple Firewalls OS Command Injection Vulnerability	CRITICAL	CVE-2023-28771		threat_intel
2023-05-26 00:00	cisa_kev	CVE-2023-2868 — Barracuda Networks ESG Appliance Improper Input Validation Vulnerability	CRITICAL	CVE-2023-2868		threat_intel
2023-05-12 00:00	cisa_kev	CVE-2016-3427 — Oracle Java SE and JRockit Unspecified Vulnerability	CRITICAL	CVE-2016-3427		threat_intel
2023-05-12 00:00	cisa_kev	CVE-2023-25717 — Multiple Ruckus Wireless Products CSRF and RCE Vulnerability	CRITICAL	CVE-2023-25717		threat_intel
2023-05-12 00:00	cisa_kev	CVE-2016-8735 — Apache Tomcat Remote Code Execution Vulnerability	CRITICAL	CVE-2016-3427 CVE-2016-8735		threat_intel
2023-05-01 00:00	cisa_kev	CVE-2021-45046 — Apache Log4j2 Deserialization of Untrusted Data Vulnerability	CRITICAL	CVE-2021-44228 CVE-2021-45046		threat_intel
2023-04-21 00:00	cisa_kev	CVE-2023-2136 — Google Chrome Skia Integer Overflow Vulnerability	CRITICAL	CVE-2023-2136		threat_intel
2023-04-21 00:00	cisa_kev	CVE-2023-27350 — PaperCut MF/NG Improper Access Control Vulnerability	CRITICAL	CVE-2023-27350		threat_intel
2023-04-13 00:00	cisa_kev	CVE-2023-29492 — Novi Survey Insecure Deserialization Vulnerability	CRITICAL	CVE-2023-29492		threat_intel
2023-03-30 00:00	cisa_kev	CVE-2017-7494 — Samba Remote Code Execution Vulnerability	CRITICAL	CVE-2017-7494		threat_intel
2023-03-30 00:00	cisa_kev	CVE-2022-42948 — Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability	CRITICAL	CVE-2022-42948		threat_intel
2023-03-14 00:00	cisa_kev	CVE-2023-23397 — Microsoft Office Outlook Privilege Escalation Vulnerability	CRITICAL	CVE-2023-23397		threat_intel
2023-03-07 00:00	cisa_kev	CVE-2022-35914 — Teclib GLPI Remote Code Execution Vulnerability	CRITICAL	CVE-2022-35914		threat_intel
2023-03-07 00:00	apache_httpd_sec	CVE-2023-25690: Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when mod_proxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the user-supplied request-target (URL) data and is then re-inserted into the proxied request-target using variable substitution. For example, something like: RewriteEngine on RewriteRule "^/here/(.*)" "http://example.com:8080/elsewhere?$1"; [P] ProxyPassReverse /here/ http://example.com:8080/ Request splitting/smuggling could result in bypass of access controls in the proxy server, proxying unintended URLs to existing origin servers, and cache poisoning.	CRITICAL	CVE-2023-25690		vendor_advisory
2023-02-21 00:00	cisa_kev	CVE-2022-47986 — IBM Aspera Faspex Code Execution Vulnerability	CRITICAL	CVE-2022-47986		threat_intel
2023-02-16 00:00	cisa_kev	CVE-2022-46169 — Cacti Command Injection Vulnerability	CRITICAL	CVE-2022-46169		threat_intel
2023-02-10 00:00	cisa_kev	CVE-2022-24990 — TerraMaster OS Remote Command Execution Vulnerability	CRITICAL	CVE-2022-24990		threat_intel
2023-02-02 00:00	cisa_kev	CVE-2022-21587 — Oracle E-Business Suite Unspecified Vulnerability	CRITICAL	CVE-2022-21587		threat_intel
2023-01-26 00:00	cisa_kev	CVE-2017-11357 — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability	CRITICAL	CVE-2017-11357		threat_intel
2023-01-23 00:00	cisa_kev	CVE-2022-47966 — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability	CRITICAL	CVE-2022-47966		threat_intel
2023-01-17 00:00	apache_httpd_sec	CVE-2022-36760: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.	CRITICAL	CVE-2022-36760		vendor_advisory
2023-01-17 00:00	cisa_kev	CVE-2022-44877 — CWP Control Web Panel OS Command Injection Vulnerability	CRITICAL	CVE-2022-44877		threat_intel
2022-12-29 00:00	cisa_kev	CVE-2018-18809 — TIBCO JasperReports Library Directory Traversal Vulnerability	CRITICAL	CVE-2018-18809		threat_intel
2022-12-13 00:00	cisa_kev	CVE-2022-42475 — Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability	CRITICAL	CVE-2022-42475	0.99944	threat_intel
2022-12-13 00:00	cisa_kev	CVE-2022-26501 — Veeam Backup & Replication Remote Code Execution Vulnerability	CRITICAL	CVE-2022-26501		threat_intel
2022-12-13 00:00	cisa_kev	CVE-2022-27518 — Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability	CRITICAL	CVE-2022-27518		threat_intel
2022-11-28 00:00	cisa_kev	CVE-2021-35587 — Oracle Fusion Middleware Unspecified Vulnerability	CRITICAL	CVE-2021-35587		threat_intel
2022-11-28 00:00	cisa_kev	CVE-2022-4135 — Google Chromium GPU Heap Buffer Overflow Vulnerability	CRITICAL	CVE-2022-4135		threat_intel
2022-10-24 00:00	cisa_kev	CVE-2018-19323 — GIGABYTE Multiple Products Privilege Escalation Vulnerability	CRITICAL	CVE-2018-19323		threat_intel
2022-10-20 00:00	cisa_kev	CVE-2022-41352 — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability	CRITICAL	CVE-2022-41352		threat_intel
2022-10-11 00:00	cisa_kev	CVE-2022-40684 — Fortinet Multiple Products Authentication Bypass Vulnerability	CRITICAL	CVE-2022-40684		threat_intel
2022-09-23 00:00	cisa_kev	CVE-2022-3236 — Sophos Firewall Code Injection Vulnerability	CRITICAL	CVE-2022-3236		threat_intel
2022-09-22 00:00	cisa_kev	CVE-2022-35405 — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability	CRITICAL	CVE-2022-35405		threat_intel
2022-09-08 00:00	cisa_kev	CVE-2022-27593 — QNAP Photo Station Externally Controlled Reference Vulnerability	CRITICAL	CVE-2022-27593		threat_intel
2022-09-08 00:00	cisa_kev	CVE-2018-6530 — D-Link Multiple Routers OS Command Injection Vulnerability	CRITICAL	CVE-2018-20114 CVE-2018-6530		threat_intel
2022-09-08 00:00	cisa_kev	CVE-2022-26258 — D-Link DIR-820L Remote Code Execution Vulnerability	CRITICAL	CVE-2022-26258		threat_intel
2022-09-08 00:00	cisa_kev	CVE-2022-3075 — Google Chromium Mojo Insufficient Data Validation Vulnerability	CRITICAL	CVE-2022-3075		threat_intel
2022-09-08 00:00	cisa_kev	CVE-2018-7445 — MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability	CRITICAL	CVE-2018-7445		threat_intel
2022-09-08 00:00	cisa_kev	CVE-2018-2628 — Oracle WebLogic Server Unspecified Vulnerability	CRITICAL	CVE-2018-2628		threat_intel
2022-08-25 00:00	cisa_kev	CVE-2021-39226 — Grafana Authentication Bypass Vulnerability	CRITICAL	CVE-2021-39226		threat_intel
2022-08-25 00:00	cisa_kev	CVE-2022-24112 — Apache APISIX Authentication Bypass Vulnerability	CRITICAL	CVE-2022-24112		threat_intel
2022-08-25 00:00	cisa_kev	CVE-2022-26352 — dotCMS Unrestricted Upload of File Vulnerability	CRITICAL	CVE-2022-26352		threat_intel
2022-08-25 00:00	cisa_kev	CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability	CRITICAL	CVE-2022-22963		threat_intel
2022-08-25 00:00	cisa_kev	CVE-2022-24706 — Apache CouchDB Insecure Default Initialization of Resource Vulnerability	CRITICAL	CVE-2022-24706		threat_intel
2022-08-18 00:00	cisa_kev	CVE-2022-22536 — SAP Multiple Products HTTP Request Smuggling Vulnerability	CRITICAL	CVE-2022-22536		threat_intel
2022-08-18 00:00	cisa_kev	CVE-2017-15944 — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability	CRITICAL	CVE-2017-15944		threat_intel
2022-08-11 00:00	cisa_kev	CVE-2022-27925 — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability	CRITICAL	CVE-2022-27925 CVE-2022-37042		threat_intel
2022-08-11 00:00	cisa_kev	CVE-2022-37042 — Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability	CRITICAL	CVE-2022-27925 CVE-2022-37042		threat_intel
2022-07-29 00:00	cisa_kev	CVE-2022-26138 — Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability	CRITICAL	CVE-2022-26138		threat_intel
2022-06-27 00:00	cisa_kev	CVE-2022-29499 — Mitel MiVoice Connect Data Validation Vulnerability	CRITICAL	CVE-2022-29499		threat_intel