{"_built":"2026-08-23 05:47 UTC","_definitions":"/method/","stats":{"built_from":{"fetched_at":"2026-08-23T05:46:48+00:00","kev":{"catalogVersion":"2026.08.21","dateReleased":"2026-08-21T17:46:43.6019Z","count":1674,"sha256":"137884960e3f801665bfa47694e703fbc4dd1c738df5e0e5af12d325a5f8a9d5","url":"https://raw.githubusercontent.com/cisagov/kev-data/main/known_exploited_vulnerabilities.json"},"attack":{"attack_version":"19.2","objects":26086,"types":{"x-mitre-collection":1,"campaign":56,"course-of-action":268,"intrusion-set":191,"malware":733,"tool":95,"attack-pattern":858,"x-mitre-matrix":1,"x-mitre-tactic":15,"x-mitre-analytic":1758,"x-mitre-data-component":109,"x-mitre-data-source":38,"x-mitre-detection-strategy":699,"relationship":21262,"identity":1,"marking-definition":1},"sha256":"dc1639caa5501d720e280cf1cbd8fbe009884a0c9b3e6e9ed9d0c25166c3d8f4","url":"https://raw.githubusercontent.com/mitre-attack/attack-stix-data/master/enterprise-attack/enterprise-attack.json"},"mappings":{"repo":"https://github.com/center-for-threat-informed-defense/mappings-explorer","commit":"705ca1b87954f9ff8d9eda62fb70b89939331407","commit_date":"2026-08-12T09:51:18-04:00","files":[{"file":"kev-02.13.2025_attack-15.1-enterprise.json","attack_version":"15.1","domain":"enterprise","kev_snapshot":"02/13/2025","mapping_objects":806,"distinct_cves":296},{"file":"kev-02.13.2025_attack-15.1-mobile.json","attack_version":"15.1","domain":"mobile","kev_snapshot":"02/13/2025","mapping_objects":8,"distinct_cves":3},{"file":"kev-07.28.2025_attack-16.1-enterprise.json","attack_version":"16.1","domain":"enterprise","kev_snapshot":"07/28/2025","mapping_objects":1183,"distinct_cves":419},{"file":"kev-07.28.2025_attack-16.1-mobile.json","attack_version":"16.1","domain":"mobile","kev_snapshot":"07/28/2025","mapping_objects":45,"distinct_cves":14}]},"sigma":{"repo":"https://github.com/SigmaHQ/sigma","commit":"da9bb07d642a2826e89702445d32c795209ec108","commit_date":"2026-08-19T01:42:38+02:00","rules":3783},"capec":{"url":"https://raw.githubusercontent.com/mitre/cti/master/capec/2.1/stix-capec.json","patterns":615,"newest_modified":"2023-01-24T00:00:00.000Z","sha256":"ee6244f48259c1963d0507535e1843d67ba08fe58b4dfe351c1b74f9e376fa69"}},"kev":{"catalog_version":"2026.08.21","date_released":"2026-08-21T17:46:43.6019Z","count":1674,"empty_cwes":171,"empty_cwes_pct":10.2,"ransomware_known":352,"added_since_mapping_snapshot":283,"added_since_mapping_snapshot_mapped":0,"added_since_mapping_snapshot_mapped_pct":0.0,"newest_date_added":"2026-08-21"},"states":{"mapped":418,"stale":6,"unmapped":1250,"mapped_any":424,"mapped_any_pct":25.3,"unmapped_pct":74.7,"stale_pct_of_mapped":1.4,"mapped_exploitation_only":410,"mapped_exploitation_only_pct":24.5},"sigma_coverage":{"full":375,"partial":44,"none":0,"not_applicable_mobile_only":5,"none_pct_of_mapped":0.0,"mapped_techniques":152,"mapped_techniques_without_sigma":20,"live_techniques_with_strategy_without_sigma":297},"mappings":{"files":[{"file":"kev-02.13.2025_attack-15.1-enterprise.json","attack_version":"15.1","domain":"enterprise","kev_snapshot":"02/13/2025","last_update":"02/11/2025","capability_groups":{"access_ctrl":"Improper Access Control","auth_bypass":"Authentication Bypass","auth_missing":"Missing Authentication","buffer_overflow":"Buffer Overflow","code_execution":"Code Execution","code_injection":"Code Injection","command_execution":"Command Execution","command_injection":"Command Injection","default_cfg":"Default Configuration","dir_traversal":"Directory Traversal (Relative and Absolute)","dos":"Denial of Service","feature_bypass":"Security Feature Bypass","hardcoded_creds":"Hard-coded Credentials","inject":"Other Injection","input_validation":"Input Validation","int_overflow":"Integer Overflow","memory_corruption":"Memory Corruption","memory_mgmt":"Memory Management","oob":"Out-of-Bounds (Read and Write)","other":"Other","pointer_deref":"Pointer Dereference","pointer_vuln":"Other Pointer Vulnerability","priv_escalation":"Privilege Escalation","priv_mgmt":"Improper Privilege Management","race_condition":"Race Condition","resource_mgmt":"Resource Management","sandbox_bypass":"Sandbox Bypass or Escape","spoofing_vuln":"Spoofing Vulnerability","sql_injection":"SQL Injection","ssrf":"Server-Side Request Forgery (SSRF)","type_confusion":"Type Confusion","unrestricted_upload":"Unrestricted File Upload","untrusted_data":"Deserialization of Untrusted Data","use_after_free":"Use After Free","xss":"Cross-site Scripting (XSS)","xxe":"XML External Entity (XXE)"},"mapping_objects":806,"distinct_cves":296},{"file":"kev-02.13.2025_attack-15.1-mobile.json","attack_version":"15.1","domain":"mobile","kev_snapshot":"02/13/2025","last_update":"02/11/2025","capability_groups":{"buffer_overflow":"Buffer Overflow","input_validation":"Input Validation","use_after_free":"Use After Free"},"mapping_objects":8,"distinct_cves":3},{"file":"kev-07.28.2025_attack-16.1-enterprise.json","attack_version":"16.1","domain":"enterprise","kev_snapshot":"07/28/2025","last_update":"08/28/2025","capability_groups":{"access_ctrl":"Improper Access Control","auth_bypass":"Authentication Bypass","auth_missing":"Missing Authentication","buffer_overflow":"Buffer Overflow","code_execution":"Code Execution","code_injection":"Code Injection","command_execution":"Command Execution","command_injection":"Command Injection","default_cfg":"Default Configuration","dir_traversal":"Directory Traversal (Relative and Absolute)","dos":"Denial of Service","feature_bypass":"Security Feature Bypass","hardcoded_creds":"Hard-coded Credentials","inject":"Other Injection","input_validation":"Input Validation","int_overflow":"Integer Overflow","memory_corruption":"Memory Corruption","memory_mgmt":"Memory Management","oob":"Out-of-Bounds (Read and Write)","other":"Other","pointer_deref":"Pointer Dereference","pointer_vuln":"Other Pointer Vulnerability","priv_escalation":"Privilege Escalation","priv_mgmt":"Improper Privilege Management","race_condition":"Race Condition","resource_mgmt":"Resource Management","sandbox_bypass":"Sandbox Bypass or Escape","spoofing_vuln":"Spoofing Vulnerability","sql_injection":"SQL Injection","ssrf":"Server-Side Request Forgery (SSRF)","type_confusion":"Type Confusion","unrestricted_upload":"Unrestricted File Upload","untrusted_data":"Deserialization of Untrusted Data","use_after_free":"Use After Free","xss":"Cross-site Scripting (XSS)","xxe":"XML External Entity (XXE)"},"mapping_objects":1183,"distinct_cves":419},{"file":"kev-07.28.2025_attack-16.1-mobile.json","attack_version":"16.1","domain":"mobile","kev_snapshot":"07/28/2025","last_update":"08/28/2025","capability_groups":{"buffer_overflow":"Buffer Overflow","input_validation":"Input Validation","use_after_free":"Use After Free","memory_corruption":"Memory Corruption","out_of_bounds":"Out-of-Bounds (Read and Write)","security_feature_bypass":"Security Feature Bypass","improper_access_control":"Improper Access Control","type_confusion":"Type Confusion"},"mapping_objects":45,"distinct_cves":14}],"latest_attack_version":"16.1","latest_kev_snapshot":"07/28/2025","distinct_cves":424,"mapping_objects":1229,"cves_only_in_older_file":[],"mapping_snapshot_iso":"2025-07-28","distinct_cves_in_kev":424,"distinct_cves_not_in_kev":[],"by_type":{"secondary_impact":329,"primary_impact":422,"exploitation_technique":478},"by_domain":{"enterprise":1184,"mobile":45},"cves_mobile_only":["CVE-2021-38000","CVE-2022-38181","CVE-2023-4863","CVE-2025-21479","CVE-2025-24200"],"techniques_referenced":152,"techniques_with_kev_cves":155},"attack":{"attack_version":"19.2","objects":26086,"techniques_total":858,"techniques_live":697,"techniques_live_without_detection_strategy":0,"detection_strategies":699,"detection_strategies_live":697,"detects_relationships":697,"analytics":1758,"analytics_live":1758,"data_components":109,"log_source_references":4182},"sigma":{"commit":"da9bb07d642a2826e89702445d32c795209ec108","commit_date":"2026-08-19T01:42:38+02:00","rules":3783,"rules_with_technique_tag":3312,"rules_with_cve_tag":208,"distinct_techniques":400,"distinct_cves":145,"cve_technique_pairs":199,"cves_in_pairs":126,"technique_tags_not_in_current_attack":[]},"log_sources":261,"capec":{"capec_version_note":"mitre/cti STIX mirror of CAPEC","capec_patterns":559,"capec_newest_modified":"2023-01-24","capec_with_attack_ref":177,"attack_techniques_reachable":189,"kev_with_cwe":1503,"kev_with_any_technique":497,"mean_techniques":7.5,"median_techniques":7,"max_techniques":51,"histogram":[{"n":1,"cves":59},{"n":2,"cves":18},{"n":3,"cves":89},{"n":4,"cves":47},{"n":5,"cves":4},{"n":6,"cves":28},{"n":7,"cves":116},{"n":8,"cves":58},{"n":9,"cves":5},{"n":10,"cves":3},{"n":11,"cves":5},{"n":12,"cves":7},{"n":13,"cves":0},{"n":14,"cves":0},{"n":15,"cves":0},{"n":16,"cves":0},{"n":17,"cves":0},{"n":18,"cves":0},{"n":19,"cves":0},{"n":20,"cves":0},{"n":21,"cves":0},{"n":22,"cves":0},{"n":23,"cves":0},{"n":24,"cves":0},{"n":25,"cves":33},{"n":26,"cves":24},{"n":27,"cves":0},{"n":28,"cves":0},{"n":29,"cves":0},{"n":30,"cves":1}],"top_techniques":[{"technique":"T1574.007","name":"Path Interception by PATH Environment Variable","cves":168,"pct":33.8},{"technique":"T1574.006","name":"Dynamic Linker Hijacking","cves":167,"pct":33.6},{"technique":"T1562.003","name":"Impair Command History Logging","cves":164,"pct":33.0},{"technique":"T1027","name":"Obfuscated Files or Information","cves":136,"pct":27.4},{"technique":"T1027.009","name":"Embedded Payloads","cves":135,"pct":27.2},{"technique":"T1539","name":"Steal Web Session Cookie","cves":128,"pct":25.8},{"technique":"T1553.002","name":"Code Signing","cves":125,"pct":25.2},{"technique":"T1036.001","name":"Invalid Code Signature","cves":123,"pct":24.7},{"technique":"T1027.006","name":"HTML Smuggling","cves":93,"pct":18.7},{"technique":"T1564.009","name":"Resource Forking","cves":93,"pct":18.7},{"technique":"T1083","name":"File and Directory Discovery","cves":66,"pct":13.3},{"technique":"T1574.010","name":"Services File Permissions Weakness","cves":64,"pct":12.9},{"technique":"T1548","name":"Abuse Elevation Control Mechanism","cves":60,"pct":12.1},{"technique":"T1040","name":"Network Sniffing","cves":53,"pct":10.7},{"technique":"T1134","name":"Access Token Manipulation","cves":49,"pct":9.9}],"overlap_with_ctid":{"chain_and_ctid_both_present":115,"share_at_least_one_technique":10,"share_none":105,"agree_pct":8.7}}},"cves":[{"id":"CVE-2026-73570","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability","d":"2026-08-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2026},{"id":"CVE-2026-72530","v":"TrueConf","p":"Server","n":"TrueConf Server Code Injection Vulnerability","d":"2026-08-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2026},{"id":"CVE-2026-72529","v":"TrueConf","p":"Server","n":"TrueConf Server Missing Authentication for Critical Function Vulnerability","d":"2026-08-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306"],"y":2026},{"id":"CVE-2026-64849","v":"MLflow","p":"MLflow","n":"MLflow Server-Side Request Forgery Vulnerability","d":"2026-08-19","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-918"],"y":2026},{"id":"CVE-2026-65400","v":"Apple","p":"macOS","n":"Apple macOS Improper Authentication Vulnerability","d":"2026-08-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2026},{"id":"CVE-2026-59310","v":"Broadcom","p":"VMware vCenter","n":"Broadcom VMware vCenter Path Traversal Vulnerability","d":"2026-08-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2026},{"id":"CVE-2026-55040","v":"Microsoft","p":"SharePoint","n":"Microsoft SharePoint Weak Authentication Vulnerability","d":"2026-08-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-1390"],"y":2026},{"id":"CVE-2026-33824","v":"Microsoft","p":"Internet Key Exchange (IKE) Service Extensions","n":"Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability","d":"2026-08-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-415"],"y":2026},{"id":"CVE-2025-62593","v":"Ray-Project","p":"Ray","n":"Ray-Project Ray Code Injection Vulnerability","d":"2026-08-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94","CWE-352"],"y":2025},{"id":"CVE-2026-72898","v":"Metabase","p":"Metabase","n":"Metabase SQL Injection Vulnerability","d":"2026-08-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2026},{"id":"CVE-2026-68820","v":"Microsoft","p":"Windows Ancillary Function Driver for WinSock ","n":"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","d":"2026-08-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2026},{"id":"CVE-2026-20349","v":"Cisco","p":"Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ","n":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability","d":"2026-08-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-244"],"y":2026},{"id":"CVE-2026-8037","v":"Progress","p":"LoadMaster","n":"Progress LoadMaster Command Injection Vulnerability","d":"2026-08-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2026},{"id":"CVE-2026-63077","v":"JetBrains","p":"TeamCity","n":"JetBrains TeamCity Deserialization of Untrusted Data Vulnerability","d":"2026-08-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2026},{"id":"CVE-2026-9198","v":"IBM","p":"Langflow","n":"IBM Langflow Code Injection Vulnerability","d":"2026-08-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2026},{"id":"CVE-2026-34486","v":"Apache","p":"Tomcat","n":"Apache Tomcat Missing Encryption of Sensitive Data Vulnerability","d":"2026-08-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-311"],"y":2026},{"id":"CVE-2026-18556","v":"N-able","p":"N-central","n":"N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","d":"2026-08-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-288"],"y":2026},{"id":"CVE-2026-18577","v":"N-able","p":"N-central","n":"N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","d":"2026-08-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-288"],"y":2026},{"id":"CVE-2026-20316","v":"Cisco","p":"Secure Firewall Management Center (FMC)","n":"Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability","d":"2026-07-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-259"],"y":2026},{"id":"CVE-2026-16812","v":"Arista","p":"VeloCloud Orchestrator","n":"Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability","d":"2026-07-27","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2026},{"id":"CVE-2025-68686","v":"Fortinet","p":"FortiOS","n":"Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","d":"2026-07-27","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2025},{"id":"CVE-2026-50522","v":"Microsoft","p":"SharePoint","n":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ","d":"2026-07-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2026},{"id":"CVE-2026-16232","v":"Check Point","p":"SmartConsole","n":"Check Point SmartConsole Improper Authentication Vulnerability","d":"2026-07-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2026},{"id":"CVE-2026-63030","v":"WordPress","p":"Core","n":"WordPress Core Interpretation Conflict Vulnerability","d":"2026-07-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-436"],"y":2026},{"id":"CVE-2026-60137","v":"WordPress","p":"Core","n":"WordPress Core SQL Injection Vulnerability","d":"2026-07-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2026},{"id":"CVE-2026-0770","v":"Langflow","p":"Langflow","n":"Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability","d":"2026-07-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-829"],"y":2026},{"id":"CVE-2021-27137","v":"DD-WRT","p":"DD-WRT","n":"DD-WRT Stack-Based Buffer Overflow Vulnerability","d":"2026-07-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-121"],"y":2021},{"id":"CVE-2026-58644","v":"Microsoft","p":"SharePoint","n":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","d":"2026-07-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2026},{"id":"CVE-2026-39808","v":"Fortinet","p":"FortiSandbox","n":"Fortinet FortiSandbox OS Command Injection Vulnerability","d":"2026-07-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2026},{"id":"CVE-2026-25089","v":"Fortinet","p":"FortiSandbox","n":"Fortinet FortiSandbox OS Command Injection Vulnerability","d":"2026-07-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2026},{"id":"CVE-2026-46817","v":"Oracle","p":"E-Business Suite","n":"Oracle E-Business Suite Improper Privilege Management Vulnerability","d":"2026-07-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-269","CWE-287","CWE-306"],"y":2026},{"id":"CVE-2023-4346","v":"KNX Association","p":"KNX Protocol Connection Authorization Option 1","n":"KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability","d":"2026-07-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-645"],"y":2023},{"id":"CVE-2026-56164","v":"Microsoft","p":"SharePoint Server","n":"Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability","d":"2026-07-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306"],"y":2026},{"id":"CVE-2026-56155","v":"Microsoft","p":"Active Directory Federation Services","n":"Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability ","d":"2026-07-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-1220"],"y":2026},{"id":"CVE-2026-15410","v":"SonicWall","p":"SMA1000 Appliances","n":"SonicWall SMA1000 Appliances Code Injection Vulnerability","d":"2026-07-14","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-94"],"y":2026},{"id":"CVE-2026-15409","v":"SonicWall","p":"SMA1000 Appliances","n":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","d":"2026-07-14","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-918"],"y":2026},{"id":"CVE-2008-4128","v":"Cisco","p":"IOS","n":"Cisco IOS Cross-Site Request Forgery Vulnerability","d":"2026-07-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-352"],"y":2008},{"id":"CVE-2026-56291","v":"Balbooa","p":"Forms","n":"Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability","d":"2026-07-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-434"],"y":2026},{"id":"CVE-2026-48939","v":"iCagenda","p":"iCagenda","n":"iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability","d":"2026-07-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-434"],"y":2026},{"id":"CVE-2026-56290","v":"Joomlack","p":"Page Builder","n":"Joomlack Page Builder Improper Access Control Vulnerability","d":"2026-07-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2026},{"id":"CVE-2026-55255","v":"Langflow","p":"Langflow","n":"Langflow Authorization Bypass Through User-Controlled Key Vulnerability","d":"2026-07-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-639"],"y":2026},{"id":"CVE-2026-48908","v":"JoomShaper","p":"SP Page Builder","n":"JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability","d":"2026-07-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-434"],"y":2026},{"id":"CVE-2026-48282","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Path Traversal Vulnerability","d":"2026-07-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2026},{"id":"CVE-2026-45659","v":"Microsoft","p":"SharePoint Server","n":"Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability","d":"2026-07-01","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-502"],"y":2026},{"id":"CVE-2026-48558","v":"SimpleHelp ","p":"SimpleHelp","n":"SimpleHelp Authentication Bypass Vulnerability","d":"2026-06-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-347"],"y":2026},{"id":"CVE-2026-20230","v":"Cisco","p":"Unified Communications Manager","n":"Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability","d":"2026-06-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-918"],"y":2026},{"id":"CVE-2026-12569","v":"PTC","p":"Windchill and FlexPLM","n":"PTC Windchill and FlexPLM Improper Input Validation Vulnerability","d":"2026-06-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20","CWE-502"],"y":2026},{"id":"CVE-2026-34910","v":"Ubiquiti","p":"UniFi OS","n":"Ubiquiti UniFi OS Improper Input Validation Vulnerability","d":"2026-06-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2026},{"id":"CVE-2026-34909","v":"Ubiquiti","p":"UniFi OS","n":"Ubiquiti UniFi OS Path Traversal Vulnerability","d":"2026-06-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2026},{"id":"CVE-2026-34908","v":"Ubiquiti","p":"UniFi OS","n":"Ubiquiti UniFi OS Improper Access Control Vulnerability","d":"2026-06-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2026},{"id":"CVE-2025-67038","v":"Lantronix","p":"EDS5000","n":"Lantronix EDS5000 Code Injection Vulnerability","d":"2026-06-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78","CWE-94"],"y":2025},{"id":"CVE-2026-20253","v":"Splunk","p":"Enterprise","n":"Splunk Enterprise Missing Authentication for Critical Function Vulnerability","d":"2026-06-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306"],"y":2026},{"id":"CVE-2026-48907","v":"Widget Factory","p":"Joomla Content Editor ","n":"Widget Factory Joomla Content Editor Improper Access Control Vulnerability","d":"2026-06-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2026},{"id":"CVE-2026-54420","v":"LiteSpeed","p":"cPanel Plugin","n":"LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability","d":"2026-06-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-61"],"y":2026},{"id":"CVE-2026-20262","v":"Cisco","p":"Catalyst SD-WAN Manager","n":"Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability","d":"2026-06-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2026},{"id":"CVE-2026-35273","v":"Oracle","p":" PeopleSoft Enterprise PeopleTools","n":"Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability","d":"2026-06-12","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-306"],"y":2026},{"id":"CVE-2026-10520","v":"Ivanti","p":"Sentry","n":"Ivanti Sentry OS Command Injection Vulnerability","d":"2026-06-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2026},{"id":"CVE-2026-7473","v":"Arista","p":"Extensible Operating System","n":"Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability","d":"2026-06-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-1023"],"y":2026},{"id":"CVE-2026-20245","v":"Cisco","p":"Catalyst SD-WAN Manager","n":"Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability","d":"2026-06-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-116"],"y":2026},{"id":"CVE-2026-11645","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","d":"2026-06-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787","CWE-125"],"y":2026},{"id":"CVE-2026-50751","v":"Check Point","p":"Security Gateway","n":"Check Point Security Gateway Improper Authentication Vulnerability","d":"2026-06-08","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-287"],"y":2026},{"id":"CVE-2026-42271","v":"BerriAI","p":"LiteLLM","n":"BerriAI LiteLLM Command Injection Vulnerability","d":"2026-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78","CWE-77"],"y":2026},{"id":"CVE-2026-28318","v":"SolarWinds","p":"Serv-U","n":"SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability","d":"2026-06-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-400"],"y":2026},{"id":"CVE-2026-45247","v":"Mirasvit","p":"Mirasvit Full Page Cache Warmer","n":"Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability","d":"2026-06-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2026},{"id":"CVE-2025-48595","v":"Android","p":"Framework","n":"Android Framework Integer Overflow Vulnerability","d":"2026-06-02","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-190"],"y":2025},{"id":"CVE-2022-0492","v":"Linux","p":"Kernel","n":"Linux Kernel Improper Authentication Vulnerability","d":"2026-06-02","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287","CWE-862"],"y":2022},{"id":"CVE-2024-21182","v":"Oracle","p":"WebLogic Server","n":"Oracle WebLogic Server Unspecified Vulnerability","d":"2026-06-01","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2024},{"id":"CVE-2026-0257","v":"Palo Alto Networks","p":"PAN-OS","n":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","d":"2026-05-29","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-565"],"y":2026},{"id":"CVE-2026-8398","v":"Daemon","p":"Daemon Tools Lite","n":"Daemon Tools Lite Embedded Malicious Code Vulnerability","d":"2026-05-27","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-506"],"y":2026},{"id":"CVE-2026-48027","v":"Nx","p":"Nx Console","n":"Nx Console Embedded Malicious Code Vulnerability","d":"2026-05-27","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-506"],"y":2026},{"id":"CVE-2026-45321","v":"TanStack","p":"TanStack","n":"TanStack Unspecified Vulnerability","d":"2026-05-27","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2026},{"id":"CVE-2026-48172","v":"LiteSpeed","p":"cPanel Plugin","n":"LiteSpeed cPanel Plugin Privilege Escalation Vulnerability","d":"2026-05-26","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-266"],"y":2026},{"id":"CVE-2026-9082","v":"Drupal","p":"Core","n":"Drupal Core SQL Injection Vulnerability","d":"2026-05-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2026},{"id":"CVE-2026-34926","v":"Trend Micro","p":"Apex One","n":"Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability","d":"2026-05-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-23"],"y":2026},{"id":"CVE-2025-34291","v":"Langflow","p":"Langflow","n":"Langflow Origin Validation Error Vulnerability","d":"2026-05-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-346"],"y":2025},{"id":"CVE-2026-45498","v":"Microsoft","p":"Defender","n":"Microsoft Defender Denial of Service Vulnerability","d":"2026-05-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2026},{"id":"CVE-2026-41091","v":"Microsoft","p":"Defender","n":"Microsoft Defender Link Following Vulnerability","d":"2026-05-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-59"],"y":2026},{"id":"CVE-2010-0806","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Use-After-Free Vulnerability","d":"2026-05-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2010},{"id":"CVE-2010-0249","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Use-After-Free Vulnerability","d":"2026-05-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2010},{"id":"CVE-2009-3459","v":"Adobe","p":"Acrobat and Reader","n":"Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability","d":"2026-05-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2009},{"id":"CVE-2009-1537","v":"Microsoft","p":"DirectX","n":"Microsoft DirectX NULL Byte Overwrite Vulnerability","d":"2026-05-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2009},{"id":"CVE-2008-4250","v":"Microsoft","p":"Windows","n":"Microsoft Windows Buffer Overflow Vulnerability","d":"2026-05-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2008},{"id":"CVE-2026-42897","v":"Microsoft","p":"Microsoft","n":"Microsoft Exchange Server Cross-Site Scripting Vulnerability","d":"2026-05-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2026},{"id":"CVE-2026-20182","v":"Cisco","p":"Catalyst SD-WAN","n":"Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability","d":"2026-05-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2026},{"id":"CVE-2026-42208","v":"BerriAI","p":"LiteLLM","n":"BerriAI LiteLLM SQL Injection Vulnerability","d":"2026-05-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2026},{"id":"CVE-2026-6973","v":"Ivanti","p":"Endpoint Manager Mobile (EPMM)","n":"Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability","d":"2026-05-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2026},{"id":"CVE-2026-0300","v":"Palo Alto Networks","p":"PAN-OS","n":"Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability","d":"2026-05-06","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2026},{"id":"CVE-2026-31431","v":"Linux","p":"Kernel","n":"Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","d":"2026-05-01","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-669"],"y":2026},{"id":"CVE-2026-41940","v":"WebPros","p":"cPanel & WHM and WP2 (WordPress Squared)","n":"WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability","d":"2026-04-30","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-306"],"y":2026},{"id":"CVE-2026-32202","v":"Microsoft","p":"Windows","n":"Microsoft Windows Protection Mechanism Failure Vulnerability","d":"2026-04-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-693"],"y":2026},{"id":"CVE-2024-1708","v":"ConnectWise","p":"ScreenConnect","n":"ConnectWise ScreenConnect Path Traversal Vulnerability","d":"2026-04-28","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-22"],"y":2024},{"id":"CVE-2025-29635","v":"D-Link","p":"DIR-823X","n":"D-Link DIR-823X Command Injection Vulnerability","d":"2026-04-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2025},{"id":"CVE-2024-7399","v":"Samsung","p":"MagicINFO 9 Server","n":"Samsung MagicINFO 9 Server Path Traversal Vulnerability","d":"2026-04-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22","CWE-434"],"y":2024},{"id":"CVE-2024-57728","v":"SimpleHelp ","p":"SimpleHelp","n":"SimpleHelp Path Traversal Vulnerability","d":"2026-04-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-22"],"y":2024},{"id":"CVE-2024-57726","v":"SimpleHelp ","p":"SimpleHelp","n":"SimpleHelp Missing Authorization Vulnerability","d":"2026-04-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-862"],"y":2024},{"id":"CVE-2026-39987","v":"Marimo","p":"Marimo","n":"Marimo Remote Code Execution Vulnerability","d":"2026-04-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306"],"y":2026},{"id":"CVE-2026-33825","v":"Microsoft","p":"Defender","n":"Microsoft Defender Insufficient Granularity of Access Control Vulnerability","d":"2026-04-22","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-1220"],"y":2026},{"id":"CVE-2026-20133","v":"Cisco","p":"Catalyst SD-WAN Manager","n":"Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","d":"2026-04-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2026},{"id":"CVE-2026-20128","v":"Cisco","p":"Catalyst SD-WAN Manager","n":"Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability","d":"2026-04-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-257"],"y":2026},{"id":"CVE-2026-20122","v":"Cisco","p":"Catalyst SD-WAN Manger","n":"Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability","d":"2026-04-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-648"],"y":2026},{"id":"CVE-2025-48700","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","d":"2026-04-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2025},{"id":"CVE-2025-32975","v":"Quest","p":"KACE Systems Management Appliance (SMA)","n":"Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability","d":"2026-04-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2025},{"id":"CVE-2025-2749","v":"Kentico","p":"Kentico Xperience","n":"Kentico Xperience Path Traversal Vulnerability","d":"2026-04-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22","CWE-434"],"y":2025},{"id":"CVE-2024-27199","v":"JetBrains","p":"TeamCity","n":"JetBrains TeamCity Relative Path Traversal Vulnerability","d":"2026-04-20","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-23"],"y":2024},{"id":"CVE-2023-27351","v":"PaperCut","p":"NG/MF","n":"PaperCut NG/MF Improper Authentication Vulnerability","d":"2026-04-20","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-287"],"y":2023},{"id":"CVE-2026-34197","v":"Apache","p":"ActiveMQ","n":"Apache ActiveMQ Improper Input Validation Vulnerability","d":"2026-04-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-94"],"y":2026},{"id":"CVE-2026-32201","v":"Microsoft","p":"SharePoint Server","n":"Microsoft SharePoint Server Improper Input Validation Vulnerability","d":"2026-04-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2026},{"id":"CVE-2009-0238","v":"Microsoft","p":"Office","n":"Microsoft Office Remote Code Execution","d":"2026-04-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2009},{"id":"CVE-2026-34621","v":"Adobe","p":"Acrobat and Reader","n":"Adobe Acrobat and Reader Prototype Pollution Vulnerability","d":"2026-04-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-1321"],"y":2026},{"id":"CVE-2026-21643","v":"Fortinet","p":"FortiClient EMS","n":"Fortinet FortiClient EMS SQL Injection Vulnerability","d":"2026-04-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2026},{"id":"CVE-2025-60710","v":"Microsoft","p":"Windows","n":"Microsoft Windows Link Following Vulnerability","d":"2026-04-13","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-59"],"y":2025},{"id":"CVE-2023-36424","v":"Microsoft","p":"Windows","n":"Microsoft Windows Out-of-Bounds Read Vulnerability","d":"2026-04-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-125"],"y":2023},{"id":"CVE-2023-21529","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","d":"2026-04-13","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-502"],"y":2023},{"id":"CVE-2020-9715","v":"Adobe","p":"Acrobat","n":"Adobe Acrobat Use-After-Free Vulnerability","d":"2026-04-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2020},{"id":"CVE-2012-1854","v":"Microsoft","p":"Visual Basic for Applications (VBA)","n":"Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability","d":"2026-04-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-426"],"y":2012},{"id":"CVE-2026-1340","v":"Ivanti","p":"Endpoint Manager Mobile (EPMM)","n":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","d":"2026-04-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2026},{"id":"CVE-2026-35616","v":"Fortinet","p":"FortiClient EMS","n":"Fortinet FortiClient EMS Improper Access Control Vulnerability","d":"2026-04-06","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2026},{"id":"CVE-2026-3502","v":"TrueConf","p":"Client","n":"TrueConf Client Download of Code Without Integrity Check Vulnerability","d":"2026-04-02","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-494"],"y":2026},{"id":"CVE-2026-5281","v":"Google","p":"Dawn","n":"Google Dawn Use-After-Free Vulnerability","d":"2026-04-01","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2026},{"id":"CVE-2026-3055","v":"Citrix","p":"NetScaler","n":"Citrix NetScaler Out-of-Bounds Read Vulnerability","d":"2026-03-30","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-125"],"y":2026},{"id":"CVE-2025-53521","v":"F5","p":"BIG-IP","n":"F5 BIG-IP Stack-Based Buffer Overflow Vulnerability","d":"2026-03-27","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-121"],"y":2025},{"id":"CVE-2026-33634","v":"Aquasecurity","p":"Trivy","n":"Aquasecurity Trivy Embedded Malicious Code Vulnerability","d":"2026-03-26","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-506"],"y":2026},{"id":"CVE-2026-33017","v":"Langflow","p":"Langflow","n":"Langflow Code Injection Vulnerability","d":"2026-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94","CWE-95","CWE-306"],"y":2026},{"id":"CVE-2025-54068","v":"Laravel","p":"Livewire","n":"Laravel Livewire Code Injection Vulnerability","d":"2026-03-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2025},{"id":"CVE-2025-43520","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Classic Buffer Overflow Vulnerability","d":"2026-03-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-120"],"y":2025},{"id":"CVE-2025-43510","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Improper Locking Vulnerability","d":"2026-03-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-667"],"y":2025},{"id":"CVE-2025-32432","v":"Craft CMS","p":"Craft CMS","n":"Craft CMS Code Injection Vulnerability","d":"2026-03-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2025},{"id":"CVE-2025-31277","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Buffer Overflow Vulnerability","d":"2026-03-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2025},{"id":"CVE-2026-20131","v":"Cisco","p":"Secure Firewall Management Center (FMC)","n":"Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability","d":"2026-03-19","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-502"],"y":2026},{"id":"CVE-2026-20963","v":"Microsoft","p":"SharePoint","n":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","d":"2026-03-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2026},{"id":"CVE-2025-66376","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability","d":"2026-03-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2025},{"id":"CVE-2025-47813","v":"Wing FTP Server","p":"Wing FTP Server","n":"Wing FTP Server Information Disclosure Vulnerability","d":"2026-03-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-209"],"y":2025},{"id":"CVE-2026-3910","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability","d":"2026-03-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2026},{"id":"CVE-2026-3909","v":"Google","p":"Skia","n":"Google Skia Out-of-Bounds Write Vulnerability","d":"2026-03-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2026},{"id":"CVE-2025-68613","v":"n8n","p":"n8n","n":"n8n Improper Control of Dynamically-Managed Code Resources Vulnerability","d":"2026-03-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-913"],"y":2025},{"id":"CVE-2026-1603","v":"Ivanti","p":" Endpoint Manager (EPM)","n":"Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability","d":"2026-03-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-288"],"y":2026},{"id":"CVE-2025-26399","v":"SolarWinds","p":"Web Help Desk","n":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","d":"2026-03-09","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-502"],"y":2025},{"id":"CVE-2021-22054","v":"Omnissa","p":"Workspace One UEM","n":"Omnissa Workspace ONE Server-Side Request Forgery","d":"2026-03-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-918"],"y":2021},{"id":"CVE-2023-43000","v":"Apple","p":"Multiple Products","n":"Apple Multiple products Use-After-Free Vulnerability","d":"2026-03-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2023},{"id":"CVE-2023-41974","v":"Apple","p":"iOS and iPadOS","n":"Apple iOS and iPadOS Use-After-Free Vulnerability","d":"2026-03-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2023},{"id":"CVE-2021-30952","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Integer Overflow or Wraparound Vulnerability","d":"2026-03-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-190"],"y":2021},{"id":"CVE-2021-22681","v":"Rockwell","p":"Multiple Products","n":"Rockwell Multiple Products Insufficient Protected Credentials Vulnerability","d":"2026-03-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-522"],"y":2021},{"id":"CVE-2017-7921","v":"Hikvision","p":"Multiple Products","n":"Hikvision Multiple Products Improper Authentication Vulnerability","d":"2026-03-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2017},{"id":"CVE-2026-22719","v":"Broadcom","p":"VMware Aria Operations","n":"Broadcom VMware Aria Operations Command Injection Vulnerability","d":"2026-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2026},{"id":"CVE-2026-21385","v":"Qualcomm","p":"Multiple Chipsets","n":"Qualcomm Multiple Chipsets Memory Corruption Vulnerability","d":"2026-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-190"],"y":2026},{"id":"CVE-2026-20127","v":"Cisco","p":"Catalyst SD-WAN Controller and Manager","n":"Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability","d":"2026-02-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2026},{"id":"CVE-2022-20775","v":"Cisco","p":"SD-WAN","n":"Cisco SD-WAN Path Traversal Vulnerability","d":"2026-02-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-25","CWE-282"],"y":2022},{"id":"CVE-2026-25108","v":"Soliton Systems K.K","p":"FileZen","n":"Soliton Systems K.K FileZen OS Command Injection Vulnerability","d":"2026-02-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2026},{"id":"CVE-2025-68461","v":"Roundcube","p":"Webmail","n":"RoundCube Webmail Cross-site Scripting Vulnerability","d":"2026-02-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2025},{"id":"CVE-2025-49113","v":"Roundcube","p":"Webmail","n":"RoundCube Webmail Deserialization of Untrusted Data Vulnerability","d":"2026-02-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2025},{"id":"CVE-2026-22769","v":"Dell","p":"RecoverPoint for Virtual Machines (RP4VMs)","n":"Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability","d":"2026-02-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-798"],"y":2026},{"id":"CVE-2021-22175","v":"GitLab","p":"GitLab","n":"GitLab Server-Side Request Forgery (SSRF) Vulnerability","d":"2026-02-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-918"],"y":2021},{"id":"CVE-2026-2441","v":"Google","p":"Chromium","n":"Google Chromium CSS Use-After-Free Vulnerability","d":"2026-02-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2026},{"id":"CVE-2024-7694","v":"TeamT5","p":"ThreatSonar Anti-Ransomware","n":"TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability","d":"2026-02-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-434"],"y":2024},{"id":"CVE-2020-7796","v":"Synacor","p":"Zimbra Collaboration Suite","n":"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability","d":"2026-02-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-918"],"y":2020},{"id":"CVE-2008-0015","v":"Microsoft","p":"Windows","n":" Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","d":"2026-02-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2008},{"id":"CVE-2026-1731","v":"BeyondTrust","p":"Remote Support (RS) and Privileged Remote Access (PRA)","n":"BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability","d":"2026-02-13","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-78"],"y":2026},{"id":"CVE-2026-20700","v":"Apple","p":"Multiple Products","n":"Apple Multiple Buffer Overflow Vulnerability","d":"2026-02-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2026},{"id":"CVE-2025-40536","v":"SolarWinds","p":"Web Help Desk","n":"SolarWinds Web Help Desk Security Control Bypass Vulnerability","d":"2026-02-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-693"],"y":2025},{"id":"CVE-2025-15556","v":"Notepad++","p":"Notepad++","n":"Notepad++ Download of Code Without Integrity Check Vulnerability","d":"2026-02-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-494"],"y":2025},{"id":"CVE-2024-43468","v":"Microsoft","p":"Configuration Manager","n":"Microsoft Configuration Manager SQL Injection Vulnerability","d":"2026-02-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2024},{"id":"CVE-2026-21533","v":"Microsoft","p":"Windows","n":"Microsoft Windows Improper Privilege Management Vulnerability","d":"2026-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-269"],"y":2026},{"id":"CVE-2026-21525","v":"Microsoft","p":"Windows","n":"Microsoft Windows NULL Pointer Dereference Vulnerability","d":"2026-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-476"],"y":2026},{"id":"CVE-2026-21519","v":"Microsoft","p":"Windows","n":"Microsoft Windows Type Confusion Vulnerability","d":"2026-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2026},{"id":"CVE-2026-21514","v":"Microsoft","p":"Office","n":"Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability","d":"2026-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-807"],"y":2026},{"id":"CVE-2026-21513","v":"Microsoft","p":"Windows","n":"Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability","d":"2026-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-693"],"y":2026},{"id":"CVE-2026-21510","v":"Microsoft","p":"Windows","n":"Microsoft Windows Shell Protection Mechanism Failure Vulnerability","d":"2026-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-693"],"y":2026},{"id":"CVE-2026-24423","v":"SmarterTools","p":"SmarterMail","n":"SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability","d":"2026-02-05","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-306"],"y":2026},{"id":"CVE-2025-11953","v":"React Native Community","p":"CLI","n":"React Native Community CLI OS Command Injection Vulnerability","d":"2026-02-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2025},{"id":"CVE-2025-64328","v":"Sangoma","p":"FreePBX ","n":"Sangoma FreePBX OS Command Injection Vulnerability","d":"2026-02-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2025},{"id":"CVE-2025-40551","v":"SolarWinds","p":"Web Help Desk","n":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","d":"2026-02-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2025},{"id":"CVE-2021-39935","v":"GitLab","p":"Community and Enterprise Editions","n":"GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability","d":"2026-02-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-918"],"y":2021},{"id":"CVE-2019-19006","v":"Sangoma","p":"FreePBX","n":" Sangoma FreePBX Improper Authentication Vulnerability","d":"2026-02-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2019},{"id":"CVE-2026-1281","v":"Ivanti","p":"Endpoint Manager Mobile (EPMM)","n":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","d":"2026-01-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2026},{"id":"CVE-2026-24858","v":"Fortinet","p":"Multiple Products","n":"Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability","d":"2026-01-27","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-288"],"y":2026},{"id":"CVE-2026-24061","v":"GNU","p":"InetUtils","n":"GNU InetUtils Argument Injection Vulnerability","d":"2026-01-26","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-88"],"y":2026},{"id":"CVE-2026-23760","v":"SmarterTools","p":"SmarterMail","n":"SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability","d":"2026-01-26","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-288"],"y":2026},{"id":"CVE-2026-21509","v":"Microsoft","p":"Office","n":"Microsoft Office Security Feature Bypass Vulnerability","d":"2026-01-26","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-807"],"y":2026},{"id":"CVE-2025-52691","v":"SmarterTools","p":"SmarterMail","n":"SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability","d":"2026-01-26","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-434"],"y":2025},{"id":"CVE-2018-14634","v":"Linux","p":"Kernel","n":"Linux Kernel Integer Overflow Vulnerability","d":"2026-01-26","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-190"],"y":2018},{"id":"CVE-2024-37079","v":"Broadcom","p":"VMware vCenter Server","n":"Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability","d":"2026-01-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2024},{"id":"CVE-2025-68645","v":"Synacor","p":" Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability","d":"2026-01-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-98"],"y":2025},{"id":"CVE-2025-54313","v":"Prettier","p":"eslint-config-prettier","n":"Prettier eslint-config-prettier Embedded Malicious Code Vulnerability","d":"2026-01-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-506"],"y":2025},{"id":"CVE-2025-34026","v":"Versa","p":"Concerto","n":"Versa Concerto Improper Authentication Vulnerability","d":"2026-01-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-288"],"y":2025},{"id":"CVE-2025-31125","v":"Vite","p":"Vitejs","n":"Vite Vitejs Improper Access Control Vulnerability","d":"2026-01-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200","CWE-284"],"y":2025},{"id":"CVE-2026-20045","v":"Cisco","p":"Unified Communications Manager","n":"Cisco Unified Communications Products Code Injection Vulnerability","d":"2026-01-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2026},{"id":"CVE-2026-20805","v":"Microsoft","p":"Windows","n":"Microsoft Windows Information Disclosure Vulnerability","d":"2026-01-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2026},{"id":"CVE-2025-8110","v":"Gogs","p":"Gogs","n":"Gogs Path Traversal Vulnerability","d":"2026-01-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2025},{"id":"CVE-2025-37164","v":"Hewlett Packard Enterprise (HPE)","p":"OneView","n":"Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability","d":"2026-01-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2025},{"id":"CVE-2009-0556","v":"Microsoft","p":"Office","n":"Microsoft Office PowerPoint Code Injection Vulnerability","d":"2026-01-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2009},{"id":"CVE-2025-14847","v":"MongoDB","p":"MongoDB and MongoDB Server","n":"MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability","d":"2025-12-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-130"],"y":2025},{"id":"CVE-2023-52163","v":"Digiever","p":"DS-2105 Pro","n":"Digiever DS-2105 Pro Missing Authorization Vulnerability","d":"2025-12-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-862"],"y":2023},{"id":"CVE-2025-14733","v":"WatchGuard","p":"Firebox","n":"WatchGuard Firebox Out of Bounds Write Vulnerability","d":"2025-12-19","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2025},{"id":"CVE-2025-59374","v":"ASUS","p":"Live Update","n":"ASUS Live Update Embedded Malicious Code Vulnerability","d":"2025-12-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-506"],"y":2025},{"id":"CVE-2025-40602","v":"SonicWall","p":"SMA1000 appliance","n":"SonicWall SMA1000 Missing Authorization Vulnerability","d":"2025-12-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-862","CWE-250"],"y":2025},{"id":"CVE-2025-20393","v":"Cisco","p":"Multiple Products","n":"Cisco Multiple Products Improper Input Validation Vulnerability","d":"2025-12-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2025},{"id":"CVE-2025-59718","v":"Fortinet","p":"Multiple Products","n":"Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability","d":"2025-12-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-347"],"y":2025},{"id":"CVE-2025-43529","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Use-After-Free WebKit Vulnerability","d":"2025-12-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2025},{"id":"CVE-2025-14611","v":"Gladinet","p":"CentreStack and Triofox","n":"Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability","d":"2025-12-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-798"],"y":2025},{"id":"CVE-2025-14174","v":"Google","p":"Chromium","n":"Google Chromium Out of Bounds Memory Access Vulnerability","d":"2025-12-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2025},{"id":"CVE-2018-4063","v":"Sierra Wireless","p":"AirLink ALEOS","n":"Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability","d":"2025-12-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-434"],"y":2018},{"id":"CVE-2025-58360","v":"OSGeo","p":"GeoServer","n":"OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability","d":"2025-12-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-611"],"y":2025},{"id":"CVE-2025-62221","v":"Microsoft","p":"Windows","n":"Microsoft Windows Use After Free Vulnerability","d":"2025-12-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2025},{"id":"CVE-2025-6218","v":"RARLAB","p":"WinRAR","n":"RARLAB WinRAR Path Traversal Vulnerability","d":"2025-12-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2025},{"id":"CVE-2025-66644","v":"Array Networks ","p":"ArrayOS AG","n":"Array Networks ArrayOS AG OS Command Injection Vulnerability","d":"2025-12-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2025},{"id":"CVE-2022-37055","v":"D-Link","p":"Routers","n":"D-Link Routers Buffer Overflow Vulnerability","d":"2025-12-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-120"],"y":2022},{"id":"CVE-2025-55182","v":"Meta","p":"React Server Components","n":"Meta React Server Components Remote Code Execution Vulnerability","d":"2025-12-05","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2025},{"id":"CVE-2021-26828","v":"OpenPLC","p":"ScadaBR","n":"OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability","d":"2025-12-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-434"],"y":2021},{"id":"CVE-2025-48633","v":"Android","p":"Framework","n":"Android Framework Information Disclosure Vulnerability","d":"2025-12-02","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2025},{"id":"CVE-2025-48572","v":"Android","p":"Framework","n":"Android Framework Privilege Escalation Vulnerability","d":"2025-12-02","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2025},{"id":"CVE-2021-26829","v":"OpenPLC","p":"ScadaBR","n":"OpenPLC ScadaBR Cross-site Scripting Vulnerability","d":"2025-11-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2021},{"id":"CVE-2025-61757","v":"Oracle","p":"Fusion Middleware","n":"Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability","d":"2025-11-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306"],"y":2025},{"id":"CVE-2025-13223","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2025-11-19","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2025},{"id":"CVE-2025-58034","v":"Fortinet","p":"FortiWeb","n":"Fortinet FortiWeb OS Command Injection Vulnerability","d":"2025-11-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2025},{"id":"CVE-2025-64446","v":"Fortinet","p":"FortiWeb","n":"Fortinet FortiWeb Path Traversal Vulnerability","d":"2025-11-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-23"],"y":2025},{"id":"CVE-2025-9242","v":"WatchGuard","p":"Firebox","n":"WatchGuard Firebox Out-of-Bounds Write Vulnerability","d":"2025-11-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2025},{"id":"CVE-2025-62215","v":"Microsoft","p":"Windows","n":"Microsoft Windows Race Condition Vulnerability","d":"2025-11-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-362"],"y":2025},{"id":"CVE-2025-12480","v":"Gladinet","p":"Triofox","n":"Gladinet Triofox Improper Access Control Vulnerability","d":"2025-11-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2025},{"id":"CVE-2025-21042","v":"Samsung","p":"Mobile Devices","n":"Samsung Mobile Devices Out-of-Bounds Write Vulnerability","d":"2025-11-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2025},{"id":"CVE-2025-48703","v":"CWP","p":"Control Web Panel","n":"CWP Control Web Panel OS Command Injection Vulnerability","d":"2025-11-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2025},{"id":"CVE-2025-11371","v":"Gladinet","p":"CentreStack and Triofox","n":"Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability","d":"2025-11-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-552"],"y":2025},{"id":"CVE-2025-41244","v":"Broadcom","p":"VMware Aria Operations and VMware Tools","n":"Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","d":"2025-10-30","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-267"],"y":2025},{"id":"CVE-2025-24893","v":"XWiki","p":"Platform","n":"XWiki Platform Eval Injection Vulnerability","d":"2025-10-30","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-95"],"y":2025},{"id":"CVE-2025-6205","v":"Dassault Systèmes","p":"DELMIA Apriso","n":"Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability","d":"2025-10-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-862"],"y":2025},{"id":"CVE-2025-6204","v":"Dassault Systèmes","p":"DELMIA Apriso","n":"Dassault Systèmes DELMIA Apriso Code Injection Vulnerability","d":"2025-10-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2025},{"id":"CVE-2025-59287","v":"Microsoft","p":"Windows","n":"Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability","d":"2025-10-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2025},{"id":"CVE-2025-54236","v":"Adobe","p":"Commerce and Magento","n":"Adobe Commerce and Magento Improper Input Validation Vulnerability","d":"2025-10-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2025},{"id":"CVE-2025-61932","v":"Motex","p":"LANSCOPE Endpoint Manager","n":"Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability","d":"2025-10-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-940"],"y":2025},{"id":"CVE-2025-61884","v":"Oracle","p":"E-Business Suite","n":"Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability","d":"2025-10-20","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-918"],"y":2025},{"id":"CVE-2025-33073","v":"Microsoft","p":"Windows","n":"Microsoft Windows SMB Client Improper Access Control Vulnerability","d":"2025-10-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2025},{"id":"CVE-2025-2747","v":"Kentico","p":"Xperience CMS","n":"Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","d":"2025-10-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-288"],"y":2025},{"id":"CVE-2025-2746","v":"Kentico","p":"Xperience CMS","n":"Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","d":"2025-10-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-288"],"y":2025},{"id":"CVE-2022-48503","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Unspecified Vulnerability","d":"2025-10-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2022},{"id":"CVE-2025-54253","v":"Adobe","p":"Experience Manager (AEM) Forms","n":"Adobe Experience Manager Forms Code Execution Vulnerability","d":"2025-10-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2025},{"id":"CVE-2025-59230","v":"Microsoft","p":"Windows","n":"Microsoft Windows Improper Access Control Vulnerability","d":"2025-10-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2025},{"id":"CVE-2025-47827","v":"IGEL","p":"IGEL OS","n":"IGEL OS Use of a Key Past its Expiration Date Vulnerability","d":"2025-10-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-324"],"y":2025},{"id":"CVE-2025-24990","v":"Microsoft","p":"Windows","n":"Microsoft Windows Untrusted Pointer Dereference Vulnerability","d":"2025-10-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-822"],"y":2025},{"id":"CVE-2016-7836","v":"SKYSEA","p":"Client View","n":"SKYSEA Client View Improper Authentication Vulnerability","d":"2025-10-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2016},{"id":"CVE-2021-43798","v":"Grafana Labs","p":"Grafana","n":"Grafana Path Traversal Vulnerability","d":"2025-10-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2021},{"id":"CVE-2025-27915","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","d":"2025-10-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2025},{"id":"CVE-2025-61882","v":"Oracle","p":"E-Business Suite","n":"Oracle E-Business Suite Unspecified Vulnerability","d":"2025-10-06","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2025},{"id":"CVE-2021-43226","v":"Microsoft","p":"Windows","n":"Microsoft Windows Privilege Escalation Vulnerability","d":"2025-10-06","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2021-22555","v":"Linux","p":"Kernel","n":"Linux Kernel Heap Out-of-Bounds Write Vulnerability","d":"2025-10-06","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2013-3918","v":"Microsoft","p":"Windows","n":"Microsoft Windows Out-of-Bounds Write Vulnerability","d":"2025-10-06","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2013},{"id":"CVE-2011-3402","v":"Microsoft","p":"Windows","n":"Microsoft Windows Remote Code Execution Vulnerability","d":"2025-10-06","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2011},{"id":"CVE-2010-3962","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability","d":"2025-10-06","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2010},{"id":"CVE-2010-3765","v":"Mozilla","p":"Multiple Products","n":"Mozilla Multiple Products Remote Code Execution Vulnerability","d":"2025-10-06","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2010},{"id":"CVE-2025-4008","v":"Smartbedded","p":"Meteobridge","n":"Smartbedded Meteobridge Command Injection Vulnerability","d":"2025-10-02","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306","CWE-77"],"y":2025},{"id":"CVE-2025-21043","v":"Samsung","p":"Mobile Devices","n":"Samsung Mobile Devices Out-of-Bounds Write Vulnerability","d":"2025-10-02","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2025},{"id":"CVE-2017-1000353","v":"Jenkins","p":"Jenkins","n":"Jenkins Remote Code Execution Vulnerability","d":"2025-10-02","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2017},{"id":"CVE-2015-7755","v":"Juniper","p":"ScreenOS","n":"Juniper ScreenOS Improper Authentication Vulnerability","d":"2025-10-02","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2015},{"id":"CVE-2014-6278","v":"GNU","p":"GNU Bash","n":"GNU Bash OS Command Injection Vulnerability","d":"2025-10-02","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2014},{"id":"CVE-2025-59689","v":"Libraesva","p":"Email Security Gateway","n":"Libraesva Email Security Gateway Command Injection Vulnerability","d":"2025-09-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2025},{"id":"CVE-2025-32463","v":"Sudo","p":"Sudo","n":"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","d":"2025-09-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-829"],"y":2025},{"id":"CVE-2025-20352","v":"Cisco","p":"IOS and IOS XE","n":"Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability","d":"2025-09-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-121"],"y":2025},{"id":"CVE-2025-10035","v":"Fortra","p":"GoAnywhere MFT","n":"Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability","d":"2025-09-29","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-502","CWE-77"],"y":2025},{"id":"CVE-2021-21311","v":"Adminer","p":"Adminer","n":"Adminer Server-Side Request Forgery Vulnerability","d":"2025-09-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-918"],"y":2021},{"id":"CVE-2025-20362","v":"Cisco","p":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","n":"Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability","d":"2025-09-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-862"],"y":2025},{"id":"CVE-2025-20333","v":"Cisco","p":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","n":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability","d":"2025-09-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-120"],"y":2025},{"id":"CVE-2025-10585","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2025-09-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2025},{"id":"CVE-2025-5086","v":"Dassault Systèmes","p":"DELMIA Apriso","n":"Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability","d":"2025-09-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2025},{"id":"CVE-2025-53690","v":"Sitecore","p":"Multiple Products","n":"Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability","d":"2025-09-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2025},{"id":"CVE-2025-48543","v":"Android","p":"Runtime","n":"Android Runtime Use-After-Free Vulnerability","d":"2025-09-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2025},{"id":"CVE-2025-38352","v":"Linux","p":"Kernel","n":"Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability","d":"2025-09-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-367"],"y":2025},{"id":"CVE-2025-9377","v":"TP-Link","p":"Multiple Routers","n":"TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability","d":"2025-09-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2025},{"id":"CVE-2023-50224","v":"TP-Link","p":"TL-WR841N","n":"TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability","d":"2025-09-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-290"],"y":2023},{"id":"CVE-2025-55177","v":"Meta Platforms","p":"WhatsApp","n":"Meta Platforms WhatsApp Incorrect Authorization Vulnerability","d":"2025-09-02","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-863"],"y":2025},{"id":"CVE-2020-24363","v":"TP-Link","p":"TL-WA855RE","n":"TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability","d":"2025-09-02","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306"],"y":2020},{"id":"CVE-2025-57819","v":"Sangoma","p":"FreePBX","n":"Sangoma FreePBX Authentication Bypass Vulnerability","d":"2025-08-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89","CWE-288"],"y":2025},{"id":"CVE-2025-7775","v":"Citrix","p":"NetScaler","n":"Citrix NetScaler Memory Overflow Vulnerability","d":"2025-08-26","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2025},{"id":"CVE-2025-48384","v":"Git","p":"Git","n":"Git Link Following Vulnerability","d":"2025-08-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-59","CWE-436"],"y":2025},{"id":"CVE-2024-8069","v":"Citrix","p":"Session Recording","n":"Citrix Session Recording Deserialization of Untrusted Data Vulnerability","d":"2025-08-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2024},{"id":"CVE-2024-8068","v":"Citrix","p":"Session Recording","n":"Citrix Session Recording Improper Privilege Management Vulnerability","d":"2025-08-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-269"],"y":2024},{"id":"CVE-2025-43300","v":"Apple","p":"iOS, iPadOS, and macOS","n":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","d":"2025-08-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2025},{"id":"CVE-2025-54948","v":"Trend Micro","p":"Apex One","n":"Trend Micro Apex One OS Command Injection Vulnerability","d":"2025-08-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2025},{"id":"CVE-2025-8876","v":"N-able","p":"N-Central","n":"N-able N-Central Command Injection Vulnerability","d":"2025-08-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2025},{"id":"CVE-2025-8875","v":"N-able","p":"N-Central","n":"N-able N-Central Insecure Deserialization Vulnerability","d":"2025-08-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2025},{"id":"CVE-2025-8088","v":"RARLAB","p":"WinRAR","n":"RARLAB WinRAR Path Traversal Vulnerability","d":"2025-08-12","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-35"],"y":2025},{"id":"CVE-2013-3893","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Resource Management Errors Vulnerability","d":"2025-08-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2013},{"id":"CVE-2007-0671","v":"Microsoft","p":"Office","n":"Microsoft Office Excel Remote Code Execution Vulnerability","d":"2025-08-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2007},{"id":"CVE-2022-40799","v":"D-Link","p":"DNR-322L","n":"D-Link DNR-322L Download of Code Without Integrity Check Vulnerability","d":"2025-08-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-494"],"y":2022},{"id":"CVE-2020-25079","v":"D-Link","p":"DCS-2530L and DCS-2670L Devices","n":"D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability","d":"2025-08-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2020},{"id":"CVE-2020-25078","v":"D-Link","p":"DCS-2530L and DCS-2670L Devices","n":"D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability","d":"2025-08-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2025-20337","v":"Cisco","p":"Identity Services Engine","n":"Cisco Identity Services Engine Injection Vulnerability","d":"2025-07-28","s":"mapped","g":"full","r":false,"t":["T1059","T1106"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-74"],"y":2025},{"id":"CVE-2025-20281","v":"Cisco","p":"Identity Services Engine","n":"Cisco Identity Services Engine Injection Vulnerability","d":"2025-07-28","s":"mapped","g":"full","r":false,"t":["T1059","T1106"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-74"],"y":2025},{"id":"CVE-2023-2533","v":"PaperCut","p":"NG/MF","n":"PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability","d":"2025-07-28","s":"mapped","g":"full","r":false,"t":["T1059","T1547","T1566.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-352"],"y":2023},{"id":"CVE-2025-6558","v":"Google","p":"Chromium","n":"Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","d":"2025-07-22","s":"mapped","g":"partial","r":false,"t":["T1189","T1203","T1456","T1497","T1633","T1658"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-20"],"y":2025},{"id":"CVE-2025-54309","v":"CrushFTP","p":"CrushFTP","n":" CrushFTP Unprotected Alternate Channel Vulnerability","d":"2025-07-22","s":"mapped","g":"full","r":false,"t":["T1021","T1068","T1567"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-420"],"y":2025},{"id":"CVE-2025-49706","v":"Microsoft","p":"SharePoint","n":"Microsoft SharePoint Improper Authentication Vulnerability","d":"2025-07-22","s":"mapped","g":"full","r":true,"t":["T1059.003","T1190","T1505"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-287"],"y":2025},{"id":"CVE-2025-49704","v":"Microsoft","p":"SharePoint","n":"Microsoft SharePoint Code Injection Vulnerability","d":"2025-07-22","s":"mapped","g":"full","r":true,"t":["T1059.003","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-94"],"y":2025},{"id":"CVE-2025-2776","v":"SysAid","p":"SysAid On-Prem","n":"SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","d":"2025-07-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-611"],"y":2025},{"id":"CVE-2025-2775","v":"SysAid","p":"SysAid On-Prem","n":"SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","d":"2025-07-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-611"],"y":2025},{"id":"CVE-2025-53770","v":"Microsoft","p":"SharePoint","n":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","d":"2025-07-20","s":"mapped","g":"full","r":true,"t":["T1059","T1190"],"mt":["exploitation_technique"],"w":["CWE-502"],"y":2025},{"id":"CVE-2025-25257","v":"Fortinet","p":"FortiWeb","n":"Fortinet FortiWeb SQL Injection Vulnerability","d":"2025-07-18","s":"mapped","g":"full","r":false,"t":["T1055","T1059.004","T1068","T1190","T1485"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-89"],"y":2025},{"id":"CVE-2025-47812","v":"Wing FTP Server","p":"Wing FTP Server","n":"Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability","d":"2025-07-14","s":"mapped","g":"full","r":false,"t":["T1059","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-158"],"y":2025},{"id":"CVE-2025-5777","v":"Citrix","p":"NetScaler ADC and Gateway","n":"Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability","d":"2025-07-10","s":"mapped","g":"full","r":true,"t":["T1190","T1555"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-125"],"y":2025},{"id":"CVE-2019-9621","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability","d":"2025-07-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-918","CWE-807"],"y":2019},{"id":"CVE-2019-5418","v":"Rails","p":"Ruby on Rails","n":"Rails Ruby on Rails Path Traversal Vulnerability","d":"2025-07-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2019},{"id":"CVE-2016-10033","v":"PHP","p":"PHPMailer","n":"PHPMailer Command Injection Vulnerability","d":"2025-07-07","s":"mapped","g":"full","r":false,"t":["T1059.004","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-77","CWE-88"],"y":2016},{"id":"CVE-2014-3931","v":"Looking Glass","p":"Multi-Router Looking Glass (MRLG)","n":"Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability","d":"2025-07-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2014},{"id":"CVE-2025-6554","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2025-07-02","s":"mapped","g":"full","r":false,"t":["T1059","T1189","T1203","T1456","T1623","T1658"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-843"],"y":2025},{"id":"CVE-2025-48928","v":"TeleMessage","p":"TM SGNL","n":"TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability","d":"2025-07-01","s":"mapped","g":"full","r":false,"t":["T1005","T1212","T1555"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-528"],"y":2025},{"id":"CVE-2025-48927","v":"TeleMessage","p":"TM SGNL","n":"TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability","d":"2025-07-01","s":"mapped","g":"full","r":false,"t":["T1005","T1212","T1555"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-1188"],"y":2025},{"id":"CVE-2025-6543","v":"Citrix","p":"NetScaler ADC and Gateway","n":"Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability","d":"2025-06-30","s":"mapped","g":"full","r":false,"t":["T1059","T1203","T1498"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-119"],"y":2025},{"id":"CVE-2024-54085","v":"AMI","p":"MegaRAC SPx","n":"AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability","d":"2025-06-25","s":"mapped","g":"partial","r":false,"t":["T1068","T1210","T1495","T1499","T1608.001"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-290"],"y":2024},{"id":"CVE-2024-0769","v":"D-Link","p":"DIR-859 Router","n":" D-Link DIR-859 Router Path Traversal Vulnerability","d":"2025-06-25","s":"mapped","g":"full","r":false,"t":["T1005","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-22"],"y":2024},{"id":"CVE-2019-6693","v":"Fortinet","p":"FortiOS","n":"Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability","d":"2025-06-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-798"],"y":2019},{"id":"CVE-2023-0386","v":"Linux","p":"Kernel","n":"Linux Kernel Improper Ownership Management Vulnerability","d":"2025-06-17","s":"stale","g":"full","r":false,"t":["T1055.012","T1543","T1548.001","T1562"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-282"],"y":2023},{"id":"CVE-2025-43200","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Unspecified Vulnerability","d":"2025-06-16","s":"mapped","g":"full","r":false,"t":["T1005","T1105","T1203","T1533","T1544","T1658"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":[],"y":2025},{"id":"CVE-2023-33538","v":"TP-Link","p":"Multiple Routers","n":"TP-Link Multiple Routers Command Injection Vulnerability","d":"2025-06-16","s":"mapped","g":"full","r":false,"t":["T1059","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-77"],"y":2023},{"id":"CVE-2025-33053","v":"Microsoft","p":"Windows","n":" Microsoft Windows External Control of File Name or Path Vulnerability","d":"2025-06-10","s":"mapped","g":"full","r":false,"t":["T1041","T1056.001","T1059","T1543","T1566.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-73"],"y":2025},{"id":"CVE-2025-24016","v":"Wazuh","p":"Wazuh Server","n":"Wazuh Server Deserialization of Untrusted Data Vulnerability","d":"2025-06-10","s":"mapped","g":"full","r":false,"t":["T1059","T1078","T1203"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-502"],"y":2025},{"id":"CVE-2025-32433","v":"Erlang","p":"Erlang/OTP","n":"Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability","d":"2025-06-09","s":"mapped","g":"full","r":false,"t":["T1021.004","T1059"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-306"],"y":2025},{"id":"CVE-2024-42009","v":"Roundcube","p":"Webmail","n":"RoundCube Webmail Cross-Site Scripting Vulnerability","d":"2025-06-09","s":"mapped","g":"full","r":false,"t":["T1056","T1114","T1566.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-79"],"y":2024},{"id":"CVE-2025-5419","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","d":"2025-06-05","s":"mapped","g":"full","r":false,"t":["T1189","T1203","T1456","T1658"],"mt":["exploitation_technique"],"w":["CWE-125","CWE-787"],"y":2025},{"id":"CVE-2025-27038","v":"Qualcomm","p":"Multiple Chipsets","n":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","d":"2025-06-03","s":"mapped","g":"full","r":false,"t":["T1059","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2025},{"id":"CVE-2025-21480","v":"Qualcomm","p":"Multiple Chipsets","n":"Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","d":"2025-06-03","s":"mapped","g":"full","r":false,"t":["T1055","T1495"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-863"],"y":2025},{"id":"CVE-2025-21479","v":"Qualcomm","p":"Multiple Chipsets","n":"Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","d":"2025-06-03","s":"mapped","g":"n/a","r":false,"t":["T1631","T1642"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-863"],"y":2025},{"id":"CVE-2025-3935","v":"ConnectWise","p":"ScreenConnect","n":"ConnectWise ScreenConnect Improper Authentication Vulnerability","d":"2025-06-02","s":"mapped","g":"full","r":false,"t":["T1059","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-287"],"y":2025},{"id":"CVE-2025-35939","v":"Craft CMS","p":"Craft CMS","n":"Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability","d":"2025-06-02","s":"mapped","g":"full","r":false,"t":["T1059","T1190","T1505.003"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-472"],"y":2025},{"id":"CVE-2024-56145","v":"Craft CMS","p":"Craft CMS","n":"Craft CMS Code Injection Vulnerability","d":"2025-06-02","s":"mapped","g":"full","r":false,"t":["T1055","T1059"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-94"],"y":2024},{"id":"CVE-2023-39780","v":"ASUS","p":"RT-AX55 Routers","n":"ASUS RT-AX55 Routers OS Command Injection Vulnerability","d":"2025-06-02","s":"mapped","g":"full","r":false,"t":["T1021.004","T1059.004","T1078","T1133","T1588"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-78"],"y":2023},{"id":"CVE-2021-32030","v":"ASUS","p":"Routers","n":"ASUS Routers Improper Authentication Vulnerability","d":"2025-06-02","s":"mapped","g":"full","r":false,"t":["T1040","T1068","T1098"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-287"],"y":2021},{"id":"CVE-2025-4632","v":"Samsung","p":"MagicINFO 9 Server","n":"Samsung MagicINFO 9 Server Path Traversal Vulnerability","d":"2025-05-22","s":"mapped","g":"partial","r":false,"t":["T1059","T1068","T1496","T1608.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-22"],"y":2025},{"id":"CVE-2025-4428","v":"Ivanti","p":"Endpoint Manager Mobile (EPMM)","n":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","d":"2025-05-19","s":"mapped","g":"full","r":false,"t":["T1059","T1190","T1543"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-94"],"y":2025},{"id":"CVE-2025-4427","v":"Ivanti","p":"Endpoint Manager Mobile (EPMM)","n":"Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability","d":"2025-05-19","s":"mapped","g":"full","r":false,"t":["T1059","T1190","T1203","T1505.003"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-288"],"y":2025},{"id":"CVE-2025-27920","v":"Srimax","p":"Output Messenger","n":"Srimax Output Messenger Directory Traversal Vulnerability","d":"2025-05-19","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2025},{"id":"CVE-2024-27443","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","d":"2025-05-19","s":"mapped","g":"full","r":false,"t":["T1041","T1059.004","T1114","T1566.002"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-79"],"y":2024},{"id":"CVE-2024-11182","v":"MDaemon","p":"Email Server","n":"MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability","d":"2025-05-19","s":"mapped","g":"full","r":false,"t":["T1059","T1566","T1567"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-79"],"y":2024},{"id":"CVE-2023-38950","v":"ZKTeco","p":"BioTime","n":"ZKTeco BioTime Path Traversal Vulnerability","d":"2025-05-19","s":"mapped","g":"full","r":false,"t":["T1005","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-22"],"y":2023},{"id":"CVE-2025-42999","v":"SAP","p":"NetWeaver","n":"SAP NetWeaver Deserialization Vulnerability","d":"2025-05-15","s":"mapped","g":"full","r":true,"t":["T1059","T1190","T1203","T1505.003"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-502"],"y":2025},{"id":"CVE-2024-12987","v":"DrayTek","p":"Vigor Routers","n":"DrayTek Vigor Routers OS Command Injection Vulnerability","d":"2025-05-15","s":"mapped","g":"full","r":false,"t":["T1059","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78"],"y":2024},{"id":"CVE-2025-32756","v":"Fortinet","p":"Multiple Products","n":"Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","d":"2025-05-14","s":"mapped","g":"partial","r":false,"t":["T1003","T1041","T1046","T1059","T1070.004","T1133","T1608.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-124"],"y":2025},{"id":"CVE-2025-32709","v":"Microsoft","p":"Windows","n":"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","d":"2025-05-13","s":"mapped","g":"partial","r":false,"t":["T1003","T1059","T1068","T1543","T1608.001"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2025},{"id":"CVE-2025-32706","v":"Microsoft","p":"Windows","n":"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","d":"2025-05-13","s":"mapped","g":"partial","r":false,"t":["T1003.001","T1059","T1068","T1543","T1608.001"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-122"],"y":2025},{"id":"CVE-2025-32701","v":"Microsoft","p":"Windows","n":"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","d":"2025-05-13","s":"mapped","g":"partial","r":false,"t":["T1003.001","T1059","T1068","T1543","T1608.001"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2025},{"id":"CVE-2025-30400","v":"Microsoft","p":"Windows","n":"Microsoft Windows DWM Core Library Use-After-Free Vulnerability","d":"2025-05-13","s":"mapped","g":"full","r":false,"t":["T1068","T1112"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2025},{"id":"CVE-2025-30397","v":"Microsoft","p":"Windows","n":"Microsoft Windows Scripting Engine Type Confusion Vulnerability","d":"2025-05-13","s":"mapped","g":"full","r":false,"t":["T1059","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-843"],"y":2025},{"id":"CVE-2025-47729","v":"TeleMessage","p":"TM SGNL","n":"TeleMessage TM SGNL Hidden Functionality Vulnerability","d":"2025-05-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-912"],"y":2025},{"id":"CVE-2024-6047","v":"GeoVision","p":"Multiple Devices","n":"GeoVision Devices OS Command Injection Vulnerability","d":"2025-05-07","s":"mapped","g":"full","r":false,"t":["T1055","T1059"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78"],"y":2024},{"id":"CVE-2024-11120","v":"GeoVision","p":"Multiple Devices","n":"GeoVision Devices OS Command Injection Vulnerability","d":"2025-05-07","s":"mapped","g":"full","r":false,"t":["T1133","T1203","T1498"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78"],"y":2024},{"id":"CVE-2025-27363","v":"FreeType","p":"FreeType","n":"FreeType Out-of-Bounds Write Vulnerability","d":"2025-05-06","s":"mapped","g":"full","r":false,"t":["T1204.002","T1499.004","T1574","T1625","T1642","T1658"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-787"],"y":2025},{"id":"CVE-2025-3248","v":"Langflow","p":"Langflow","n":"Langflow Missing Authentication Vulnerability","d":"2025-05-05","s":"mapped","g":"full","r":true,"t":["T1059","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-306"],"y":2025},{"id":"CVE-2025-34028","v":"Commvault","p":"Command Center","n":"Commvault Command Center Path Traversal Vulnerability","d":"2025-05-02","s":"mapped","g":"full","r":false,"t":["T1059.007","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-22"],"y":2025},{"id":"CVE-2024-58136","v":"Yiiframework","p":"Yii","n":"Yiiframework Yii Improper Protection of Alternate Path Vulnerability","d":"2025-05-02","s":"mapped","g":"full","r":false,"t":["T1055","T1059"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-424"],"y":2024},{"id":"CVE-2024-38475","v":"Apache","p":"HTTP Server","n":"Apache HTTP Server Improper Escaping of Output Vulnerability","d":"2025-05-01","s":"mapped","g":"full","r":false,"t":["T1005","T1059","T1190","T1528"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-116"],"y":2024},{"id":"CVE-2023-44221","v":"SonicWall","p":"SMA100 Appliances","n":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","d":"2025-05-01","s":"mapped","g":"full","r":false,"t":["T1059.004","T1068","T1543","T1548"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-78"],"y":2023},{"id":"CVE-2025-31324","v":"SAP","p":"NetWeaver","n":"SAP NetWeaver Unrestricted File Upload Vulnerability","d":"2025-04-29","s":"mapped","g":"partial","r":true,"t":["T1055","T1059","T1505.003","T1602"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-434"],"y":2025},{"id":"CVE-2025-42599","v":"Qualitia","p":"Active! Mail","n":"Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability","d":"2025-04-28","s":"mapped","g":"partial","r":false,"t":["T1059","T1190","T1499","T1588.006"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-121"],"y":2025},{"id":"CVE-2025-3928","v":"Commvault","p":"Web Server","n":"Commvault Web Server Unspecified Vulnerability","d":"2025-04-28","s":"mapped","g":"full","r":false,"t":["T1059","T1505.003"],"mt":["primary_impact","secondary_impact"],"w":[],"y":2025},{"id":"CVE-2025-1976","v":"Broadcom","p":"Brocade Fabric OS","n":"Broadcom Brocade Fabric OS Code Injection Vulnerability","d":"2025-04-28","s":"mapped","g":"full","r":false,"t":["T1059","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-94"],"y":2025},{"id":"CVE-2025-31201","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Arbitrary Read and Write Vulnerability","d":"2025-04-17","s":"stale","g":"partial","r":false,"t":["T1001","T1059","T1105","T1106","T1203","T1406","T1544","T1557","T1562","T1575","T1623","T1629","T1638","T1658"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":[],"y":2025},{"id":"CVE-2025-31200","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Memory Corruption Vulnerability","d":"2025-04-17","s":"stale","g":"partial","r":false,"t":["T1001","T1059","T1105","T1106","T1203","T1406","T1544","T1557","T1562","T1575","T1623","T1629","T1638","T1658"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":[],"y":2025},{"id":"CVE-2025-24054","v":"Microsoft","p":"Windows","n":"Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","d":"2025-04-17","s":"mapped","g":"full","r":false,"t":["T1555","T1566"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-73"],"y":2025},{"id":"CVE-2021-20035","v":"SonicWall","p":"SMA100 Appliances","n":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","d":"2025-04-16","s":"mapped","g":"full","r":false,"t":["T1059","T1078"],"mt":["exploitation_technique"],"w":["CWE-78"],"y":2021},{"id":"CVE-2024-53197","v":"Linux","p":"Kernel","n":"Linux Kernel Out-of-Bounds Access Vulnerability","d":"2025-04-09","s":"mapped","g":"full","r":false,"t":["T1059","T1068","T1091"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-787"],"y":2024},{"id":"CVE-2024-53150","v":"Linux","p":"Kernel","n":"Linux Kernel Out-of-Bounds Read Vulnerability","d":"2025-04-09","s":"mapped","g":"partial","r":false,"t":["T1005","T1011","T1091"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-125"],"y":2024},{"id":"CVE-2025-30406","v":"Gladinet","p":"CentreStack","n":"Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability","d":"2025-04-08","s":"mapped","g":"full","r":false,"t":["T1059","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-321"],"y":2025},{"id":"CVE-2025-29824","v":"Microsoft","p":"Windows","n":"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","d":"2025-04-08","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-416"],"y":2025},{"id":"CVE-2025-31161","v":"CrushFTP","p":"CrushFTP","n":"CrushFTP Authentication Bypass Vulnerability","d":"2025-04-07","s":"mapped","g":"full","r":true,"t":["T1059","T1078","T1136"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-305"],"y":2025},{"id":"CVE-2025-22457","v":"Ivanti","p":"Connect Secure, Policy Secure, and ZTA Gateways","n":"Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","d":"2025-04-04","s":"mapped","g":"full","r":true,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-121"],"y":2025},{"id":"CVE-2025-24813","v":"Apache","p":"Tomcat","n":"Apache Tomcat Path Equivalence Vulnerability","d":"2025-04-01","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-44","CWE-502"],"y":2025},{"id":"CVE-2024-20439","v":"Cisco","p":"Smart Licensing Utility","n":"Cisco Smart Licensing Utility Static Credential Vulnerability","d":"2025-03-31","s":"mapped","g":"full","r":false,"t":["T1106","T1552"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-912"],"y":2024},{"id":"CVE-2025-2783","v":"Google","p":"Chromium Mojo","n":"Google Chromium Mojo Sandbox Escape Vulnerability","d":"2025-03-27","s":"mapped","g":"partial","r":false,"t":["T1203","T1497","T1548"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":[],"y":2025},{"id":"CVE-2019-9875","v":"Sitecore","p":"CMS and Experience Platform (XP)","n":"Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","d":"2025-03-26","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2019},{"id":"CVE-2019-9874","v":"Sitecore","p":"CMS and Experience Platform (XP)","n":"Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","d":"2025-03-26","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2019},{"id":"CVE-2025-30154","v":"reviewdog","p":"action-setup GitHub Action","n":"reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability","d":"2025-03-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-506"],"y":2025},{"id":"CVE-2025-1316","v":"Edimax","p":"IC-7100 IP Camera","n":"Edimax IC-7100 IP Camera OS Command Injection Vulnerability","d":"2025-03-19","s":"mapped","g":"full","r":false,"t":["T1055","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78"],"y":2025},{"id":"CVE-2024-48248","v":"NAKIVO","p":"Backup and Replication","n":"NAKIVO Backup and Replication Absolute Path Traversal Vulnerability","d":"2025-03-19","s":"mapped","g":"full","r":false,"t":["T1003","T1005","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-36"],"y":2024},{"id":"CVE-2017-12637","v":"SAP","p":"NetWeaver","n":"SAP NetWeaver Directory Traversal Vulnerability","d":"2025-03-19","s":"mapped","g":"partial","r":false,"t":["T1083","T1190","T1555","T1592"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-22"],"y":2017},{"id":"CVE-2025-30066","v":"tj-actions","p":"changed-files GitHub Action","n":"tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability","d":"2025-03-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-506"],"y":2025},{"id":"CVE-2025-24472","v":"Fortinet","p":"FortiOS and FortiProxy","n":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","d":"2025-03-18","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-288"],"y":2025},{"id":"CVE-2025-24201","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","d":"2025-03-13","s":"mapped","g":"full","r":false,"t":["T1059","T1189","T1456","T1623"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-787"],"y":2025},{"id":"CVE-2025-21590","v":"Juniper","p":"Junos OS","n":"Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability","d":"2025-03-13","s":"mapped","g":"full","r":false,"t":["T1059","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-653"],"y":2025},{"id":"CVE-2025-26633","v":"Microsoft","p":"Windows","n":"Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","d":"2025-03-11","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-707"],"y":2025},{"id":"CVE-2025-24993","v":"Microsoft","p":"Windows","n":"Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","d":"2025-03-11","s":"mapped","g":"full","r":false,"t":["T1055","T1068","T1203","T1204","T1565"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-122"],"y":2025},{"id":"CVE-2025-24991","v":"Microsoft","p":"Windows","n":"Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability","d":"2025-03-11","s":"mapped","g":"full","r":false,"t":["T1005","T1091"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-125"],"y":2025},{"id":"CVE-2025-24985","v":"Microsoft","p":"Windows","n":"Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability","d":"2025-03-11","s":"mapped","g":"full","r":false,"t":["T1059","T1091"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-190","CWE-122"],"y":2025},{"id":"CVE-2025-24984","v":"Microsoft","p":"Windows","n":"Microsoft Windows NTFS Information Disclosure Vulnerability","d":"2025-03-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-532"],"y":2025},{"id":"CVE-2025-24983","v":"Microsoft","p":"Windows","n":"Microsoft Windows Win32k Use-After-Free Vulnerability","d":"2025-03-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2025},{"id":"CVE-2025-25181","v":"Advantive","p":"VeraCore","n":" Advantive VeraCore SQL Injection Vulnerability","d":"2025-03-10","s":"mapped","g":"full","r":false,"t":["T1055","T1068","T1485"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-89"],"y":2025},{"id":"CVE-2024-57968","v":"Advantive","p":"VeraCore","n":"Advantive VeraCore Unrestricted File Upload Vulnerability","d":"2025-03-10","s":"mapped","g":"full","r":false,"t":["T1059","T1078"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-434"],"y":2024},{"id":"CVE-2024-13161","v":"Ivanti","p":"Endpoint Manager (EPM)","n":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","d":"2025-03-10","s":"mapped","g":"full","r":false,"t":["T1087","T1190","T1550.002","T1558"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-36"],"y":2024},{"id":"CVE-2024-13160","v":"Ivanti","p":"Endpoint Manager (EPM)","n":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","d":"2025-03-10","s":"mapped","g":"full","r":false,"t":["T1087","T1190","T1550.002","T1558"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-36"],"y":2024},{"id":"CVE-2024-13159","v":"Ivanti","p":"Endpoint Manager (EPM)","n":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","d":"2025-03-10","s":"mapped","g":"full","r":false,"t":["T1087","T1190","T1550.002","T1558"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-36"],"y":2024},{"id":"CVE-2025-22226","v":"VMware","p":"ESXi, Workstation, and Fusion","n":"VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability","d":"2025-03-04","s":"mapped","g":"full","r":false,"t":["T1005","T1611"],"mt":["primary_impact","secondary_impact"],"w":["CWE-125"],"y":2025},{"id":"CVE-2025-22225","v":"VMware","p":"ESXi","n":"VMware ESXi Arbitrary Write Vulnerability","d":"2025-03-04","s":"mapped","g":"full","r":true,"t":["T1068","T1611"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-123"],"y":2025},{"id":"CVE-2025-22224","v":"VMware","p":"ESXi and Workstation","n":"VMware ESXi and Workstation TOCTOU Race Condition Vulnerability","d":"2025-03-04","s":"mapped","g":"full","r":false,"t":["T1055","T1611"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-367"],"y":2025},{"id":"CVE-2024-50302","v":"Linux","p":"Kernel","n":"Linux Kernel Use of Uninitialized Resource Vulnerability","d":"2025-03-04","s":"mapped","g":"partial","r":false,"t":["T1005","T1011","T1091"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-908"],"y":2024},{"id":"CVE-2024-4885","v":"Progress","p":"WhatsUp Gold","n":"Progress WhatsUp Gold Path Traversal Vulnerability","d":"2025-03-03","s":"mapped","g":"full","r":false,"t":["T1059","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-22"],"y":2024},{"id":"CVE-2023-20118","v":"Cisco","p":"Small Business RV Series Routers","n":"Cisco Small Business RV Series Routers Command Injection Vulnerability","d":"2025-03-03","s":"mapped","g":"full","r":false,"t":["T1059","T1068","T1078","T1505.003"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-77"],"y":2023},{"id":"CVE-2022-43939","v":"Hitachi Vantara","p":"Pentaho Business Analytics (BA) Server","n":"Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability","d":"2025-03-03","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-647"],"y":2022},{"id":"CVE-2022-43769","v":"Hitachi Vantara","p":"Pentaho Business Analytics (BA) Server","n":"Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability","d":"2025-03-03","s":"mapped","g":"full","r":false,"t":["T1059","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-74"],"y":2022},{"id":"CVE-2018-8639","v":"Microsoft","p":"Windows","n":"Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability","d":"2025-03-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-404"],"y":2018},{"id":"CVE-2024-49035","v":"Microsoft","p":"Partner Center","n":"Microsoft Partner Center Improper Access Control Vulnerability","d":"2025-02-25","s":"mapped","g":"partial","r":false,"t":["T1068","T1195","T1530"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-269"],"y":2024},{"id":"CVE-2023-34192","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","d":"2025-02-25","s":"mapped","g":"full","r":false,"t":["T1055","T1059","T1185"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-79"],"y":2023},{"id":"CVE-2024-20953","v":"Oracle","p":"Agile Product Lifecycle Management (PLM)","n":"Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability","d":"2025-02-24","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-502"],"y":2024},{"id":"CVE-2017-3066","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Deserialization Vulnerability","d":"2025-02-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2017},{"id":"CVE-2025-24989","v":"Microsoft","p":"Power Pages","n":"Microsoft Power Pages Improper Access Control Vulnerability","d":"2025-02-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2025},{"id":"CVE-2025-23209","v":"Craft CMS","p":"Craft CMS","n":"Craft CMS Code Injection Vulnerability","d":"2025-02-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2025},{"id":"CVE-2025-0111","v":"Palo Alto Networks","p":"PAN-OS","n":"Palo Alto Networks PAN-OS File Read Vulnerability","d":"2025-02-20","s":"mapped","g":"full","r":false,"t":["T1005","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-73"],"y":2025},{"id":"CVE-2025-0108","v":"Palo Alto Networks","p":"PAN-OS","n":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","d":"2025-02-18","s":"mapped","g":"full","r":false,"t":["T1055","T1190","T1565.001"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-306"],"y":2025},{"id":"CVE-2024-53704","v":"SonicWall","p":"SonicOS","n":"SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","d":"2025-02-18","s":"mapped","g":"full","r":true,"t":["T1021.001","T1078.004","T1083","T1199","T1212"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-287"],"y":2024},{"id":"CVE-2024-57727","v":"SimpleHelp ","p":"SimpleHelp","n":"SimpleHelp Path Traversal Vulnerability","d":"2025-02-13","s":"mapped","g":"full","r":true,"t":["T1003","T1059","T1190","T1552.001","T1552.004"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-22"],"y":2024},{"id":"CVE-2025-24200","v":"Apple","p":"iOS and iPadOS","n":"Apple iOS and iPadOS Incorrect Authorization Vulnerability","d":"2025-02-12","s":"mapped","g":"n/a","r":false,"t":["T1458","T1461","T1629"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-863"],"y":2025},{"id":"CVE-2024-41710","v":"Mitel","p":"SIP Phones","n":"Mitel SIP Phones Argument Injection Vulnerability","d":"2025-02-12","s":"mapped","g":"full","r":false,"t":["T1059","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-88"],"y":2024},{"id":"CVE-2025-21418","v":"Microsoft","p":"Windows","n":"Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability","d":"2025-02-11","s":"mapped","g":"full","r":false,"t":["T1005","T1055","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-122"],"y":2025},{"id":"CVE-2025-21391","v":"Microsoft","p":"Windows","n":"Microsoft Windows Storage Link Following Vulnerability","d":"2025-02-11","s":"mapped","g":"full","r":false,"t":["T1068","T1485","T1490"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-59"],"y":2025},{"id":"CVE-2024-40891","v":"Zyxel","p":"DSL CPE Devices","n":"Zyxel DSL CPE OS Command Injection Vulnerability","d":"2025-02-11","s":"mapped","g":"partial","r":false,"t":["T1011","T1055"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78"],"y":2024},{"id":"CVE-2024-40890","v":"Zyxel","p":"DSL CPE Devices","n":"Zyxel DSL CPE OS Command Injection Vulnerability","d":"2025-02-11","s":"mapped","g":"partial","r":false,"t":["T1011","T1055"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78"],"y":2024},{"id":"CVE-2025-0994","v":"Trimble","p":"Cityworks","n":"Trimble Cityworks Deserialization Vulnerability","d":"2025-02-07","s":"mapped","g":"full","r":false,"t":["T1059","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-502"],"y":2025},{"id":"CVE-2025-0411","v":"7-Zip","p":"7-Zip","n":"7-Zip Mark of the Web Bypass Vulnerability","d":"2025-02-06","s":"mapped","g":"full","r":false,"t":["T1553.005","T1566.001","T1588.001"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-693"],"y":2025},{"id":"CVE-2024-21413","v":"Microsoft","p":"Office Outlook","n":"Microsoft Outlook Improper Input Validation Vulnerability","d":"2025-02-06","s":"mapped","g":"full","r":false,"t":["T1059","T1566.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-20"],"y":2024},{"id":"CVE-2022-23748","v":"Audinate","p":"Dante Discovery","n":"Dante Discovery Process Control Vulnerability","d":"2025-02-06","s":"mapped","g":"full","r":false,"t":["T1059","T1203"],"mt":["exploitation_technique"],"w":["CWE-114"],"y":2022},{"id":"CVE-2020-29574","v":"Sophos","p":"CyberoamOS","n":"CyberoamOS (CROS) SQL Injection Vulnerability","d":"2025-02-06","s":"mapped","g":"full","r":true,"t":["T1055","T1059"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-89"],"y":2020},{"id":"CVE-2020-15069","v":"Sophos","p":"XG Firewall","n":"Sophos XG Firewall Buffer Overflow Vulnerability","d":"2025-02-06","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-120"],"y":2020},{"id":"CVE-2024-53104","v":"Linux","p":"Kernel","n":"Linux Kernel Out-of-Bounds Write Vulnerability","d":"2025-02-05","s":"mapped","g":"full","r":false,"t":["T1059","T1068","T1091"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-787"],"y":2024},{"id":"CVE-2024-45195","v":"Apache","p":"OFBiz","n":"Apache OFBiz Forced Browsing Vulnerability","d":"2025-02-04","s":"mapped","g":"partial","r":false,"t":["T1059","T1133","T1203","T1498.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-425"],"y":2024},{"id":"CVE-2024-29059","v":"Microsoft","p":".NET Framework","n":"Microsoft .NET Framework Information Disclosure Vulnerability","d":"2025-02-04","s":"mapped","g":"full","r":false,"t":["T1059","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-209"],"y":2024},{"id":"CVE-2018-9276","v":"Paessler","p":"PRTG Network Monitor","n":"Paessler PRTG Network Monitor OS Command Injection Vulnerability","d":"2025-02-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2018},{"id":"CVE-2018-19410","v":"Paessler","p":"PRTG Network Monitor","n":"Paessler PRTG Network Monitor Local File Inclusion Vulnerability","d":"2025-02-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2018},{"id":"CVE-2025-24085","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Use-After-Free Vulnerability","d":"2025-01-29","s":"mapped","g":"full","r":false,"t":["T1059","T1068","T1404","T1623"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2025},{"id":"CVE-2025-23006","v":"SonicWall","p":"SMA1000 Appliances","n":"SonicWall SMA1000 Appliances Deserialization Vulnerability","d":"2025-01-24","s":"mapped","g":"full","r":true,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-502"],"y":2025},{"id":"CVE-2020-11023","v":"JQuery","p":"JQuery","n":"JQuery Cross-Site Scripting (XSS) Vulnerability","d":"2025-01-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2020},{"id":"CVE-2024-50603","v":"Aviatrix","p":"Controllers","n":"Aviatrix Controllers OS Command Injection Vulnerability","d":"2025-01-16","s":"mapped","g":"full","r":false,"t":["T1055","T1059"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78"],"y":2024},{"id":"CVE-2025-21335","v":"Microsoft","p":"Windows","n":"Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","d":"2025-01-14","s":"mapped","g":"full","r":false,"t":["T1003","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2025},{"id":"CVE-2025-21334","v":"Microsoft","p":"Windows","n":"Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","d":"2025-01-14","s":"mapped","g":"full","r":false,"t":["T1003","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2025},{"id":"CVE-2025-21333","v":"Microsoft","p":"Windows","n":"Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability","d":"2025-01-14","s":"mapped","g":"full","r":false,"t":["T1003","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-122"],"y":2025},{"id":"CVE-2024-55591","v":"Fortinet","p":"FortiOS and FortiProxy","n":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","d":"2025-01-14","s":"mapped","g":"full","r":true,"t":["T1021","T1068","T1078","T1555"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-288"],"y":2024},{"id":"CVE-2024-12686","v":"BeyondTrust","p":"Privileged Remote Access (PRA) and Remote Support (RS)","n":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability","d":"2025-01-13","s":"mapped","g":"full","r":false,"t":["T1059","T1068"],"mt":["exploitation_technique"],"w":["CWE-78"],"y":2024},{"id":"CVE-2023-48365","v":"Qlik","p":"Sense","n":"Qlik Sense HTTP Tunneling Vulnerability","d":"2025-01-13","s":"mapped","g":"full","r":true,"t":["T1059","T1133","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-444"],"y":2023},{"id":"CVE-2025-0282","v":"Ivanti","p":"Connect Secure, Policy Secure, and ZTA Gateways","n":"Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","d":"2025-01-08","s":"mapped","g":"full","r":true,"t":["T1003","T1018","T1046","T1055","T1190","T1595"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-121"],"y":2025},{"id":"CVE-2024-55550","v":"Mitel","p":"MiCollab","n":"Mitel MiCollab Path Traversal Vulnerability","d":"2025-01-07","s":"mapped","g":"full","r":true,"t":["T1005","T1041","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-22"],"y":2024},{"id":"CVE-2024-41713","v":"Mitel","p":"MiCollab","n":"Mitel MiCollab Path Traversal Vulnerability","d":"2025-01-07","s":"mapped","g":"full","r":true,"t":["T1005","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-22"],"y":2024},{"id":"CVE-2020-2883","v":"Oracle","p":"WebLogic Server","n":"Oracle WebLogic Server Unspecified Vulnerability","d":"2025-01-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2024-3393","v":"Palo Alto Networks","p":"PAN-OS","n":"Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability","d":"2024-12-30","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-754"],"y":2024},{"id":"CVE-2021-44207","v":"Acclaim Systems","p":"USAHERDS","n":"Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability ","d":"2024-12-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-798"],"y":2021},{"id":"CVE-2024-12356","v":"BeyondTrust","p":"Privileged Remote Access (PRA) and Remote Support (RS) ","n":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability ","d":"2024-12-19","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2024},{"id":"CVE-2022-23227","v":"NUUO","p":"NVRmini2 Devices","n":"NUUO NVRmini2 Devices Missing Authentication Vulnerability ","d":"2024-12-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306"],"y":2022},{"id":"CVE-2021-40407","v":"Reolink","p":"RLC-410W IP Camera","n":"Reolink RLC-410W IP Camera OS Command Injection Vulnerability ","d":"2024-12-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2021},{"id":"CVE-2019-11001","v":"Reolink","p":"Multiple IP Cameras","n":"Reolink Multiple IP Cameras OS Command Injection Vulnerability","d":"2024-12-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2019},{"id":"CVE-2018-14933","v":"NUUO","p":"NVRmini Devices","n":"NUUO NVRmini Devices OS Command Injection Vulnerability ","d":"2024-12-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2018},{"id":"CVE-2024-55956","v":"Cleo","p":"Multiple Products","n":"Cleo Multiple Products Unauthenticated File Upload Vulnerability","d":"2024-12-17","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-276"],"y":2024},{"id":"CVE-2024-35250","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability ","d":"2024-12-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-822"],"y":2024},{"id":"CVE-2024-20767","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Improper Access Control Vulnerability","d":"2024-12-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2024},{"id":"CVE-2024-50623","v":"Cleo","p":"Multiple Products","n":"Cleo Multiple Products Unrestricted File Upload Vulnerability","d":"2024-12-13","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-434"],"y":2024},{"id":"CVE-2024-49138","v":"Microsoft","p":"Windows","n":"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","d":"2024-12-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122"],"y":2024},{"id":"CVE-2024-51378","v":"CyberPersons","p":"CyberPanel","n":"CyberPanel Incorrect Default Permissions Vulnerability","d":"2024-12-04","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-276"],"y":2024},{"id":"CVE-2024-11680","v":"ProjectSend","p":"ProjectSend","n":"ProjectSend Improper Authentication Vulnerability","d":"2024-12-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2024},{"id":"CVE-2024-11667","v":"Zyxel","p":"Multiple Firewalls","n":"Zyxel Multiple Firewalls Path Traversal Vulnerability","d":"2024-12-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-22"],"y":2024},{"id":"CVE-2023-45727","v":"North Grid","p":"Proself","n":"North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability","d":"2024-12-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-611"],"y":2023},{"id":"CVE-2023-28461","v":"Array Networks ","p":"AG/vxAG ArrayOS","n":"Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability","d":"2024-11-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-306"],"y":2023},{"id":"CVE-2024-44309","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","d":"2024-11-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2024},{"id":"CVE-2024-44308","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Code Execution Vulnerability","d":"2024-11-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2024},{"id":"CVE-2024-21287","v":"Oracle","p":"Agile Product Lifecycle Management (PLM)","n":"Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability","d":"2024-11-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-863"],"y":2024},{"id":"CVE-2024-38813","v":"VMware","p":"vCenter Server","n":"VMware vCenter Server Privilege Escalation Vulnerability","d":"2024-11-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-250","CWE-273"],"y":2024},{"id":"CVE-2024-38812","v":"VMware","p":"vCenter Server","n":"VMware vCenter Server Heap-Based Buffer Overflow Vulnerability","d":"2024-11-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122"],"y":2024},{"id":"CVE-2024-9474","v":"Palo Alto Networks","p":"PAN-OS","n":"Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability","d":"2024-11-18","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-77"],"y":2024},{"id":"CVE-2024-1212","v":"Progress","p":"Kemp LoadMaster","n":"Progress Kemp LoadMaster OS Command Injection Vulnerability","d":"2024-11-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2024},{"id":"CVE-2024-0012","v":"Palo Alto Networks","p":"PAN-OS","n":"Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability","d":"2024-11-18","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-306"],"y":2024},{"id":"CVE-2024-9465","v":"Palo Alto Networks","p":"Expedition","n":"Palo Alto Networks Expedition SQL Injection Vulnerability","d":"2024-11-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2024},{"id":"CVE-2024-9463","v":"Palo Alto Networks","p":"Expedition","n":"Palo Alto Networks Expedition OS Command Injection Vulnerability","d":"2024-11-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2024},{"id":"CVE-2024-49039","v":"Microsoft","p":"Windows","n":"Microsoft Windows Task Scheduler Privilege Escalation Vulnerability","d":"2024-11-12","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-287"],"y":2024},{"id":"CVE-2024-43451","v":"Microsoft","p":"Windows","n":"Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","d":"2024-11-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-73"],"y":2024},{"id":"CVE-2021-41277","v":"Metabase","p":"Metabase","n":"Metabase GeoJSON API Local File Inclusion Vulnerability","d":"2024-11-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2021},{"id":"CVE-2021-26086","v":"Atlassian","p":"Jira Server and Data Center","n":"Atlassian Jira Server and Data Center Path Traversal Vulnerability","d":"2024-11-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2021},{"id":"CVE-2014-2120","v":"Cisco","p":"Adaptive Security Appliance (ASA)","n":"Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","d":"2024-11-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2014},{"id":"CVE-2024-5910","v":"Palo Alto Networks","p":"Expedition","n":"Palo Alto Networks Expedition Missing Authentication Vulnerability","d":"2024-11-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306"],"y":2024},{"id":"CVE-2024-51567","v":"CyberPersons","p":"CyberPanel","n":"CyberPanel Incorrect Default Permissions Vulnerability","d":"2024-11-07","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-276"],"y":2024},{"id":"CVE-2024-43093","v":"Android","p":"Framework","n":"Android Framework Privilege Escalation Vulnerability","d":"2024-11-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2024},{"id":"CVE-2019-16278","v":"Nostromo","p":"nhttpd","n":"Nostromo nhttpd Directory Traversal Vulnerability","d":"2024-11-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2019},{"id":"CVE-2024-8957","v":"PTZOptics","p":"PT30X-SDI/NDI Cameras","n":"PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability","d":"2024-11-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2024},{"id":"CVE-2024-8956","v":"PTZOptics","p":"PT30X-SDI/NDI Cameras","n":"PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability","d":"2024-11-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2024},{"id":"CVE-2024-37383","v":"Roundcube","p":"Webmail","n":"RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability","d":"2024-10-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2024},{"id":"CVE-2024-20481","v":"Cisco","p":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","n":"Cisco ASA and FTD Denial-of-Service Vulnerability","d":"2024-10-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-772"],"y":2024},{"id":"CVE-2024-47575","v":"Fortinet","p":"FortiManager","n":"Fortinet FortiManager Missing Authentication Vulnerability","d":"2024-10-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306"],"y":2024},{"id":"CVE-2024-38094","v":"Microsoft","p":"SharePoint","n":"Microsoft SharePoint Deserialization Vulnerability","d":"2024-10-22","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-502"],"y":2024},{"id":"CVE-2024-9537","v":"ScienceLogic","p":"SL1","n":"ScienceLogic SL1 Unspecified Vulnerability","d":"2024-10-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2024},{"id":"CVE-2024-40711","v":"Veeam","p":"Backup & Replication","n":"Veeam Backup and Replication Deserialization Vulnerability","d":"2024-10-17","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-502"],"y":2024},{"id":"CVE-2024-9680","v":"Mozilla","p":"Firefox","n":"Mozilla Firefox Use-After-Free Vulnerability","d":"2024-10-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-416"],"y":2024},{"id":"CVE-2024-30088","v":"Microsoft","p":"Windows ","n":"Microsoft Windows Kernel TOCTOU Race Condition Vulnerability","d":"2024-10-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-367"],"y":2024},{"id":"CVE-2024-28987","v":"SolarWinds","p":"Web Help Desk","n":"SolarWinds Web Help Desk Hardcoded Credential Vulnerability","d":"2024-10-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-798"],"y":2024},{"id":"CVE-2024-9380","v":"Ivanti","p":"Cloud Services Appliance (CSA)","n":"Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability","d":"2024-10-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2024},{"id":"CVE-2024-9379","v":"Ivanti","p":"Cloud Services Appliance (CSA)","n":"Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability","d":"2024-10-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2024},{"id":"CVE-2024-23113","v":"Fortinet","p":"Multiple Products","n":"Fortinet Multiple Products Format String Vulnerability","d":"2024-10-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-134"],"y":2024},{"id":"CVE-2024-43573","v":"Microsoft","p":"Windows","n":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","d":"2024-10-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2024},{"id":"CVE-2024-43572","v":"Microsoft","p":"Windows","n":"Microsoft Windows Management Console Remote Code Execution Vulnerability","d":"2024-10-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-707"],"y":2024},{"id":"CVE-2024-43047","v":"Qualcomm","p":"Multiple Chipsets ","n":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","d":"2024-10-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2024},{"id":"CVE-2024-45519","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability","d":"2024-10-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2024},{"id":"CVE-2024-29824","v":"Ivanti","p":"Endpoint Manager (EPM)","n":"Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability","d":"2024-10-02","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2024},{"id":"CVE-2023-25280","v":"D-Link","p":"DIR-820 Router","n":"D-Link DIR-820 Router OS Command Injection Vulnerability","d":"2024-09-30","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2023},{"id":"CVE-2020-15415","v":"DrayTek","p":"Multiple Vigor Routers","n":"DrayTek Multiple Vigor Routers OS Command Injection Vulnerability","d":"2024-09-30","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2020},{"id":"CVE-2019-0344","v":"SAP","p":"Commerce Cloud","n":"SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability","d":"2024-09-30","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2019},{"id":"CVE-2024-7593","v":"Ivanti","p":"Virtual Traffic Manager","n":"Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability","d":"2024-09-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287","CWE-303"],"y":2024},{"id":"CVE-2024-8963","v":"Ivanti","p":"Cloud Services Appliance (CSA)","n":"Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability","d":"2024-09-19","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2024},{"id":"CVE-2024-27348","v":"Apache","p":"HugeGraph-Server","n":"Apache HugeGraph-Server Improper Access Control Vulnerability","d":"2024-09-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2024},{"id":"CVE-2022-21445","v":"Oracle","p":"ADF Faces","n":"Oracle ADF Faces Deserialization of Untrusted Data Vulnerability","d":"2024-09-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2022},{"id":"CVE-2020-14644","v":"Oracle","p":"WebLogic Server","n":"Oracle WebLogic Server Remote Code Execution Vulnerability","d":"2024-09-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-0618","v":"Microsoft","p":"SQL Server","n":"Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability","d":"2024-09-18","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-502"],"y":2020},{"id":"CVE-2014-0502","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Double Free Vulnerablity","d":"2024-09-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2014},{"id":"CVE-2014-0497","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Integer Underflow Vulnerablity","d":"2024-09-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-191"],"y":2014},{"id":"CVE-2013-0648","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Code Execution Vulnerability","d":"2024-09-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2013},{"id":"CVE-2013-0643","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Incorrect Default Permissions Vulnerability","d":"2024-09-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2013},{"id":"CVE-2024-6670","v":"Progress","p":"WhatsUp Gold","n":"Progress WhatsUp Gold SQL Injection Vulnerability","d":"2024-09-16","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-89"],"y":2024},{"id":"CVE-2024-43461","v":"Microsoft","p":"Windows","n":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","d":"2024-09-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-451"],"y":2024},{"id":"CVE-2024-8190","v":"Ivanti","p":"Cloud Services Appliance","n":"Ivanti Cloud Services Appliance OS Command Injection Vulnerability","d":"2024-09-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2024},{"id":"CVE-2024-38226","v":"Microsoft","p":"Publisher","n":"Microsoft Publisher Protection Mechanism Failure Vulnerability","d":"2024-09-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-693"],"y":2024},{"id":"CVE-2024-38217","v":"Microsoft","p":"Windows","n":"Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability","d":"2024-09-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-693"],"y":2024},{"id":"CVE-2024-38014","v":"Microsoft","p":"Windows","n":"Microsoft Windows Installer Improper Privilege Management Vulnerability","d":"2024-09-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-269"],"y":2024},{"id":"CVE-2024-40766","v":"SonicWall","p":"SonicOS","n":"SonicWall SonicOS Improper Access Control Vulnerability","d":"2024-09-09","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-284"],"y":2024},{"id":"CVE-2017-1000253","v":"Linux","p":"Kernel","n":"Linux Kernel PIE Stack Buffer Corruption Vulnerability ","d":"2024-09-09","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2016-3714","v":"ImageMagick","p":"ImageMagick","n":"ImageMagick Improper Input Validation Vulnerability","d":"2024-09-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2016},{"id":"CVE-2024-7262","v":"Kingsoft","p":"WPS Office","n":"Kingsoft WPS Office Path Traversal Vulnerability","d":"2024-09-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2024},{"id":"CVE-2021-20124","v":"DrayTek","p":"VigorConnect","n":"Draytek VigorConnect Path Traversal Vulnerability ","d":"2024-09-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2021},{"id":"CVE-2021-20123","v":"DrayTek","p":"VigorConnect","n":"Draytek VigorConnect Path Traversal Vulnerability ","d":"2024-09-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2021},{"id":"CVE-2024-7965","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Inappropriate Implementation Vulnerability","d":"2024-08-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-358"],"y":2024},{"id":"CVE-2024-38856","v":"Apache","p":"OFBiz","n":"Apache OFBiz Incorrect Authorization Vulnerability","d":"2024-08-27","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-863"],"y":2024},{"id":"CVE-2024-7971","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2024-08-26","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2024},{"id":"CVE-2024-39717","v":"Versa","p":"Director","n":"Versa Director Dangerous File Type Upload Vulnerability","d":"2024-08-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-434"],"y":2024},{"id":"CVE-2022-0185","v":"Linux","p":"Kernel","n":"Linux Kernel Heap-Based Buffer Overflow Vulnerability","d":"2024-08-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-190"],"y":2022},{"id":"CVE-2021-33045","v":"Dahua","p":"IP Camera Firmware","n":"Dahua IP Camera Authentication Bypass Vulnerability","d":"2024-08-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2021},{"id":"CVE-2021-33044","v":"Dahua","p":"IP Camera Firmware","n":"Dahua IP Camera Authentication Bypass Vulnerability","d":"2024-08-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2021},{"id":"CVE-2021-31196","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Information Disclosure Vulnerability","d":"2024-08-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2024-23897","v":"Jenkins","p":"Jenkins Command Line Interface (CLI)","n":"Jenkins Command Line Interface (CLI) Path Traversal Vulnerability","d":"2024-08-19","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-27"],"y":2024},{"id":"CVE-2024-28986","v":"SolarWinds","p":"Web Help Desk","n":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","d":"2024-08-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2024},{"id":"CVE-2024-38213","v":"Microsoft","p":"Windows","n":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","d":"2024-08-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-693"],"y":2024},{"id":"CVE-2024-38193","v":"Microsoft","p":"Windows","n":"Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability","d":"2024-08-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2024},{"id":"CVE-2024-38189","v":"Microsoft","p":"Project","n":"Microsoft Project Remote Code Execution Vulnerability ","d":"2024-08-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2024},{"id":"CVE-2024-38178","v":"Microsoft","p":"Windows","n":"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","d":"2024-08-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2024},{"id":"CVE-2024-38107","v":"Microsoft","p":"Windows","n":"Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability","d":"2024-08-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2024},{"id":"CVE-2024-38106","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Privilege Escalation Vulnerability","d":"2024-08-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-591"],"y":2024},{"id":"CVE-2024-36971","v":"Android","p":"Kernel","n":"Android Kernel Remote Code Execution Vulnerability","d":"2024-08-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2024},{"id":"CVE-2024-32113","v":"Apache","p":"OFBiz","n":"Apache OFBiz Path Traversal Vulnerability","d":"2024-08-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2024},{"id":"CVE-2018-0824","v":"Microsoft","p":"Windows","n":"Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","d":"2024-08-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2018},{"id":"CVE-2024-37085","v":"VMware","p":"ESXi","n":"VMware ESXi Authentication Bypass Vulnerability","d":"2024-07-30","s":"mapped","g":"partial","r":true,"t":["T1068","T1078","T1608.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-305"],"y":2024},{"id":"CVE-2024-5217","v":"ServiceNow","p":"Utah, Vancouver, and Washington DC Now Platform","n":"ServiceNow Incomplete List of Disallowed Inputs Vulnerability","d":"2024-07-29","s":"mapped","g":"full","r":false,"t":["T1005","T1059"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-184"],"y":2024},{"id":"CVE-2024-4879","v":"ServiceNow","p":"Utah, Vancouver, and Washington DC Now Platform","n":"ServiceNow Improper Input Validation Vulnerability","d":"2024-07-29","s":"mapped","g":"full","r":false,"t":["T1005","T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-1287"],"y":2024},{"id":"CVE-2023-45249","v":"Acronis","p":"Cyber Infrastructure (ACI)","n":"Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability","d":"2024-07-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-1393"],"y":2023},{"id":"CVE-2024-39891","v":"Twilio","p":"Authy","n":"Twilio Authy Information Disclosure Vulnerability","d":"2024-07-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-203"],"y":2024},{"id":"CVE-2012-4792","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Use-After-Free Vulnerability","d":"2024-07-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2012},{"id":"CVE-2024-34102","v":"Adobe","p":"Commerce and Magento Open Source","n":"Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability","d":"2024-07-17","s":"mapped","g":"full","r":false,"t":["T1005","T1059","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-611"],"y":2024},{"id":"CVE-2024-28995","v":"SolarWinds","p":"Serv-U","n":"SolarWinds Serv-U Path Traversal Vulnerability ","d":"2024-07-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2024},{"id":"CVE-2022-22948","v":"VMware","p":"vCenter Server","n":"VMware vCenter Server Incorrect Default File Permissions Vulnerability ","d":"2024-07-17","s":"mapped","g":"full","r":false,"t":["T1068","T1078","T1212"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-276"],"y":2022},{"id":"CVE-2024-36401","v":"OSGeo","p":"GeoServer","n":"OSGeo GeoServer GeoTools Eval Injection Vulnerability","d":"2024-07-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-95"],"y":2024},{"id":"CVE-2024-38112","v":"Microsoft","p":"Windows","n":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","d":"2024-07-09","s":"mapped","g":"full","r":false,"t":["T1189","T1204.001"],"mt":["exploitation_technique"],"w":["CWE-451"],"y":2024},{"id":"CVE-2024-38080","v":"Microsoft","p":"Windows ","n":"Microsoft Windows Hyper-V Privilege Escalation Vulnerability","d":"2024-07-09","s":"mapped","g":"full","r":false,"t":["T1068","T1204.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-190"],"y":2024},{"id":"CVE-2024-23692","v":"Rejetto","p":"HTTP File Server","n":"Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","d":"2024-07-09","s":"mapped","g":"full","r":true,"t":["T1005","T1082","T1105","T1221","T1496"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-1336"],"y":2024},{"id":"CVE-2024-20399","v":"Cisco","p":"NX-OS","n":"Cisco NX-OS Command Injection Vulnerability","d":"2024-07-02","s":"mapped","g":"full","r":false,"t":["T1059","T1078"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78"],"y":2024},{"id":"CVE-2022-2586","v":"Linux","p":"Kernel","n":"Linux Kernel Use-After-Free Vulnerability","d":"2024-06-26","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2022},{"id":"CVE-2022-24816","v":"OSGeo","p":"JAI-EXT","n":"OSGeo GeoServer JAI-EXT Code Injection Vulnerability","d":"2024-06-26","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2022},{"id":"CVE-2020-13965","v":"Roundcube","p":"Webmail","n":"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","d":"2024-06-26","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-80"],"y":2020},{"id":"CVE-2024-4358","v":"Progress","p":"Telerik Report Server","n":"Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability","d":"2024-06-13","s":"mapped","g":"full","r":false,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-290"],"y":2024},{"id":"CVE-2024-32896","v":"Android","p":"Pixel","n":"Android Pixel Privilege Escalation Vulnerability","d":"2024-06-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-783"],"y":2024},{"id":"CVE-2024-26169","v":"Microsoft","p":"Windows","n":"Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","d":"2024-06-13","s":"mapped","g":"full","r":true,"t":["T1059","T1112","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-269"],"y":2024},{"id":"CVE-2024-4610","v":"Arm","p":"Mali GPU Kernel Driver","n":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","d":"2024-06-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2024},{"id":"CVE-2024-4577","v":"PHP Group","p":"PHP","n":"PHP-CGI OS Command Injection Vulnerability","d":"2024-06-12","s":"mapped","g":"full","r":true,"t":["T1003","T1003.001","T1033","T1041","T1053","T1059","T1068","T1071.001","T1112","T1190","T1543","T1570"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-78"],"y":2024},{"id":"CVE-2017-3506","v":"Oracle","p":"WebLogic Server","n":"Oracle WebLogic Server OS Command Injection Vulnerability","d":"2024-06-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2017},{"id":"CVE-2024-24919","v":"Check Point","p":"Quantum Security Gateways","n":"Check Point Quantum Security Gateways Information Disclosure Vulnerability","d":"2024-05-30","s":"mapped","g":"partial","r":true,"t":["T1003.003","T1003.008","T1005","T1059.004","T1202"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-200"],"y":2024},{"id":"CVE-2024-1086","v":"Linux","p":"Kernel","n":"Linux Kernel Use-After-Free Vulnerability","d":"2024-05-30","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-416"],"y":2024},{"id":"CVE-2024-4978","v":"Justice AV Solutions","p":"Viewer ","n":"Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability","d":"2024-05-29","s":"mapped","g":"full","r":false,"t":["T1005","T1071.001","T1105","T1195.002"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-506"],"y":2024},{"id":"CVE-2024-5274","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2024-05-28","s":"mapped","g":"full","r":false,"t":["T1189","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-843"],"y":2024},{"id":"CVE-2020-17519","v":"Apache","p":"Flink","n":"Apache Flink Improper Access Control Vulnerability","d":"2024-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-552"],"y":2020},{"id":"CVE-2024-4947","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2024-05-20","s":"mapped","g":"full","r":false,"t":["T1059","T1189"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-843"],"y":2024},{"id":"CVE-2023-43208","v":"NextGen Healthcare","p":"Mirth Connect","n":"NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability","d":"2024-05-20","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-502"],"y":2023},{"id":"CVE-2024-4761","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Out-of-Bounds Memory Write Vulnerability","d":"2024-05-16","s":"mapped","g":"full","r":false,"t":["T1059"],"mt":["exploitation_technique"],"w":["CWE-787"],"y":2024},{"id":"CVE-2021-40655","v":"D-Link","p":"DIR-605 Router","n":"D-Link DIR-605 Router Information Disclosure Vulnerability","d":"2024-05-16","s":"mapped","g":"full","r":false,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-863"],"y":2021},{"id":"CVE-2014-100005","v":"D-Link","p":"DIR-600 Router","n":"D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability","d":"2024-05-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-352"],"y":2014},{"id":"CVE-2024-30051","v":"Microsoft","p":"DWM Core Library","n":" Microsoft DWM Core Library Privilege Escalation Vulnerability","d":"2024-05-14","s":"mapped","g":"full","r":true,"t":["T1068"],"mt":["primary_impact"],"w":["CWE-122"],"y":2024},{"id":"CVE-2024-30040","v":"Microsoft","p":"Windows","n":"Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","d":"2024-05-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2024},{"id":"CVE-2024-4671","v":"Google","p":"Chromium","n":"Google Chromium Visuals Use-After-Free Vulnerability","d":"2024-05-13","s":"mapped","g":"full","r":false,"t":["T1059","T1189"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2024},{"id":"CVE-2023-7028","v":"GitLab","p":"GitLab CE/EE","n":"GitLab Community and Enterprise Editions Improper Access Control Vulnerability","d":"2024-05-01","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2023},{"id":"CVE-2024-29988","v":"Microsoft","p":"SmartScreen Prompt","n":"Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability","d":"2024-04-30","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-693"],"y":2024},{"id":"CVE-2024-4040","v":"CrushFTP","p":"CrushFTP","n":"CrushFTP VFS Sandbox Escape Vulnerability","d":"2024-04-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-1336"],"y":2024},{"id":"CVE-2024-20359","v":"Cisco","p":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","n":"Cisco ASA and FTD Privilege Escalation Vulnerability","d":"2024-04-24","s":"mapped","g":"partial","r":false,"t":["T1037","T1059","T1078"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-94"],"y":2024},{"id":"CVE-2024-20353","v":"Cisco","p":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","n":"Cisco ASA and FTD Denial of Service Vulnerability","d":"2024-04-24","s":"mapped","g":"partial","r":false,"t":["T1037","T1190","T1608.001","T1653"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-835"],"y":2024},{"id":"CVE-2022-38028","v":"Microsoft","p":"Windows","n":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability ","d":"2024-04-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2022},{"id":"CVE-2024-3400","v":"Palo Alto Networks","p":"PAN-OS","n":"Palo Alto Networks PAN-OS Command Injection Vulnerability","d":"2024-04-12","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20","CWE-77"],"y":2024},{"id":"CVE-2024-3273","v":"D-Link","p":"Multiple NAS Devices","n":"D-Link Multiple NAS Devices Command Injection Vulnerability","d":"2024-04-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2024},{"id":"CVE-2024-3272","v":"D-Link","p":"Multiple NAS Devices","n":"D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability","d":"2024-04-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-798"],"y":2024},{"id":"CVE-2024-29748","v":"Android","p":"Pixel","n":"Android Pixel Privilege Escalation Vulnerability","d":"2024-04-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-280"],"y":2024},{"id":"CVE-2024-29745","v":"Android","p":"Pixel","n":"Android Pixel Information Disclosure Vulnerability","d":"2024-04-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-908"],"y":2024},{"id":"CVE-2023-24955","v":"Microsoft","p":"SharePoint Server","n":"Microsoft SharePoint Server Code Injection Vulnerability","d":"2024-03-26","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-94"],"y":2023},{"id":"CVE-2023-48788","v":"Fortinet","p":"FortiClient EMS","n":"Fortinet FortiClient EMS SQL Injection Vulnerability","d":"2024-03-25","s":"mapped","g":"full","r":true,"t":["T1059","T1105","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-89"],"y":2023},{"id":"CVE-2021-44529","v":"Ivanti","p":"Endpoint Manager Cloud Service Appliance (EPM CSA)","n":"Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability ","d":"2024-03-25","s":"mapped","g":"full","r":true,"t":["T1190","T1195.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-94"],"y":2021},{"id":"CVE-2019-7256","v":"Nice","p":"Linear eMerge E3-Series","n":"Nice Linear eMerge E3-Series OS Command Injection Vulnerability","d":"2024-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2019},{"id":"CVE-2024-27198","v":"JetBrains","p":"TeamCity","n":"JetBrains TeamCity Authentication Bypass Vulnerability","d":"2024-03-07","s":"mapped","g":"full","r":true,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-288"],"y":2024},{"id":"CVE-2024-23296","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Memory Corruption Vulnerability","d":"2024-03-06","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2024},{"id":"CVE-2024-23225","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Memory Corruption Vulnerability","d":"2024-03-06","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2024},{"id":"CVE-2023-21237","v":"Android","p":"Pixel","n":"Android Pixel Information Disclosure Vulnerability ","d":"2024-03-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2023},{"id":"CVE-2021-36380","v":"Sunhillo","p":"SureLine","n":"Sunhillo SureLine OS Command Injection Vulnerablity","d":"2024-03-05","s":"mapped","g":"full","r":false,"t":["T1059.004","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78"],"y":2021},{"id":"CVE-2024-21338","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability","d":"2024-03-04","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-822"],"y":2024},{"id":"CVE-2023-29360","v":"Microsoft","p":"Streaming Service","n":"Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability","d":"2024-02-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-822"],"y":2023},{"id":"CVE-2024-1709","v":"ConnectWise","p":"ScreenConnect","n":"ConnectWise ScreenConnect Authentication Bypass Vulnerability","d":"2024-02-22","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-288"],"y":2024},{"id":"CVE-2024-21410","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Privilege Escalation Vulnerability","d":"2024-02-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2024},{"id":"CVE-2020-3259","v":"Cisco","p":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","n":"Cisco ASA and FTD Information Disclosure Vulnerability","d":"2024-02-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-200"],"y":2020},{"id":"CVE-2024-21412","v":"Microsoft","p":"Windows","n":"Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability","d":"2024-02-13","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-693"],"y":2024},{"id":"CVE-2024-21351","v":"Microsoft","p":"Windows","n":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","d":"2024-02-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2024},{"id":"CVE-2023-43770","v":"Roundcube","p":"Webmail","n":"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","d":"2024-02-12","s":"mapped","g":"full","r":false,"t":["T1059","T1082","T1189"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-79"],"y":2023},{"id":"CVE-2024-21762","v":"Fortinet","p":"FortiOS","n":"Fortinet FortiOS Out-of-Bound Write Vulnerability","d":"2024-02-09","s":"mapped","g":"full","r":true,"t":["T1190","T1547.009","T1574"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-787"],"y":2024},{"id":"CVE-2023-4762","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2024-02-06","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2023},{"id":"CVE-2024-21893","v":"Ivanti","p":"Connect Secure, Policy Secure, and Neurons","n":"Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability","d":"2024-01-31","s":"mapped","g":"full","r":true,"t":["T1078","T1190","T1505.003","T1555"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-918"],"y":2024},{"id":"CVE-2022-48618","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Memory Corruption Vulnerability","d":"2024-01-31","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-367"],"y":2022},{"id":"CVE-2023-22527","v":"Atlassian","p":"Confluence Data Center and Server","n":"Atlassian Confluence Data Center and Server Template Injection Vulnerability","d":"2024-01-24","s":"mapped","g":"full","r":true,"t":["T1221","T1496"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-74"],"y":2023},{"id":"CVE-2024-23222","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Type Confusion Vulnerability","d":"2024-01-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2024},{"id":"CVE-2023-34048","v":"VMware","p":"vCenter Server","n":"VMware vCenter Server Out-of-Bounds Write Vulnerability","d":"2024-01-22","s":"mapped","g":"full","r":false,"t":["T1203","T1588.001"],"mt":["primary_impact","secondary_impact"],"w":["CWE-787"],"y":2023},{"id":"CVE-2023-35082","v":"Ivanti","p":"Endpoint Manager Mobile (EPMM) and MobileIron Core","n":"Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability","d":"2024-01-18","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-287"],"y":2023},{"id":"CVE-2024-0519","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","d":"2024-01-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2024},{"id":"CVE-2023-6549","v":"Citrix","p":"NetScaler ADC and NetScaler Gateway","n":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","d":"2024-01-17","s":"mapped","g":"full","r":false,"t":["T1499","T1574"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-119"],"y":2023},{"id":"CVE-2023-6548","v":"Citrix","p":"NetScaler ADC and NetScaler Gateway","n":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","d":"2024-01-17","s":"mapped","g":"full","r":false,"t":["T1055"],"mt":["exploitation_technique"],"w":["CWE-94"],"y":2023},{"id":"CVE-2018-15133","v":"Laravel","p":"Laravel Framework","n":"Laravel Deserialization of Untrusted Data Vulnerability","d":"2024-01-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2018},{"id":"CVE-2024-21887","v":"Ivanti","p":"Connect Secure and Policy Secure","n":"Ivanti Connect Secure and Policy Secure Command Injection Vulnerability","d":"2024-01-10","s":"mapped","g":"full","r":true,"t":["T1059","T1190","T1505.003","T1552"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-77"],"y":2024},{"id":"CVE-2023-46805","v":"Ivanti","p":"Connect Secure and Policy Secure","n":"Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability","d":"2024-01-10","s":"mapped","g":"full","r":true,"t":["T1078","T1190","T1505.003","T1555"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-287"],"y":2023},{"id":"CVE-2023-29357","v":"Microsoft","p":"SharePoint Server","n":"Microsoft SharePoint Server Privilege Escalation Vulnerability","d":"2024-01-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-303"],"y":2023},{"id":"CVE-2023-41990","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Code Execution Vulnerability","d":"2024-01-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2023-38203","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","d":"2024-01-08","s":"mapped","g":"full","r":true,"t":["T1105","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-502"],"y":2023},{"id":"CVE-2023-29300","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","d":"2024-01-08","s":"mapped","g":"full","r":true,"t":["T1105","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-502"],"y":2023},{"id":"CVE-2023-27524","v":"Apache","p":"Superset","n":"Apache Superset Insecure Default Initialization of Resource Vulnerability","d":"2024-01-08","s":"mapped","g":"full","r":false,"t":["T1078","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-1188"],"y":2023},{"id":"CVE-2023-23752","v":"Joomla!","p":"Joomla!","n":"Joomla! Improper Access Control Vulnerability","d":"2024-01-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2023},{"id":"CVE-2016-20017","v":"D-Link","p":"DSL-2750B Devices","n":"D-Link DSL-2750B Devices Command Injection Vulnerability","d":"2024-01-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2016},{"id":"CVE-2023-7101","v":"Spreadsheet::ParseExcel","p":"Spreadsheet::ParseExcel","n":"Spreadsheet::ParseExcel Remote Code Execution Vulnerability","d":"2024-01-02","s":"mapped","g":"full","r":false,"t":["T1059","T1105","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-95"],"y":2023},{"id":"CVE-2023-7024","v":"Google","p":"Chromium WebRTC","n":"Google Chromium WebRTC Heap Buffer Overflow Vulnerability","d":"2024-01-02","s":"mapped","g":"full","r":false,"t":["T1189","T1574"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-787"],"y":2023},{"id":"CVE-2023-49897","v":"FXC","p":"AE1021, AE1021PE","n":"FXC AE1021, AE1021PE OS Command Injection Vulnerability","d":"2023-12-21","s":"mapped","g":"full","r":false,"t":["T1203","T1496","T1498"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-78"],"y":2023},{"id":"CVE-2023-47565","v":"QNAP","p":"VioStor NVR","n":"QNAP VioStor NVR OS Command Injection Vulnerability","d":"2023-12-21","s":"mapped","g":"full","r":false,"t":["T1203","T1496","T1498"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-78"],"y":2023},{"id":"CVE-2023-6448","v":"Unitronics","p":"Vision PLC and HMI","n":"Unitronics Vision PLC and HMI Insecure Default Password Vulnerability","d":"2023-12-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-1188"],"y":2023},{"id":"CVE-2023-41266","v":"Qlik","p":"Sense","n":"Qlik Sense Path Traversal Vulnerability","d":"2023-12-07","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20"],"y":2023},{"id":"CVE-2023-41265","v":"Qlik","p":"Sense","n":"Qlik Sense HTTP Tunneling Vulnerability","d":"2023-12-07","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-444"],"y":2023},{"id":"CVE-2023-33107","v":"Qualcomm","p":"Multiple Chipsets","n":"Qualcomm Multiple Chipsets Integer Overflow Vulnerability","d":"2023-12-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-190"],"y":2023},{"id":"CVE-2023-33106","v":"Qualcomm","p":"Multiple Chipsets","n":"Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability","d":"2023-12-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-823"],"y":2023},{"id":"CVE-2023-33063","v":"Qualcomm","p":"Multiple Chipsets","n":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","d":"2023-12-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2023},{"id":"CVE-2022-22071","v":"Qualcomm","p":"Multiple Chipsets","n":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","d":"2023-12-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2022},{"id":"CVE-2023-42917","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Memory Corruption Vulnerability","d":"2023-12-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2023},{"id":"CVE-2023-42916","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","d":"2023-12-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-125"],"y":2023},{"id":"CVE-2023-6345","v":"Google","p":"Chromium Skia","n":"Google Skia Integer Overflow Vulnerability","d":"2023-11-30","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-190"],"y":2023},{"id":"CVE-2023-49103","v":"ownCloud","p":"ownCloud graphapi","n":"ownCloud graphapi Information Disclosure Vulnerability","d":"2023-11-30","s":"mapped","g":"full","r":false,"t":["T1005","T1190","T1552"],"mt":["exploitation_technique","primary_impact"],"w":[],"y":2023},{"id":"CVE-2023-4911","v":"GNU","p":"GNU C Library","n":"GNU C Library Buffer Overflow Vulnerability","d":"2023-11-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122"],"y":2023},{"id":"CVE-2023-36584","v":"Microsoft","p":"Windows","n":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","d":"2023-11-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2023-1671","v":"Sophos","p":"Web Appliance","n":"Sophos Web Appliance Command Injection Vulnerability","d":"2023-11-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2023},{"id":"CVE-2020-2551","v":"Oracle","p":"Fusion Middleware","n":"Oracle Fusion Middleware Unspecified Vulnerability","d":"2023-11-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2023-36036","v":"Microsoft","p":"Windows","n":"Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability","d":"2023-11-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122"],"y":2023},{"id":"CVE-2023-36033","v":"Microsoft","p":"Windows","n":"Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","d":"2023-11-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-822"],"y":2023},{"id":"CVE-2023-36025","v":"Microsoft","p":"Windows","n":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","d":"2023-11-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2023-47246","v":"SysAid","p":"SysAid Server","n":"SysAid Server Path Traversal Vulnerability","d":"2023-11-13","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-22"],"y":2023},{"id":"CVE-2023-36851","v":"Juniper","p":"Junos OS","n":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","d":"2023-11-13","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-306"],"y":2023},{"id":"CVE-2023-36847","v":"Juniper","p":"Junos OS","n":"Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability","d":"2023-11-13","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-306"],"y":2023},{"id":"CVE-2023-36846","v":"Juniper","p":"Junos OS","n":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","d":"2023-11-13","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-306"],"y":2023},{"id":"CVE-2023-36845","v":"Juniper","p":"Junos OS","n":"Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability","d":"2023-11-13","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-473"],"y":2023},{"id":"CVE-2023-36844","v":"Juniper","p":"Junos OS","n":"Juniper Junos OS EX Series PHP External Variable Modification Vulnerability","d":"2023-11-13","s":"mapped","g":"full","r":false,"t":["T1190","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-473"],"y":2023},{"id":"CVE-2023-29552","v":"IETF","p":"Service Location Protocol (SLP)","n":"Service Location Protocol (SLP) Denial-of-Service Vulnerability","d":"2023-11-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2023-22518","v":"Atlassian","p":"Confluence Data Center and Server","n":"Atlassian Confluence Data Center and Server Improper Authorization Vulnerability","d":"2023-11-07","s":"mapped","g":"full","r":true,"t":["T1033","T1105","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-863"],"y":2023},{"id":"CVE-2023-46604","v":"Apache","p":"ActiveMQ","n":"Apache ActiveMQ Deserialization of Untrusted Data Vulnerability","d":"2023-11-02","s":"mapped","g":"full","r":true,"t":["T1053.005","T1059.004","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-502"],"y":2023},{"id":"CVE-2023-46748","v":"F5","p":"BIG-IP Configuration Utility","n":"F5 BIG-IP Configuration Utility SQL Injection Vulnerability","d":"2023-10-31","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2023},{"id":"CVE-2023-46747","v":"F5","p":"BIG-IP Configuration Utility","n":"F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability","d":"2023-10-31","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-288"],"y":2023},{"id":"CVE-2023-5631","v":"Roundcube","p":"Webmail","n":"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","d":"2023-10-26","s":"mapped","g":"full","r":false,"t":["T1041","T1059.007","T1204.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-79"],"y":2023},{"id":"CVE-2023-20273","v":"Cisco","p":"Cisco IOS XE Web UI","n":"Cisco IOS XE Web UI Command Injection Vulnerability","d":"2023-10-23","s":"mapped","g":"full","r":false,"t":["T1059","T1068","T1078"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-78"],"y":2023},{"id":"CVE-2023-4966","v":"Citrix","p":"NetScaler ADC and NetScaler Gateway","n":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","d":"2023-10-18","s":"mapped","g":"full","r":true,"t":["T1005","T1134.001","T1574"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-119"],"y":2023},{"id":"CVE-2023-20198","v":"Cisco","p":"IOS XE Web UI","n":"Cisco IOS XE Web UI Privilege Escalation Vulnerability","d":"2023-10-16","s":"mapped","g":"full","r":false,"t":["T1136","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-420"],"y":2023},{"id":"CVE-2023-44487","v":"IETF","p":"HTTP/2","n":"HTTP/2 Rapid Reset Attack Vulnerability","d":"2023-10-10","s":"mapped","g":"full","r":false,"t":["T1190","T1499"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-400"],"y":2023},{"id":"CVE-2023-41763","v":"Microsoft","p":"Skype for Business","n":"Microsoft Skype for Business Privilege Escalation Vulnerability","d":"2023-10-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-918"],"y":2023},{"id":"CVE-2023-36563","v":"Microsoft","p":"WordPad","n":"Microsoft WordPad Information Disclosure Vulnerability","d":"2023-10-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2023},{"id":"CVE-2023-21608","v":"Adobe","p":"Acrobat and Reader","n":"Adobe Acrobat and Reader Use-After-Free Vulnerability","d":"2023-10-10","s":"mapped","g":"full","r":false,"t":["T1203","T1204.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2023},{"id":"CVE-2023-20109","v":"Cisco","p":"IOS and IOS XE","n":"Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability","d":"2023-10-10","s":"mapped","g":"full","r":false,"t":["T1059","T1078","T1499"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-787"],"y":2023},{"id":"CVE-2023-42824","v":"Apple","p":"iOS and iPadOS","n":"Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability","d":"2023-10-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2023-40044","v":"Progress","p":"WS_FTP Server","n":"Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability","d":"2023-10-05","s":"mapped","g":"partial","r":true,"t":["T1059","T1071.002","T1202"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-502"],"y":2023},{"id":"CVE-2023-22515","v":"Atlassian","p":"Confluence Data Center and Server","n":"Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","d":"2023-10-05","s":"mapped","g":"full","r":true,"t":["T1059","T1059.007","T1078","T1136","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":[],"y":2023},{"id":"CVE-2023-42793","v":"JetBrains","p":"TeamCity","n":"JetBrains TeamCity Authentication Bypass Vulnerability","d":"2023-10-04","s":"mapped","g":"full","r":true,"t":["T1059.003","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-288"],"y":2023},{"id":"CVE-2023-28229","v":"Microsoft","p":"Windows CNG Key Isolation Service","n":"Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","d":"2023-10-04","s":"mapped","g":"full","r":false,"t":["T1068","T1078"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-591"],"y":2023},{"id":"CVE-2023-4211","v":"Arm","p":"Mali GPU Kernel Driver","n":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","d":"2023-10-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2023},{"id":"CVE-2023-5217","v":"Google","p":"Chromium libvpx","n":"Google Chromium libvpx Heap Buffer Overflow Vulnerability","d":"2023-10-02","s":"mapped","g":"full","r":false,"t":["T1204.001","T1574"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-787"],"y":2023},{"id":"CVE-2018-14667","v":"Red Hat","p":"JBoss RichFaces Framework","n":"Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability","d":"2023-09-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2018},{"id":"CVE-2023-41993","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Code Execution Vulnerability","d":"2023-09-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-754"],"y":2023},{"id":"CVE-2023-41992","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Kernel Privilege Escalation Vulnerability","d":"2023-09-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-754"],"y":2023},{"id":"CVE-2023-41991","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Improper Certificate Validation Vulnerability","d":"2023-09-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-295"],"y":2023},{"id":"CVE-2023-41179","v":"Trend Micro","p":"Apex One and Worry-Free Business Security","n":"Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability","d":"2023-09-21","s":"mapped","g":"full","r":false,"t":["T1059","T1078"],"mt":["exploitation_technique","primary_impact"],"w":[],"y":2023},{"id":"CVE-2023-28434","v":"MinIO","p":"MinIO","n":"MinIO Security Feature Bypass Vulnerability","d":"2023-09-19","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-269"],"y":2023},{"id":"CVE-2022-22265","v":"Samsung","p":"Mobile Devices","n":"Samsung Mobile Devices Use-After-Free Vulnerability","d":"2023-09-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-703"],"y":2022},{"id":"CVE-2021-3129","v":"Laravel","p":"Ignition","n":"Laravel Ignition File Upload Vulnerability","d":"2023-09-18","s":"mapped","g":"full","r":true,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":[],"y":2021},{"id":"CVE-2017-6884","v":"Zyxel","p":"EMG2926 Routers","n":"Zyxel EMG2926 Routers Command Injection Vulnerability","d":"2023-09-18","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-78"],"y":2017},{"id":"CVE-2014-8361","v":"Realtek","p":"SDK","n":"Realtek SDK Improper Input Validation Vulnerability","d":"2023-09-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2014},{"id":"CVE-2023-26369","v":"Adobe","p":"Acrobat and Reader","n":"Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","d":"2023-09-14","s":"mapped","g":"full","r":false,"t":["T1203","T1204.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-787"],"y":2023},{"id":"CVE-2023-4863","v":"Google","p":"Chromium WebP","n":"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","d":"2023-09-13","s":"mapped","g":"n/a","r":false,"t":["T1456","T1658"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-787"],"y":2023},{"id":"CVE-2023-35674","v":"Android","p":"Framework","n":"Android Framework Privilege Escalation Vulnerability","d":"2023-09-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2023-20269","v":"Cisco","p":"Adaptive Security Appliance and Firepower Threat Defense","n":"Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability","d":"2023-09-13","s":"mapped","g":"full","r":true,"t":["T1078","T1133"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-288"],"y":2023},{"id":"CVE-2023-36802","v":"Microsoft","p":"Streaming Service Proxy","n":"Microsoft Streaming Service Proxy Privilege Escalation Vulnerability","d":"2023-09-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2023},{"id":"CVE-2023-36761","v":"Microsoft","p":"Word","n":"Microsoft Word Information Disclosure Vulnerability","d":"2023-09-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-668"],"y":2023},{"id":"CVE-2023-41064","v":"Apple","p":"iOS, iPadOS, and macOS","n":"Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability","d":"2023-09-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-120"],"y":2023},{"id":"CVE-2023-41061","v":"Apple","p":"iOS, iPadOS, and watchOS","n":"Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability","d":"2023-09-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2023-33246","v":"Apache","p":"RocketMQ","n":"Apache RocketMQ Command Execution Vulnerability","d":"2023-09-06","s":"mapped","g":"partial","r":false,"t":["T1059","T1190","T1608.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-94"],"y":2023},{"id":"CVE-2023-38831","v":"RARLAB","p":"WinRAR","n":"RARLAB WinRAR Code Execution Vulnerability","d":"2023-08-24","s":"mapped","g":"full","r":true,"t":["T1005","T1041","T1053","T1059.004","T1105","T1112","T1204","T1486"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-351"],"y":2023},{"id":"CVE-2023-32315","v":"Ignite Realtime","p":"Openfire","n":"Ignite Realtime Openfire Path Traversal Vulnerability","d":"2023-08-24","s":"mapped","g":"full","r":false,"t":["T1087.002","T1202","T1496","T1505.003"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-22"],"y":2023},{"id":"CVE-2023-38035","v":"Ivanti","p":"Sentry","n":"Ivanti Sentry Authentication Bypass Vulnerability","d":"2023-08-22","s":"mapped","g":"full","r":true,"t":["T1018","T1046","T1059","T1071.001","T1105","T1190","T1496","T1557.001","T1571"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-863"],"y":2023},{"id":"CVE-2023-27532","v":"Veeam","p":"Backup & Replication","n":"Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability","d":"2023-08-22","s":"mapped","g":"full","r":true,"t":["T1059.003","T1087","T1087.001","T1133","T1486","T1555"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-306"],"y":2023},{"id":"CVE-2023-26359","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","d":"2023-08-21","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-502"],"y":2023},{"id":"CVE-2023-24489","v":"Citrix","p":"Content Collaboration","n":"Citrix Content Collaboration ShareFile Improper Access Control Vulnerability","d":"2023-08-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2023},{"id":"CVE-2023-38180","v":"Microsoft","p":".NET Core and Visual Studio","n":"Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability","d":"2023-08-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2017-18368","v":"Zyxel","p":"P660HN-T1A Routers","n":"Zyxel P660HN-T1A Routers Command Injection Vulnerability","d":"2023-08-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2017},{"id":"CVE-2023-35081","v":"Ivanti","p":"Endpoint Manager Mobile (EPMM)","n":"Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability","d":"2023-07-31","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-22"],"y":2023},{"id":"CVE-2023-37580","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","d":"2023-07-27","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2023},{"id":"CVE-2023-38606","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Kernel Unspecified Vulnerability","d":"2023-07-26","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2023-35078","v":"Ivanti","p":"Endpoint Manager Mobile (EPMM)","n":"Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability","d":"2023-07-25","s":"mapped","g":"full","r":true,"t":["T1136","T1190","T1213"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-287"],"y":2023},{"id":"CVE-2023-38205","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Improper Access Control Vulnerability","d":"2023-07-20","s":"mapped","g":"full","r":false,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-284"],"y":2023},{"id":"CVE-2023-29298","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Improper Access Control Vulnerability","d":"2023-07-20","s":"mapped","g":"full","r":false,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-284"],"y":2023},{"id":"CVE-2023-3519","v":"Citrix","p":"NetScaler ADC and NetScaler Gateway","n":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","d":"2023-07-19","s":"mapped","g":"full","r":true,"t":["T1087.002","T1105","T1190","T1574"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-94"],"y":2023},{"id":"CVE-2023-36884","v":"Microsoft","p":"Windows","n":"Microsoft Windows Search Remote Code Execution Vulnerability","d":"2023-07-17","s":"stale","g":"full","r":true,"t":["T1005","T1070.001","T1204.002","T1486","T1489","T1490","T1553.005","T1566"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-362"],"y":2023},{"id":"CVE-2023-37450","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Code Execution Vulnerability","d":"2023-07-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2022-29303","v":"SolarView","p":"Compact","n":"SolarView Compact Command Injection Vulnerability","d":"2023-07-13","s":"mapped","g":"full","r":false,"t":["T1059","T1496","T1505"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-78"],"y":2022},{"id":"CVE-2023-36874","v":"Microsoft","p":"Windows","n":"Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability","d":"2023-07-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-59"],"y":2023},{"id":"CVE-2023-35311","v":"Microsoft","p":"Outlook","n":"Microsoft Outlook Security Feature Bypass Vulnerability","d":"2023-07-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-367"],"y":2023},{"id":"CVE-2023-32049","v":"Microsoft","p":"Windows","n":"Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability","d":"2023-07-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2023-32046","v":"Microsoft","p":"Windows","n":"Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability","d":"2023-07-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2022-31199","v":"Netwrix","p":"Auditor","n":"Netwrix Auditor Insecure Object Deserialization Vulnerability","d":"2023-07-11","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-502","CWE-122"],"y":2022},{"id":"CVE-2021-29256","v":"Arm","p":"Mali Graphics Processing Unit (GPU)","n":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","d":"2023-07-07","s":"mapped","g":"full","r":false,"t":["T1005","T1068","T1203"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-25489","v":"Samsung","p":"Mobile Devices","n":"Samsung Mobile Devices Improper Input Validation Vulnerability","d":"2023-06-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2021},{"id":"CVE-2021-25487","v":"Samsung","p":"Mobile Devices","n":"Samsung Mobile Devices Out-of-Bounds Read Vulnerability","d":"2023-06-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-125"],"y":2021},{"id":"CVE-2021-25395","v":"Samsung","p":"Mobile Devices","n":"Samsung Mobile Devices Race Condition Vulnerability","d":"2023-06-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-362"],"y":2021},{"id":"CVE-2021-25394","v":"Samsung","p":"Mobile Devices","n":"Samsung Mobile Devices Race Condition Vulnerability","d":"2023-06-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-25372","v":"Samsung","p":"Mobile Devices","n":"Samsung Mobile Devices Improper Boundary Check Vulnerability","d":"2023-06-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-25371","v":"Samsung","p":"Mobile Devices","n":"Samsung Mobile Devices Unspecified Vulnerability","d":"2023-06-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-912"],"y":2021},{"id":"CVE-2019-20500","v":"D-Link","p":"DWL-2600AP Access Point","n":"D-Link DWL-2600AP Access Point Command Injection Vulnerability","d":"2023-06-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2019},{"id":"CVE-2019-17621","v":"D-Link","p":"DIR-859 Router","n":"D-Link DIR-859 Router Command Execution Vulnerability","d":"2023-06-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2019},{"id":"CVE-2023-32439","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Type Confusion Vulnerability","d":"2023-06-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2023},{"id":"CVE-2023-32435","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Memory Corruption Vulnerability","d":"2023-06-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2023},{"id":"CVE-2023-32434","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Integer Overflow Vulnerability","d":"2023-06-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-190"],"y":2023},{"id":"CVE-2023-27992","v":"Zyxel","p":"Multiple Network-Attached Storage (NAS) Devices","n":"Zyxel Multiple NAS Devices Command Injection Vulnerability","d":"2023-06-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2023},{"id":"CVE-2023-20867","v":"VMware","p":"Tools","n":"VMware Tools Authentication Bypass Vulnerability","d":"2023-06-23","s":"mapped","g":"full","r":false,"t":["T1059","T1078","T1105"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-287"],"y":2023},{"id":"CVE-2023-20887","v":"VMware","p":"Aria Operations for Networks","n":"Vmware Aria Operations for Networks Command Injection Vulnerability","d":"2023-06-22","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-77"],"y":2023},{"id":"CVE-2021-44026","v":"Roundcube","p":"Roundcube Webmail","n":"Roundcube Webmail SQL Injection Vulnerability","d":"2023-06-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2021},{"id":"CVE-2020-35730","v":"Roundcube","p":"Roundcube Webmail","n":"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","d":"2023-06-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2020},{"id":"CVE-2020-12641","v":"Roundcube","p":"Roundcube Webmail","n":"Roundcube Webmail Remote Code Execution Vulnerability","d":"2023-06-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2020},{"id":"CVE-2016-9079","v":"Mozilla","p":"Firefox, Firefox ESR, and Thunderbird","n":"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","d":"2023-06-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2016},{"id":"CVE-2016-0165","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2023-06-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2016},{"id":"CVE-2023-27997","v":"Fortinet","p":"FortiOS and FortiProxy SSL-VPN","n":"Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","d":"2023-06-13","s":"mapped","g":"full","r":true,"t":["T1136","T1190","T1574"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-122"],"y":2023},{"id":"CVE-2023-3079","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2023-06-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2023},{"id":"CVE-2023-33010","v":"Zyxel","p":"Multiple Firewalls","n":"Zyxel Multiple Firewalls Buffer Overflow Vulnerability","d":"2023-06-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-120"],"y":2023},{"id":"CVE-2023-33009","v":"Zyxel","p":"Multiple Firewalls","n":"Zyxel Multiple Firewalls Buffer Overflow Vulnerability","d":"2023-06-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-120"],"y":2023},{"id":"CVE-2023-34362","v":"Progress","p":"MOVEit Transfer","n":"Progress MOVEit Transfer SQL Injection Vulnerability","d":"2023-06-02","s":"mapped","g":"full","r":true,"t":["T1005","T1059","T1082","T1105","T1136","T1190","T1531"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-89"],"y":2023},{"id":"CVE-2023-28771","v":"Zyxel","p":"Multiple Firewalls","n":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","d":"2023-05-31","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2023},{"id":"CVE-2023-2868","v":"Barracuda Networks","p":"Email Security Gateway (ESG) Appliance","n":"Barracuda Networks ESG Appliance Improper Input Validation Vulnerability","d":"2023-05-26","s":"mapped","g":"full","r":false,"t":["T1041","T1059","T1105","T1566.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-20"],"y":2023},{"id":"CVE-2023-32409","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Sandbox Escape Vulnerability","d":"2023-05-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2023-32373","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Use-After-Free Vulnerability","d":"2023-05-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2023},{"id":"CVE-2023-28204","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","d":"2023-05-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-125"],"y":2023},{"id":"CVE-2023-21492","v":"Samsung","p":"Mobile Devices","n":"Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability","d":"2023-05-19","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-532"],"y":2023},{"id":"CVE-2016-6415","v":"Cisco","p":"IOS, IOS XR, and IOS XE","n":"Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability","d":"2023-05-19","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2016},{"id":"CVE-2004-1464","v":"Cisco","p":"IOS","n":"Cisco IOS Denial-of-Service Vulnerability","d":"2023-05-19","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2004},{"id":"CVE-2023-25717","v":"Ruckus Wireless","p":"Multiple Products","n":"Multiple Ruckus Wireless Products CSRF and RCE Vulnerability","d":"2023-05-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2023},{"id":"CVE-2021-3560","v":"Red Hat","p":"Polkit","n":"Red Hat Polkit Incorrect Authorization Vulnerability","d":"2023-05-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-863"],"y":2021},{"id":"CVE-2016-8735","v":"Apache","p":"Tomcat","n":"Apache Tomcat Remote Code Execution Vulnerability","d":"2023-05-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2016},{"id":"CVE-2016-3427","v":"Oracle","p":"Java SE and JRockit","n":"Oracle Java SE and JRockit Unspecified Vulnerability","d":"2023-05-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2016},{"id":"CVE-2015-5317","v":"Jenkins","p":"Jenkins User Interface (UI)","n":"Jenkins User Interface (UI) Information Disclosure Vulnerability","d":"2023-05-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2015},{"id":"CVE-2014-0196","v":"Linux","p":"Kernel","n":"Linux Kernel Race Condition Vulnerability","d":"2023-05-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-362"],"y":2014},{"id":"CVE-2010-3904","v":"Linux","p":"Kernel","n":"Linux Kernel Improper Input Validation Vulnerability","d":"2023-05-12","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2010},{"id":"CVE-2023-29336","v":"Microsoft","p":"Win32k","n":"Microsoft Win32K Privilege Escalation Vulnerability","d":"2023-05-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2023},{"id":"CVE-2023-21839","v":"Oracle","p":"WebLogic Server","n":"Oracle WebLogic Server Unspecified Vulnerability","d":"2023-05-01","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2023},{"id":"CVE-2023-1389","v":"TP-Link","p":"Archer AX21","n":"TP-Link Archer AX-21 Command Injection Vulnerability","d":"2023-05-01","s":"mapped","g":"full","r":false,"t":["T1041","T1070","T1106","T1496","T1498"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-77"],"y":2023},{"id":"CVE-2021-45046","v":"Apache","p":"Log4j2","n":"Apache Log4j2 Deserialization of Untrusted Data Vulnerability","d":"2023-05-01","s":"mapped","g":"full","r":true,"t":["T1059","T1486"],"mt":["primary_impact","secondary_impact"],"w":["CWE-917"],"y":2021},{"id":"CVE-2023-28432","v":"MinIO","p":"MinIO","n":"MinIO Information Disclosure Vulnerability","d":"2023-04-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2023},{"id":"CVE-2023-27350","v":"PaperCut","p":"MF/NG","n":"PaperCut MF/NG Improper Access Control Vulnerability","d":"2023-04-21","s":"mapped","g":"full","r":true,"t":["T1059","T1105","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-284"],"y":2023},{"id":"CVE-2023-2136","v":"Google","p":"Chromium Skia","n":"Google Chrome Skia Integer Overflow Vulnerability","d":"2023-04-21","s":"mapped","g":"full","r":false,"t":["T1204.001"],"mt":["exploitation_technique"],"w":["CWE-190"],"y":2023},{"id":"CVE-2017-6742","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","d":"2023-04-19","s":"mapped","g":"partial","r":false,"t":["T1048","T1059","T1542.005","T1574"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-119"],"y":2017},{"id":"CVE-2023-2033","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2023-04-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2023},{"id":"CVE-2019-8526","v":"Apple","p":"macOS","n":"Apple macOS Use-After-Free Vulnerability","d":"2023-04-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2019},{"id":"CVE-2023-29492","v":"Novi Survey","p":"Novi Survey","n":"Novi Survey Insecure Deserialization Vulnerability","d":"2023-04-13","s":"mapped","g":"full","r":false,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-94"],"y":2023},{"id":"CVE-2023-20963","v":"Android","p":"Framework","n":"Android Framework Privilege Escalation Vulnerability","d":"2023-04-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-295"],"y":2023},{"id":"CVE-2023-28252","v":"Microsoft","p":"Windows","n":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","d":"2023-04-11","s":"mapped","g":"full","r":true,"t":["T1003","T1021","T1059","T1068","T1078","T1136","T1486"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-122"],"y":2023},{"id":"CVE-2023-28206","v":"Apple","p":"iOS, iPadOS, and macOS","n":"Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability","d":"2023-04-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2023},{"id":"CVE-2023-28205","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Use-After-Free Vulnerability","d":"2023-04-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2023},{"id":"CVE-2023-26083","v":"Arm","p":"Mali Graphics Processing Unit (GPU)","n":"Arm Mali GPU Kernel Driver Information Disclosure Vulnerability","d":"2023-04-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-401"],"y":2023},{"id":"CVE-2021-27878","v":"Veritas","p":"Backup Exec Agent","n":"Veritas Backup Exec Agent Command Execution Vulnerability","d":"2023-04-07","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-287"],"y":2021},{"id":"CVE-2021-27877","v":"Veritas","p":"Backup Exec Agent","n":"Veritas Backup Exec Agent Improper Authentication Vulnerability","d":"2023-04-07","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-287"],"y":2021},{"id":"CVE-2021-27876","v":"Veritas","p":"Backup Exec Agent","n":"Veritas Backup Exec Agent File Access Vulnerability","d":"2023-04-07","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-287"],"y":2021},{"id":"CVE-2019-1388","v":"Microsoft","p":"Windows","n":"Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability","d":"2023-04-07","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-269"],"y":2019},{"id":"CVE-2022-27926","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","d":"2023-04-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79","CWE-138"],"y":2022},{"id":"CVE-2023-0266","v":"Linux","p":"Kernel","n":"Linux Kernel Use-After-Free Vulnerability","d":"2023-03-30","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2023},{"id":"CVE-2022-42948","v":"Fortra","p":"Cobalt Strike","n":"Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability","d":"2023-03-30","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-79","CWE-116"],"y":2022},{"id":"CVE-2022-39197","v":"Fortra","p":"Cobalt Strike","n":"Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability","d":"2023-03-30","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-20","CWE-79"],"y":2022},{"id":"CVE-2022-38181","v":"Arm","p":"Mali Graphics Processing Unit (GPU)","n":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","d":"2023-03-30","s":"mapped","g":"n/a","r":false,"t":["T1404","T1437.001","T1660"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2022},{"id":"CVE-2022-3038","v":"Google","p":"Chromium Network Service","n":"Google Chromium Network Service Use-After-Free Vulnerability","d":"2023-03-30","s":"mapped","g":"full","r":false,"t":["T1204.001","T1574"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2022},{"id":"CVE-2022-22706","v":"Arm","p":"Mali Graphics Processing Unit (GPU)","n":"Arm Mali GPU Kernel Driver Unspecified Vulnerability","d":"2023-03-30","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2022},{"id":"CVE-2021-30900","v":"Apple","p":"iOS, iPadOS, and macOS","n":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","d":"2023-03-30","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-787"],"y":2021},{"id":"CVE-2017-7494","v":"Samba","p":"Samba","n":"Samba Remote Code Execution Vulnerability","d":"2023-03-30","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-94"],"y":2017},{"id":"CVE-2013-3163","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Memory Corruption Vulnerability","d":"2023-03-30","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2013},{"id":"CVE-2023-26360","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","d":"2023-03-15","s":"mapped","g":"full","r":false,"t":["T1003.001","T1036.005","T1046","T1059.007","T1071.001","T1105","T1190","T1484.001","T1505.003"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-284"],"y":2023},{"id":"CVE-2023-24880","v":"Microsoft","p":"Windows","n":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","d":"2023-03-14","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-863"],"y":2023},{"id":"CVE-2023-23397","v":"Microsoft","p":"Office","n":"Microsoft Office Outlook Privilege Escalation Vulnerability","d":"2023-03-14","s":"mapped","g":"full","r":false,"t":["T1078","T1203","T1550.002"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-294"],"y":2023},{"id":"CVE-2022-41328","v":"Fortinet","p":"FortiOS","n":"Fortinet FortiOS Path Traversal Vulnerability","d":"2023-03-14","s":"mapped","g":"partial","r":false,"t":["T1037","T1049","T1565.001","T1574"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-22"],"y":2022},{"id":"CVE-2021-39144","v":"XStream","p":"XStream","n":"XStream Remote Code Execution Vulnerability","d":"2023-03-10","s":"mapped","g":"full","r":false,"t":["T1190","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-94","CWE-502"],"y":2021},{"id":"CVE-2020-5741","v":"Plex","p":"Media Server","n":"Plex Media Server Remote Code Execution Vulnerability","d":"2023-03-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2020},{"id":"CVE-2022-35914","v":"Teclib","p":"GLPI","n":"Teclib GLPI Remote Code Execution Vulnerability","d":"2023-03-07","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique"],"w":["CWE-74"],"y":2022},{"id":"CVE-2022-33891","v":"Apache","p":"Spark","n":"Apache Spark Command Injection Vulnerability","d":"2023-03-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2022},{"id":"CVE-2022-28810","v":"Zoho","p":"ManageEngine","n":"Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","d":"2023-03-07","s":"mapped","g":"full","r":false,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-78","CWE-259"],"y":2022},{"id":"CVE-2022-36537","v":"ZK Framework","p":"AuUploader","n":"ZK Framework AuUploader Unspecified Vulnerability","d":"2023-02-27","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-441"],"y":2022},{"id":"CVE-2022-47986","v":"IBM","p":"Aspera Faspex","n":"IBM Aspera Faspex Code Execution Vulnerability","d":"2023-02-21","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-502"],"y":2022},{"id":"CVE-2022-41223","v":"Mitel","p":"MiVoice Connect","n":"Mitel MiVoice Connect Code Injection Vulnerability","d":"2023-02-21","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-94"],"y":2022},{"id":"CVE-2022-40765","v":"Mitel","p":"MiVoice Connect","n":"Mitel MiVoice Connect Command Injection Vulnerability","d":"2023-02-21","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-77"],"y":2022},{"id":"CVE-2022-46169","v":"Cacti","p":"Cacti","n":"Cacti Command Injection Vulnerability","d":"2023-02-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-74"],"y":2022},{"id":"CVE-2023-23529","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Type Confusion Vulnerability","d":"2023-02-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2023},{"id":"CVE-2023-23376","v":"Microsoft","p":"Windows","n":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","d":"2023-02-14","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-122"],"y":2023},{"id":"CVE-2023-21823","v":"Microsoft","p":"Windows","n":"Microsoft Windows Graphic Component Privilege Escalation Vulnerability","d":"2023-02-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-190"],"y":2023},{"id":"CVE-2023-21715","v":"Microsoft","p":"Office","n":"Microsoft Office Publisher Security Feature Bypass Vulnerability","d":"2023-02-14","s":"mapped","g":"full","r":false,"t":["T1204.002"],"mt":["exploitation_technique"],"w":["CWE-863"],"y":2023},{"id":"CVE-2023-0669","v":"Fortra","p":"GoAnywhere MFT","n":"Fortra GoAnywhere MFT Remote Code Execution Vulnerability","d":"2023-02-10","s":"mapped","g":"full","r":true,"t":["T1190","T1210","T1486"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-502"],"y":2023},{"id":"CVE-2022-24990","v":"TerraMaster","p":"TerraMaster OS","n":"TerraMaster OS Remote Command Execution Vulnerability","d":"2023-02-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-306"],"y":2022},{"id":"CVE-2015-2291","v":"Intel","p":"Ethernet Diagnostics Driver for Windows","n":"Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability","d":"2023-02-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20"],"y":2015},{"id":"CVE-2023-22952","v":"SugarCRM","p":"Multiple Products","n":"Multiple SugarCRM Products Remote Code Execution Vulnerability","d":"2023-02-02","s":"stale","g":"partial","r":false,"t":["T1021.001","T1059","T1070.004","T1078","T1083","T1190","T1482","T1505.003","T1530","T1562.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-20"],"y":2023},{"id":"CVE-2022-21587","v":"Oracle","p":"E-Business Suite","n":"Oracle E-Business Suite Unspecified Vulnerability","d":"2023-02-02","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-306"],"y":2022},{"id":"CVE-2017-11357","v":"Telerik","p":"User Interface (UI) for ASP.NET AJAX","n":"Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability","d":"2023-01-26","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2022-47966","v":"Zoho","p":"ManageEngine","n":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","d":"2023-01-23","s":"mapped","g":"full","r":true,"t":["T1068","T1136.001","T1190"],"mt":["exploitation_technique","primary_impact"],"w":[],"y":2022},{"id":"CVE-2022-44877","v":"CWP","p":"Control Web Panel","n":"CWP Control Web Panel OS Command Injection Vulnerability","d":"2023-01-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2022},{"id":"CVE-2023-21674","v":"Microsoft","p":"Windows","n":"Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability","d":"2023-01-10","s":"mapped","g":"full","r":false,"t":["T1068","T1078"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2023},{"id":"CVE-2022-41080","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Privilege Escalation Vulnerability","d":"2023-01-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2022},{"id":"CVE-2018-5430","v":"TIBCO","p":"JasperReports","n":"TIBCO JasperReports Server Information Disclosure Vulnerability","d":"2022-12-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2018},{"id":"CVE-2018-18809","v":"TIBCO","p":"JasperReports","n":"TIBCO JasperReports Library Directory Traversal Vulnerability","d":"2022-12-29","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2018},{"id":"CVE-2022-42856","v":"Apple","p":"iOS","n":"Apple iOS Type Confusion Vulnerability","d":"2022-12-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2022},{"id":"CVE-2022-44698","v":"Microsoft","p":"Defender","n":"Microsoft Defender SmartScreen Security Feature Bypass Vulnerability","d":"2022-12-13","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-755"],"y":2022},{"id":"CVE-2022-42475","v":"Fortinet","p":"FortiOS","n":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","d":"2022-12-13","s":"mapped","g":"full","r":true,"t":["T1071.001","T1190","T1574","T1622"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-197"],"y":2022},{"id":"CVE-2022-27518","v":"Citrix","p":"Application Delivery Controller (ADC) and Gateway","n":"Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability","d":"2022-12-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-664"],"y":2022},{"id":"CVE-2022-26501","v":"Veeam","p":"Backup & Replication","n":"Veeam Backup & Replication Remote Code Execution Vulnerability","d":"2022-12-13","s":"mapped","g":"full","r":true,"t":["T1036","T1048","T1059","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-306"],"y":2022},{"id":"CVE-2022-26500","v":"Veeam","p":"Backup & Replication","n":"Veeam Backup & Replication Remote Code Execution Vulnerability","d":"2022-12-13","s":"mapped","g":"full","r":true,"t":["T1036","T1048","T1059","T1078","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-22"],"y":2022},{"id":"CVE-2022-4262","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2022-12-05","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122","CWE-843"],"y":2022},{"id":"CVE-2022-4135","v":"Google","p":"Chromium GPU","n":"Google Chromium GPU Heap Buffer Overflow Vulnerability","d":"2022-11-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2022},{"id":"CVE-2021-35587","v":"Oracle","p":"Fusion Middleware","n":"Oracle Fusion Middleware Unspecified Vulnerability","d":"2022-11-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502","CWE-790"],"y":2021},{"id":"CVE-2022-41049","v":"Microsoft","p":"Windows","n":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","d":"2022-11-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-274"],"y":2022},{"id":"CVE-2022-41128","v":"Microsoft","p":"Windows","n":"Microsoft Windows Scripting Languages Remote Code Execution Vulnerability","d":"2022-11-08","s":"mapped","g":"full","r":false,"t":["T1070","T1203","T1566"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-787"],"y":2022},{"id":"CVE-2022-41125","v":"Microsoft","p":"Windows","n":"Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","d":"2022-11-08","s":"mapped","g":"full","r":false,"t":["T1059","T1068","T1078"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-787"],"y":2022},{"id":"CVE-2022-41091","v":"Microsoft","p":"Windows","n":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","d":"2022-11-08","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-863"],"y":2022},{"id":"CVE-2022-41073","v":"Microsoft","p":"Windows","n":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","d":"2022-11-08","s":"mapped","g":"full","r":true,"t":["T1068","T1078","T1574"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-787"],"y":2022},{"id":"CVE-2021-25370","v":"Samsung","p":"Mobile Devices","n":"Samsung Mobile Devices Memory Corruption Vulnerability","d":"2022-11-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-25369","v":"Samsung","p":"Mobile Devices","n":"Samsung Mobile Devices Improper Access Control Vulnerability","d":"2022-11-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2021},{"id":"CVE-2021-25337","v":"Samsung","p":"Mobile Devices","n":"Samsung Mobile Devices Improper Access Control Vulnerability","d":"2022-11-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-269"],"y":2021},{"id":"CVE-2022-3723","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2022-10-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122","CWE-843"],"y":2022},{"id":"CVE-2022-42827","v":"Apple","p":"iOS and iPadOS","n":"Apple iOS and iPadOS Out-of-Bounds Write Vulnerability","d":"2022-10-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-787"],"y":2022},{"id":"CVE-2020-3433","v":"Cisco","p":"AnyConnect Secure","n":"Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability","d":"2022-10-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-427"],"y":2020},{"id":"CVE-2020-3153","v":"Cisco","p":"AnyConnect Secure","n":"Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability","d":"2022-10-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-427"],"y":2020},{"id":"CVE-2018-19323","v":"GIGABYTE","p":"Multiple Products","n":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","d":"2022-10-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2018},{"id":"CVE-2018-19322","v":"GIGABYTE","p":"Multiple Products","n":"GIGABYTE Multiple Products Code Execution Vulnerability","d":"2022-10-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-749"],"y":2018},{"id":"CVE-2018-19321","v":"GIGABYTE","p":"Multiple Products","n":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","d":"2022-10-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2018},{"id":"CVE-2018-19320","v":"GIGABYTE","p":"Multiple Products","n":"GIGABYTE Multiple Products Unspecified Vulnerability","d":"2022-10-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2018},{"id":"CVE-2022-41352","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","d":"2022-10-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2022},{"id":"CVE-2021-3493","v":"Linux","p":"Kernel","n":"Linux Kernel Privilege Escalation Vulnerability","d":"2022-10-20","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-862"],"y":2021},{"id":"CVE-2022-41033","v":"Microsoft","p":"Windows COM+ Event System Service","n":"Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability","d":"2022-10-11","s":"mapped","g":"full","r":false,"t":["T1068","T1566.001"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-843"],"y":2022},{"id":"CVE-2022-40684","v":"Fortinet","p":"Multiple Products","n":"Fortinet Multiple Products Authentication Bypass Vulnerability","d":"2022-10-11","s":"mapped","g":"partial","r":true,"t":["T1098.004","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-288"],"y":2022},{"id":"CVE-2022-41082","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Remote Code Execution Vulnerability","d":"2022-09-30","s":"mapped","g":"full","r":true,"t":["T1059.001","T1078","T1087","T1482","T1505.003","T1567"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-502"],"y":2022},{"id":"CVE-2022-41040","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","d":"2022-09-30","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-918"],"y":2022},{"id":"CVE-2022-36804","v":"Atlassian","p":"Bitbucket Server and Data Center","n":"Atlassian Bitbucket Server and Data Center Command Injection Vulnerability","d":"2022-09-30","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78","CWE-88","CWE-158"],"y":2022},{"id":"CVE-2022-3236","v":"Sophos","p":"Firewall","n":"Sophos Firewall Code Injection Vulnerability","d":"2022-09-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2022},{"id":"CVE-2022-35405","v":"Zoho","p":"ManageEngine","n":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","d":"2022-09-22","s":"mapped","g":"full","r":false,"t":["T1059"],"mt":["exploitation_technique"],"w":["CWE-502"],"y":2022},{"id":"CVE-2022-40139","v":"Trend Micro","p":"Apex One and Apex One as a Service","n":"Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability","d":"2022-09-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-353","CWE-641"],"y":2022},{"id":"CVE-2013-6282","v":"Linux","p":"Kernel","n":"Linux Kernel Improper Input Validation Vulnerability","d":"2022-09-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2013},{"id":"CVE-2013-2597","v":"Code Aurora","p":"ACDB Audio Driver","n":"Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability","d":"2022-09-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2013},{"id":"CVE-2013-2596","v":"Linux","p":"Kernel","n":"Linux Kernel Integer Overflow Vulnerability","d":"2022-09-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-189"],"y":2013},{"id":"CVE-2013-2094","v":"Linux","p":"Kernel","n":"Linux Kernel Privilege Escalation Vulnerability","d":"2022-09-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-189"],"y":2013},{"id":"CVE-2010-2568","v":"Microsoft","p":"Windows","n":"Microsoft Windows Remote Code Execution Vulnerability","d":"2022-09-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2010},{"id":"CVE-2022-37969","v":"Microsoft","p":"Windows","n":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","d":"2022-09-14","s":"mapped","g":"full","r":false,"t":["T1059","T1068","T1078"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-20","CWE-787"],"y":2022},{"id":"CVE-2022-32917","v":"Apple","p":"iOS, iPadOS, and macOS","n":"Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability","d":"2022-09-14","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-787"],"y":2022},{"id":"CVE-2022-3075","v":"Google","p":"Chromium Mojo","n":"Google Chromium Mojo Insufficient Data Validation Vulnerability","d":"2022-09-08","s":"mapped","g":"full","r":false,"t":["T1204.001"],"mt":["exploitation_technique"],"w":["CWE-20"],"y":2022},{"id":"CVE-2022-27593","v":"QNAP","p":"Photo Station","n":"QNAP Photo Station Externally Controlled Reference Vulnerability","d":"2022-09-08","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-610"],"y":2022},{"id":"CVE-2022-26258","v":"D-Link","p":"DIR-820L","n":"D-Link DIR-820L Remote Code Execution Vulnerability","d":"2022-09-08","s":"mapped","g":"partial","r":false,"t":["T1059","T1190","T1499.002"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-78"],"y":2022},{"id":"CVE-2020-9934","v":"Apple","p":"iOS, iPadOS, and macOS","n":"Apple iOS, iPadOS, and macOS Input Validation Vulnerability","d":"2022-09-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2018-7445","v":"MikroTik","p":"RouterOS","n":"MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability","d":"2022-09-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2018},{"id":"CVE-2018-6530","v":"D-Link","p":"Multiple Routers","n":"D-Link Multiple Routers OS Command Injection Vulnerability","d":"2022-09-08","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-78"],"y":2018},{"id":"CVE-2018-2628","v":"Oracle","p":"WebLogic Server","n":"Oracle WebLogic Server Unspecified Vulnerability","d":"2022-09-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2018},{"id":"CVE-2018-13374","v":"Fortinet","p":"FortiOS and FortiADC","n":"Fortinet FortiOS and FortiADC Improper Access Control Vulnerability","d":"2022-09-08","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-732"],"y":2018},{"id":"CVE-2017-5521","v":"NETGEAR","p":"Multiple Devices","n":"NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability","d":"2022-09-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2017},{"id":"CVE-2011-4723","v":"D-Link","p":"DIR-300 Router","n":"D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability","d":"2022-09-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-310"],"y":2011},{"id":"CVE-2011-1823","v":"Android","p":"Android OS","n":"Android OS Privilege Escalation Vulnerability","d":"2022-09-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-189"],"y":2011},{"id":"CVE-2022-26352","v":"dotCMS","p":"dotCMS","n":"dotCMS Unrestricted Upload of File Vulnerability","d":"2022-08-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-22","CWE-138"],"y":2022},{"id":"CVE-2022-24706","v":"Apache","p":"CouchDB","n":"Apache CouchDB Insecure Default Initialization of Resource Vulnerability","d":"2022-08-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-1188"],"y":2022},{"id":"CVE-2022-24112","v":"Apache","p":"APISIX","n":"Apache APISIX Authentication Bypass Vulnerability","d":"2022-08-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-290"],"y":2022},{"id":"CVE-2022-22963","v":"VMware Tanzu","p":"Spring Cloud","n":"VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability","d":"2022-08-25","s":"mapped","g":"full","r":false,"t":["T1059.007","T1190","T1505.003"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-94"],"y":2022},{"id":"CVE-2022-2294","v":"WebRTC","p":"WebRTC","n":"WebRTC Heap Buffer Overflow Vulnerability","d":"2022-08-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-122"],"y":2022},{"id":"CVE-2021-39226","v":"Grafana Labs","p":"Grafana","n":"Grafana Authentication Bypass Vulnerability","d":"2022-08-25","s":"mapped","g":"full","r":false,"t":["T1190","T1485"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-287"],"y":2021},{"id":"CVE-2021-38406","v":"Delta Electronics","p":"DOPSoft 2","n":"Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability","d":"2022-08-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-31010","v":"Apple","p":"iOS, macOS, watchOS","n":"Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability","d":"2022-08-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-502"],"y":2021},{"id":"CVE-2020-36193","v":"PEAR","p":"Archive_Tar","n":"PEAR Archive_Tar Improper Link Resolution Vulnerability","d":"2022-08-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22","CWE-59"],"y":2020},{"id":"CVE-2020-28949","v":"PEAR","p":"Archive_Tar","n":"PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability","d":"2022-08-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-74"],"y":2020},{"id":"CVE-2022-0028","v":"Palo Alto Networks","p":"PAN-OS","n":"Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability","d":"2022-08-22","s":"mapped","g":"full","r":false,"t":["T1190","T1498"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-940"],"y":2022},{"id":"CVE-2022-32894","v":"Apple","p":"iOS and macOS","n":"Apple iOS and macOS Out-of-Bounds Write Vulnerability","d":"2022-08-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-787"],"y":2022},{"id":"CVE-2022-32893","v":"Apple","p":"iOS and macOS","n":"Apple iOS and macOS Out-of-Bounds Write Vulnerability","d":"2022-08-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-787"],"y":2022},{"id":"CVE-2022-2856","v":"Google","p":"Chromium Intents","n":"Google Chromium Intents Insufficient Input Validation Vulnerability","d":"2022-08-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2022},{"id":"CVE-2022-26923","v":"Microsoft","p":"Active Directory","n":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","d":"2022-08-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-295"],"y":2022},{"id":"CVE-2022-22536","v":"SAP","p":"Multiple Products","n":"SAP Multiple Products HTTP Request Smuggling Vulnerability","d":"2022-08-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-444"],"y":2022},{"id":"CVE-2022-21971","v":"Microsoft","p":"Windows","n":"Microsoft Windows Runtime Remote Code Execution Vulnerability","d":"2022-08-18","s":"mapped","g":"full","r":false,"t":["T1059","T1204.001"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-824"],"y":2022},{"id":"CVE-2017-15944","v":"Palo Alto Networks","p":"PAN-OS","n":"Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","d":"2022-08-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2017},{"id":"CVE-2022-37042","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability","d":"2022-08-11","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-23"],"y":2022},{"id":"CVE-2022-27925","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","d":"2022-08-11","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-22"],"y":2022},{"id":"CVE-2022-34713","v":"Microsoft","p":"Windows","n":"Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","d":"2022-08-09","s":"mapped","g":"full","r":false,"t":["T1059","T1204.002","T1566"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":[],"y":2022},{"id":"CVE-2022-30333","v":"RARLAB","p":"UnRAR","n":"RARLAB UnRAR Directory Traversal Vulnerability","d":"2022-08-09","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-22","CWE-59"],"y":2022},{"id":"CVE-2022-27924","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability","d":"2022-08-04","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-93"],"y":2022},{"id":"CVE-2022-26138","v":"Atlassian","p":"Confluence","n":"Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability","d":"2022-07-29","s":"mapped","g":"full","r":false,"t":["T1552.001"],"mt":["exploitation_technique"],"w":["CWE-798"],"y":2022},{"id":"CVE-2022-22047","v":"Microsoft","p":"Windows","n":"Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability","d":"2022-07-12","s":"mapped","g":"full","r":false,"t":["T1059","T1068","T1078","T1547.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-426"],"y":2022},{"id":"CVE-2022-26925","v":"Microsoft","p":"Windows","n":"Microsoft Windows LSA Spoofing Vulnerability","d":"2022-07-01","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306"],"y":2022},{"id":"CVE-2022-29499","v":"Mitel","p":"MiVoice Connect","n":"Mitel MiVoice Connect Data Validation Vulnerability","d":"2022-06-27","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20"],"y":2022},{"id":"CVE-2021-4034","v":"Red Hat","p":"Polkit","n":"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","d":"2022-06-27","s":"mapped","g":"full","r":true,"t":["T1068"],"mt":["exploitation_technique"],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-30983","v":"Apple","p":"iOS and iPadOS","n":"Apple iOS and iPadOS Buffer Overflow Vulnerability","d":"2022-06-27","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2021},{"id":"CVE-2021-30533","v":"Google","p":"Chromium PopupBlocker","n":"Google Chromium PopupBlocker Security Bypass Vulnerability","d":"2022-06-27","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-863"],"y":2021},{"id":"CVE-2020-9907","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Memory Corruption Vulnerability","d":"2022-06-27","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-3837","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Memory Corruption Vulnerability","d":"2022-06-27","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2019-8605","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Use-After-Free Vulnerability","d":"2022-06-27","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2019},{"id":"CVE-2018-4344","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Memory Corruption Vulnerability","d":"2022-06-27","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2018},{"id":"CVE-2022-30190","v":"Microsoft","p":"Windows","n":"Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","d":"2022-06-14","s":"mapped","g":"full","r":true,"t":["T1105","T1204.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-610"],"y":2022},{"id":"CVE-2021-38163","v":"SAP","p":"NetWeaver","n":"SAP NetWeaver Unrestricted File Upload Vulnerability","d":"2022-06-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-23"],"y":2021},{"id":"CVE-2016-2388","v":"SAP","p":"NetWeaver","n":"SAP NetWeaver Information Disclosure Vulnerability","d":"2022-06-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2016},{"id":"CVE-2016-2386","v":"SAP","p":"NetWeaver","n":"SAP NetWeaver SQL Injection Vulnerability","d":"2022-06-09","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2016},{"id":"CVE-2019-7195","v":"QNAP","p":"Photo Station","n":"QNAP Photo Station Path Traversal Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-22"],"y":2019},{"id":"CVE-2019-7194","v":"QNAP","p":"Photo Station","n":"QNAP Photo Station Path Traversal Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-22"],"y":2019},{"id":"CVE-2019-7193","v":"QNAP","p":"QTS","n":"QNAP QTS Improper Input Validation Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20"],"y":2019},{"id":"CVE-2019-7192","v":"QNAP","p":"Photo Station","n":"QNAP Photo Station Improper Access Control Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-863"],"y":2019},{"id":"CVE-2019-5825","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Out-of-Bounds Write Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2019},{"id":"CVE-2019-15271","v":"Cisco","p":"RV Series Routers","n":"Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2019},{"id":"CVE-2018-6065","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Integer Overflow Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-190","CWE-787"],"y":2018},{"id":"CVE-2018-4990","v":"Adobe","p":"Acrobat and Reader","n":"Adobe Acrobat and Reader Double Free Vulnerability","d":"2022-06-08","s":"mapped","g":"full","r":false,"t":["T1059.007","T1204.002"],"mt":["exploitation_technique"],"w":["CWE-415"],"y":2018},{"id":"CVE-2018-17480","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Out-of-Bounds Write Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2018},{"id":"CVE-2018-17463","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Remote Code Execution Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2018},{"id":"CVE-2017-6862","v":"NETGEAR","p":"Multiple Devices","n":"NETGEAR Multiple Devices Buffer Overflow Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-5070","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2017},{"id":"CVE-2017-5030","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Memory Corruption Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-125"],"y":2017},{"id":"CVE-2016-5198","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Out-of-Bounds Memory Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-125","CWE-787"],"y":2016},{"id":"CVE-2016-1646","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Out-of-Bounds Read Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2016},{"id":"CVE-2013-1331","v":"Microsoft","p":"Office","n":"Microsoft Office Buffer Overflow Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2013},{"id":"CVE-2012-5054","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Integer Overflow Vulnerability","d":"2022-06-08","s":"mapped","g":"full","r":false,"t":["T1189"],"mt":["exploitation_technique"],"w":["CWE-189"],"y":2012},{"id":"CVE-2012-4969","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Use-After-Free Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2012},{"id":"CVE-2012-1889","v":"Microsoft","p":"XML Core Services","n":"Microsoft XML Core Services Memory Corruption Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2012},{"id":"CVE-2012-0767","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","d":"2022-06-08","s":"mapped","g":"partial","r":false,"t":["T1098","T1114.002","T1185","T1204.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-79"],"y":2012},{"id":"CVE-2012-0754","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Memory Corruption Vulnerability","d":"2022-06-08","s":"mapped","g":"full","r":false,"t":["T1105","T1204.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-787"],"y":2012},{"id":"CVE-2012-0151","v":"Microsoft","p":"Windows","n":"Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2012},{"id":"CVE-2011-2462","v":"Adobe","p":"Reader and Acrobat","n":"Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","d":"2022-06-08","s":"mapped","g":"full","r":false,"t":["T1204.002"],"mt":["exploitation_technique"],"w":["CWE-787"],"y":2011},{"id":"CVE-2011-0609","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Unspecified Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2011},{"id":"CVE-2010-2883","v":"Adobe","p":"Acrobat and Reader","n":"Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability","d":"2022-06-08","s":"mapped","g":"full","r":false,"t":["T1027","T1059","T1204.002"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-119"],"y":2010},{"id":"CVE-2010-2572","v":"Microsoft","p":"PowerPoint","n":"Microsoft PowerPoint Buffer Overflow Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2010},{"id":"CVE-2010-1297","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Memory Corruption Vulnerability","d":"2022-06-08","s":"mapped","g":"full","r":false,"t":["T1105","T1189","T1204.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-787"],"y":2010},{"id":"CVE-2009-4324","v":"Adobe","p":"Acrobat and Reader","n":"Adobe Acrobat and Reader Use-After-Free Vulnerability","d":"2022-06-08","s":"mapped","g":"full","r":false,"t":["T1071.001","T1204.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-399"],"y":2009},{"id":"CVE-2009-3953","v":"Adobe","p":"Acrobat and Reader","n":"Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","d":"2022-06-08","s":"mapped","g":"full","r":false,"t":["T1204.002"],"mt":["exploitation_technique"],"w":["CWE-119"],"y":2009},{"id":"CVE-2009-1862","v":"Adobe","p":"Acrobat and Reader, Flash Player","n":"Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability","d":"2022-06-08","s":"mapped","g":"full","r":false,"t":["T1204.002"],"mt":["exploitation_technique"],"w":["CWE-94"],"y":2009},{"id":"CVE-2009-0563","v":"Microsoft","p":"Office","n":"Microsoft Office Buffer Overflow Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2009},{"id":"CVE-2009-0557","v":"Microsoft","p":"Office","n":"Microsoft Office Object Record Corruption Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2009},{"id":"CVE-2008-0655","v":"Adobe","p":"Acrobat and Reader","n":"Adobe Acrobat and Reader Unspecified Vulnerability","d":"2022-06-08","s":"mapped","g":"full","r":false,"t":["T1204.002"],"mt":["exploitation_technique"],"w":[],"y":2008},{"id":"CVE-2007-5659","v":"Adobe","p":"Acrobat and Reader","n":"Adobe Acrobat and Reader Buffer Overflow Vulnerability","d":"2022-06-08","s":"mapped","g":"full","r":false,"t":["T1204.002"],"mt":["exploitation_technique"],"w":["CWE-119"],"y":2007},{"id":"CVE-2006-2492","v":"Microsoft","p":"Word","n":"Microsoft Word Malformed Object Pointer Vulnerability","d":"2022-06-08","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-120"],"y":2006},{"id":"CVE-2022-26134","v":"Atlassian","p":"Confluence Server/Data Center","n":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","d":"2022-06-02","s":"mapped","g":"full","r":true,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-917"],"y":2022},{"id":"CVE-2019-3010","v":"Oracle","p":"Solaris","n":"Oracle Solaris Privilege Escalation Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2016-7256","v":"Microsoft","p":"Windows","n":"Microsoft Windows Open Type Font Remote Code Execution Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2016},{"id":"CVE-2016-3393","v":"Microsoft","p":"Windows","n":"Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2016},{"id":"CVE-2016-1010","v":"Adobe","p":"Flash Player and AIR","n":"Adobe Flash Player and AIR Integer Overflow Vulnerability","d":"2022-05-25","s":"mapped","g":"full","r":false,"t":["T1574"],"mt":["exploitation_technique"],"w":["CWE-190"],"y":2016},{"id":"CVE-2016-0984","v":"Adobe","p":"Flash Player and AIR","n":"Adobe Flash Player and AIR Use-After-Free Vulnerability","d":"2022-05-25","s":"mapped","g":"full","r":false,"t":["T1105","T1204.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2016},{"id":"CVE-2016-0034","v":"Microsoft","p":"Silverlight","n":"Microsoft Silverlight Runtime Remote Code Execution Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20"],"y":2016},{"id":"CVE-2015-8651","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Integer Overflow Vulnerability","d":"2022-05-25","s":"mapped","g":"full","r":false,"t":["T1105","T1189","T1486"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-189"],"y":2015},{"id":"CVE-2015-6175","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Privilege Escalation Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2015},{"id":"CVE-2015-4495","v":"Mozilla","p":"Firefox","n":"Mozilla Firefox Security Feature Bypass Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2015},{"id":"CVE-2015-2425","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Memory Corruption Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2015},{"id":"CVE-2015-2360","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2015},{"id":"CVE-2015-1769","v":"Microsoft","p":"Windows","n":"Microsoft Windows Mount Manager Privilege Escalation Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2015},{"id":"CVE-2015-1671","v":"Microsoft","p":"Windows","n":"Microsoft Windows Remote Code Execution Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-19"],"y":2015},{"id":"CVE-2015-0310","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player ASLR Bypass Vulnerability","d":"2022-05-25","s":"mapped","g":"full","r":false,"t":["T1189"],"mt":["exploitation_technique"],"w":["CWE-264"],"y":2015},{"id":"CVE-2015-0071","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer ASLR Bypass Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2015},{"id":"CVE-2015-0016","v":"Microsoft","p":"Windows","n":"Microsoft Windows TS WebProxy Directory Traversal Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2015},{"id":"CVE-2014-8439","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Dereferenced Pointer Vulnerability","d":"2022-05-25","s":"mapped","g":"full","r":false,"t":["T1189"],"mt":["exploitation_technique"],"w":["CWE-119"],"y":2014},{"id":"CVE-2014-4148","v":"Microsoft","p":"Windows","n":"Microsoft Windows Remote Code Execution Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2014},{"id":"CVE-2014-4123","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Privilege Escalation Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2014},{"id":"CVE-2014-4077","v":"Microsoft","p":"Input Method Editor (IME) Japanese","n":"Microsoft IME Japanese Privilege Escalation Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2014},{"id":"CVE-2014-3153","v":"Linux","p":"Kernel","n":"Linux Kernel Privilege Escalation Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-269"],"y":2014},{"id":"CVE-2014-2817","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Privilege Escalation Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2014},{"id":"CVE-2014-0546","v":"Adobe","p":"Reader and Acrobat","n":"Adobe Reader and Acrobat Sandbox Bypass Vulnerability","d":"2022-05-25","s":"mapped","g":"partial","r":false,"t":["T1068","T1497"],"mt":["primary_impact"],"w":[],"y":2014},{"id":"CVE-2013-7331","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Information Disclosure Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2013},{"id":"CVE-2013-3993","v":"IBM","p":"InfoSphere BigInsights","n":"IBM InfoSphere BigInsights Invalid Input Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-264"],"y":2013},{"id":"CVE-2013-3896","v":"Microsoft","p":"Silverlight","n":"Microsoft Silverlight Information Disclosure Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2013},{"id":"CVE-2013-2423","v":"Oracle","p":"Java Runtime Environment (JRE)","n":"Oracle JRE Unspecified Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2013},{"id":"CVE-2013-0431","v":"Oracle","p":"Java Runtime Environment (JRE)","n":"Oracle JRE Sandbox Bypass Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2013},{"id":"CVE-2013-0422","v":"Oracle","p":"Java Runtime Environment (JRE)","n":"Oracle JRE Remote Code Execution Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-264"],"y":2013},{"id":"CVE-2013-0074","v":"Microsoft","p":"Silverlight","n":"Microsoft Silverlight Double Dereference Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2013},{"id":"CVE-2012-1710","v":"Oracle","p":"Fusion Middleware","n":"Oracle Fusion Middleware Unspecified Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2012},{"id":"CVE-2010-1428","v":"Red Hat","p":"JBoss","n":"Red Hat JBoss Information Disclosure Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-264"],"y":2010},{"id":"CVE-2010-0840","v":"Oracle","p":"Java Runtime Environment (JRE)","n":"Oracle JRE Unspecified Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2010},{"id":"CVE-2010-0738","v":"Red Hat","p":"JBoss","n":"Red Hat JBoss Authentication Bypass Vulnerability","d":"2022-05-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-264"],"y":2010},{"id":"CVE-2018-8611","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Privilege Escalation Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-404"],"y":2018},{"id":"CVE-2018-19953","v":"QNAP","p":"Network Attached Storage (NAS)","n":"QNAP NAS File Station Cross-Site Scripting Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-79","CWE-80"],"y":2018},{"id":"CVE-2018-19949","v":"QNAP","p":"Network Attached Storage (NAS)","n":"QNAP NAS File Station Command Injection Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20","CWE-77","CWE-78"],"y":2018},{"id":"CVE-2018-19943","v":"QNAP","p":"Network Attached Storage (NAS)","n":"QNAP NAS File Station Cross-Site Scripting Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-79","CWE-80"],"y":2018},{"id":"CVE-2017-8543","v":"Microsoft","p":"Windows","n":"Microsoft Windows Search Remote Code Execution Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-281"],"y":2017},{"id":"CVE-2017-8291","v":"Artifex","p":"Ghostscript","n":"Artifex Ghostscript Type Confusion Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-704"],"y":2017},{"id":"CVE-2017-18362","v":"Kaseya","p":"Virtual System/Server Administrator (VSA)","n":"Kaseya VSA SQL Injection Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-89"],"y":2017},{"id":"CVE-2017-0210","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Privilege Escalation Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2017},{"id":"CVE-2017-0149","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Memory Corruption Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-0147","v":"Microsoft","p":"SMBv1 server","n":"Microsoft Windows SMBv1 Information Disclosure Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-200"],"y":2017},{"id":"CVE-2017-0022","v":"Microsoft","p":"XML Core Services","n":"Microsoft XML Core Services Information Disclosure Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2017},{"id":"CVE-2017-0005","v":"Microsoft","p":"Windows","n":"Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2016-6367","v":"Cisco","p":"Adaptive Security Appliance (ASA)","n":"Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2016},{"id":"CVE-2016-6366","v":"Cisco","p":"Adaptive Security Appliance (ASA)","n":"Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2016},{"id":"CVE-2016-4657","v":"Apple","p":"iOS","n":"Apple iOS Webkit Memory Corruption Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2016},{"id":"CVE-2016-4656","v":"Apple","p":"iOS","n":"Apple iOS Memory Corruption Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2016},{"id":"CVE-2016-4655","v":"Apple","p":"iOS","n":"Apple iOS Information Disclosure Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2016},{"id":"CVE-2016-3351","v":"Microsoft","p":"Internet Explorer and Edge","n":"Microsoft Internet Explorer and Edge Information Disclosure Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-200"],"y":2016},{"id":"CVE-2016-3298","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2016},{"id":"CVE-2016-0162","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Information Disclosure Vulnerability","d":"2022-05-24","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2016},{"id":"CVE-2022-20821","v":"Cisco","p":"IOS XR","n":"Cisco IOS XR Open Port Vulnerability","d":"2022-05-23","s":"mapped","g":"full","r":false,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-923"],"y":2022},{"id":"CVE-2021-30883","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Memory Corruption Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-1048","v":"Android","p":"Kernel","n":"Android Kernel Use-After-Free Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-0920","v":"Android","p":"Kernel","n":"Android Kernel Race Condition Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-362","CWE-416"],"y":2021},{"id":"CVE-2020-1027","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Privilege Escalation Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-0638","v":"Microsoft","p":"Update Notification Manager","n":"Microsoft Update Notification Manager Privilege Escalation Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2019-8720","v":"WebKitGTK","p":"WebKitGTK","n":"WebKitGTK Memory Corruption Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2019},{"id":"CVE-2019-7287","v":"Apple","p":"iOS","n":"Apple iOS Memory Corruption Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2019},{"id":"CVE-2019-7286","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Memory Corruption Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2019},{"id":"CVE-2019-5786","v":"Google","p":"Chrome Blink","n":"Google Chrome Blink Use-After-Free Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2019},{"id":"CVE-2019-18426","v":"Meta Platforms","p":"WhatsApp","n":"WhatsApp Cross-Site Scripting Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2019},{"id":"CVE-2019-1385","v":"Microsoft","p":"Windows","n":"Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-59"],"y":2019},{"id":"CVE-2019-13720","v":"Google","p":"Chrome WebAudio","n":"Google Chrome WebAudio Use-After-Free Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2019},{"id":"CVE-2019-11708","v":"Mozilla","p":"Firefox and Thunderbird","n":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2019},{"id":"CVE-2019-11707","v":"Mozilla","p":"Firefox and Thunderbird","n":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2019},{"id":"CVE-2019-1130","v":"Microsoft","p":"Windows","n":"Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-59"],"y":2019},{"id":"CVE-2019-0880","v":"Microsoft","p":"Windows","n":"Microsoft Windows Privilege Escalation Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-0703","v":"Microsoft","p":"Windows","n":"Microsoft Windows SMB Information Disclosure Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-0676","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Information Disclosure Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2018-8589","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2018},{"id":"CVE-2018-5002","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","d":"2022-05-23","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2018},{"id":"CVE-2022-30525","v":"Zyxel","p":"Multiple Firewalls","n":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","d":"2022-05-16","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2022},{"id":"CVE-2022-22947","v":"VMware","p":"Spring Cloud Gateway","n":"VMware Spring Cloud Gateway Code Injection Vulnerability","d":"2022-05-16","s":"mapped","g":"full","r":false,"t":["T1059","T1190","T1486"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-94"],"y":2022},{"id":"CVE-2022-1388","v":"F5","p":"BIG-IP","n":"F5 BIG-IP Missing Authentication Vulnerability","d":"2022-05-10","s":"mapped","g":"full","r":true,"t":["T1548"],"mt":["exploitation_technique"],"w":["CWE-306"],"y":2022},{"id":"CVE-2021-1789","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Type Confusion Vulnerability","d":"2022-05-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2021},{"id":"CVE-2019-8506","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Type Confusion Vulnerability","d":"2022-05-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2019},{"id":"CVE-2014-4113","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2022-05-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2014},{"id":"CVE-2014-0322","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Use-After-Free Vulnerability","d":"2022-05-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2014},{"id":"CVE-2014-0160","v":"OpenSSL","p":"OpenSSL","n":"OpenSSL Information Disclosure Vulnerability","d":"2022-05-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-125"],"y":2014},{"id":"CVE-2022-29464","v":"WSO2","p":"Multiple Products","n":"WSO2 Multiple Products Unrestrictive Upload of File Vulnerability","d":"2022-04-25","s":"mapped","g":"full","r":true,"t":["T1190","T1202","T1496"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-22"],"y":2022},{"id":"CVE-2022-26904","v":"Microsoft","p":"Windows","n":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","d":"2022-04-25","s":"mapped","g":"full","r":false,"t":["T1068","T1078"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-362"],"y":2022},{"id":"CVE-2022-21919","v":"Microsoft","p":"Windows","n":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","d":"2022-04-25","s":"mapped","g":"full","r":false,"t":["T1068","T1078"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-1386"],"y":2022},{"id":"CVE-2022-0847","v":"Linux","p":"Kernel","n":"Linux Kernel Privilege Escalation Vulnerability","d":"2022-04-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-665"],"y":2022},{"id":"CVE-2021-41357","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2022-04-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2021-40450","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2022-04-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2019-1003029","v":"Jenkins","p":"Script Security Plugin","n":"Jenkins Script Security Plugin Sandbox Bypass Vulnerability","d":"2022-04-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2022-22718","v":"Microsoft","p":"Windows","n":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","d":"2022-04-19","s":"mapped","g":"full","r":false,"t":["T1068","T1078"],"mt":["exploitation_technique","primary_impact"],"w":[],"y":2022},{"id":"CVE-2019-3568","v":"Meta Platforms","p":"WhatsApp","n":"WhatsApp VOIP Stack Buffer Overflow Vulnerability","d":"2022-04-19","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122"],"y":2019},{"id":"CVE-2018-6882","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","d":"2022-04-19","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-79"],"y":2018},{"id":"CVE-2022-22960","v":"VMware","p":"Multiple Products","n":"VMware Multiple Products Privilege Escalation Vulnerability","d":"2022-04-15","s":"mapped","g":"full","r":false,"t":["T1222"],"mt":["exploitation_technique"],"w":["CWE-250"],"y":2022},{"id":"CVE-2022-1364","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2022-04-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2022},{"id":"CVE-2019-3929","v":"Crestron","p":"Multiple Products","n":"Crestron Multiple Products Command Injection Vulnerability","d":"2022-04-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2019},{"id":"CVE-2019-16057","v":"D-Link","p":"DNS-320 Storage Device","n":"D-Link DNS-320 Remote Code Execution Vulnerability","d":"2022-04-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-78"],"y":2019},{"id":"CVE-2018-7841","v":"Schneider Electric","p":"U.motion Builder","n":"Schneider Electric U.motion Builder SQL Injection Vulnerability","d":"2022-04-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2018},{"id":"CVE-2016-4523","v":"Trihedral","p":"VTScada (formerly VTS)","n":"Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability","d":"2022-04-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2016},{"id":"CVE-2014-0780","v":"InduSoft","p":"Web Studio","n":"InduSoft Web Studio NTWebServer Directory Traversal Vulnerability","d":"2022-04-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2014},{"id":"CVE-2010-5330","v":"Ubiquiti","p":"AirOS","n":"Ubiquiti AirOS Command Injection Vulnerability","d":"2022-04-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2010},{"id":"CVE-2007-3010","v":"Alcatel","p":"OmniPCX Enterprise","n":"Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability","d":"2022-04-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2007},{"id":"CVE-2022-22954","v":"VMware","p":"Workspace ONE Access and Identity Manager","n":"VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability","d":"2022-04-14","s":"mapped","g":"full","r":true,"t":["T1221","T1505.003"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-94"],"y":2022},{"id":"CVE-2022-24521","v":"Microsoft","p":"Windows","n":"Microsoft Windows CLFS Driver Privilege Escalation Vulnerability","d":"2022-04-13","s":"mapped","g":"full","r":true,"t":["T1059","T1068","T1078"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-787","CWE-1285"],"y":2022},{"id":"CVE-2018-7602","v":"Drupal","p":"Core","n":"Drupal Core Remote Code Execution Vulnerability","d":"2022-04-13","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2018},{"id":"CVE-2018-20753","v":"Kaseya","p":"Virtual System/Server Administrator (VSA)","n":"Kaseya VSA Remote Code Execution Vulnerability","d":"2022-04-13","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2018},{"id":"CVE-2015-5123","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Use-After-Free Vulnerability","d":"2022-04-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2015},{"id":"CVE-2015-5122","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Use-After-Free Vulnerability","d":"2022-04-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2015},{"id":"CVE-2015-3113","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","d":"2022-04-13","s":"mapped","g":"partial","r":false,"t":["T1071.001","T1204.002","T1497","T1622"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-119"],"y":2015},{"id":"CVE-2015-2502","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Memory Corruption Vulnerability","d":"2022-04-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2015},{"id":"CVE-2015-0313","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Use-After-Free Vulnerability","d":"2022-04-13","s":"mapped","g":"full","r":false,"t":["T1189"],"mt":["exploitation_technique"],"w":["CWE-416"],"y":2015},{"id":"CVE-2015-0311","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Remote Code Execution Vulnerability","d":"2022-04-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2015},{"id":"CVE-2014-9163","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","d":"2022-04-13","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2014},{"id":"CVE-2022-23176","v":"WatchGuard","p":"Firebox and XTM","n":"WatchGuard Firebox and XTM Privilege Escalation Vulnerability","d":"2022-04-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2022},{"id":"CVE-2021-42287","v":"Microsoft","p":"Active Directory","n":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","d":"2022-04-11","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-269"],"y":2021},{"id":"CVE-2021-42278","v":"Microsoft","p":"Active Directory","n":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","d":"2022-04-11","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20"],"y":2021},{"id":"CVE-2021-39793","v":"Google","p":"Pixel","n":"Google Pixel Out-of-Bounds Write Vulnerability","d":"2022-04-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-27852","v":"Checkbox","p":"Checkbox Survey","n":"Checkbox Survey Deserialization of Untrusted Data Vulnerability","d":"2022-04-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2021},{"id":"CVE-2021-22600","v":"Linux","p":"Kernel","n":"Linux Kernel Privilege Escalation Vulnerability","d":"2022-04-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-415"],"y":2021},{"id":"CVE-2020-2509","v":"QNAP","p":"QNAP Network-Attached Storage (NAS)","n":"QNAP Network-Attached Storage (NAS) Command Injection Vulnerability","d":"2022-04-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77","CWE-78"],"y":2020},{"id":"CVE-2017-11317","v":"Telerik","p":"User Interface (UI) for ASP.NET AJAX","n":"Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability","d":"2022-04-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-326"],"y":2017},{"id":"CVE-2021-3156","v":"Sudo","p":"Sudo","n":"Sudo Heap-Based Buffer Overflow Vulnerability","d":"2022-04-06","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122","CWE-193"],"y":2021},{"id":"CVE-2021-31166","v":"Microsoft","p":"HTTP Protocol Stack","n":"Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability","d":"2022-04-06","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2021},{"id":"CVE-2017-0148","v":"Microsoft","p":"SMBv1 server","n":"Microsoft SMBv1 Server Remote Code Execution Vulnerability","d":"2022-04-06","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2022-22965","v":"VMware","p":"Spring Framework","n":"Spring Framework JDK 9+ Remote Code Execution Vulnerability","d":"2022-04-04","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-94"],"y":2022},{"id":"CVE-2022-22675","v":"Apple","p":"macOS","n":"Apple macOS Out-of-Bounds Write Vulnerability","d":"2022-04-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-125"],"y":2022},{"id":"CVE-2022-22674","v":"Apple","p":"macOS","n":"Apple macOS Out-of-Bounds Read Vulnerability","d":"2022-04-04","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-125"],"y":2022},{"id":"CVE-2021-45382","v":"D-Link","p":"Multiple Routers","n":"D-Link Multiple Routers Remote Code Execution Vulnerability","d":"2022-04-04","s":"mapped","g":"partial","r":false,"t":["T1059","T1070","T1071","T1190","T1499.002","T1543"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-78"],"y":2021},{"id":"CVE-2022-26871","v":"Trend Micro","p":"Apex Central","n":"Trend Micro Apex Central Arbitrary File Upload Vulnerability","d":"2022-03-31","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-184"],"y":2022},{"id":"CVE-2022-1040","v":"Sophos","p":"Firewall","n":"Sophos Firewall Authentication Bypass Vulnerability","d":"2022-03-31","s":"mapped","g":"full","r":false,"t":["T1040","T1059","T1078","T1190","T1557","T1574"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-158"],"y":2022},{"id":"CVE-2021-34484","v":"Microsoft","p":"Windows","n":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","d":"2022-03-31","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-269"],"y":2021},{"id":"CVE-2021-28799","v":"QNAP","p":"Network Attached Storage (NAS)","n":"QNAP NAS Improper Authorization Vulnerability","d":"2022-03-31","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-285"],"y":2021},{"id":"CVE-2021-21551","v":"Dell","p":"dbutil Driver","n":"Dell dbutil Driver Insufficient Access Control Vulnerability","d":"2022-03-31","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-782"],"y":2021},{"id":"CVE-2018-10562","v":"Dasan","p":"Gigabit Passive Optical Network (GPON) Routers","n":"Dasan GPON Routers Command Injection Vulnerability","d":"2022-03-31","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-78"],"y":2018},{"id":"CVE-2018-10561","v":"Dasan","p":"Gigabit Passive Optical Network (GPON) Routers","n":"Dasan GPON Routers Authentication Bypass Vulnerability","d":"2022-03-31","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2018},{"id":"CVE-2022-1096","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2022},{"id":"CVE-2022-0543","v":"Redis","p":"Debian-specific Redis Servers","n":"Debian-specific Redis Server Lua Sandbox Escape Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-862"],"y":2022},{"id":"CVE-2021-38646","v":"Microsoft","p":"Office","n":"Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2021-34486","v":"Microsoft","p":"Windows","n":"Microsoft Windows Event Tracing Privilege Escalation Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-26085","v":"Atlassian","p":"Confluence Server","n":"Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability","d":"2022-03-28","s":"mapped","g":"full","r":true,"t":["T1005","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-425"],"y":2021},{"id":"CVE-2021-20028","v":"SonicWall","p":"Secure Remote Access (SRA)","n":"SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-89"],"y":2021},{"id":"CVE-2019-7483","v":"SonicWall","p":"SMA100","n":"SonicWall SMA100 Directory Traversal Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2019},{"id":"CVE-2018-8440","v":"Microsoft","p":"Windows","n":"Microsoft Windows Privilege Escalation Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2018},{"id":"CVE-2018-8406","v":"Microsoft","p":"DirectX Graphics Kernel (DXGKRNL)","n":"Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-404"],"y":2018},{"id":"CVE-2018-8405","v":"Microsoft","p":"DirectX Graphics Kernel (DXGKRNL)","n":"Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-404"],"y":2018},{"id":"CVE-2017-0213","v":"Microsoft","p":"Windows","n":"Microsoft Windows Privilege Escalation Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2017},{"id":"CVE-2017-0059","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Information Disclosure Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-200"],"y":2017},{"id":"CVE-2017-0037","v":"Microsoft","p":"Edge and Internet Explorer","n":"Microsoft Edge and Internet Explorer Type Confusion Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-704"],"y":2017},{"id":"CVE-2016-7201","v":"Microsoft","p":"Edge","n":"Microsoft Edge Memory Corruption Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2016},{"id":"CVE-2016-7200","v":"Microsoft","p":"Edge","n":"Microsoft Edge Memory Corruption Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2016},{"id":"CVE-2016-0189","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Memory Corruption Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-119"],"y":2016},{"id":"CVE-2016-0151","v":"Microsoft","p":"Client-Server Run-time Subsystem (CSRSS)","n":"Microsoft Windows CSRSS Security Feature Bypass Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-264"],"y":2016},{"id":"CVE-2016-0040","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Privilege Escalation Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2016},{"id":"CVE-2015-2426","v":"Microsoft","p":"Windows","n":"Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2015},{"id":"CVE-2015-2419","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Memory Corruption Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2015},{"id":"CVE-2015-1770","v":"Microsoft","p":"Office","n":"Microsoft Office Uninitialized Memory Use Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-19"],"y":2015},{"id":"CVE-2013-3660","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2013},{"id":"CVE-2013-2729","v":"Adobe","p":"Reader and Acrobat","n":"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-189"],"y":2013},{"id":"CVE-2013-2551","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Use-After-Free Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-416"],"y":2013},{"id":"CVE-2013-2465","v":"Oracle","p":"Java SE","n":"Oracle Java SE Unspecified Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2013},{"id":"CVE-2013-1690","v":"Mozilla","p":"Firefox and Thunderbird","n":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2013},{"id":"CVE-2012-5076","v":"Oracle","p":"Java SE","n":"Oracle Java SE Sandbox Bypass Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2012},{"id":"CVE-2012-2539","v":"Microsoft","p":"Word","n":"Microsoft Word Remote Code Execution Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2012},{"id":"CVE-2012-2034","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Memory Corruption Vulnerability","d":"2022-03-28","s":"mapped","g":"full","r":false,"t":["T1189"],"mt":["exploitation_technique"],"w":["CWE-119"],"y":2012},{"id":"CVE-2012-0518","v":"Oracle","p":"Fusion Middleware","n":"Oracle Fusion Middleware Unspecified Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-601"],"y":2012},{"id":"CVE-2011-2005","v":"Microsoft","p":"Ancillary Function Driver (afd.sys)","n":"Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2011},{"id":"CVE-2010-4398","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability","d":"2022-03-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2010},{"id":"CVE-2022-26318","v":"WatchGuard","p":"Firebox and XTM Appliances","n":"WatchGuard Firebox and XTM Appliances Arbitrary Code Execution","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122"],"y":2022},{"id":"CVE-2022-26143","v":"Mitel","p":"MiCollab, MiVoice Business Express","n":"MiCollab, MiVoice Business Express Access Control Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306","CWE-406"],"y":2022},{"id":"CVE-2022-21999","v":"Microsoft","p":"Windows","n":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","d":"2022-03-25","s":"mapped","g":"full","r":true,"t":["T1059","T1068","T1078","T1136.001","T1211"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-40","CWE-1386"],"y":2022},{"id":"CVE-2021-42237","v":"Sitecore","p":"XP","n":"Sitecore XP Remote Command Execution Vulnerability","d":"2022-03-25","s":"mapped","g":"full","r":true,"t":["T1059"],"mt":["primary_impact"],"w":["CWE-502"],"y":2021},{"id":"CVE-2021-22941","v":"Citrix","p":"ShareFile","n":"Citrix ShareFile Improper Access Control Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-284"],"y":2021},{"id":"CVE-2020-9377","v":"D-Link","p":"DIR-610 Devices","n":"D-Link DIR-610 Devices Remote Command Execution","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2020},{"id":"CVE-2020-9054","v":"Zyxel","p":"Multiple Network-Attached Storage (NAS) Devices","n":"Zyxel Multiple NAS Devices OS Command Injection Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2020},{"id":"CVE-2020-7247","v":"OpenBSD","p":"OpenSMTPD","n":"OpenSMTPD Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-755","CWE-78"],"y":2020},{"id":"CVE-2020-5410","v":"VMware Tanzu","p":"Spring Cloud Configuration (Config) Server","n":"VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-23"],"y":2020},{"id":"CVE-2020-25223","v":"Sophos","p":"SG UTM","n":"Sophos SG UTM Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2020},{"id":"CVE-2020-2506","v":"QNAP Systems","p":"Helpdesk","n":"QNAP Helpdesk Improper Access Control Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2020},{"id":"CVE-2020-2021","v":"Palo Alto Networks","p":"PAN-OS","n":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-347"],"y":2020},{"id":"CVE-2020-1956","v":"Apache","p":"Kylin","n":"Apache Kylin OS Command Injection Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2020},{"id":"CVE-2020-1631","v":"Juniper","p":"Junos OS","n":"Juniper Junos OS Path Traversal Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22","CWE-73"],"y":2020},{"id":"CVE-2019-6340","v":"Drupal","p":"Core","n":"Drupal Core Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2019},{"id":"CVE-2019-2616","v":"Oracle","p":"BI Publisher (Formerly XML Publisher)","n":"Oracle BI Publisher Unauthorized Access Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-16920","v":"D-Link","p":"Multiple Routers","n":"D-Link Multiple Routers Command Injection Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2019},{"id":"CVE-2019-15107","v":"Webmin","p":"Webmin","n":"Webmin Command Injection Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-78"],"y":2019},{"id":"CVE-2019-12991","v":"Citrix","p":"SD-WAN and NetScaler","n":"Citrix SD-WAN and NetScaler Command Injection Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2019},{"id":"CVE-2019-12989","v":"Citrix","p":"SD-WAN and NetScaler","n":"Citrix SD-WAN and NetScaler SQL Injection Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2019},{"id":"CVE-2019-11043","v":"PHP","p":"FastCGI Process Manager (FPM)","n":"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-120"],"y":2019},{"id":"CVE-2019-10068","v":"Kentico","p":"Xperience","n":"Kentico Xperience Deserialization of Untrusted Data Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2019},{"id":"CVE-2019-1003030","v":"Jenkins","p":"Matrix Project Plugin","n":"Jenkins Matrix Project Plugin Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-0903","v":"Microsoft","p":"Graphics Device Interface (GDI)","n":"Microsoft GDI Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2018-8414","v":"Microsoft","p":"Windows","n":"Microsoft Windows Shell Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2018},{"id":"CVE-2018-8373","v":"Microsoft","p":"Internet Explorer Scripting Engine","n":"Microsoft Scripting Engine Memory Corruption Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2018},{"id":"CVE-2018-6961","v":"VMware","p":"SD-WAN Edge","n":"VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2018},{"id":"CVE-2018-14839","v":"LG","p":"N1A1 NAS","n":"LG N1A1 NAS Remote Command Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2018},{"id":"CVE-2018-1273","v":"VMware Tanzu","p":"Spring Data Commons","n":"VMware Tanzu Spring Data Commons Property Binder Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-94"],"y":2018},{"id":"CVE-2018-11138","v":"Quest","p":"KACE System Management Appliance","n":"Quest KACE System Management Appliance Remote Command Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-78"],"y":2018},{"id":"CVE-2018-0147","v":"Cisco","p":"Secure Access Control System (ACS)","n":"Cisco Secure Access Control System Java Deserialization Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2018},{"id":"CVE-2018-0125","v":"Cisco","p":"VPN Routers","n":"Cisco VPN Routers Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2018},{"id":"CVE-2017-6334","v":"NETGEAR","p":"DGN2200 Devices","n":"NETGEAR DGN2200 Devices OS Command Injection Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2017},{"id":"CVE-2017-6316","v":"Citrix","p":"NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server","n":"Citrix Multiple Products Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-3881","v":"Cisco","p":"IOS and IOS XE","n":"Cisco IOS and IOS XE Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-12617","v":"Apache","p":"Tomcat","n":"Apache Tomcat Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-434"],"y":2017},{"id":"CVE-2017-12615","v":"Apache","p":"Tomcat","n":"Apache Tomcat on Windows Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-434"],"y":2017},{"id":"CVE-2017-0146","v":"Microsoft","p":"Windows","n":"Microsoft Windows SMB Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2016-7892","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Use-After-Free Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2016},{"id":"CVE-2016-4171","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2016},{"id":"CVE-2016-1555","v":"NETGEAR","p":"Wireless Access Point (WAP) Devices","n":"NETGEAR Multiple WAP Devices Command Injection Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2016},{"id":"CVE-2016-11021","v":"D-Link","p":"DCS-930L Devices","n":"D-Link DCS-930L Devices OS Command Injection Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2016},{"id":"CVE-2016-10174","v":"NETGEAR","p":"WNR2000v5 Router","n":"NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2016},{"id":"CVE-2016-0752","v":"Rails","p":"Ruby on Rails","n":"Ruby on Rails Directory Traversal Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2016},{"id":"CVE-2015-4068","v":"Arcserve","p":"Unified Data Protection (UDP)","n":"Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2015},{"id":"CVE-2015-3035","v":"TP-Link","p":"Multiple Archer Devices","n":"TP-Link Multiple Archer Devices Directory Traversal Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2015},{"id":"CVE-2015-1427","v":"Elastic","p":"Elasticsearch","n":"Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2015},{"id":"CVE-2015-1187","v":"D-Link and TRENDnet","p":"Multiple Devices","n":"D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2015},{"id":"CVE-2015-0666","v":"Cisco","p":"Prime Data Center Network Manager (DCNM)","n":"Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2015},{"id":"CVE-2014-6332","v":"Microsoft","p":"Windows","n":"Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2014},{"id":"CVE-2014-6324","v":"Microsoft","p":"Kerberos Key Distribution Center (KDC)","n":"Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2014},{"id":"CVE-2014-6287","v":"Rejetto","p":"HTTP File Server (HFS)","n":"Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2014},{"id":"CVE-2014-3120","v":"Elastic","p":"Elasticsearch","n":"Elasticsearch Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2014},{"id":"CVE-2014-0130","v":"Rails","p":"Ruby on Rails","n":"Ruby on Rails Directory Traversal Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2014},{"id":"CVE-2013-5223","v":"D-Link","p":"DSL-2760U","n":"D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2013},{"id":"CVE-2013-4810","v":"Hewlett Packard (HP)","p":"ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management","n":"HP Multiple Products Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2013},{"id":"CVE-2013-2251","v":"Apache","p":"Struts","n":"Apache Struts Improper Input Validation Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2013},{"id":"CVE-2012-1823","v":"PHP","p":"PHP","n":"PHP-CGI Query String Parameter Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2012},{"id":"CVE-2010-4345","v":"Exim","p":"Exim","n":"Exim Privilege Escalation Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2010},{"id":"CVE-2010-4344","v":"Exim","p":"Exim","n":"Exim Heap-Based Buffer Overflow Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2010},{"id":"CVE-2010-3035","v":"Cisco","p":"IOS XR","n":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2010},{"id":"CVE-2010-2861","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Directory Traversal Vulnerability","d":"2022-03-25","s":"mapped","g":"full","r":true,"t":["T1105","T1119","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-22"],"y":2010},{"id":"CVE-2009-2055","v":"Cisco","p":"IOS XR","n":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2009},{"id":"CVE-2009-1151","v":"phpMyAdmin","p":"phpMyAdmin","n":"phpMyAdmin Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2009},{"id":"CVE-2009-0927","v":"Adobe","p":"Reader and Acrobat","n":"Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2009},{"id":"CVE-2005-2773","v":"Hewlett Packard (HP)","p":"OpenView Network Node Manager","n":"HP OpenView Network Node Manager Remote Code Execution Vulnerability","d":"2022-03-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2005},{"id":"CVE-2020-5135","v":"SonicWall","p":"SonicOS","n":"SonicWall SonicOS Buffer Overflow Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-120"],"y":2020},{"id":"CVE-2019-1405","v":"Microsoft","p":"Windows","n":"Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-1322","v":"Microsoft","p":"Windows","n":"Microsoft Windows Privilege Escalation Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-1315","v":"Microsoft","p":"Windows","n":"Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-59"],"y":2019},{"id":"CVE-2019-1253","v":"Microsoft","p":"Windows","n":"Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-59"],"y":2019},{"id":"CVE-2019-1132","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-1129","v":"Microsoft","p":"Windows","n":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-59"],"y":2019},{"id":"CVE-2019-1069","v":"Microsoft","p":"Task Scheduler","n":"Microsoft Task Scheduler Privilege Escalation Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-59"],"y":2019},{"id":"CVE-2019-1064","v":"Microsoft","p":"Windows","n":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-59"],"y":2019},{"id":"CVE-2019-0841","v":"Microsoft","p":"Windows","n":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-59"],"y":2019},{"id":"CVE-2019-0543","v":"Microsoft","p":"Windows","n":"Microsoft Windows Privilege Escalation Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-287"],"y":2019},{"id":"CVE-2018-8120","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-404"],"y":2018},{"id":"CVE-2017-0101","v":"Microsoft","p":"Windows","n":"Microsoft Windows Transaction Manager Privilege Escalation Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2016-3309","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Privilege Escalation Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-264"],"y":2016},{"id":"CVE-2015-2546","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Memory Corruption Vulnerability","d":"2022-03-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-119"],"y":2015},{"id":"CVE-2022-26486","v":"Mozilla","p":"Firefox","n":"Mozilla Firefox Use-After-Free Vulnerability","d":"2022-03-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2022},{"id":"CVE-2022-26485","v":"Mozilla","p":"Firefox","n":"Mozilla Firefox Use-After-Free Vulnerability","d":"2022-03-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2022},{"id":"CVE-2021-21973","v":"VMware","p":"vCenter Server and Cloud Foundation","n":"VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability","d":"2022-03-07","s":"mapped","g":"full","r":false,"t":["T1046","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-20","CWE-918"],"y":2021},{"id":"CVE-2020-8218","v":"Pulse Secure","p":"Pulse Connect Secure","n":"Pulse Connect Secure Code Injection Vulnerability","d":"2022-03-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2020},{"id":"CVE-2019-11581","v":"Atlassian","p":"Jira Server and Data Center","n":"Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability","d":"2022-03-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-74"],"y":2019},{"id":"CVE-2017-6077","v":"NETGEAR","p":"Wireless Router DGN2200","n":"NETGEAR DGN2200 Remote Code Execution Vulnerability","d":"2022-03-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2017},{"id":"CVE-2016-6277","v":"NETGEAR","p":"Multiple Routers","n":"NETGEAR Multiple Routers Remote Code Execution Vulnerability","d":"2022-03-07","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-352"],"y":2016},{"id":"CVE-2013-0631","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Information Disclosure Vulnerability","d":"2022-03-07","s":"mapped","g":"partial","r":false,"t":["T1190","T1592"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-200"],"y":2013},{"id":"CVE-2013-0629","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Directory Traversal Vulnerability","d":"2022-03-07","s":"mapped","g":"full","r":false,"t":["T1005","T1190","T1202"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-264"],"y":2013},{"id":"CVE-2013-0625","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Authentication Bypass Vulnerability","d":"2022-03-07","s":"mapped","g":"full","r":false,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-255"],"y":2013},{"id":"CVE-2009-3960","v":"Adobe","p":"BlazeDS","n":"Adobe BlazeDS Information Disclosure Vulnerability","d":"2022-03-07","s":"mapped","g":"full","r":true,"t":["T1190","T1486"],"mt":["exploitation_technique","primary_impact"],"w":[],"y":2009},{"id":"CVE-2022-20708","v":"Cisco","p":"Small Business RV160, RV260, RV340, and RV345 Series Routers","n":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1068","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-121"],"y":2022},{"id":"CVE-2022-20703","v":"Cisco","p":"Small Business RV160, RV260, RV340, and RV345 Series Routers","n":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1203"],"mt":["exploitation_technique"],"w":["CWE-347"],"y":2022},{"id":"CVE-2022-20701","v":"Cisco","p":"Small Business RV160, RV260, RV340, and RV345 Series Routers","n":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1078","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-121"],"y":2022},{"id":"CVE-2022-20700","v":"Cisco","p":"Small Business RV160, RV260, RV340, and RV345 Series Routers","n":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1059.004","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-121"],"y":2022},{"id":"CVE-2022-20699","v":"Cisco","p":"Small Business RV160, RV260, RV340, and RV345 Series Routers","n":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1059.004","T1133"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-785"],"y":2022},{"id":"CVE-2021-41379","v":"Microsoft","p":"Windows","n":"Microsoft Windows Installer Privilege Escalation Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":true,"t":["T1068","T1078"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-1386"],"y":2021},{"id":"CVE-2020-1938","v":"Apache","p":"Tomcat","n":"Apache Tomcat Improper Privilege Management Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-11899","v":"Treck TCP/IP stack","p":"IPv6","n":"Treck TCP/IP stack Out-of-Bounds Read Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-125"],"y":2020},{"id":"CVE-2019-16928","v":"Exim","p":"Exim Internet Mailer","n":"Exim Out-of-bounds Write Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2019},{"id":"CVE-2019-1652","v":"Cisco","p":"Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers","n":"Cisco Small Business Routers Improper Input Validation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2019},{"id":"CVE-2019-1297","v":"Microsoft","p":"Excel","n":"Microsoft Excel Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2018-8581","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Privilege Escalation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2018},{"id":"CVE-2018-8298","v":"ChakraCore","p":"ChakraCore scripting engine","n":"ChakraCore Scripting Engine Type Confusion Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2018},{"id":"CVE-2018-0180","v":"Cisco","p":"IOS Software","n":"Cisco IOS Software Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2018},{"id":"CVE-2018-0179","v":"Cisco","p":"IOS Software","n":"Cisco IOS Software Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2018},{"id":"CVE-2018-0175","v":"Cisco","p":"IOS, XR, and XE Software","n":"Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2018},{"id":"CVE-2018-0174","v":"Cisco","p":"IOS XE Software","n":"Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2018},{"id":"CVE-2018-0173","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2018},{"id":"CVE-2018-0172","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2018},{"id":"CVE-2018-0167","v":"Cisco","p":"IOS, XR, and XE Software","n":"Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2018},{"id":"CVE-2018-0161","v":"Cisco","p":"IOS Software","n":"Cisco IOS Software Resource Management Errors Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2018},{"id":"CVE-2018-0159","v":"Cisco","p":"IOS Software and Cisco IOS XE Software","n":"Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2018},{"id":"CVE-2018-0158","v":"Cisco","p":"IOS Software and Cisco IOS XE Software","n":"Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2018},{"id":"CVE-2018-0156","v":"Cisco","p":"IOS Software and Cisco IOS XE Software","n":"Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2018},{"id":"CVE-2018-0155","v":"Cisco","p":"Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches","n":"Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-388"],"y":2018},{"id":"CVE-2018-0154","v":"Cisco","p":"IOS Software","n":"Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2018},{"id":"CVE-2018-0151","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2018},{"id":"CVE-2017-8540","v":"Microsoft","p":"Malware Protection Engine","n":"Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-6744","v":"Cisco","p":"IOS software","n":"Cisco IOS Software SNMP Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-6743","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-6740","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-6739","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-6738","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-6737","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-6736","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-6663","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2017},{"id":"CVE-2017-6627","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2017},{"id":"CVE-2017-12319","v":"Cisco","p":"IOS XE Software","n":"Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-12240","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-12238","v":"Cisco","p":"Catalyst 6800 Series Switches","n":"Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2017},{"id":"CVE-2017-12237","v":"Cisco","p":"IOS and IOS XE Software","n":"Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2017},{"id":"CVE-2017-12235","v":"Cisco","p":"IOS software","n":"Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-12234","v":"Cisco","p":"IOS software","n":"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-12233","v":"Cisco","p":"IOS software","n":"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-12232","v":"Cisco","p":"IOS software","n":"Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2017},{"id":"CVE-2017-12231","v":"Cisco","p":"IOS software","n":"Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2017},{"id":"CVE-2017-11826","v":"Microsoft","p":"Office","n":"Microsoft Office Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-11292","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Type Confusion Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1005","T1105","T1204.002","T1566.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-843"],"y":2017},{"id":"CVE-2017-0261","v":"Microsoft","p":"Office","n":"Microsoft Office Use-After-Free Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2017},{"id":"CVE-2017-0001","v":"Microsoft","p":"Graphics Device Interface (GDI)","n":"Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2017},{"id":"CVE-2016-8562","v":"Siemens","p":"SIMATIC CP","n":"Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2016},{"id":"CVE-2016-7855","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Use-After-Free Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1189"],"mt":["exploitation_technique"],"w":["CWE-416"],"y":2016},{"id":"CVE-2016-7262","v":"Microsoft","p":"Excel","n":"Microsoft Office Security Feature Bypass Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2016},{"id":"CVE-2016-7193","v":"Microsoft","p":"Office","n":"Microsoft Office Memory Corruption Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2016},{"id":"CVE-2016-5195","v":"Linux","p":"Kernel","n":"Linux Kernel Race Condition Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-362"],"y":2016},{"id":"CVE-2016-4117","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Arbitrary Code Execution Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1105","T1204.002"],"mt":["exploitation_technique","primary_impact"],"w":[],"y":2016},{"id":"CVE-2016-1019","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Arbitrary Code Execution Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":true,"t":["T1105","T1189","T1486"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":[],"y":2016},{"id":"CVE-2016-0099","v":"Microsoft","p":"Windows","n":"Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-264"],"y":2016},{"id":"CVE-2015-7645","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Arbitrary Code Execution Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":true,"t":["T1204.002"],"mt":["exploitation_technique"],"w":[],"y":2015},{"id":"CVE-2015-5119","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Use-After-Free Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1055.001","T1059.007","T1071.001","T1105","T1203","T1204.001","T1566.002"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-119"],"y":2015},{"id":"CVE-2015-4902","v":"Oracle","p":"Java SE","n":"Oracle Java SE Integrity Check Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2015},{"id":"CVE-2015-3043","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Memory Corruption Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1189","T1204.002","T1499.004"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-787"],"y":2015},{"id":"CVE-2015-2590","v":"Oracle","p":"Java SE","n":"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2015},{"id":"CVE-2015-2545","v":"Microsoft","p":"Office","n":"Microsoft Office Malformed EPS File Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2015},{"id":"CVE-2015-2424","v":"Microsoft","p":"PowerPoint","n":"Microsoft PowerPoint Memory Corruption Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2015},{"id":"CVE-2015-2387","v":"Microsoft","p":"ATM Font Driver","n":"Microsoft ATM Font Driver Privilege Escalation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2015},{"id":"CVE-2015-1701","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-264"],"y":2015},{"id":"CVE-2015-1642","v":"Microsoft","p":"Office","n":"Microsoft Office Memory Corruption Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2015},{"id":"CVE-2014-4114","v":"Microsoft","p":"Windows","n":"Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2014},{"id":"CVE-2014-0496","v":"Adobe","p":"Reader and Acrobat","n":"Adobe Reader and Acrobat Use-After-Free Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1204.002"],"mt":["exploitation_technique"],"w":["CWE-399"],"y":2014},{"id":"CVE-2013-5065","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Privilege Escalation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2013},{"id":"CVE-2013-3897","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Use-After-Free Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2013},{"id":"CVE-2013-3346","v":"Adobe","p":"Reader and Acrobat","n":"Adobe Reader and Acrobat Memory Corruption Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1059.007"],"mt":["exploitation_technique"],"w":["CWE-119"],"y":2013},{"id":"CVE-2013-1675","v":"Mozilla","p":"Firefox","n":"Mozilla Firefox Information Disclosure Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2013},{"id":"CVE-2013-1347","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2013},{"id":"CVE-2013-0641","v":"Adobe","p":"Reader","n":"Adobe Reader Buffer Overflow Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1048","T1105","T1204.002"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-120"],"y":2013},{"id":"CVE-2013-0640","v":"Adobe","p":"Reader and Acrobat","n":"Adobe Reader and Acrobat Memory Corruption Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1566.001"],"mt":["exploitation_technique"],"w":["CWE-787"],"y":2013},{"id":"CVE-2013-0632","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Authentication Bypass Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-200"],"y":2013},{"id":"CVE-2012-4681","v":"Oracle","p":"Java SE","n":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2012},{"id":"CVE-2012-1856","v":"Microsoft","p":"Office","n":"Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2012},{"id":"CVE-2012-1723","v":"Oracle","p":"Java SE","n":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2012},{"id":"CVE-2012-1535","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Arbitrary Code Execution Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1105","T1204.002"],"mt":["exploitation_technique","primary_impact"],"w":[],"y":2012},{"id":"CVE-2012-0507","v":"Oracle","p":"Java SE","n":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2012},{"id":"CVE-2011-3544","v":"Oracle","p":"Java SE JDK and JRE","n":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2011},{"id":"CVE-2011-1889","v":"Microsoft","p":"Forefront Threat Management Gateway (TMG)","n":"Microsoft Forefront TMG Remote Code Execution Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2011},{"id":"CVE-2011-0611","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Remote Code Execution Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":false,"t":["T1105","T1204.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-843"],"y":2011},{"id":"CVE-2010-3333","v":"Microsoft","p":"Office","n":"Microsoft Office Stack-based Buffer Overflow Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2010},{"id":"CVE-2010-0232","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Exception Handler Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2010},{"id":"CVE-2010-0188","v":"Adobe","p":"Reader and Acrobat","n":"Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":true,"t":["T1105","T1189"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-94"],"y":2010},{"id":"CVE-2009-3129","v":"Microsoft","p":"Excel","n":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2009},{"id":"CVE-2009-1123","v":"Microsoft","p":"Windows","n":"Microsoft Windows Improper Input Validation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2009},{"id":"CVE-2008-3431","v":"Oracle","p":"VirtualBox","n":"Oracle VirtualBox Insufficient Input Validation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2008},{"id":"CVE-2008-2992","v":"Adobe","p":"Acrobat and Reader","n":"Adobe Reader and Acrobat Input Validation Vulnerability","d":"2022-03-03","s":"mapped","g":"full","r":true,"t":["T1204.002"],"mt":["exploitation_technique"],"w":["CWE-119"],"y":2008},{"id":"CVE-2004-0210","v":"Microsoft","p":"Windows","n":"Microsoft Windows Privilege Escalation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-120"],"y":2004},{"id":"CVE-2002-0367","v":"Microsoft","p":"Windows","n":"Microsoft Windows Privilege Escalation Vulnerability","d":"2022-03-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2002},{"id":"CVE-2022-24682","v":"Synacor","p":"Zimbra Collaborate Suite (ZCS)","n":"Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","d":"2022-02-25","s":"mapped","g":"full","r":true,"t":["T1059.007","T1185","T1204.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-79","CWE-116"],"y":2022},{"id":"CVE-2017-8570","v":"Microsoft","p":"Office","n":"Microsoft Office Remote Code Execution Vulnerability","d":"2022-02-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2017},{"id":"CVE-2017-0222","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Remote Code Execution Vulnerability","d":"2022-02-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2014-6352","v":"Microsoft","p":"Windows","n":"Microsoft Windows Code Injection Vulnerability","d":"2022-02-25","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2014},{"id":"CVE-2022-23134","v":"Zabbix","p":"Frontend","n":"Zabbix Frontend Improper Access Control Vulnerability","d":"2022-02-22","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2022},{"id":"CVE-2022-23131","v":"Zabbix","p":"Frontend","n":"Zabbix Frontend Authentication Bypass Vulnerability","d":"2022-02-22","s":"mapped","g":"full","r":false,"t":["T1059","T1078","T1190","T1548"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-290"],"y":2022},{"id":"CVE-2022-24086","v":"Adobe","p":"Commerce and Magento Open Source","n":"Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability","d":"2022-02-15","s":"mapped","g":"full","r":false,"t":["T1027","T1190","T1213"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-20"],"y":2022},{"id":"CVE-2022-0609","v":"Google","p":"Chromium Animation","n":"Google Chromium Animation Use-After-Free Vulnerability","d":"2022-02-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2022},{"id":"CVE-2019-0752","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Type Confusion Vulnerability","d":"2022-02-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-843"],"y":2019},{"id":"CVE-2018-8174","v":"Microsoft","p":"Windows","n":"Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability","d":"2022-02-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-787"],"y":2018},{"id":"CVE-2018-20250","v":"RARLAB","p":"WinRAR","n":"WinRAR Absolute Path Traversal Vulnerability","d":"2022-02-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-36"],"y":2018},{"id":"CVE-2018-15982","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Use-After-Free Vulnerability","d":"2022-02-15","s":"mapped","g":"full","r":true,"t":["T1105","T1204.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2018},{"id":"CVE-2017-9841","v":"PHPUnit","p":"PHPUnit","n":"PHPUnit Command Injection Vulnerability","d":"2022-02-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2017},{"id":"CVE-2014-1761","v":"Microsoft","p":"Word","n":"Microsoft Word Memory Corruption Vulnerability","d":"2022-02-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2014},{"id":"CVE-2013-3906","v":"Microsoft","p":"Graphics Component","n":"Microsoft Graphics Component Memory Corruption Vulnerability","d":"2022-02-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2013},{"id":"CVE-2022-22620","v":"Apple","p":"iOS, iPadOS, and macOS","n":"Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability","d":"2022-02-11","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2022},{"id":"CVE-2021-36934","v":"Microsoft","p":"Windows","n":"Microsoft Windows SAM Local Privilege Escalation Vulnerability","d":"2022-02-10","s":"mapped","g":"full","r":false,"t":["T1068","T1078"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-1220"],"y":2021},{"id":"CVE-2020-0796","v":"Microsoft","p":"SMBv3","n":"Microsoft SMBv3 Remote Code Execution Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-119"],"y":2020},{"id":"CVE-2018-1000861","v":"Jenkins","p":"Jenkins Stapler Web Framework","n":"Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2018},{"id":"CVE-2017-9791","v":"Apache","p":"Struts 1","n":"Apache Struts 1 Improper Input Validation Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-8464","v":"Microsoft","p":"Windows","n":"Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2017},{"id":"CVE-2017-10271","v":"Oracle","p":"WebLogic Server","n":"Oracle Corporation WebLogic Server Remote Code Execution Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2017},{"id":"CVE-2017-0263","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2017},{"id":"CVE-2017-0262","v":"Microsoft","p":"Office","n":"Microsoft Office Remote Code Execution Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2017},{"id":"CVE-2017-0145","v":"Microsoft","p":"SMBv1","n":"Microsoft SMBv1 Remote Code Execution Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-0144","v":"Microsoft","p":"SMBv1","n":"Microsoft SMBv1 Remote Code Execution Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2016-3088","v":"Apache","p":"ActiveMQ","n":"Apache ActiveMQ Improper Input Validation Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2016},{"id":"CVE-2015-2051","v":"D-Link","p":"DIR-645 Router","n":"D-Link DIR-645 Router Remote Code Execution Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2015},{"id":"CVE-2015-1635","v":"Microsoft","p":"HTTP.sys","n":"Microsoft HTTP.sys Remote Code Execution Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2015},{"id":"CVE-2015-1130","v":"Apple","p":"OS X","n":"Apple OS X Authentication Bypass Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-254"],"y":2015},{"id":"CVE-2014-4404","v":"Apple","p":"OS X","n":"Apple OS X Heap-Based Buffer Overflow Vulnerability","d":"2022-02-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2014},{"id":"CVE-2022-21882","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2022-02-04","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-787"],"y":2022},{"id":"CVE-2022-22587","v":"Apple","p":"iOS and macOS","n":"Apple Memory Corruption Vulnerability","d":"2022-01-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-787"],"y":2022},{"id":"CVE-2021-20038","v":"SonicWall","p":"SMA 100 Appliances","n":"SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability","d":"2022-01-28","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-121"],"y":2021},{"id":"CVE-2020-5722","v":"Grandstream","p":"UCM6200","n":"Grandstream Networks UCM6200 Series SQL Injection Vulnerability","d":"2022-01-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2020},{"id":"CVE-2020-0787","v":"Microsoft","p":"Windows","n":"Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability","d":"2022-01-28","s":"mapped","g":"full","r":true,"t":["T1059","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-269","CWE-59"],"y":2020},{"id":"CVE-2017-5689","v":"Intel","p":"Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability","n":"Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability","d":"2022-01-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2017},{"id":"CVE-2014-7169","v":"GNU","p":"Bourne-Again Shell (Bash)","n":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","d":"2022-01-28","s":"mapped","g":"full","r":false,"t":["T1059.004","T1133","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78"],"y":2014},{"id":"CVE-2014-6271","v":"GNU","p":"Bourne-Again Shell (Bash)","n":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","d":"2022-01-28","s":"mapped","g":"full","r":false,"t":["T1059.004","T1133","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78"],"y":2014},{"id":"CVE-2014-1776","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Memory Corruption Vulnerability","d":"2022-01-28","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2014},{"id":"CVE-2021-35247","v":"SolarWinds","p":"Serv-U","n":"SolarWinds Serv-U Improper Input Validation Vulnerability","d":"2022-01-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2021},{"id":"CVE-2018-8453","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2022-01-21","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-404"],"y":2018},{"id":"CVE-2012-0391","v":"Apache","p":"Struts 2","n":"Apache Struts 2 Improper Input Validation Vulnerability","d":"2022-01-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2012},{"id":"CVE-2006-1547","v":"Apache","p":"Struts 1","n":"Apache Struts 1 ActionForm Denial-of-Service Vulnerability","d":"2022-01-21","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2006},{"id":"CVE-2021-40870","v":"Aviatrix","p":"Aviatrix Controller","n":"Aviatrix Controller Unrestricted Upload of File","d":"2022-01-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-25","CWE-96"],"y":2021},{"id":"CVE-2021-33766","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Information Disclosure","d":"2022-01-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2021},{"id":"CVE-2021-32648","v":"October CMS","p":"October CMS","n":"October CMS Improper Authentication","d":"2022-01-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287"],"y":2021},{"id":"CVE-2021-25298","v":"Nagios","p":"Nagios XI","n":"Nagios XI OS Command Injection","d":"2022-01-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78","CWE-138"],"y":2021},{"id":"CVE-2021-25297","v":"Nagios","p":"Nagios XI","n":"Nagios XI OS Command Injection","d":"2022-01-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78","CWE-138"],"y":2021},{"id":"CVE-2021-25296","v":"Nagios","p":"Nagios XI","n":"Nagios XI OS Command Injection","d":"2022-01-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78","CWE-138"],"y":2021},{"id":"CVE-2021-22991","v":"F5","p":"BIG-IP Traffic Management Microkernel","n":"F5 BIG-IP Traffic Management Microkernel Buffer Overflow","d":"2022-01-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2021},{"id":"CVE-2021-21975","v":"VMware","p":"vRealize Operations Manager API","n":"VMware Server Side Request Forgery in vRealize Operations Manager API","d":"2022-01-18","s":"mapped","g":"full","r":true,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-918"],"y":2021},{"id":"CVE-2021-21315","v":"Npm package","p":"System Information Library for Node.JS","n":"System Information Library for Node.JS Command Injection","d":"2022-01-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2021},{"id":"CVE-2020-14864","v":"Oracle","p":"Intelligence Enterprise Edition","n":"Oracle Business Intelligence Enterprise Edition Path Transversal","d":"2022-01-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2020},{"id":"CVE-2020-13927","v":"Apache","p":"Airflow's Experimental API","n":"Apache Airflow's Experimental API Authentication Bypass","d":"2022-01-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-1188","CWE-306"],"y":2020},{"id":"CVE-2020-13671","v":"Drupal","p":"Drupal core","n":"Drupal core Un-restricted Upload of File","d":"2022-01-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-434"],"y":2020},{"id":"CVE-2020-11978","v":"Apache","p":"Airflow","n":"Apache Airflow Command Injection","d":"2022-01-18","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2020},{"id":"CVE-2021-36260","v":"Hikvision","p":"Security cameras web server","n":"Hikvision Improper Input Validation","d":"2022-01-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2021},{"id":"CVE-2021-27860","v":"FatPipe","p":"WARP, IPVPN, and MPVPN software","n":"FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit","d":"2022-01-10","s":"mapped","g":"full","r":false,"t":["T1190","T1505.003"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-434"],"y":2021},{"id":"CVE-2021-22017","v":"VMware","p":"vCenter Server","n":"VMware vCenter Server Improper Access Control","d":"2022-01-10","s":"mapped","g":"full","r":false,"t":["T1090.001","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-23"],"y":2021},{"id":"CVE-2020-6572","v":"Google","p":"Chrome Media","n":"Google Chrome Media Use-After-Free Vulnerability","d":"2022-01-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2020},{"id":"CVE-2019-9670","v":"Synacor","p":"Zimbra Collaboration Suite (ZCS)","n":"Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference","d":"2022-01-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-611"],"y":2019},{"id":"CVE-2019-7609","v":"Elastic","p":"Kibana","n":"Kibana Arbitrary Code Execution","d":"2022-01-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2019},{"id":"CVE-2019-2725","v":"Oracle","p":"WebLogic Server","n":"Oracle WebLogic Server, Injection","d":"2022-01-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-74"],"y":2019},{"id":"CVE-2019-1579","v":"Palo Alto Networks","p":"PAN-OS","n":"Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","d":"2022-01-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-134"],"y":2019},{"id":"CVE-2019-1458","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2022-01-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-10149","v":"Exim","p":"Mail Transfer Agent (MTA)","n":"Exim Mail Transfer Agent (MTA) Improper Input Validation","d":"2022-01-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2019},{"id":"CVE-2018-13383","v":"Fortinet","p":"FortiOS and FortiProxy","n":"Fortinet FortiOS and FortiProxy Out-of-bounds Write","d":"2022-01-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-787"],"y":2018},{"id":"CVE-2018-13382","v":"Fortinet","p":"FortiOS and FortiProxy","n":"Fortinet FortiOS and FortiProxy Improper Authorization","d":"2022-01-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-285"],"y":2018},{"id":"CVE-2017-1000486","v":"Primetek","p":"Primefaces Application","n":"Primetek Primefaces Remote Code Execution Vulnerability","d":"2022-01-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-326"],"y":2017},{"id":"CVE-2015-7450","v":"IBM","p":"WebSphere Application Server and Server Hypervisor Edition","n":"IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.","d":"2022-01-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2015},{"id":"CVE-2013-3900","v":"Microsoft","p":"WinVerifyTrust function","n":"Microsoft WinVerifyTrust function Remote Code Execution","d":"2022-01-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2013},{"id":"CVE-2021-43890","v":"Microsoft","p":"Windows","n":"Microsoft Windows AppX Installer Spoofing Vulnerability","d":"2021-12-15","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2021-4102","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Use-After-Free Vulnerability","d":"2021-12-15","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-44515","v":"Zoho","p":"Desktop Central","n":"Zoho Desktop Central Authentication Bypass Vulnerability","d":"2021-12-10","s":"mapped","g":"full","r":false,"t":["T1003","T1069","T1087","T1105","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":[],"y":2021},{"id":"CVE-2021-44228","v":"Apache","p":"Log4j2","n":"Apache Log4j2 Remote Code Execution Vulnerability","d":"2021-12-10","s":"mapped","g":"partial","r":true,"t":["T1190","T1486","T1496","T1505.003","T1608.001"],"mt":["exploitation_technique","secondary_impact"],"w":["CWE-20","CWE-400","CWE-502"],"y":2021},{"id":"CVE-2021-44168","v":"Fortinet","p":"FortiOS","n":"Fortinet FortiOS Arbitrary File Download","d":"2021-12-10","s":"mapped","g":"partial","r":false,"t":["T1078.003","T1601"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-494"],"y":2021},{"id":"CVE-2021-35394","v":"Realtek","p":"Jungle Software Development Kit (SDK)","n":"Realtek Jungle SDK Remote Code Execution Vulnerability","d":"2021-12-10","s":"mapped","g":"full","r":false,"t":["T1059","T1071.001","T1105","T1190","T1496","T1499","T1569.002"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-78","CWE-138"],"y":2021},{"id":"CVE-2020-8816","v":"Pi-hole","p":"AdminLTE","n":"Pi-Hole AdminLTE Remote Code Execution Vulnerability","d":"2021-12-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2020},{"id":"CVE-2020-17463","v":"Fuel CMS","p":"Fuel CMS","n":"Fuel CMS SQL Injection Vulnerability","d":"2021-12-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-89"],"y":2020},{"id":"CVE-2019-7238","v":"Sonatype","p":"Nexus Repository Manager","n":"Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability","d":"2021-12-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-13272","v":"Linux","p":"Kernel","n":"Linux Kernel Improper Privilege Management Vulnerability","d":"2021-12-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-269"],"y":2019},{"id":"CVE-2019-10758","v":"MongoDB","p":"mongo-express","n":"MongoDB mongo-express Remote Code Execution Vulnerability","d":"2021-12-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-0193","v":"Apache","p":"Solr","n":"Apache Solr DataImportHandler Code Injection Vulnerability","d":"2021-12-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2019},{"id":"CVE-2017-17562","v":"Embedthis","p":"GoAhead","n":"Embedthis GoAhead Remote Code Execution Vulnerability","d":"2021-12-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-12149","v":"Red Hat","p":"JBoss Application Server","n":"Red Hat JBoss Application Server Remote Code Execution Vulnerability","d":"2021-12-10","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-502"],"y":2017},{"id":"CVE-2010-1871","v":"Red Hat","p":"JBoss Seam 2","n":"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","d":"2021-12-10","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2010},{"id":"CVE-2021-44077","v":"Zoho","p":"ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus","n":"Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability","d":"2021-12-01","s":"mapped","g":"partial","r":false,"t":["T1003","T1003.003","T1027","T1047","T1070.004","T1087.002","T1136","T1140","T1190","T1218","T1505.003","T1560.001","T1573.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-306"],"y":2021},{"id":"CVE-2021-40438","v":"Apache","p":"Apache","n":"Apache HTTP Server-Side Request Forgery (SSRF)","d":"2021-12-01","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-918"],"y":2021},{"id":"CVE-2021-37415","v":"Zoho","p":"ManageEngine ServiceDesk Plus (SDP)","n":"Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability","d":"2021-12-01","s":"mapped","g":"full","r":false,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-306"],"y":2021},{"id":"CVE-2020-11261","v":"Qualcomm","p":"Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","n":"Qualcomm Multiple Chipsets Improper Input Validation Vulnerability","d":"2021-12-01","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2020},{"id":"CVE-2018-14847","v":"MikroTik","p":"RouterOS","n":"MikroTik Router OS Directory Traversal Vulnerability","d":"2021-12-01","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2018},{"id":"CVE-2021-42321","v":"Microsoft","p":"Exchange","n":"Microsoft Exchange Server Remote Code Execution Vulnerability","d":"2021-11-17","s":"mapped","g":"full","r":true,"t":["T1059","T1078"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-184","CWE-502"],"y":2021},{"id":"CVE-2021-42292","v":"Microsoft","p":"Office","n":"Microsoft Excel Security Feature Bypass","d":"2021-11-17","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-357"],"y":2021},{"id":"CVE-2021-40449","v":"Microsoft","p":"Windows","n":"Microsoft Windows Win32k Privilege Escalation Vulnerability","d":"2021-11-17","s":"mapped","g":"partial","r":true,"t":["T1016","T1027","T1059.003","T1068","T1071.001","T1082","T1566","T1573.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-22204","v":"Perl","p":"Exiftool","n":"ExifTool Remote Code Execution Vulnerability","d":"2021-11-17","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-95"],"y":2021},{"id":"CVE-2021-42258","v":"BQE","p":"BillQuick Web Suite","n":"BQE BillQuick Web Suite SQL Injection Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1486"],"mt":["primary_impact","secondary_impact"],"w":["CWE-89"],"y":2021},{"id":"CVE-2021-42013","v":"Apache","p":"HTTP Server","n":"Apache HTTP Server Path Traversal Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1210"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-22"],"y":2021},{"id":"CVE-2021-41773","v":"Apache","p":"HTTP Server","n":"Apache HTTP Server Path Traversal Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1210"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-22"],"y":2021},{"id":"CVE-2021-40539","v":"Zoho","p":"ManageEngine","n":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","d":"2021-11-03","s":"mapped","g":"partial","r":true,"t":["T1003","T1003.003","T1027","T1047","T1070.004","T1087.002","T1136","T1140","T1190","T1218","T1505.003","T1560.001","T1573.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-55"],"y":2021},{"id":"CVE-2021-40444","v":"Microsoft","p":"MSHTML","n":"Microsoft MSHTML Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-22"],"y":2021},{"id":"CVE-2021-38649","v":"Microsoft","p":"Open Management Infrastructure (OMI)","n":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2021-38648","v":"Microsoft","p":"Open Management Infrastructure (OMI)","n":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-1390"],"y":2021},{"id":"CVE-2021-38647","v":"Microsoft","p":"Open Management Infrastructure (OMI)","n":"Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-1390"],"y":2021},{"id":"CVE-2021-38645","v":"Microsoft","p":"Open Management Infrastructure (OMI)","n":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2021-38003","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122","CWE-755"],"y":2021},{"id":"CVE-2021-38000","v":"Google","p":"Chromium Intents","n":"Google Chromium Intents Improper Input Validation Vulnerability","d":"2021-11-03","s":"mapped","g":"n/a","r":false,"t":["T1437","T1658","T1660"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-20"],"y":2021},{"id":"CVE-2021-37976","v":"Google","p":"Chromium","n":"Google Chromium Information Disclosure Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-862"],"y":2021},{"id":"CVE-2021-37975","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Use-After-Free Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059.007","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-37973","v":"Google","p":"Chromium Portals","n":"Google Chromium Portals Use-After-Free Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-36955","v":"Microsoft","p":"Windows","n":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2021-36948","v":"Microsoft","p":"Windows","n":"Microsoft Windows Update Medic Service Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2021-36942","v":"Microsoft","p":"Windows","n":"Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-749"],"y":2021},{"id":"CVE-2021-36742","v":"Trend Micro","p":"Apex One, Apex One as a Service, and Worry-Free Business Security","n":"Trend Micro Multiple Products Improper Input Validation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2021},{"id":"CVE-2021-36741","v":"Trend Micro","p":"Apex One, Apex One as a Service, and Worry-Free Business Security","n":"Trend Micro Multiple Products Improper Input Validation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2021},{"id":"CVE-2021-35464","v":"ForgeRock","p":"Access Management (AM)","n":"ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-502"],"y":2021},{"id":"CVE-2021-35395","v":"Realtek","p":"AP-Router SDK","n":"Realtek AP-Router SDK Buffer Overflow Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-122"],"y":2021},{"id":"CVE-2021-35211","v":"SolarWinds","p":"Serv-U","n":"SolarWinds Serv-U Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-34527","v":"Microsoft","p":"Windows","n":"Microsoft Windows Print Spooler Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-269"],"y":2021},{"id":"CVE-2021-34523","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Privilege Escalation Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-287"],"y":2021},{"id":"CVE-2021-34473","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1048.003","T1053.005","T1136","T1190","T1486"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-918"],"y":2021},{"id":"CVE-2021-34448","v":"Microsoft","p":"Windows","n":"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-33771","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2021},{"id":"CVE-2021-33742","v":"Microsoft","p":"Windows","n":"Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787","CWE-823"],"y":2021},{"id":"CVE-2021-33739","v":"Microsoft","p":"Windows","n":"Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1068","T1598.002"],"mt":["exploitation_technique","primary_impact"],"w":[],"y":2021},{"id":"CVE-2021-31979","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2021},{"id":"CVE-2021-31956","v":"Microsoft","p":"Windows","n":"Microsoft Windows NTFS Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-191","CWE-787"],"y":2021},{"id":"CVE-2021-31955","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Information Disclosure Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-497"],"y":2021},{"id":"CVE-2021-31755","v":"Tenda","p":"AC11 Router","n":"Tenda AC11 Router Stack Buffer Overflow Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-31207","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Security Feature Bypass Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1548.002","T1565"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-20","CWE-434"],"y":2021},{"id":"CVE-2021-31201","v":"Microsoft","p":"Enhanced Cryptographic Provider","n":"Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2021-31199","v":"Microsoft","p":"Enhanced Cryptographic Provider","n":"Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2021-30869","v":"Apple","p":"iOS, iPadOS, and macOS","n":"Apple iOS, iPadOS, and macOS Type Confusion Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2021},{"id":"CVE-2021-30860","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Integer Overflow Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-190"],"y":2021},{"id":"CVE-2021-30858","v":"Apple","p":"iOS, iPadOS, and macOS","n":"Apple iOS, iPadOS, macOS Use-After-Free Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-30807","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-30762","v":"Apple","p":"iOS","n":"Apple iOS WebKit Use-After-Free Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-30761","v":"Apple","p":"iOS","n":"Apple iOS WebKit Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-30713","v":"Apple","p":"macOS","n":"Apple macOS Unspecified Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-862"],"y":2021},{"id":"CVE-2021-30666","v":"Apple","p":"iOS","n":"Apple iOS WebKit Buffer Overflow Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2021},{"id":"CVE-2021-30665","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-30663","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Integer Overflow Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-190"],"y":2021},{"id":"CVE-2021-30661","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products WebKit Storage Use-After-Free Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-30657","v":"Apple","p":"macOS","n":"Apple macOS Unspecified Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-862"],"y":2021},{"id":"CVE-2021-30633","v":"Google","p":"Chromium Indexed DB API","n":"Google Chromium Indexed DB API Use-After-Free Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-30632","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Out-of-Bounds Write Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122"],"y":2021},{"id":"CVE-2021-30563","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122","CWE-843"],"y":2021},{"id":"CVE-2021-30554","v":"Google","p":"Chromium WebGL","n":"Google Chromium WebGL Use-After-Free Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059.007","T1203"],"mt":["exploitation_technique"],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-30551","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122","CWE-843"],"y":2021},{"id":"CVE-2021-30116","v":"Kaseya","p":"Virtual System/Server Administrator (VSA)","n":"Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-522"],"y":2021},{"id":"CVE-2021-28664","v":"Arm","p":"Mali Graphics Processing Unit (GPU)","n":"Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-28663","v":"Arm","p":"Mali Graphics Processing Unit (GPU)","n":"Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-28550","v":"Adobe","p":"Acrobat and Reader","n":"Adobe Acrobat and Reader Use-After-Free Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1204.002"],"mt":["exploitation_technique"],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-28310","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-27562","v":"Arm","p":"Trusted Firmware","n":"Arm Trusted Firmware Out-of-Bounds Write Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-27561","v":"Yealink","p":"Device Management","n":"Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2021},{"id":"CVE-2021-27104","v":"Accellion","p":"FTA","n":"Accellion FTA OS Command Injection Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1005","T1059","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-20","CWE-78"],"y":2021},{"id":"CVE-2021-27103","v":"Accellion","p":"FTA","n":"Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1005","T1190"],"mt":["exploitation_technique","secondary_impact"],"w":["CWE-918"],"y":2021},{"id":"CVE-2021-27102","v":"Accellion","p":"FTA","n":"Accellion FTA OS Command Injection Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1005","T1059","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-20","CWE-78"],"y":2021},{"id":"CVE-2021-27101","v":"Accellion","p":"FTA","n":"Accellion FTA SQL Injection Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1005","T1059"],"mt":["primary_impact","secondary_impact"],"w":["CWE-89","CWE-138"],"y":2021},{"id":"CVE-2021-27085","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2021-27065","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1190","T1505.003"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-39"],"y":2021},{"id":"CVE-2021-27059","v":"Microsoft","p":"Office","n":"Microsoft Office Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1203"],"mt":["exploitation_technique"],"w":[],"y":2021},{"id":"CVE-2021-26858","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1190","T1505.003"],"mt":["exploitation_technique","primary_impact"],"w":[],"y":2021},{"id":"CVE-2021-26857","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1133","T1505.003"],"mt":["primary_impact","secondary_impact"],"w":["CWE-502"],"y":2021},{"id":"CVE-2021-26855","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1005","T1090","T1133","T1505.003"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-918"],"y":2021},{"id":"CVE-2021-26411","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-26084","v":"Atlassian","p":"Confluence Server and Data Center","n":"Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1496"],"mt":["primary_impact","secondary_impact"],"w":["CWE-917"],"y":2021},{"id":"CVE-2021-23874","v":"McAfee","p":"McAfee Total Protection (MTP)","n":"McAfee Total Protection (MTP) Improper Privilege Management Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2021},{"id":"CVE-2021-22986","v":"F5","p":"BIG-IP and BIG-IQ Centralized Management","n":"F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1090","T1133","T1190","T1485"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-863"],"y":2021},{"id":"CVE-2021-22900","v":"Ivanti","p":"Pulse Connect Secure","n":"Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059","T1068"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-94"],"y":2021},{"id":"CVE-2021-22899","v":"Ivanti","p":"Pulse Connect Secure","n":"Ivanti Pulse Connect Secure Command Injection Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059.003","T1078"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-77"],"y":2021},{"id":"CVE-2021-22894","v":"Ivanti","p":"Pulse Connect Secure","n":"Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059","T1078"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-94"],"y":2021},{"id":"CVE-2021-22893","v":"Ivanti","p":"Pulse Connect Secure","n":"Ivanti Pulse Connect Secure Use-After-Free Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1003","T1059","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-287"],"y":2021},{"id":"CVE-2021-22506","v":"Micro Focus","p":"Micro Focus Access Manager","n":"Micro Focus Access Manager Information Leakage Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2021},{"id":"CVE-2021-22502","v":"Micro Focus","p":"Operation Bridge Reporter (OBR)","n":"Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-78"],"y":2021},{"id":"CVE-2021-22205","v":"GitLab","p":"Community and Enterprise Editions","n":"GitLab Community and Enterprise Editions Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1190","T1496","T1498"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-20","CWE-95"],"y":2021},{"id":"CVE-2021-22005","v":"VMware","p":"vCenter Server","n":"VMware vCenter Server File Upload Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-23"],"y":2021},{"id":"CVE-2021-21985","v":"VMware","p":"vCenter Server","n":"VMware vCenter Server Improper Input Validation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20","CWE-470","CWE-918"],"y":2021},{"id":"CVE-2021-21972","v":"VMware","p":"vCenter Server","n":"VMware vCenter Server Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-23"],"y":2021},{"id":"CVE-2021-21224","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2021},{"id":"CVE-2021-21220","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Improper Input Validation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20","CWE-122"],"y":2021},{"id":"CVE-2021-21206","v":"Google","p":"Chromium Blink","n":"Google Chromium Blink Use-After-Free Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059.007","T1203"],"mt":["exploitation_technique"],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-21193","v":"Google","p":"Chromium Blink","n":"Google Chromium Blink Use-After-Free Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-21166","v":"Google","p":"Chromium","n":"Google Chromium Race Condition Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059.007","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-122","CWE-362"],"y":2021},{"id":"CVE-2021-21148","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Heap Buffer Overflow Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059.007","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-122"],"y":2021},{"id":"CVE-2021-21017","v":"Adobe","p":"Acrobat and Reader","n":"Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1204.002"],"mt":["exploitation_technique"],"w":["CWE-122"],"y":2021},{"id":"CVE-2021-20090","v":"Arcadyan","p":"Buffalo Firmware","n":"Arcadyan Buffalo Firmware Path Traversal Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2021},{"id":"CVE-2021-20023","v":"SonicWall","p":"SonicWall Email Security","n":"SonicWall Email Security Path Traversal Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-22"],"y":2021},{"id":"CVE-2021-20022","v":"SonicWall","p":"SonicWall Email Security","n":"SonicWall Email Security Unrestricted Upload of File Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-434"],"y":2021},{"id":"CVE-2021-20021","v":"SonicWall","p":"SonicWall Email Security","n":"SonicWall Email Security Improper Privilege Management Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-306"],"y":2021},{"id":"CVE-2021-20016","v":"SonicWall","p":"SSLVPN SMA100","n":"SonicWall SSLVPN SMA100 SQL Injection Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-89"],"y":2021},{"id":"CVE-2021-1906","v":"Qualcomm","p":"Multiple Chipsets","n":"Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-390"],"y":2021},{"id":"CVE-2021-1905","v":"Qualcomm","p":"Multiple Chipsets","n":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2021},{"id":"CVE-2021-1879","v":"Apple","p":"iOS, iPadOS, and watchOS","n":"Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2021},{"id":"CVE-2021-1871","v":"Apple","p":"iOS, iPadOS, and macOS","n":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-1173"],"y":2021},{"id":"CVE-2021-1870","v":"Apple","p":"iOS, iPadOS, and macOS","n":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-1173"],"y":2021},{"id":"CVE-2021-1782","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Race Condition Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-362","CWE-667"],"y":2021},{"id":"CVE-2021-1732","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-787"],"y":2021},{"id":"CVE-2021-1675","v":"Microsoft","p":"Windows","n":"Microsoft Windows Print Spooler Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-285"],"y":2021},{"id":"CVE-2021-1647","v":"Microsoft","p":"Defender","n":"Microsoft Defender Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-122","CWE-1285"],"y":2021},{"id":"CVE-2021-1498","v":"Cisco","p":"HyperFlex HX","n":"Cisco HyperFlex HX Data Platform Command Injection Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059","T1133"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78"],"y":2021},{"id":"CVE-2021-1497","v":"Cisco","p":"HyperFlex HX","n":"Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059","T1133"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-78"],"y":2021},{"id":"CVE-2020-9859","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-415"],"y":2020},{"id":"CVE-2020-9819","v":"Apple","p":"iOS, iPadOS, and watchOS","n":"Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-9818","v":"Apple","p":"iOS, iPadOS, and watchOS","n":"Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-8657","v":"EyesOfNetwork","p":"EyesOfNetwork","n":"EyesOfNetwork Use of Hard-Coded Credentials Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1106"],"mt":["exploitation_technique"],"w":["CWE-798"],"y":2020},{"id":"CVE-2020-8655","v":"EyesOfNetwork","p":"EyesOfNetwork","n":"EyesOfNetwork Improper Privilege Management Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-269"],"y":2020},{"id":"CVE-2020-8644","v":"PlaySMS","p":"PlaySMS","n":"PlaySMS Server-Side Template Injection Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2020},{"id":"CVE-2020-8599","v":"Trend Micro","p":"Apex One and OfficeScan","n":"Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-8515","v":"DrayTek","p":"Multiple Vigor Routers","n":"Multiple DrayTek Vigor Routers Web Management Page Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059","T1133","T1496"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-78"],"y":2020},{"id":"CVE-2020-8468","v":"Trend Micro","p":"Apex One, OfficeScan and Worry-Free Business Security Agents","n":"Trend Micro Multiple Products Content Validation Escape Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-74"],"y":2020},{"id":"CVE-2020-8467","v":"Trend Micro","p":"Apex One and OfficeScan","n":"Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-8260","v":"Ivanti","p":"Pulse Connect Secure","n":"Ivanti Pulse Connect Secure Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-434"],"y":2020},{"id":"CVE-2020-8243","v":"Ivanti","p":"Pulse Connect Secure","n":"Ivanti Pulse Connect Secure Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2020},{"id":"CVE-2020-8196","v":"Citrix","p":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","n":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1005","T1056","T1082"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-284"],"y":2020},{"id":"CVE-2020-8195","v":"Citrix","p":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","n":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1005","T1056","T1082"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-20"],"y":2020},{"id":"CVE-2020-8193","v":"Citrix","p":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","n":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1005","T1556"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-284"],"y":2020},{"id":"CVE-2020-7961","v":"Liferay","p":"Liferay Portal","n":"Liferay Portal Deserialization of Untrusted Data Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2020},{"id":"CVE-2020-6820","v":"Mozilla","p":"Firefox and Thunderbird","n":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-362"],"y":2020},{"id":"CVE-2020-6819","v":"Mozilla","p":"Firefox and Thunderbird","n":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-362","CWE-416"],"y":2020},{"id":"CVE-2020-6418","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2020},{"id":"CVE-2020-6287","v":"SAP","p":"NetWeaver","n":"SAP NetWeaver Missing Authentication for Critical Function Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306"],"y":2020},{"id":"CVE-2020-6207","v":"SAP","p":"Solution Manager","n":"SAP Solution Manager Missing Authentication for Critical Function Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306"],"y":2020},{"id":"CVE-2020-5902","v":"F5","p":"BIG-IP","n":"F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability","d":"2021-11-03","s":"stale","g":"full","r":true,"t":["T1003","T1005","T1059","T1070.004","T1133","T1190","T1552","T1562.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-22"],"y":2020},{"id":"CVE-2020-5849","v":"Unraid","p":"Unraid","n":"Unraid Authentication Bypass Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-287","CWE-697"],"y":2020},{"id":"CVE-2020-5847","v":"Unraid","p":"Unraid","n":"Unraid Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-5735","v":"Amcrest","p":"Cameras and Network Video Recorder (NVR)","n":"Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1499","T1574"],"mt":["primary_impact","secondary_impact"],"w":["CWE-121"],"y":2020},{"id":"CVE-2020-4430","v":"IBM","p":"Data Risk Manager","n":"IBM Data Risk Manager Directory Traversal Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2020},{"id":"CVE-2020-4428","v":"IBM","p":"Data Risk Manager","n":"IBM Data Risk Manager Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2020},{"id":"CVE-2020-4427","v":"IBM","p":"Data Risk Manager","n":"IBM Data Risk Manager Security Bypass Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-4006","v":"VMware","p":"Multiple Products","n":"Multiple VMware Products Command Injection Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2020},{"id":"CVE-2020-3992","v":"VMware","p":"ESXi","n":"VMware ESXi OpenSLP Use-After-Free Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-416"],"y":2020},{"id":"CVE-2020-3952","v":"VMware","p":"vCenter Server","n":"VMware vCenter Server Information Disclosure Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306"],"y":2020},{"id":"CVE-2020-3950","v":"VMware","p":"Multiple Products","n":"VMware Multiple Products Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-269"],"y":2020},{"id":"CVE-2020-3580","v":"Cisco","p":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","n":"Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1204.001","T1217"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-79"],"y":2020},{"id":"CVE-2020-3569","v":"Cisco","p":"IOS XR","n":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-400"],"y":2020},{"id":"CVE-2020-3566","v":"Cisco","p":"IOS XR","n":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-400"],"y":2020},{"id":"CVE-2020-3452","v":"Cisco","p":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","n":"Cisco ASA and FTD Read-Only Path Traversal Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1005","T1202"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-20"],"y":2020},{"id":"CVE-2020-3161","v":"Cisco","p":"Cisco IP Phones","n":"Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2020},{"id":"CVE-2020-3118","v":"Cisco","p":"IOS XR","n":"Cisco IOS XR Software Discovery Protocol Format String Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-134"],"y":2020},{"id":"CVE-2020-29583","v":"Zyxel","p":"Multiple Products","n":"Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-522"],"y":2020},{"id":"CVE-2020-29557","v":"D-Link","p":"DIR-825 R1 Devices","n":"D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability","d":"2021-11-03","s":"mapped","g":"partial","r":false,"t":["T1059","T1190","T1584.005"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-119"],"y":2020},{"id":"CVE-2020-27950","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Memory Initialization Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-665"],"y":2020},{"id":"CVE-2020-27932","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Type Confusion Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2020},{"id":"CVE-2020-27930","v":"Apple","p":"Multiple Products","n":"Apple Multiple Products Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-26919","v":"NETGEAR","p":"JGS516PE Devices","n":"Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-2555","v":"Oracle","p":"Multiple Products","n":"Oracle Multiple Products Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2020},{"id":"CVE-2020-25506","v":"D-Link","p":"DNS-320 Device","n":"D-Link DNS-320 Device Command Injection Vulnerability","d":"2021-11-03","s":"mapped","g":"partial","r":false,"t":["T1059","T1133","T1584.005"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-78"],"y":2020},{"id":"CVE-2020-25213","v":"WordPress","p":"File Manager Plugin","n":"WordPress File Manager Plugin Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-434"],"y":2020},{"id":"CVE-2020-24557","v":"Trend Micro","p":"Apex One, OfficeScan, and Worry-Free Business Security","n":"Trend Micro Multiple Products Improper Access Control Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-17530","v":"Apache","p":"Struts","n":"Apache Struts Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-917"],"y":2020},{"id":"CVE-2020-17496","v":"vBulletin","p":"vBulletin","n":"vBulletin PHP Module Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-74"],"y":2020},{"id":"CVE-2020-17144","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2020},{"id":"CVE-2020-17087","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-131"],"y":2020},{"id":"CVE-2020-16846","v":"SaltStack","p":"Salt","n":"SaltStack Salt Shell Injection Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2020},{"id":"CVE-2020-16017","v":"Google","p":"Chrome","n":"Google Chrome Use-After-Free Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2020},{"id":"CVE-2020-16013","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Incorrect Implementation Vulnerabililty","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-16010","v":"Google","p":"Chrome for Android UI","n":"Google Chrome for Android UI Heap Buffer Overflow Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-16009","v":"Google","p":"Chromium V8","n":"Google Chromium V8 Type Confusion Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787","CWE-843"],"y":2020},{"id":"CVE-2020-15999","v":"Google","p":"Chrome FreeType","n":"Google Chrome FreeType Heap Buffer Overflow Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-15505","v":"Ivanti","p":"MobileIron Multiple Products","n":"Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-706"],"y":2020},{"id":"CVE-2020-14883","v":"Oracle","p":"WebLogic Server","n":"Oracle WebLogic Server Unspecified Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-14882","v":"Oracle","p":"WebLogic Server","n":"Oracle WebLogic Server Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-14871","v":"Oracle","p":"Solaris and Zettabyte File System (ZFS)","n":"Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-14750","v":"Oracle","p":"WebLogic Server","n":"Oracle WebLogic Server Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-1472","v":"Microsoft","p":"Netlogon","n":"Microsoft Netlogon Privilege Escalation Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1021","T1068","T1087.002","T1110","T1133","T1486"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-330"],"y":2020},{"id":"CVE-2020-1464","v":"Microsoft","p":"Windows","n":"Microsoft Windows Spoofing Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-347"],"y":2020},{"id":"CVE-2020-1380","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-1350","v":"Microsoft","p":"Windows","n":"Microsoft Windows DNS Server Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-12812","v":"Fortinet","p":"FortiOS","n":"Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1556"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-178","CWE-287"],"y":2020},{"id":"CVE-2020-12271","v":"Sophos","p":"SFOS","n":"Sophos SFOS SQL Injection Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-89"],"y":2020},{"id":"CVE-2020-11738","v":"WordPress","p":"Snap Creek Duplicator Plugin","n":"WordPress Snap Creek Duplicator Plugin File Download Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2020},{"id":"CVE-2020-11652","v":"SaltStack","p":"Salt","n":"SaltStack Salt Path Traversal Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2020},{"id":"CVE-2020-11651","v":"SaltStack","p":"Salt","n":"SaltStack Salt Authentication Bypass Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-1147","v":"Microsoft","p":".NET Framework, SharePoint, Visual Studio","n":"Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-10987","v":"Tenda","p":"AC1900 Router AC15 Model","n":"Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2020},{"id":"CVE-2020-1054","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-1040","v":"Microsoft","p":"Hyper-V RemoteFX","n":"Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2020},{"id":"CVE-2020-10221","v":"rConfig","p":"rConfig","n":"rConfig OS Command Injection Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2020},{"id":"CVE-2020-1020","v":"Microsoft","p":"Windows","n":"Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-10199","v":"Sonatype","p":"Nexus Repository","n":"Sonatype Nexus Repository Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-917"],"y":2020},{"id":"CVE-2020-10189","v":"Zoho","p":"ManageEngine","n":"Zoho ManageEngine Desktop Central File Upload Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2020},{"id":"CVE-2020-10181","v":"Sumavision","p":"Enhanced Multimedia Router (EMR)","n":"Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-352"],"y":2020},{"id":"CVE-2020-10148","v":"SolarWinds","p":"Orion","n":"SolarWinds Orion Authentication Bypass Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-288"],"y":2020},{"id":"CVE-2020-0986","v":"Microsoft","p":"Windows","n":"Microsoft Windows Kernel Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-0968","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-0938","v":"Microsoft","p":"Windows","n":"Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-0878","v":"Microsoft","p":"Edge and Internet Explorer","n":"Microsoft Edge and Internet Explorer Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-0688","v":"Microsoft","p":"Exchange Server","n":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1110","T1114","T1190","T1505.003"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-287"],"y":2020},{"id":"CVE-2020-0683","v":"Microsoft","p":"Windows","n":"Microsoft Windows Installer Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2020},{"id":"CVE-2020-0674","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2020},{"id":"CVE-2020-0646","v":"Microsoft","p":".NET Framework","n":"Microsoft .NET Framework Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-91"],"y":2020},{"id":"CVE-2020-0601","v":"Microsoft","p":"Windows","n":"Microsoft Windows CryptoAPI Spoofing Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-295"],"y":2020},{"id":"CVE-2020-0069","v":"MediaTek","p":"Multiple Chipsets","n":"Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1068"],"mt":["exploitation_technique"],"w":["CWE-787"],"y":2020},{"id":"CVE-2020-0041","v":"Android","p":"Android Kernel","n":"Android Kernel Out-of-Bounds Write Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2020},{"id":"CVE-2019-9978","v":"WordPress","p":"Social Warfare Plugin","n":"WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-79"],"y":2019},{"id":"CVE-2019-9082","v":"ThinkPHP","p":"ThinkPHP","n":"ThinkPHP Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-306","CWE-94"],"y":2019},{"id":"CVE-2019-8394","v":"Zoho","p":"ManageEngine","n":"Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-434"],"y":2019},{"id":"CVE-2019-7481","v":"SonicWall","p":"SMA100","n":"SonicWall SMA100 SQL Injection Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-89"],"y":2019},{"id":"CVE-2019-6223","v":"Apple","p":"iOS and macOS","n":"Apple iOS and macOS Group Facetime Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-5591","v":"Fortinet","p":"FortiOS","n":"Fortinet FortiOS Default Configuration Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1005","T1133","T1557"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-306"],"y":2019},{"id":"CVE-2019-5544","v":"VMware","p":"VMware ESXi and Horizon DaaS","n":"VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-787"],"y":2019},{"id":"CVE-2019-4716","v":"IBM","p":"Planning Analytics","n":"IBM Planning Analytics Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2019},{"id":"CVE-2019-3398","v":"Atlassian","p":"Confluence Server and Data Center","n":"Atlassian Confluence Server and Data Center Path Traversal Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059","T1202"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-22"],"y":2019},{"id":"CVE-2019-3396","v":"Atlassian","p":"Confluence Server and Data Server","n":"Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1090","T1133","T1202"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-22"],"y":2019},{"id":"CVE-2019-2215","v":"Android","p":"Android Kernel","n":"Android Kernel Use-After-Free Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416"],"y":2019},{"id":"CVE-2019-20085","v":"TVT","p":"NVMS-1000","n":"TVT NVMS-1000 Directory Traversal Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2019},{"id":"CVE-2019-19781","v":"Citrix","p":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","n":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1083","T1133"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-22"],"y":2019},{"id":"CVE-2019-19356","v":"Netis","p":"WF2419 Devices","n":"Netis WF2419 Devices Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2019},{"id":"CVE-2019-18988","v":"TeamViewer","p":"Desktop","n":"TeamViewer Desktop Bypass Remote Login Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-521"],"y":2019},{"id":"CVE-2019-18935","v":"Progress","p":"Telerik UI for ASP.NET AJAX","n":"Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1041","T1190","T1496","T1505.003"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-502"],"y":2019},{"id":"CVE-2019-18187","v":"Trend Micro","p":"OfficeScan","n":"Trend Micro OfficeScan Directory Traversal Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2019},{"id":"CVE-2019-17558","v":"Apache","p":"Solr","n":"Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-74"],"y":2019},{"id":"CVE-2019-17026","v":"Mozilla","p":"Firefox and Thunderbird","n":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-843"],"y":2019},{"id":"CVE-2019-16759","v":"vBulletin","p":"vBulletin","n":"vBulletin PHP Module Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-94"],"y":2019},{"id":"CVE-2019-1653","v":"Cisco","p":"Small Business RV320 and RV325 Routers","n":"Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1005","T1007","T1082","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-284"],"y":2019},{"id":"CVE-2019-16256","v":"SIMalliance","p":"Toolbox Browser","n":"SIMalliance Toolbox Browser Command Injection Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-15949","v":"Nagios","p":"Nagios XI","n":"Nagios XI Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2019},{"id":"CVE-2019-15752","v":"Docker","p":"Desktop Community Edition","n":"Docker Desktop Community Edition Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-732"],"y":2019},{"id":"CVE-2019-1429","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-416","CWE-787"],"y":2019},{"id":"CVE-2019-1367","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-787"],"y":2019},{"id":"CVE-2019-13608","v":"Citrix","p":"StoreFront Server","n":"Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1003","T1005","T1046","T1059","T1078"],"mt":["primary_impact","secondary_impact"],"w":["CWE-611"],"y":2019},{"id":"CVE-2019-1215","v":"Microsoft","p":"Windows","n":"Microsoft Windows Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-1214","v":"Microsoft","p":"Windows","n":"Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-11634","v":"Citrix","p":"Workspace Application and Receiver for Windows","n":"Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1003","T1005","T1046","T1059","T1078","T1190","T1486"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":[],"y":2019},{"id":"CVE-2019-11580","v":"Atlassian","p":"Crowd and Crowd Data Center","n":"Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059"],"mt":["primary_impact"],"w":[],"y":2019},{"id":"CVE-2019-11539","v":"Ivanti","p":"Pulse Connect Secure and Pulse Policy Secure","n":"Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-78"],"y":2019},{"id":"CVE-2019-11510","v":"Ivanti","p":"Pulse Connect Secure","n":"Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1083","T1133","T1552.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-22"],"y":2019},{"id":"CVE-2019-0863","v":"Microsoft","p":"Windows","n":"Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-0859","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-0808","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-0803","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-0797","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2019},{"id":"CVE-2019-0708","v":"Microsoft","p":"Remote Desktop Services","n":"Microsoft Remote Desktop Services Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059.004","T1133","T1498"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-416"],"y":2019},{"id":"CVE-2019-0604","v":"Microsoft","p":"SharePoint","n":"Microsoft SharePoint Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"partial","r":true,"t":["T1003","T1041","T1190","T1505.003","T1608.001"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-20"],"y":2019},{"id":"CVE-2019-0541","v":"Microsoft","p":"MSHTML","n":"Microsoft MSHTML Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-77"],"y":2019},{"id":"CVE-2019-0211","v":"Apache","p":"HTTP Server","n":"Apache HTTP Server Privilege Escalation Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1068"],"mt":["exploitation_technique"],"w":["CWE-416"],"y":2019},{"id":"CVE-2018-8653","v":"Microsoft","p":"Internet Explorer","n":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2018},{"id":"CVE-2018-7600","v":"Drupal","p":"Drupal Core","n":"Drupal Core Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1190","T1485","T1496"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-20"],"y":2018},{"id":"CVE-2018-6789","v":"Exim","p":"Exim","n":"Exim Buffer Overflow Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-119"],"y":2018},{"id":"CVE-2018-4939","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1133","T1190","T1203"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-502"],"y":2018},{"id":"CVE-2018-4878","v":"Adobe","p":"Flash Player","n":"Adobe Flash Player Use-After-Free Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1041","T1204.002","T1219"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-416"],"y":2018},{"id":"CVE-2018-2380","v":"SAP","p":"Customer Relationship Management (CRM)","n":"SAP Customer Relationship Management (CRM) Path Traversal Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-22"],"y":2018},{"id":"CVE-2018-20062","v":"ThinkPHP","p":"noneCms","n":"ThinkPHP \"noneCms\" Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2018},{"id":"CVE-2018-18325","v":"DotNetNuke (DNN)","p":"DotNetNuke (DNN)","n":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-326"],"y":2018},{"id":"CVE-2018-15961","v":"Adobe","p":"ColdFusion","n":"Adobe ColdFusion Unrestricted File Upload Vulnerability","d":"2021-11-03","s":"mapped","g":"partial","r":false,"t":["T1190","T1491.002"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-434"],"y":2018},{"id":"CVE-2018-15811","v":"DotNetNuke (DNN)","p":"DotNetNuke (DNN)","n":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-326"],"y":2018},{"id":"CVE-2018-14558","v":"Tenda","p":"AC7, AC9, and AC10 Routers","n":"Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-78"],"y":2018},{"id":"CVE-2018-13379","v":"Fortinet","p":"FortiOS","n":"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1190"],"mt":["exploitation_technique"],"w":["CWE-22"],"y":2018},{"id":"CVE-2018-11776","v":"Apache","p":"Struts","n":"Apache Struts Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059","T1190","T1496"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-20"],"y":2018},{"id":"CVE-2018-0802","v":"Microsoft","p":"Office","n":"Microsoft Office Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-787"],"y":2018},{"id":"CVE-2018-0798","v":"Microsoft","p":"Office","n":"Microsoft Office Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-787"],"y":2018},{"id":"CVE-2018-0296","v":"Cisco","p":"Adaptive Security Appliance (ASA)","n":"Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1005","T1202"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-20"],"y":2018},{"id":"CVE-2018-0171","v":"Cisco","p":"IOS and IOS XE","n":"Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2018},{"id":"CVE-2017-9822","v":"DotNetNuke (DNN)","p":"DotNetNuke (DNN)","n":"DotNetNuke (DNN) Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1190","T1496"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-9805","v":"Apache","p":"Struts","n":"Apache Struts Deserialization of Untrusted Data Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-502"],"y":2017},{"id":"CVE-2017-9248","v":"Progress","p":"ASP.NET AJAX and Sitefinity","n":"Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-522"],"y":2017},{"id":"CVE-2017-8759","v":"Microsoft","p":".NET Framework","n":"Microsoft .NET Framework Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-7269","v":"Microsoft","p":"Internet Information Services (IIS)","n":"Microsoft Windows Server Buffer Overflow Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-6327","v":"Symantec","p":"Symantec Messaging Gateway","n":"Symantec Messaging Gateway Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-5638","v":"Apache","p":"Struts","n":"Apache Struts Remote Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1005","T1059","T1190"],"mt":["exploitation_technique","primary_impact","secondary_impact"],"w":["CWE-20"],"y":2017},{"id":"CVE-2017-16651","v":"Roundcube","p":"Roundcube Webmail","n":"Roundcube Webmail File Disclosure Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-552"],"y":2017},{"id":"CVE-2017-11882","v":"Microsoft","p":"Office","n":"Microsoft Office Memory Corruption Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":true,"t":["T1059","T1566.001"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-11774","v":"Microsoft","p":"Office","n":"Microsoft Office Outlook Security Feature Bypass Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-119"],"y":2017},{"id":"CVE-2017-0199","v":"Microsoft","p":"Office and WordPad","n":"Microsoft Office and WordPad Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":[],"y":2017},{"id":"CVE-2017-0143","v":"Microsoft","p":"Windows","n":"Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-20"],"y":2017},{"id":"CVE-2016-9563","v":"SAP","p":"NetWeaver","n":"SAP NetWeaver XML External Entity (XXE) Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-611"],"y":2016},{"id":"CVE-2016-7255","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2016},{"id":"CVE-2016-4437","v":"Apache","p":"Shiro","n":"Apache Shiro Code Execution Vulnerability","d":"2021-11-03","s":"mapped","g":"full","r":false,"t":["T1059","T1190"],"mt":["exploitation_technique","primary_impact"],"w":["CWE-284"],"y":2016},{"id":"CVE-2016-3976","v":"SAP","p":"NetWeaver","n":"SAP NetWeaver Directory Traversal Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-22"],"y":2016},{"id":"CVE-2016-3718","v":"ImageMagick","p":"ImageMagick","n":"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2016},{"id":"CVE-2016-3715","v":"ImageMagick","p":"ImageMagick","n":"ImageMagick Arbitrary File Deletion Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-284"],"y":2016},{"id":"CVE-2016-3643","v":"SolarWinds","p":"Virtualization Manager","n":"SolarWinds Virtualization Manager Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2016},{"id":"CVE-2016-3235","v":"Microsoft","p":"Office","n":"Microsoft Office OLE DLL Side Loading Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-264"],"y":2016},{"id":"CVE-2016-0185","v":"Microsoft","p":"Windows","n":"Microsoft Windows Media Center Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-20"],"y":2016},{"id":"CVE-2016-0167","v":"Microsoft","p":"Win32k","n":"Microsoft Win32k Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-264"],"y":2016},{"id":"CVE-2015-4852","v":"Oracle","p":"WebLogic Server","n":"Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-502"],"y":2015},{"id":"CVE-2015-1641","v":"Microsoft","p":"Office","n":"Microsoft Office Memory Corruption Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":["CWE-399"],"y":2015},{"id":"CVE-2014-1812","v":"Microsoft","p":"Windows","n":"Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-255"],"y":2014},{"id":"CVE-2012-3152","v":"Oracle","p":"Fusion Middleware","n":"Oracle Fusion Middleware Unspecified Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2012},{"id":"CVE-2012-0158","v":"Microsoft","p":"MSCOMCTL.OCX","n":"Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":true,"t":[],"mt":[],"w":["CWE-94"],"y":2012},{"id":"CVE-2010-5326","v":"SAP","p":"NetWeaver","n":"SAP NetWeaver Remote Code Execution Vulnerability","d":"2021-11-03","s":"unmapped","g":"","r":false,"t":[],"mt":[],"w":[],"y":2010}]}