Skip to content
COOEY
LIVE FEED
1581 events · 4 sources · newest first
Events in view
1581
all sources
Critical
0
severity
Active sources
4
collectors
Last sync
2026-08-26 18:00
UTC
All data Vulns · 3593Regulatory · 144News · 410 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1776CISA KEV · 1683CISA advisory · 115DC3 DCISE · 19
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2022-08-25 CISA KEV
Grafana Authentication Bypass Vulnerability HIGH
Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss.
2022-08-22 CISA KEV
Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability HIGH
A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks.
2022-08-18 CISA KEV
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability HIGH
An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.
2022-08-18 CISA KEV
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability HIGH
Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which can allow for remote code execution when chained.
2022-08-18 CISA KEV
SAP Multiple Products HTTP Request Smuggling Vulnerability HIGH
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's...
2022-08-18 CISA KEV
Apple iOS and macOS Out-of-Bounds Write Vulnerability HIGH
Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges.
2022-08-18 CISA KEV
Apple iOS and macOS Out-of-Bounds Write Vulnerability HIGH
Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.
2022-08-18 CISA KEV
Google Chromium Intents Insufficient Input Validation Vulnerability HIGH
Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect...
2022-08-18 CISA KEV
Microsoft Windows Runtime Remote Code Execution Vulnerability HIGH
Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution.
2022-08-09 CISA KEV
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability HIGH
A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.
2022-07-29 CISA KEV
Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability HIGH
Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into Confluence and access all...
2022-07-12 CISA KEV
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability HIGH
Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges.
2022-07-01 CISA KEV
Microsoft Windows LSA Spoofing Vulnerability HIGH
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.
2022-06-27 CISA KEV
Google Chromium PopupBlocker Security Bypass Vulnerability HIGH
Google Chromium PopupBlocker contains an insufficient policy enforcement vulnerability that allows a remote attacker to bypass navigation restrictions via a crafted iframe. This vulnerability could affect multiple...
2022-06-27 CISA KEV
Apple Multiple Products Memory Corruption Vulnerability HIGH
Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.
2022-06-27 CISA KEV
Apple Multiple Products Memory Corruption Vulnerability HIGH
Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.
2022-06-27 CISA KEV
Apple iOS and iPadOS Buffer Overflow Vulnerability HIGH
Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges.
2022-06-27 CISA KEV
Apple Multiple Products Memory Corruption Vulnerability HIGH
Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.
2022-06-27 CISA KEV
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability HIGH
The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.
2022-06-27 CISA KEV
Apple Multiple Products Use-After-Free Vulnerability HIGH
A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges.
2022-06-09 CISA KEV
SAP NetWeaver SQL Injection Vulnerability HIGH
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
2022-06-09 CISA KEV
SAP NetWeaver Unrestricted File Upload Vulnerability HIGH
SAP NetWeaver contains a vulnerability that allows unrestricted file upload.
2022-06-09 CISA KEV
SAP NetWeaver Information Disclosure Vulnerability HIGH
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.
2022-06-08 CISA KEV
Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability HIGH
The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to...
2022-06-08 CISA KEV
Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability HIGH
Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.
2022-06-08 CISA KEV
Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability HIGH
The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).
2022-06-08 CISA KEV
Adobe Flash Player Unspecified Vulnerability HIGH
Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
2022-06-08 CISA KEV
Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability HIGH
Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
2022-06-08 CISA KEV
Adobe Acrobat and Reader Use-After-Free Vulnerability HIGH
Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.
2022-06-08 CISA KEV
Microsoft PowerPoint Buffer Overflow Vulnerability HIGH
Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.
2022-06-08 CISA KEV
Adobe Flash Player Memory Corruption Vulnerability HIGH
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
2022-06-08 CISA KEV
Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability HIGH
Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).
2022-06-08 CISA KEV
Microsoft Office Buffer Overflow Vulnerability HIGH
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.
2022-06-08 CISA KEV
Microsoft Office Object Record Corruption Vulnerability HIGH
Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.
2022-06-08 CISA KEV
Adobe Acrobat and Reader Unspecified Vulnerability HIGH
Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
2022-06-08 CISA KEV
Adobe Acrobat and Reader Buffer Overflow Vulnerability HIGH
Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.
2022-06-08 CISA KEV
Microsoft Word Malformed Object Pointer Vulnerability HIGH
Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.
2022-06-08 CISA KEV
Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability HIGH
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.
2022-06-08 CISA KEV
Adobe Flash Player Memory Corruption Vulnerability HIGH
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
2022-06-08 CISA KEV
Google Chromium V8 Out-of-Bounds Write Vulnerability HIGH
Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web...
◀ PREV PAGE 25 / 40 NEXT ▶