Skip to content
COOEY
LIVE FEED
1777 events · 4 sources · newest first
Events in view
1777
all sources
Critical
1499
severity
Active sources
4
collectors
Last sync
2026-08-27 06:00
UTC
All data Vulns · 3595Regulatory · 144News · 427 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1777CISA KEV · 1683CISA advisory · 116DC3 DCISE · 19
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2021-05-19 NVD CVE
CVE-2017-17674: BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due t CRITICAL
BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port...
2021-05-03 NVD CVE
CVE-2021-28860: In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an CRITICAL
In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via '__proto__' through the mutate() and merge() functions. The polluted attribute will be directly assigned to every object in...
2021-04-23 NVD CVE
CVE-2021-22205: An issue has been discovered in GitLab CE/EE affecting all versions starting fro CRITICAL ◈ 2 sources · orig. NVD CVE
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.
2021-04-23 NVD CVE
CVE-2021-22893: Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication b CRITICAL ◈ 2 sources · orig. NVD CVE
Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can...
2021-04-09 NVD CVE
CVE-2021-20021: A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attac CRITICAL ◈ 2 sources · orig. NVD CVE
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.
2021-03-04 NVD CVE
CVE-2020-24914: A PHP object injection bug in profile.php in qcubed (all versions including 3.1. CRITICAL
A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable "strProfileData" and allows an unauthenticated attacker to execute code via a...
2021-03-04 NVD CVE
CVE-2020-24913: A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profil CRITICAL
A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.
2021-02-27 NVD CVE
CVE-2021-27132: SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header CRITICAL
SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header.
2021-02-24 NVD CVE
CVE-2021-21972: The vSphere Client (HTML5) contains a remote code execution vulnerability in a v CRITICAL ◈ 2 sources · orig. NVD CVE
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted...
2021-02-16 NVD CVE
CVE-2020-24841: PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.j CRITICAL
PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent...
2021-02-04 NVD CVE
CVE-2021-20016: A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a re CRITICAL ◈ 2 sources · orig. NVD CVE
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability...
2020-12-21 NVD CVE
CVE-2020-35276: EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can CRITICAL
EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user.
2020-12-11 NVD CVE
CVE-2020-29574: An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 CRITICAL ◈ 2 sources · orig. NVD CVE
An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.
2020-11-27 NVD CVE
CVE-2017-15681: In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists w CRITICAL
In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.
2020-11-02 NVD CVE
CVE-2020-24881: SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file CRITICAL
SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.
2020-10-28 NVD CVE
CVE-2018-19949: If exploited, this command injection vulnerability could allow remote attackers CRITICAL ◈ 2 sources · orig. NVD CVE
If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS...
2020-10-23 NVD CVE
CVE-2020-25466: A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which c CRITICAL
A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code.
2020-10-20 NVD CVE
CVE-2020-3992: OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before E CRITICAL ◈ 2 sources · orig. NVD CVE
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network...
2020-10-12 NVD CVE
CVE-2020-26867: ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deseria CRITICAL
ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.
2020-09-30 NVD CVE
CVE-2018-5353: The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 bui CRITICAL
The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows remote attackers to execute code and escalate privileges via spoofing. It does not authenticate the intended server...
2020-09-14 NVD CVE
CVE-2020-25576: An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of CRITICAL
An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints.
2020-09-03 NVD CVE
CVE-2020-24193: A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System CRITICAL
A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter.
2020-07-24 NVD CVE
CVE-2020-12812: An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6 CRITICAL ◈ 2 sources · orig. NVD CVE
An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of...
2020-05-21 NVD CVE
CVE-2020-0901: A remote code execution vulnerability exists in Microsoft Excel software when th CRITICAL
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code...
2020-05-06 NVD CVE
CVE-2020-3187: A vulnerability in the web services interface of Cisco Adaptive Security Applian CRITICAL
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory...
2020-05-01 NVD CVE
CVE-2020-10683: dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Enti CRITICAL
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the...
2020-03-12 NVD CVE
CVE-2020-0796: A remote code execution vulnerability exists in the way that the Microsoft Serve CRITICAL ◈ 2 sources · orig. NVD CVE
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.
2020-03-02 NVD CVE
CVE-2020-9546: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee CRITICAL
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).
2020-03-02 NVD CVE
CVE-2020-9548: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee CRITICAL
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).
2020-02-24 NVD CVE
CVE-2020-1938: When using the Apache JServ Protocol (AJP), care must be taken when trusting inc CRITICAL ◈ 2 sources · orig. NVD CVE
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection....
2019-12-27 NVD CVE
CVE-2019-19781: An issue was discovered in Citrix Application Delivery Controller (ADC) and Gate CRITICAL ◈ 2 sources · orig. NVD CVE
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
2019-12-23 NVD CVE
CVE-2019-11049: In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom h MEDIUM
In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in...
2019-11-27 NVD CVE
CVE-2019-18184: Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell m CRITICAL
Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.
2019-08-16 NVD CVE
CVE-2019-15107: An issue was discovered in Webmin <=1.920. The parameter old in password_change. CRITICAL ◈ 2 sources · orig. NVD CVE
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.
2019-08-08 NVD CVE
CVE-2019-1971: A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Softwar CRITICAL
A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and execute arbitrary commands with root...
2019-08-07 NVD CVE
CVE-2019-1895: A vulnerability in the Virtual Network Computing (VNC) console implementation of CRITICAL
A vulnerability in the Virtual Network Computing (VNC) console implementation of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to access the VNC console session...
2019-05-22 NVD CVE
CVE-2019-11634: Citrix Workspace App before 1904 for Windows has Incorrect Access Control. CRITICAL ◈ 2 sources · orig. NVD CVE
Citrix Workspace App before 1904 for Windows has Incorrect Access Control.
2019-04-26 NVD CVE
CVE-2019-2725: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar CRITICAL ◈ 2 sources · orig. NVD CVE
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability...
2019-02-05 NVD CVE
CVE-2017-18362: ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable CRITICAL ◈ 2 sources · orig. NVD CVE
ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively...
2019-02-05 NVD CVE
CVE-2018-20753: Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0 CRITICAL ◈ 2 sources · orig. NVD CVE
Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively...
◀ PREV PAGE 44 / 45 NEXT ▶