Skip to content
COOEY
LIVE FEED
3614 events · 4 sources · newest first
Events in view
3614
all sources
Critical
1837
severity
Active sources
4
collectors
Last sync
2026-08-27 18:01
UTC
All data Vulns · 3614Regulatory · 144News · 448 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1786CISA KEV · 1686CISA advisory · 123DC3 DCISE · 19
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2023-10-31 CISA KEV
F5 BIG-IP Configuration Utility SQL Injection Vulnerability HIGH
F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through the BIG-IP management port and/or self IP addresses to execute system...
2023-10-31 CISA KEV
F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability CRITICAL
F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the...
2023-10-31 NVD CVE
CVE-2023-42425: An issue in Turing Video Turing Edge+ EVC5FD v.1.38.6 allows remote attacker to CRITICAL
An issue in Turing Video Turing Edge+ EVC5FD v.1.38.6 allows remote attacker to execute arbitrary code and obtain sensitive information via the cloud connection components.
2023-10-26 CISA KEV
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability HIGH
Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.
2023-10-25 NVD CVE
CVE-2023-46010: An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via t CRITICAL
An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component.
2023-10-23 CISA KEV
Cisco IOS XE Web UI Command Injection Vulnerability HIGH
Cisco IOS XE contains a command injection vulnerability in the web user interface. When chained with CVE-2023-20198, the attacker can leverage the new local user to elevate privilege to root and write the implant to...
2023-10-19 NVD CVE
CVE-2023-45379: In the module "Rotator Img" (posrotatorimg) in versions at least up to 1.1 from CRITICAL
In the module "Rotator Img" (posrotatorimg) in versions at least up to 1.1 from PosThemes for PrestaShop, a guest can perform SQL injection.
2023-10-19 NVD CVE
CVE-2023-45992: A vulnerability in the web-based interface of the RUCKUS Cloudpath product on ve CRITICAL
A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a...
2023-10-19 NVD CVE
CVE-2022-37830: Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS). CRITICAL
Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS).
2023-10-18 CISA KEV
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability CRITICAL
Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA...
2023-10-16 CISA KEV
Cisco IOS XE Web UI Privilege Escalation Vulnerability HIGH
Cisco IOS XE Web UI contains a privilege escalation vulnerability in the web user interface that could allow a remote, unauthenticated attacker to create an account with privilege level 15 access. The attacker can...
2023-10-14 NVD CVE
CVE-2023-45853: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buf CRITICAL
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib...
2023-10-10 CISA KEV
Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability HIGH
Cisco IOS and IOS XE contain an out-of-bounds write vulnerability in the Group Encrypted Transport VPN (GET VPN) feature that could allow an authenticated, remote attacker who has administrative control of either a...
2023-10-10 CISA KEV
Adobe Acrobat and Reader Use-After-Free Vulnerability HIGH
Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.
2023-10-10 CISA KEV
Microsoft Skype for Business Privilege Escalation Vulnerability HIGH
Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.
2023-10-10 CISA KEV
Microsoft WordPad Information Disclosure Vulnerability HIGH
Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.
2023-10-10 CISA KEV
HTTP/2 Rapid Reset Attack Vulnerability HIGH
HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
2023-10-05 CISA KEV
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability CRITICAL
Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.
2023-10-05 CISA KEV
Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability CRITICAL
Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.
2023-10-05 CISA KEV
Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability HIGH
Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation.
2023-10-04 CISA KEV
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability HIGH
Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.
2023-10-04 CISA KEV
JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL
JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.
2023-10-03 CISA KEV
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability HIGH
Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
2023-10-02 CISA KEV
Google Chromium libvpx Heap Buffer Overflow Vulnerability HIGH
Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web...
2023-09-28 CISA KEV
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability HIGH
Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code...
2023-09-27 NVD CVE
CVE-2023-43234: DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) v CRITICAL
DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_control.php via the $activepath and $filename parameters.
2023-09-27 NVD CVE
CVE-2023-41449: An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute a CRITICAL
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
2023-09-25 CISA KEV
Apple Multiple Products Kernel Privilege Escalation Vulnerability HIGH
Apple iOS, iPadOS, macOS, and watchOS contain an unspecified vulnerability that allows for local privilege escalation.
2023-09-25 NVD CVE
CVE-2023-43141: TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to In CRITICAL
TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control.
2023-09-25 CISA KEV
Apple Multiple Products WebKit Code Execution Vulnerability HIGH
Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use...
2023-09-25 CISA KEV
Apple Multiple Products Improper Certificate Validation Vulnerability HIGH
Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation.
2023-09-21 CISA KEV
Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability HIGH
Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code...
2023-09-20 NVD CVE
CVE-2023-38888: Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allow CRITICAL
Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to...
2023-09-19 CISA KEV
MinIO Security Feature Bypass Vulnerability HIGH
MinIO contains a security feature bypass vulnerability that allows an attacker to use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket` to...
2023-09-18 CISA KEV
Realtek SDK Improper Input Validation Vulnerability HIGH
Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.
2023-09-18 CISA KEV
Laravel Ignition File Upload Vulnerability CRITICAL
Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of file_get_contents() and file_put_contents().
2023-09-18 CISA KEV
Zyxel EMG2926 Routers Command Injection Vulnerability CRITICAL
Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute malicious commands on the...
2023-09-18 CISA KEV
Samsung Mobile Devices Use-After-Free Vulnerability HIGH
Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.
2023-09-14 CISA KEV
Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability HIGH
Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.
2023-09-13 CISA KEV
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to...
◀ PREV PAGE 59 / 91 NEXT ▶