Skip to content
COOEY
LIVE FEED
3614 events · 4 sources · newest first
Events in view
3614
all sources
Critical
1837
severity
Active sources
4
collectors
Last sync
2026-08-27 18:01
UTC
All data Vulns · 3614Regulatory · 144News · 448 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1786CISA KEV · 1686CISA advisory · 123DC3 DCISE · 19
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2023-09-13 CISA KEV
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability HIGH
Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that...
2023-09-13 CISA KEV
Android Framework Privilege Escalation Vulnerability HIGH
Android Framework contains an unspecified vulnerability that allows for privilege escalation.
2023-09-12 CISA KEV
Microsoft Streaming Service Proxy Privilege Escalation Vulnerability HIGH
Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation.
2023-09-12 CISA KEV
Microsoft Word Information Disclosure Vulnerability HIGH
Microsoft Word contains an unspecified vulnerability that allows for information disclosure.
2023-09-12 NVD CVE
CVE-2023-39637: D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnera CRITICAL
D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis.
2023-09-12 NVD CVE
CVE-2023-4501: User authentication with username and password credentials is ineffective in Ope CRITICAL
User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as...
2023-09-11 CISA KEV
Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability HIGH
Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained...
2023-09-11 CISA KEV
Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability HIGH
Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.
2023-09-08 NVD CVE
CVE-2021-27715: An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allo CRITICAL
An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authentication and execute arbitrary code via crafted HTTP request.
2023-09-06 NVD CVE
CVE-2023-20269: A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appl MEDIUM ◈ 2 sources · orig. NVD CVE
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a...
2023-09-06 CISA KEV
Apache RocketMQ Command Execution Vulnerability HIGH
Several components of Apache RocketMQ, including NameServer, Broker, and Controller, are exposed to the extranet and lack permission verification. An attacker can exploit this vulnerability by using the update...
2023-09-05 NVD CVE
CVE-2023-36361: Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via th CRITICAL
Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the p_table_name parameter.
2023-09-05 NVD CVE
CVE-2023-41009: File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to CRITICAL
File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute arbitrary code via a crafted script to the authorization field in the header.
2023-08-29 NVD CVE
CVE-2023-41265: An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windo CRITICAL ◈ 2 sources · orig. NVD CVE
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022...
2023-08-29 NVD CVE
CVE-2021-3262: TripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20 CRITICAL
TripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20201123-184084 allows unsafe data inputs in POST body parameters from end users without sanitizing using server-side logic. It was...
2023-08-24 CISA KEV
Ignite Realtime Openfire Path Traversal Vulnerability HIGH
Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users.
2023-08-24 CISA KEV
RARLAB WinRAR Code Execution Vulnerability CRITICAL
RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.
2023-08-22 CISA KEV
Ivanti Sentry Authentication Bypass Vulnerability CRITICAL
Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass authentication controls on the administrative interface due to an...
2023-08-22 NVD CVE
CVE-2022-48174: There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In CRITICAL
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
2023-08-22 CISA KEV
Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability CRITICAL
Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network...
2023-08-21 CISA KEV
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability HIGH
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.
2023-08-21 NVD CVE
CVE-2023-39807: N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection CRITICAL
N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php.
2023-08-21 NVD CVE
CVE-2023-39808: N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root CRITICAL
N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password that allows attackers to login with root privileges via the SSH service. The cleartext password corresponding to the...
2023-08-21 NVD CVE
CVE-2023-39809: N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain an OS command in CRITICAL
N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain an OS command injection vulnerability via shell metacharacters in the system_hostname parameter at /manage/network-basic.php.
2023-08-21 NVD CVE
CVE-2020-28715: An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN0 CRITICAL
An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS).
2023-08-16 NVD CVE
CVE-2023-38894: A Prototype Pollution issue in Cronvel Tree-kit v.0.7.4 and before allows a remo CRITICAL
A Prototype Pollution issue in Cronvel Tree-kit v.0.7.4 and before allows a remote attacker to execute arbitrary code via the extend function.
2023-08-16 CISA KEV
Citrix Content Collaboration ShareFile Improper Access Control Vulnerability HIGH
Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely compromise customer-managed ShareFile storage zones controllers.
2023-08-16 NVD CVE
CVE-2020-26037: Directory Traversal vulnerability in Server functionalty in Even Balance Punkbus CRITICAL
Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905 allows remote attackers to execute arbitrary code.
2023-08-14 NVD CVE
CVE-2023-37847: novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability. CRITICAL
novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.
2023-08-14 NVD CVE
CVE-2023-30186: A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3 CRITICAL
A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.
2023-08-14 NVD CVE
CVE-2023-30187: An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 CRITICAL
An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.
2023-08-10 NVD CVE
CVE-2023-39806: iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bak CRITICAL
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.
2023-08-10 NVD CVE
CVE-2023-39805: iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the whe CRITICAL
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php.
2023-08-09 NVD CVE
CVE-2023-33468: KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.13 CRITICAL
KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection...
2023-08-09 CISA KEV
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability HIGH
Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).
2023-08-09 NVD CVE
CVE-2023-39004: Insecure permissions in the configuration directory (/conf/) of OPNsense Communi CRITICAL
Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allow attackers to access sensitive information (e.g., hashed root password)...
2023-08-08 NVD CVE
CVE-2023-38186: Windows Mobile Device Management Elevation of Privilege Vulnerability HIGH
Windows Mobile Device Management Elevation of Privilege Vulnerability
2023-08-08 NVD CVE
CVE-2023-36903: Windows System Assessment Tool Elevation of Privilege Vulnerability HIGH
Windows System Assessment Tool Elevation of Privilege Vulnerability
2023-08-07 CISA KEV
Zyxel P660HN-T1A Routers Command Injection Vulnerability HIGH
Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user and exploited via the remote_host parameter of the...
2023-08-05 NVD CVE
CVE-2023-36095: An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arb CRITICAL
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_object_prompt.
◀ PREV PAGE 60 / 91 NEXT ▶