Skip to content
COOEY
LIVE FEED
3620 events · 4 sources · newest first
Events in view
3620
all sources
Critical
1842
severity
Active sources
4
collectors
Last sync
2026-08-28 00:00
UTC
All data Vulns · 3620Regulatory · 144News · 464 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1791CISA KEV · 1686CISA advisory · 124DC3 DCISE · 19
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2023-05-12 CISA KEV
Red Hat Polkit Incorrect Authorization Vulnerability HIGH
Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.
2023-05-12 CISA KEV
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability HIGH
Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery...
2023-05-11 NVD CVE
CVE-2023-29863: Medical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a CRITICAL
Medical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a SQL injection vulnerability via the tem:statement parameter in the WSDL files.
2023-05-09 CISA KEV
Microsoft Win32K Privilege Escalation Vulnerability HIGH
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.
2023-05-08 NVD CVE
CVE-2023-30185: CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerabil CRITICAL
CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component \attachment\SystemAttachmentServices.php.
2023-05-05 NVD CVE
CVE-2023-30242: NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the comp CRITICAL
NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.
2023-05-04 NVD CVE
CVE-2023-23059: An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windo CRITICAL
An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions within the default installation and allows attackers to execute arbitrary code and gain...
2023-05-02 NVD CVE
CVE-2023-29778: GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/li CRITICAL
GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.
2023-05-01 CISA KEV
TP-Link Archer AX-21 Command Injection Vulnerability HIGH
TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution.
2023-05-01 CISA KEV
Oracle WebLogic Server Unspecified Vulnerability HIGH
Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server.
2023-05-01 CISA KEV
Apache Log4j2 Deserialization of Untrusted Data Vulnerability CRITICAL
Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain...
2023-04-27 NVD CVE
CVE-2022-47758: Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attacke CRITICAL
Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack.
2023-04-26 NVD CVE
CVE-2023-30404: Aigital Wireless-N Repeater Mini_Router v0.131229 was discovered to contain a re CRITICAL
Aigital Wireless-N Repeater Mini_Router v0.131229 was discovered to contain a remote code execution (RCE) vulnerability via the sysCmd parameter in the formSysCmd function. This vulnerability is exploited via a...
2023-04-21 CISA KEV
MinIO Information Disclosure Vulnerability HIGH
MinIO contains a vulnerability in a cluster deployment where MinIO returns all environment variables, which allows for information disclosure.
2023-04-21 NVD CVE
CVE-2023-2206: A vulnerability classified as critical has been found in Campcodes Retro Basketb MEDIUM
A vulnerability classified as critical has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file contactus.php. The manipulation of the argument email leads to sql...
2023-04-21 CISA KEV
PaperCut MF/NG Improper Access Control Vulnerability CRITICAL
PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code execution in the context of system.
2023-04-21 CISA KEV
Google Chrome Skia Integer Overflow Vulnerability HIGH
Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This...
2023-04-19 CISA KEV
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability HIGH
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an...
2023-04-18 NVD CVE
CVE-2022-46640: Nanoleaf Desktop App before v1.3.1 was discovered to contain a command injection CRITICAL
Nanoleaf Desktop App before v1.3.1 was discovered to contain a command injection vulnerability which is exploited via a crafted HTTP request.
2023-04-17 CISA KEV
Apple macOS Use-After-Free Vulnerability HIGH
Apple macOS contains a use-after-free vulnerability that could allow for privilege escalation.
2023-04-17 CISA KEV
Google Chromium V8 Type Confusion Vulnerability HIGH
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers...
2023-04-13 NVD CVE
CVE-2023-27812: bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerabilit CRITICAL
bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the delete_file() function.
2023-04-13 CISA KEV
Novi Survey Insecure Deserialization Vulnerability HIGH
Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account.
2023-04-13 CISA KEV
Android Framework Privilege Escalation Vulnerability HIGH
Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed.
2023-04-13 NVD CVE
CVE-2023-27667: Auto Dealer Management System v1.0 was discovered to contain a SQL injection vul CRITICAL
Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability.
2023-04-13 NVD CVE
CVE-2023-27779: AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via CRITICAL
AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form.
2023-04-11 CISA KEV
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability CRITICAL
Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.
2023-04-10 CISA KEV
Apple Multiple Products WebKit Use-After-Free Vulnerability HIGH
Apple iOS, iPadOS, macOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use...
2023-04-10 CISA KEV
Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability HIGH
Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges.
2023-04-07 CISA KEV
Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability CRITICAL
Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context.
2023-04-07 CISA KEV
Arm Mali GPU Kernel Driver Information Disclosure Vulnerability HIGH
Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
2023-04-07 CISA KEV
Veritas Backup Exec Agent Command Execution Vulnerability CRITICAL
Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.
2023-04-07 CISA KEV
Veritas Backup Exec Agent Improper Authentication Vulnerability CRITICAL
Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.
2023-04-07 CISA KEV
Veritas Backup Exec Agent File Access Vulnerability CRITICAL
Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.
2023-04-04 NVD CVE
CVE-2020-29312: An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to e CRITICAL
An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been disputed by third parties as incomplete and incorrect. The...
2023-04-04 NVD CVE
CVE-2021-28235: Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers t CRITICAL
Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.
2023-04-03 CISA KEV
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability HIGH
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing.
2023-03-31 NVD CVE
CVE-2023-27162: openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request F CRITICAL
openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}. This vulnerability allows attackers to access network resources and...
2023-03-30 CISA KEV
Arm Mali GPU Kernel Driver Unspecified Vulnerability HIGH
Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.
2023-03-30 CISA KEV
Samba Remote Code Execution Vulnerability CRITICAL
Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.
◀ PREV PAGE 63 / 91 NEXT ▶