Skip to content
COOEY
LIVE FEED
1357 events · 13 sources · newest first
Events in view
1357
all sources
Critical
0
severity
Active sources
13
collectors
Last sync
2026-08-29 12:00
UTC
All data Vulns · 3632Regulatory · 145News · 486 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1803CISA KEV · 1686News · 444CISA advisory · 124eCFR · 98DoD CIO CMMC · 21DC3 DCISE · 19DOJ FCA · 16NIST · 15Fed. Register · 14DCSA · 11Cyber AB docs · 10OIRA · 2
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2022-05-23 CISA KEV
Google Chrome WebAudio Use-After-Free Vulnerability HIGH
Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2022-05-23 CISA KEV
Apple iOS Memory Corruption Vulnerability HIGH
Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.
2022-05-23 CISA KEV
Microsoft Win32k Privilege Escalation Vulnerability HIGH
A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.
2022-05-23 CISA KEV
Mozilla Firefox and Thunderbird Type Confusion Vulnerability HIGH
Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.
2022-05-23 CISA KEV
Microsoft Windows Privilege Escalation Vulnerability HIGH
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from...
2022-05-23 CISA KEV
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability HIGH
Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.
2022-05-23 CISA KEV
Microsoft Windows SMB Information Disclosure Vulnerability HIGH
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.
2022-05-23 CISA KEV
Adobe Flash Player Stack-based Buffer Overflow Vulnerability HIGH
Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.
2022-05-16 CISA KEV
Zyxel Multiple Firewalls OS Command Injection Vulnerability HIGH
A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.
2022-05-16 CISA KEV
VMware Spring Cloud Gateway Code Injection Vulnerability HIGH
Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.
2022-05-04 CISA KEV
Microsoft Win32k Privilege Escalation Vulnerability HIGH
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
2022-05-04 CISA KEV
Microsoft Internet Explorer Use-After-Free Vulnerability HIGH
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.
2022-05-04 CISA KEV
Apple Multiple Products Type Confusion Vulnerability HIGH
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
2022-05-04 CISA KEV
OpenSSL Information Disclosure Vulnerability HIGH
The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.
2022-05-04 CISA KEV
Apple Multiple Products Type Confusion Vulnerability HIGH
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
2022-04-25 CISA KEV
Linux Kernel Privilege Escalation Vulnerability HIGH
Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."
2022-04-25 CISA KEV
Microsoft Win32k Privilege Escalation Vulnerability HIGH
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
2022-04-25 CISA KEV
Microsoft Win32k Privilege Escalation Vulnerability HIGH
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
2022-04-25 CISA KEV
Jenkins Script Security Plugin Sandbox Bypass Vulnerability HIGH
Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.
2022-04-25 CISA KEV
Microsoft Windows User Profile Service Privilege Escalation Vulnerability HIGH
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
2022-04-25 CISA KEV
Microsoft Windows User Profile Service Privilege Escalation Vulnerability HIGH
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
2022-04-19 CISA KEV
WhatsApp VOIP Stack Buffer Overflow Vulnerability HIGH
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.
2022-04-19 CISA KEV
Microsoft Windows Print Spooler Privilege Escalation Vulnerability HIGH
Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.
2022-04-15 CISA KEV
Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability HIGH
The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS).
2022-04-15 CISA KEV
Google Chromium V8 Type Confusion Vulnerability HIGH
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers...
2022-04-15 CISA KEV
Ubiquiti AirOS Command Injection Vulnerability HIGH
Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.
2022-04-15 CISA KEV
InduSoft Web Studio NTWebServer Directory Traversal Vulnerability HIGH
InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution.
2022-04-15 CISA KEV
Crestron Multiple Products Command Injection Vulnerability HIGH
Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.
2022-04-15 CISA KEV
Schneider Electric U.motion Builder SQL Injection Vulnerability HIGH
A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.
2022-04-15 CISA KEV
VMware Multiple Products Privilege Escalation Vulnerability HIGH
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.
2022-04-15 CISA KEV
Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability HIGH
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows remote attackers to execute arbitrary commands.
2022-04-13 CISA KEV
Microsoft Internet Explorer Memory Corruption Vulnerability HIGH
Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).
2022-04-13 CISA KEV
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability HIGH
Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.
2022-04-13 CISA KEV
Adobe Flash Player Use-After-Free Vulnerability HIGH
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
2022-04-13 CISA KEV
Adobe Flash Player Use-After-Free Vulnerability HIGH
Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.
2022-04-13 CISA KEV
Adobe Flash Player Remote Code Execution Vulnerability HIGH
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.
2022-04-13 CISA KEV
Adobe Flash Player Stack-Based Buffer Overflow Vulnerability HIGH
Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.
2022-04-13 CISA KEV
Adobe Flash Player Use-After-Free Vulnerability HIGH
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
2022-04-11 CISA KEV
WatchGuard Firebox and XTM Privilege Escalation Vulnerability HIGH
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access.
2022-04-11 CISA KEV
Google Pixel Out-of-Bounds Write Vulnerability HIGH
Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege.
◀ PREV PAGE 22 / 34 NEXT ▶