Skip to content
COOEY
LIVE FEED
329 events · 13 sources · newest first
Events in view
329
all sources
Critical
329
severity
Active sources
13
collectors
Last sync
2026-08-28 12:00
UTC
All data Vulns · 3623Regulatory · 144News · 466 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1794CISA KEV · 1686News · 424CISA advisory · 124eCFR · 98DoD CIO CMMC · 21DC3 DCISE · 19DOJ FCA · 16NIST · 15Fed. Register · 14DCSA · 11Cyber AB docs · 10OIRA · 1
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2024-01-10 CISA KEV
Microsoft SharePoint Server Privilege Escalation Vulnerability CRITICAL
Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This...
2024-01-10 CISA KEV
Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability CRITICAL
Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted...
2024-01-10 CISA KEV
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated...
2024-01-08 CISA KEV
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CRITICAL
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.
2024-01-08 CISA KEV
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CRITICAL
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.
2023-12-07 CISA KEV
Qlik Sense HTTP Tunneling Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.
2023-12-07 CISA KEV
Qlik Sense Path Traversal Vulnerability CRITICAL
Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to create an anonymous session by sending maliciously crafted HTTP requests. This anonymous session could allow the...
2023-11-13 CISA KEV
SysAid Server Path Traversal Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution.
2023-11-07 CISA KEV
Atlassian Confluence Data Center and Server Improper Authorization Vulnerability CRITICAL
Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on...
2023-11-02 CISA KEV
Apache ActiveMQ Deserialization of Untrusted Data Vulnerability CRITICAL
Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire...
2023-10-31 CISA KEV
F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability CRITICAL
F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the...
2023-10-18 CISA KEV
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability CRITICAL
Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA...
2023-10-05 CISA KEV
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability CRITICAL
Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.
2023-10-05 CISA KEV
Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability CRITICAL
Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.
2023-10-04 CISA KEV
JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL
JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.
2023-09-18 CISA KEV
Laravel Ignition File Upload Vulnerability CRITICAL
Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of file_get_contents() and file_put_contents().
2023-09-18 CISA KEV
Zyxel EMG2926 Routers Command Injection Vulnerability CRITICAL
Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute malicious commands on the...
2023-09-13 CISA KEV
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to...
2023-08-24 CISA KEV
RARLAB WinRAR Code Execution Vulnerability CRITICAL
RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.
2023-08-22 CISA KEV
Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability CRITICAL
Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network...
2023-08-22 CISA KEV
Ivanti Sentry Authentication Bypass Vulnerability CRITICAL
Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass authentication controls on the administrative interface due to an...
2023-07-25 CISA KEV
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication bypass vulnerability that allows unauthenticated access to specific API paths. An attacker with access to these API...
2023-07-19 CISA KEV
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.
2023-07-17 CISA KEV
Microsoft Windows Search Remote Code Execution Vulnerability CRITICAL
Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code execution.
2023-07-11 CISA KEV
Netwrix Auditor Insecure Object Deserialization Vulnerability CRITICAL
Netwrix Auditor User Activity Video Recording component contains an insecure objection deserialization vulnerability that allows an unauthenticated, remote attacker to execute code as the NT AUTHORITY\SYSTEM user....
2023-06-13 CISA KEV
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.
2023-06-02 CISA KEV
Progress MOVEit Transfer SQL Injection Vulnerability CRITICAL
Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used...
2023-05-01 CISA KEV
Apache Log4j2 Deserialization of Untrusted Data Vulnerability CRITICAL
Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain...
2023-04-21 CISA KEV
PaperCut MF/NG Improper Access Control Vulnerability CRITICAL
PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code execution in the context of system.
2023-04-11 CISA KEV
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability CRITICAL
Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.
2023-04-07 CISA KEV
Veritas Backup Exec Agent File Access Vulnerability CRITICAL
Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.
2023-04-07 CISA KEV
Veritas Backup Exec Agent Improper Authentication Vulnerability CRITICAL
Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.
2023-04-07 CISA KEV
Veritas Backup Exec Agent Command Execution Vulnerability CRITICAL
Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.
2023-04-07 CISA KEV
Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability CRITICAL
Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context.
2023-03-30 CISA KEV
Samba Remote Code Execution Vulnerability CRITICAL
Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.
2023-03-14 CISA KEV
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability CRITICAL
Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.
2023-02-27 CISA KEV
ZK Framework AuUploader Unspecified Vulnerability CRITICAL
ZK Framework AuUploader servlets contain an unspecified vulnerability that could allow an attacker to retrieve the content of a file located in the web context. The ZK Framework is an open-source Java framework. This...
2023-02-21 CISA KEV
Mitel MiVoice Connect Code Injection Vulnerability CRITICAL
The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.
2023-02-21 CISA KEV
IBM Aspera Faspex Code Execution Vulnerability CRITICAL
IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.
2023-02-21 CISA KEV
Mitel MiVoice Connect Command Injection Vulnerability CRITICAL
The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.
◀ PREV PAGE 03 / 09 NEXT ▶