Skip to content
COOEY
LIVE FEED
1859 events · 13 sources · newest first
Events in view
1859
all sources
Critical
1859
severity
Active sources
13
collectors
Last sync
2026-08-29 18:00
UTC
All data Vulns · 3638Regulatory · 145News · 486 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1809CISA KEV · 1686News · 444CISA advisory · 124eCFR · 98DoD CIO CMMC · 21DC3 DCISE · 19DOJ FCA · 16NIST · 15Fed. Register · 14DCSA · 11Cyber AB docs · 10OIRA · 2
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2024-07-09 NVD CVE
CVE-2023-48194: Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s CRITICAL
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.
2024-06-17 NVD CVE
CVE-2023-37058: Insecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX CRITICAL
Insecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to escalate privileges via a crafted command.
2024-06-13 CISA KEV
Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability CRITICAL
Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.
2024-06-12 NVD CVE
CVE-2024-36265: ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache CRITICAL
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. An attacker can bypass authentication by sending...
2024-06-12 CISA KEV
PHP-CGI OS Command Injection Vulnerability CRITICAL
PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823.
2024-05-31 NVD CVE
CVE-2024-23692: Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a t CRITICAL ◈ 2 sources · orig. NVD CVE
Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the...
2024-05-30 CISA KEV
Linux Kernel Use-After-Free Vulnerability CRITICAL
Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.
2024-05-30 CISA KEV
Check Point Quantum Security Gateways Information Disclosure Vulnerability CRITICAL
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with...
2024-05-20 CISA KEV
NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability CRITICAL
NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request.
2024-05-14 CISA KEV
Microsoft DWM Core Library Privilege Escalation Vulnerability CRITICAL
Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.
2024-04-12 CISA KEV
Palo Alto Networks PAN-OS Command Injection Vulnerability CRITICAL
Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.
2024-03-26 CISA KEV
Microsoft SharePoint Server Code Injection Vulnerability CRITICAL
Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.
2024-03-25 CISA KEV
Fortinet FortiClient EMS SQL Injection Vulnerability CRITICAL
Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.
2024-03-25 CISA KEV
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).
2024-03-12 NVD CVE
CVE-2023-42789: A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, For CRITICAL
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0,...
2024-03-07 CISA KEV
JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
2024-03-04 CISA KEV
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability CRITICAL
Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege...
2024-02-29 NVD CVE
CVE-2024-23052: An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote at CRITICAL
An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute arbitrary code via the parseObject() function in the fastjson component.
2024-02-22 CISA KEV
ConnectWise ScreenConnect Authentication Bypass Vulnerability CRITICAL
ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices.
2024-02-21 NVD CVE
CVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster ma CRITICAL ◈ 2 sources · orig. NVD CVE
Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.
2024-02-15 CISA KEV
Cisco ASA and FTD Information Disclosure Vulnerability CRITICAL
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the...
2024-02-13 CISA KEV
Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability CRITICAL
Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.
2024-02-09 CISA KEV
Fortinet FortiOS Out-of-Bound Write Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.
2024-02-09 NVD CVE
CVE-2024-21762: A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 th CRITICAL ◈ 2 sources · orig. NVD CVE
A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through...
2024-02-08 NVD CVE
CVE-2024-24321: An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbi CRITICAL
An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function.
2024-02-06 NVD CVE
CVE-2024-24398: Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS bef CRITICAL
Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the fileName parameter of the Save function.
2024-02-06 NVD CVE
CVE-2023-46359: An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1 CRITICAL
An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted...
2024-02-05 NVD CVE
CVE-2024-23054: An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that CRITICAL
An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public package index (npm).
2024-02-02 NVD CVE
CVE-2024-22901: Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials. CRITICAL
Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials.
2024-02-02 NVD CVE
CVE-2024-22902: Vinchin Backup & Recovery v7.2 was discovered to be configured with default root CRITICAL
Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials.
2024-01-31 CISA KEV
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability CRITICAL
Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) vulnerability in the SAML component that allows an attacker...
2024-01-29 NVD CVE
CVE-2024-1015: Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting CRITICAL
Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could send different commands from the operating system to the system via the web...
2024-01-25 NVD CVE
CVE-2024-22922: An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe a CRITICAL
An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php
2024-01-24 CISA KEV
Atlassian Confluence Data Center and Server Template Injection Vulnerability CRITICAL
Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution.
2024-01-23 NVD CVE
CVE-2023-36177: An issue was discovered in badaix Snapcast version 0.27.0, allows remote attacke CRITICAL
An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API.
2024-01-20 NVD CVE
CVE-2023-51924: An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceMana CRITICAL
An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
2024-01-20 NVD CVE
CVE-2023-51928: An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.actio CRITICAL
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
2024-01-20 NVD CVE
CVE-2023-51892: An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute a CRITICAL
An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component.
2024-01-20 NVD CVE
CVE-2023-51925: An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.actio CRITICAL
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
2024-01-20 NVD CVE
CVE-2023-51906: An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary CRITICAL
An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component.
◀ PREV PAGE 33 / 47 NEXT ▶