Skip to content
COOEY
LIVE FEED
1859 events · 13 sources · newest first
Events in view
1859
all sources
Critical
1859
severity
Active sources
13
collectors
Last sync
2026-08-29 18:00
UTC
All data Vulns · 3638Regulatory · 145News · 486 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1809CISA KEV · 1686News · 444CISA advisory · 124eCFR · 98DoD CIO CMMC · 21DC3 DCISE · 19DOJ FCA · 16NIST · 15Fed. Register · 14DCSA · 11Cyber AB docs · 10OIRA · 2
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2023-10-25 NVD CVE
CVE-2023-46010: An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via t CRITICAL
An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component.
2023-10-19 NVD CVE
CVE-2022-37830: Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS). CRITICAL
Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS).
2023-10-19 NVD CVE
CVE-2023-45379: In the module "Rotator Img" (posrotatorimg) in versions at least up to 1.1 from CRITICAL
In the module "Rotator Img" (posrotatorimg) in versions at least up to 1.1 from PosThemes for PrestaShop, a guest can perform SQL injection.
2023-10-19 NVD CVE
CVE-2023-45992: A vulnerability in the web-based interface of the RUCKUS Cloudpath product on ve CRITICAL
A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a...
2023-10-18 CISA KEV
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability CRITICAL
Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA...
2023-10-14 NVD CVE
CVE-2023-45853: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buf CRITICAL
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib...
2023-10-05 CISA KEV
Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability CRITICAL
Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.
2023-10-05 CISA KEV
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability CRITICAL
Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.
2023-10-04 CISA KEV
JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL
JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.
2023-09-27 NVD CVE
CVE-2023-43234: DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) v CRITICAL
DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_control.php via the $activepath and $filename parameters.
2023-09-27 NVD CVE
CVE-2023-41449: An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute a CRITICAL
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
2023-09-25 NVD CVE
CVE-2023-43141: TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to In CRITICAL
TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control.
2023-09-20 NVD CVE
CVE-2023-38888: Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allow CRITICAL
Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to...
2023-09-18 CISA KEV
Zyxel EMG2926 Routers Command Injection Vulnerability CRITICAL
Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute malicious commands on the...
2023-09-18 CISA KEV
Laravel Ignition File Upload Vulnerability CRITICAL
Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of file_get_contents() and file_put_contents().
2023-09-13 CISA KEV
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to...
2023-09-12 NVD CVE
CVE-2023-39637: D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnera CRITICAL
D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis.
2023-09-12 NVD CVE
CVE-2023-4501: User authentication with username and password credentials is ineffective in Ope CRITICAL
User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as...
2023-09-08 NVD CVE
CVE-2021-27715: An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allo CRITICAL
An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authentication and execute arbitrary code via crafted HTTP request.
2023-09-05 NVD CVE
CVE-2023-36361: Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via th CRITICAL
Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the p_table_name parameter.
2023-09-05 NVD CVE
CVE-2023-41009: File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to CRITICAL
File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute arbitrary code via a crafted script to the authorization field in the header.
2023-08-29 NVD CVE
CVE-2021-3262: TripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20 CRITICAL
TripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20201123-184084 allows unsafe data inputs in POST body parameters from end users without sanitizing using server-side logic. It was...
2023-08-29 NVD CVE
CVE-2023-41265: An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windo CRITICAL ◈ 2 sources · orig. NVD CVE
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022...
2023-08-24 CISA KEV
RARLAB WinRAR Code Execution Vulnerability CRITICAL
RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.
2023-08-22 CISA KEV
Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability CRITICAL
Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network...
2023-08-22 CISA KEV
Ivanti Sentry Authentication Bypass Vulnerability CRITICAL
Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass authentication controls on the administrative interface due to an...
2023-08-22 NVD CVE
CVE-2022-48174: There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In CRITICAL
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
2023-08-21 NVD CVE
CVE-2023-39807: N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection CRITICAL
N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php.
2023-08-21 NVD CVE
CVE-2023-39809: N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain an OS command in CRITICAL
N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain an OS command injection vulnerability via shell metacharacters in the system_hostname parameter at /manage/network-basic.php.
2023-08-21 NVD CVE
CVE-2020-28715: An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN0 CRITICAL
An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS).
2023-08-21 NVD CVE
CVE-2023-39808: N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root CRITICAL
N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password that allows attackers to login with root privileges via the SSH service. The cleartext password corresponding to the...
2023-08-16 NVD CVE
CVE-2023-38894: A Prototype Pollution issue in Cronvel Tree-kit v.0.7.4 and before allows a remo CRITICAL
A Prototype Pollution issue in Cronvel Tree-kit v.0.7.4 and before allows a remote attacker to execute arbitrary code via the extend function.
2023-08-16 NVD CVE
CVE-2020-26037: Directory Traversal vulnerability in Server functionalty in Even Balance Punkbus CRITICAL
Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905 allows remote attackers to execute arbitrary code.
2023-08-14 NVD CVE
CVE-2023-37847: novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability. CRITICAL
novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.
2023-08-14 NVD CVE
CVE-2023-30186: A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3 CRITICAL
A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.
2023-08-14 NVD CVE
CVE-2023-30187: An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 CRITICAL
An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.
2023-08-10 NVD CVE
CVE-2023-39805: iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the whe CRITICAL
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php.
2023-08-10 NVD CVE
CVE-2023-39806: iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bak CRITICAL
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.
2023-08-09 NVD CVE
CVE-2023-39004: Insecure permissions in the configuration directory (/conf/) of OPNsense Communi CRITICAL
Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allow attackers to access sensitive information (e.g., hashed root password)...
2023-08-09 NVD CVE
CVE-2023-33468: KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.13 CRITICAL
KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection...
◀ PREV PAGE 35 / 47 NEXT ▶