Skip to content
COOEY
LIVE FEED
329 events · 13 sources · newest first
Events in view
329
all sources
Critical
329
severity
Active sources
13
collectors
Last sync
2026-08-28 12:00
UTC
All data Vulns · 3623Regulatory · 144News · 466 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1794CISA KEV · 1686News · 424CISA advisory · 124eCFR · 98DoD CIO CMMC · 21DC3 DCISE · 19DOJ FCA · 16NIST · 15Fed. Register · 14DCSA · 11Cyber AB docs · 10OIRA · 1
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2023-02-14 CISA KEV
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability CRITICAL
Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.
2023-02-10 CISA KEV
Fortra GoAnywhere MFT Remote Code Execution Vulnerability CRITICAL
Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.
2023-02-10 CISA KEV
Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability CRITICAL
Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).
2023-02-10 CISA KEV
TerraMaster OS Remote Command Execution Vulnerability CRITICAL
TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target endpoint.
2023-02-02 CISA KEV
Oracle E-Business Suite Unspecified Vulnerability CRITICAL
Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.
2023-01-26 CISA KEV
Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.
2023-01-23 CISA KEV
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.
2023-01-10 CISA KEV
Microsoft Exchange Server Privilege Escalation Vulnerability CRITICAL
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.
2022-12-13 CISA KEV
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability CRITICAL
Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.
2022-12-13 CISA KEV
Veeam Backup & Replication Remote Code Execution Vulnerability CRITICAL
The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading...
2022-12-13 CISA KEV
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability CRITICAL
Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.
2022-12-13 CISA KEV
Veeam Backup & Replication Remote Code Execution Vulnerability CRITICAL
The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading...
2022-11-08 CISA KEV
Microsoft Windows Print Spooler Privilege Escalation Vulnerability CRITICAL
Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.
2022-11-08 CISA KEV
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability CRITICAL
Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.
2022-10-24 CISA KEV
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability CRITICAL
Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with...
2022-10-24 CISA KEV
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability CRITICAL
Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid...
2022-10-24 CISA KEV
GIGABYTE Multiple Products Code Execution Vulnerability CRITICAL
The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read/write data from/to IO ports. This could be leveraged in a number...
2022-10-24 CISA KEV
GIGABYTE Multiple Products Unspecified Vulnerability CRITICAL
The GDrv low-level driver in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the...
2022-10-24 CISA KEV
GIGABYTE Multiple Products Privilege Escalation Vulnerability CRITICAL
The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read and write arbitrary physical memory. This could be leveraged by...
2022-10-24 CISA KEV
GIGABYTE Multiple Products Privilege Escalation Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU expose functionality to read and write arbitrary physical memory. This could be leveraged by a...
2022-10-11 CISA KEV
Fortinet Multiple Products Authentication Bypass Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially...
2022-09-30 CISA KEV
Microsoft Exchange Server Server-Side Request Forgery Vulnerability CRITICAL
Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.
2022-09-30 CISA KEV
Microsoft Exchange Server Remote Code Execution Vulnerability CRITICAL
Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 which allows for the...
2022-09-08 CISA KEV
D-Link Multiple Routers OS Command Injection Vulnerability CRITICAL
Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands.
2022-09-08 CISA KEV
Fortinet FortiOS and FortiADC Improper Access Control Vulnerability CRITICAL
Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test...
2022-09-08 CISA KEV
QNAP Photo Station Externally Controlled Reference Vulnerability CRITICAL
Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed...
2022-08-25 CISA KEV
WebRTC Heap Buffer Overflow Vulnerability CRITICAL
WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web...
2022-08-25 CISA KEV
dotCMS Unrestricted Upload of File Vulnerability CRITICAL
dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage location....
2022-08-11 CISA KEV
Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was chained with CVE-2022-27925 which allows for unauthenticated remote code execution.
2022-08-11 CISA KEV
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability CRITICAL
Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained...
2022-08-09 CISA KEV
RARLAB UnRAR Directory Traversal Vulnerability CRITICAL
RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.
2022-08-04 CISA KEV
Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability CRITICAL
Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries.
2022-06-27 CISA KEV
Mitel MiVoice Connect Data Validation Vulnerability CRITICAL ◈ 2 sources · orig. NVD CVE
The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.
2022-06-14 CISA KEV
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability CRITICAL
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the...
2022-06-08 CISA KEV
QNAP Photo Station Path Traversal Vulnerability CRITICAL
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
2022-06-08 CISA KEV
QNAP Photo Station Improper Access Control Vulnerability CRITICAL
QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.
2022-06-08 CISA KEV
QNAP Photo Station Path Traversal Vulnerability CRITICAL
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
2022-06-08 CISA KEV
QNAP QTS Improper Input Validation Vulnerability CRITICAL
QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system.
2022-06-02 CISA KEV
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability CRITICAL
Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.
2022-05-25 CISA KEV
Oracle JRE Sandbox Bypass Vulnerability CRITICAL
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.
◀ PREV PAGE 04 / 09 NEXT ▶