🛡️ CVE Intelligence Center
Common Vulnerabilities & Exposures — Security Intelligence Database
| CVE ID | Severity | CVSS | Description | Status | Published |
|---|---|---|---|---|---|
| CVE-2019-10149 | Critical | 9.0 |
Exim Mail Transfer Agent (MTA) Improper Input Validation — Improper validation of recipient address in deliver_message()…
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2019-1458 | Critical | 9.0 |
Microsoft Win32k Privilege Escalation Vulnerability — A privilege escalation vulnerability exists in Windows when the Wi…
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2019-1579 | Critical | 9.0 |
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability — Remote Code Execution in PAN-OS with GlobalProtect Porta…
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2019-2725 | Critical | 9.0 |
Oracle WebLogic Server, Injection — Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Mid…
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2019-7609 | Critical | 9.0 |
Kibana Arbitrary Code Execution — Kibana contain an arbitrary code execution flaw in the Timelion visualizer.
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2019-9670 | Critical | 9.0 |
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference — Synacor Zimbra Collabor…
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2020-6572 | Critical | 9.0 |
Google Chrome Media Use-After-Free Vulnerability — Google Chrome Media contains a use-after-free vulnerability that allo…
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2021-22017 | Critical | 9.0 |
VMware vCenter Server Improper Access Control — Rhttproxy as used in vCenter Server contains a vulnerability due to impr…
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2021-27860 | Critical | 9.0 |
FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit — A vulnerability in the web management interface of FatPipe…
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2021-36260 | Critical | 9.0 |
Hikvision Improper Input Validation — A command injection vulnerability in the web server of some Hikvision product. Due…
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2021-4102 | Critical | 9.0 |
Google Chromium V8 Use-After-Free Vulnerability — Google Chromium V8 Engine contains a use-after-free vulnerability that…
|
⚡ Exploit ✅ Patch | Dec 15, 2021 |
| CVE-2021-43890 | Critical | 9.0 |
Microsoft Windows AppX Installer Spoofing Vulnerability — Microsoft Windows AppX Installer contains a spoofing vulnerabi…
|
⚡ Exploit ✅ Patch | Dec 15, 2021 |
| CVE-2010-1871 | Critical | 9.0 |
Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability — JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2017-12149 | Critical | 9.0 |
Red Hat JBoss Application Server Remote Code Execution Vulnerability — The JBoss Application Server, shipped with Red Ha…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2017-17562 | Critical | 9.0 |
Embedthis GoAhead Remote Code Execution Vulnerability — Embedthis GoAhead before 3.6.5 allows remote code execution if C…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2019-0193 | Critical | 9.0 |
Apache Solr DataImportHandler Code Injection Vulnerability — The optional Apache Solr module DataImportHandler contains …
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2019-10758 | Critical | 9.0 |
MongoDB mongo-express Remote Code Execution Vulnerability — mongo-express before 0.54.0 is vulnerable to Remote Code Exe…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2019-13272 | Critical | 9.0 |
Linux Kernel Improper Privilege Management Vulnerability — Kernel/ptrace.c in Linux kernel mishandles contains an improp…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2019-7238 | Critical | 9.0 |
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability — Sonatype Nexus Repository Manager before 3.15…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2020-17463 | Critical | 9.0 |
Fuel CMS SQL Injection Vulnerability — FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permi…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |