🛡️ CVE Intelligence Center
Common Vulnerabilities & Exposures — Security Intelligence Database
| CVE ID | Severity | CVSS | Description | Status | Published |
|---|---|---|---|---|---|
| CVE-2020-6572 | Critical | 9.0 |
Google Chrome Media Use-After-Free Vulnerability — Google Chrome Media contains a use-after-free vulnerability that allo…
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2021-22017 | Critical | 9.0 |
VMware vCenter Server Improper Access Control — Rhttproxy as used in vCenter Server contains a vulnerability due to impr…
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2021-27860 | Critical | 9.0 |
FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit — A vulnerability in the web management interface of FatPipe…
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2021-36260 | Critical | 9.0 |
Hikvision Improper Input Validation — A command injection vulnerability in the web server of some Hikvision product. Due…
|
⚡ Exploit ✅ Patch | Jan 10, 2022 |
| CVE-2021-4102 | Critical | 9.0 |
Google Chromium V8 Use-After-Free Vulnerability — Google Chromium V8 Engine contains a use-after-free vulnerability that…
|
⚡ Exploit ✅ Patch | Dec 15, 2021 |
| CVE-2021-43890 | Critical | 9.0 |
Microsoft Windows AppX Installer Spoofing Vulnerability — Microsoft Windows AppX Installer contains a spoofing vulnerabi…
|
⚡ Exploit ✅ Patch | Dec 15, 2021 |
| CVE-2010-1871 | Critical | 9.0 |
Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability — JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2017-12149 | Critical | 9.0 |
Red Hat JBoss Application Server Remote Code Execution Vulnerability — The JBoss Application Server, shipped with Red Ha…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2017-17562 | Critical | 9.0 |
Embedthis GoAhead Remote Code Execution Vulnerability — Embedthis GoAhead before 3.6.5 allows remote code execution if C…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2019-0193 | Critical | 9.0 |
Apache Solr DataImportHandler Code Injection Vulnerability — The optional Apache Solr module DataImportHandler contains …
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2019-10758 | Critical | 9.0 |
MongoDB mongo-express Remote Code Execution Vulnerability — mongo-express before 0.54.0 is vulnerable to Remote Code Exe…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2019-13272 | Critical | 9.0 |
Linux Kernel Improper Privilege Management Vulnerability — Kernel/ptrace.c in Linux kernel mishandles contains an improp…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2019-7238 | Critical | 9.0 |
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability — Sonatype Nexus Repository Manager before 3.15…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2020-17463 | Critical | 9.0 |
Fuel CMS SQL Injection Vulnerability — FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permi…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2020-8816 | Critical | 9.0 |
Pi-Hole AdminLTE Remote Code Execution Vulnerability — Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2021-35394 | Critical | 9.0 |
Realtek Jungle SDK Remote Code Execution Vulnerability — RealTek Jungle SDK contains multiple memory corruption vulnerab…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2021-44168 | Critical | 9.0 |
Fortinet FortiOS Arbitrary File Download — Fortinet FortiOS "execute restore src-vis" downloads code without integrity c…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2021-44228 | Critical | 9.0 |
Apache Log4j2 Remote Code Execution Vulnerability — Apache Log4j2 contains a vulnerability where JNDI features do not pr…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2021-44515 | Critical | 9.0 |
Zoho Desktop Central Authentication Bypass Vulnerability — Zoho Desktop Central contains an authentication bypass vulner…
|
⚡ Exploit ✅ Patch | Dec 10, 2021 |
| CVE-2018-14847 | Critical | 9.0 |
MikroTik Router OS Directory Traversal Vulnerability — MikroTik RouterOS through 6.42 allows unauthenticated remote atta…
|
⚡ Exploit ✅ Patch | Dec 1, 2021 |