{ "generated": "2026-08-06", "schemaVersion": 1, "access": "public", "source": "CISA Known Exploited Vulnerabilities, enriched by Senserva", "terms": "Compiled by Senserva (senserva.com) from public sources. Free to use with attribution. See https://senserva.com/data-sources.html", "count": 1661, "cves": [ { "cve": "CVE-2026-63077", "vendor": "JetBrains", "product": "TeamCity", "name": "JetBrains TeamCity Deserialization of Untrusted Data Vulnerability", "date": "2026-08-05", "ransom": false, "due": "2026-08-08", "cvss": 9.8, "epss": 0.0065, "ms": false }, { "cve": "CVE-2026-18556", "vendor": "N-able", "product": "N-central", "name": "N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability", "date": "2026-08-04", "ransom": false, "due": "2026-08-07", "cvss": 7.4, "epss": 0.0049, "ms": false }, { "cve": "CVE-2026-34486", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat Missing Encryption of Sensitive Data Vulnerability", "date": "2026-08-04", "ransom": false, "due": "2026-08-07", "cvss": 9.8, "epss": 0.8116, "ms": false }, { "cve": "CVE-2026-9198", "vendor": "IBM", "product": "Langflow", "name": "IBM Langflow Code Injection Vulnerability", "date": "2026-08-04", "ransom": false, "due": "2026-08-07", "cvss": 9.8, "epss": 0.1705, "ms": false }, { "cve": "CVE-2026-18577", "vendor": "N-able", "product": "N-central", "name": "N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability", "date": "2026-08-03", "ransom": false, "due": "2026-08-06", "cvss": 8.1, "epss": 0.041, "ms": false }, { "cve": "CVE-2026-20316", "vendor": "Cisco", "product": "Secure Firewall Management Center (FMC)", "name": "Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability", "date": "2026-07-29", "ransom": false, "due": "2026-08-01", "cvss": 5.3, "epss": 0.0079, "ms": false }, { "cve": "CVE-2025-68686", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability", "date": "2026-07-27", "ransom": false, "due": "2026-08-10", "cvss": 5.9, "epss": 0.0126, "ms": false }, { "cve": "CVE-2026-16812", "vendor": "Arista", "product": "VeloCloud Orchestrator", "name": "Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability", "date": "2026-07-27", "ransom": false, "due": "2026-07-30", "cvss": 10, "epss": 0.0088, "ms": false }, { "cve": "CVE-2026-16232", "vendor": "Check Point", "product": "SmartConsole", "name": "Check Point SmartConsole Improper Authentication Vulnerability", "date": "2026-07-22", "ransom": false, "due": "2026-07-25", "cvss": 9.1, "epss": 0.7139, "ms": false }, { "cve": "CVE-2026-50522", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "date": "2026-07-22", "ransom": false, "due": "2026-07-25", "ms": true }, { "cve": "CVE-2021-27137", "vendor": "DD-WRT", "product": "DD-WRT", "name": "DD-WRT Stack-Based Buffer Overflow Vulnerability", "date": "2026-07-21", "ransom": false, "due": "2026-07-24", "cvss": 8.1, "epss": 0.1649, "ms": false }, { "cve": "CVE-2026-0770", "vendor": "Langflow", "product": "Langflow", "name": "Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability", "date": "2026-07-21", "ransom": false, "due": "2026-07-24", "cvss": 9.8, "epss": 0.5627, "ms": false }, { "cve": "CVE-2026-60137", "vendor": "WordPress", "product": "Core", "name": "WordPress Core SQL Injection Vulnerability", "date": "2026-07-21", "ransom": false, "due": "2026-08-04", "cvss": 5.9, "epss": 0.7903, "ms": false }, { "cve": "CVE-2026-63030", "vendor": "WordPress", "product": "Core", "name": "WordPress Core Interpretation Conflict Vulnerability", "date": "2026-07-21", "ransom": false, "due": "2026-07-24", "cvss": 9.8, "epss": 0.9842, "ms": false }, { "cve": "CVE-2026-25089", "vendor": "Fortinet", "product": "FortiSandbox", "name": "Fortinet FortiSandbox OS Command Injection Vulnerability", "date": "2026-07-16", "ransom": false, "due": "2026-07-19", "cvss": 9.8, "epss": 0.6983, "ms": false }, { "cve": "CVE-2026-39808", "vendor": "Fortinet", "product": "FortiSandbox", "name": "Fortinet FortiSandbox OS Command Injection Vulnerability", "date": "2026-07-16", "ransom": false, "due": "2026-07-19", "cvss": 9.8, "epss": 0.8969, "ms": false }, { "cve": "CVE-2026-58644", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "date": "2026-07-16", "ransom": false, "due": "2026-07-19", "ms": true }, { "cve": "CVE-2023-4346", "vendor": "KNX Association", "product": "KNX Protocol Connection Authorization Option 1", "name": "KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability", "date": "2026-07-15", "ransom": false, "due": "2026-07-29", "cvss": 7.5, "epss": 0.0091, "ms": false }, { "cve": "CVE-2026-46817", "vendor": "Oracle", "product": "E-Business Suite", "name": "Oracle E-Business Suite Improper Privilege Management Vulnerability", "date": "2026-07-15", "ransom": false, "due": "2026-07-18", "cvss": 9.8, "epss": 0.1331, "ms": false }, { "cve": "CVE-2026-15409", "vendor": "SonicWall", "product": "SMA1000 Appliances", "name": "SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability", "date": "2026-07-14", "ransom": true, "due": "2026-07-17", "cvss": 10, "epss": 0.7844, "ms": false }, { "cve": "CVE-2026-15410", "vendor": "SonicWall", "product": "SMA1000 Appliances", "name": "SonicWall SMA1000 Appliances Code Injection Vulnerability", "date": "2026-07-14", "ransom": true, "due": "2026-07-17", "cvss": 7.2, "epss": 0.7635, "ms": false }, { "cve": "CVE-2026-56155", "vendor": "Microsoft", "product": "Active Directory Federation Services", "name": "Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability", "date": "2026-07-14", "ransom": false, "due": "2026-07-28", "ms": true }, { "cve": "CVE-2026-56164", "vendor": "Microsoft", "product": "SharePoint Server", "name": "Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability", "date": "2026-07-14", "ransom": false, "due": "2026-07-17", "ms": true }, { "cve": "CVE-2008-4128", "vendor": "Cisco", "product": "IOS", "name": "Cisco IOS Cross-Site Request Forgery Vulnerability", "date": "2026-07-13", "ransom": false, "due": "2026-07-16", "cvss": 4.3, "epss": 0.3295, "ms": false }, { "cve": "CVE-2026-48939", "vendor": "iCagenda", "product": "iCagenda", "name": "iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2026-07-10", "ransom": false, "due": "2026-07-13", "cvss": 9.8, "epss": 0.2435, "ms": false }, { "cve": "CVE-2026-56291", "vendor": "Balbooa", "product": "Forms", "name": "Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2026-07-10", "ransom": false, "due": "2026-07-13", "cvss": 9.8, "epss": 0.7607, "ms": false }, { "cve": "CVE-2026-48282", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Path Traversal Vulnerability", "date": "2026-07-07", "ransom": false, "due": "2026-07-10", "cvss": 10, "epss": 0.992, "ms": false }, { "cve": "CVE-2026-48908", "vendor": "JoomShaper", "product": "SP Page Builder", "name": "JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2026-07-07", "ransom": false, "due": "2026-07-10", "cvss": 9.8, "epss": 0.8813, "ms": false }, { "cve": "CVE-2026-55255", "vendor": "Langflow", "product": "Langflow", "name": "Langflow Authorization Bypass Through User-Controlled Key Vulnerability", "date": "2026-07-07", "ransom": false, "due": "2026-07-10", "cvss": 8.4, "epss": 0.2905, "ms": false }, { "cve": "CVE-2026-56290", "vendor": "Joomlack", "product": "Page Builder", "name": "Joomlack Page Builder Improper Access Control Vulnerability", "date": "2026-07-07", "ransom": false, "due": "2026-07-10", "cvss": 9.8, "epss": 0.8325, "ms": false }, { "cve": "CVE-2026-45659", "vendor": "Microsoft", "product": "SharePoint Server", "name": "Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability", "date": "2026-07-01", "ransom": false, "due": "2026-07-04", "ms": true }, { "cve": "CVE-2026-48558", "vendor": "SimpleHelp", "product": "SimpleHelp", "name": "SimpleHelp Authentication Bypass Vulnerability", "date": "2026-06-29", "ransom": false, "due": "2026-07-02", "cvss": 10, "epss": 0.1148, "ms": false }, { "cve": "CVE-2026-12569", "vendor": "PTC", "product": "Windchill and FlexPLM", "name": "PTC Windchill and FlexPLM Improper Input Validation Vulnerability", "date": "2026-06-25", "ransom": true, "due": "2026-06-28", "cvss": 9.8, "epss": 0.302, "ms": false }, { "cve": "CVE-2026-20230", "vendor": "Cisco", "product": "Unified Communications Manager", "name": "Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability", "date": "2026-06-25", "ransom": false, "due": "2026-06-28", "cvss": 8.6, "epss": 0.8321, "ms": false }, { "cve": "CVE-2025-67038", "vendor": "Lantronix", "product": "EDS5000", "name": "Lantronix EDS5000 Code Injection Vulnerability", "date": "2026-06-23", "ransom": false, "due": "2026-06-26", "cvss": 9.8, "epss": 0.1432, "ms": false }, { "cve": "CVE-2026-34908", "vendor": "Ubiquiti", "product": "UniFi OS", "name": "Ubiquiti UniFi OS Improper Access Control Vulnerability", "date": "2026-06-23", "ransom": false, "due": "2026-06-26", "cvss": 10, "epss": 0.6191, "ms": false }, { "cve": "CVE-2026-34909", "vendor": "Ubiquiti", "product": "UniFi OS", "name": "Ubiquiti UniFi OS Path Traversal Vulnerability", "date": "2026-06-23", "ransom": false, "due": "2026-06-26", "cvss": 10, "epss": 0.6277, "ms": false }, { "cve": "CVE-2026-34910", "vendor": "Ubiquiti", "product": "UniFi OS", "name": "Ubiquiti UniFi OS Improper Input Validation Vulnerability", "date": "2026-06-23", "ransom": false, "due": "2026-06-26", "cvss": 10, "epss": 0.8696, "ms": false }, { "cve": "CVE-2026-20253", "vendor": "Splunk", "product": "Enterprise", "name": "Splunk Enterprise Missing Authentication for Critical Function Vulnerability", "date": "2026-06-18", "ransom": false, "due": "2026-06-21", "cvss": 9.8, "epss": 0.9623, "ms": false }, { "cve": "CVE-2026-48907", "vendor": "Widget Factory", "product": "Joomla Content Editor", "name": "Widget Factory Joomla Content Editor Improper Access Control Vulnerability", "date": "2026-06-16", "ransom": false, "due": "2026-06-19", "cvss": 9.8, "epss": 0.5591, "ms": false }, { "cve": "CVE-2026-20262", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "name": "Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability", "date": "2026-06-15", "ransom": false, "due": "2026-06-29", "cvss": 6.5, "epss": 0.2817, "ms": false }, { "cve": "CVE-2026-54420", "vendor": "LiteSpeed", "product": "cPanel Plugin", "name": "LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability", "date": "2026-06-15", "ransom": false, "due": "2026-06-18", "cvss": 8.5, "epss": 0.0144, "ms": false }, { "cve": "CVE-2026-35273", "vendor": "Oracle", "product": "PeopleSoft Enterprise PeopleTools", "name": "Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability", "date": "2026-06-12", "ransom": true, "due": "2026-06-15", "cvss": 9.8, "epss": 0.9547, "ms": false }, { "cve": "CVE-2026-10520", "vendor": "Ivanti", "product": "Sentry", "name": "Ivanti Sentry OS Command Injection Vulnerability", "date": "2026-06-11", "ransom": false, "due": "2026-06-14", "cvss": 10, "epss": 0.9989, "ms": false }, { "cve": "CVE-2026-11645", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Read and Write Vulnerability", "date": "2026-06-09", "ransom": false, "due": "2026-06-23", "cvss": 8.8, "epss": 0.0219, "ms": false }, { "cve": "CVE-2026-20245", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "name": "Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability", "date": "2026-06-09", "ransom": false, "due": "2026-06-23", "cvss": 7.8, "epss": 0.2532, "ms": false }, { "cve": "CVE-2026-7473", "vendor": "Arista", "product": "Extensible Operating System", "name": "Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability", "date": "2026-06-09", "ransom": false, "due": "2026-06-23", "cvss": 5.8, "epss": 0.0111, "ms": false }, { "cve": "CVE-2026-42271", "vendor": "BerriAI", "product": "LiteLLM", "name": "BerriAI LiteLLM Command Injection Vulnerability", "date": "2026-06-08", "ransom": false, "due": "2026-06-22", "cvss": 8.8, "epss": 0.8301, "ms": false }, { "cve": "CVE-2026-50751", "vendor": "Check Point", "product": "Security Gateway", "name": "Check Point Security Gateway Improper Authentication Vulnerability", "date": "2026-06-08", "ransom": true, "due": "2026-06-11", "cvss": 9.3, "epss": 0.8255, "ms": false }, { "cve": "CVE-2026-28318", "vendor": "SolarWinds", "product": "Serv-U", "name": "SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability", "date": "2026-06-05", "ransom": false, "due": "2026-06-19", "cvss": 7.5, "epss": 0.0835, "ms": false }, { "cve": "CVE-2026-45247", "vendor": "Mirasvit", "product": "Mirasvit Full Page Cache Warmer", "name": "Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability", "date": "2026-06-03", "ransom": false, "due": "2026-06-06", "cvss": 9.8, "epss": 0.2755, "ms": false }, { "cve": "CVE-2022-0492", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Improper Authentication Vulnerability", "date": "2026-06-02", "ransom": false, "due": "2026-06-05", "cvss": 7.8, "epss": 0.0553, "ms": false }, { "cve": "CVE-2025-48595", "vendor": "Android", "product": "Framework", "name": "Android Framework Integer Overflow Vulnerability", "date": "2026-06-02", "ransom": false, "due": "2026-06-05", "cvss": 8.4, "epss": 0.0171, "ms": false }, { "cve": "CVE-2024-21182", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Unspecified Vulnerability", "date": "2026-06-01", "ransom": false, "due": "2026-06-04", "cvss": 7.5, "epss": 0.4997, "ms": false }, { "cve": "CVE-2026-0257", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "date": "2026-05-29", "ransom": true, "due": "2026-06-01", "cvss": 9.1, "epss": 0.9391, "ms": false }, { "cve": "CVE-2026-45321", "vendor": "TanStack", "product": "TanStack", "name": "TanStack Unspecified Vulnerability", "date": "2026-05-27", "ransom": true, "due": "2026-06-10", "cvss": 9.6, "epss": 0.0234, "ms": false }, { "cve": "CVE-2026-48027", "vendor": "Nx", "product": "Nx Console", "name": "Nx Console Embedded Malicious Code Vulnerability", "date": "2026-05-27", "ransom": true, "due": "2026-06-10", "cvss": 9.8, "epss": 0.0185, "ms": false }, { "cve": "CVE-2026-8398", "vendor": "Daemon", "product": "Daemon Tools Lite", "name": "Daemon Tools Lite Embedded Malicious Code Vulnerability", "date": "2026-05-27", "ransom": false, "due": "2026-05-30", "cvss": 9.8, "epss": 0.0146, "ms": false }, { "cve": "CVE-2026-48172", "vendor": "LiteSpeed", "product": "cPanel Plugin", "name": "LiteSpeed cPanel Plugin Privilege Escalation Vulnerability", "date": "2026-05-26", "ransom": false, "due": "2026-05-29", "cvss": 9.8, "epss": 0.1891, "ms": false }, { "cve": "CVE-2026-9082", "vendor": "Drupal", "product": "Core", "name": "Drupal Core SQL Injection Vulnerability", "date": "2026-05-22", "ransom": false, "due": "2026-05-27", "cvss": 9.8, "epss": 0.8832, "ms": false }, { "cve": "CVE-2025-34291", "vendor": "Langflow", "product": "Langflow", "name": "Langflow Origin Validation Error Vulnerability", "date": "2026-05-21", "ransom": false, "due": "2026-06-04", "cvss": 8.8, "epss": 0.8384, "ms": false }, { "cve": "CVE-2026-34926", "vendor": "Trend Micro", "product": "Apex One", "name": "Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability", "date": "2026-05-21", "ransom": false, "due": "2026-06-04", "cvss": 6.7, "epss": 0.1268, "ms": false }, { "cve": "CVE-2008-4250", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Buffer Overflow Vulnerability", "date": "2026-05-20", "ransom": false, "due": "2026-06-03", "ms": true }, { "cve": "CVE-2009-1537", "vendor": "Microsoft", "product": "DirectX", "name": "Microsoft DirectX NULL Byte Overwrite Vulnerability", "date": "2026-05-20", "ransom": false, "due": "2026-06-03", "ms": true }, { "cve": "CVE-2009-3459", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability", "date": "2026-05-20", "ransom": false, "due": "2026-06-03", "cvss": 8.8, "epss": 0.8658, "ms": false }, { "cve": "CVE-2010-0249", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "date": "2026-05-20", "ransom": false, "due": "2026-06-03", "ms": true }, { "cve": "CVE-2010-0806", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "date": "2026-05-20", "ransom": false, "due": "2026-06-03", "ms": true }, { "cve": "CVE-2026-41091", "vendor": "Microsoft", "product": "Defender", "name": "Microsoft Defender Link Following Vulnerability", "date": "2026-05-20", "ransom": false, "due": "2026-06-03", "ms": true }, { "cve": "CVE-2026-45498", "vendor": "Microsoft", "product": "Defender", "name": "Microsoft Defender Denial of Service Vulnerability", "date": "2026-05-20", "ransom": false, "due": "2026-06-03", "ms": true }, { "cve": "CVE-2026-42897", "vendor": "Microsoft", "product": "Microsoft", "name": "Microsoft Exchange Server Cross-Site Scripting Vulnerability", "date": "2026-05-15", "ransom": false, "due": "2026-05-29", "ms": true }, { "cve": "CVE-2026-20182", "vendor": "Cisco", "product": "Catalyst SD-WAN", "name": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability", "date": "2026-05-14", "ransom": false, "due": "2026-05-17", "cvss": 10, "epss": 0.9027, "ms": false }, { "cve": "CVE-2026-42208", "vendor": "BerriAI", "product": "LiteLLM", "name": "BerriAI LiteLLM SQL Injection Vulnerability", "date": "2026-05-08", "ransom": false, "due": "2026-05-11", "cvss": 9.8, "epss": 0.8942, "ms": false }, { "cve": "CVE-2026-6973", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability", "date": "2026-05-07", "ransom": false, "due": "2026-05-10", "cvss": 7.2, "epss": 0.3445, "ms": false }, { "cve": "CVE-2026-0300", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability", "date": "2026-05-06", "ransom": false, "due": "2026-05-09", "cvss": 9.8, "epss": 0.3207, "ms": false }, { "cve": "CVE-2026-31431", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability", "date": "2026-05-01", "ransom": false, "due": "2026-05-15", "cvss": 7.8, "epss": 0.9455, "ms": false }, { "cve": "CVE-2026-41940", "vendor": "WebPros", "product": "cPanel & WHM and WP2 (WordPress Squared)", "name": "WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability", "date": "2026-04-30", "ransom": true, "due": "2026-05-03", "cvss": 9.8, "epss": 0.9793, "ms": false }, { "cve": "CVE-2024-1708", "vendor": "ConnectWise", "product": "ScreenConnect", "name": "ConnectWise ScreenConnect Path Traversal Vulnerability", "date": "2026-04-28", "ransom": true, "due": "2026-05-12", "cvss": 8.4, "epss": 0.8762, "ms": false }, { "cve": "CVE-2026-32202", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Protection Mechanism Failure Vulnerability", "date": "2026-04-28", "ransom": false, "due": "2026-05-12", "ms": true }, { "cve": "CVE-2024-57726", "vendor": "SimpleHelp", "product": "SimpleHelp", "name": "SimpleHelp Missing Authorization Vulnerability", "date": "2026-04-24", "ransom": true, "due": "2026-05-08", "cvss": 9.9, "epss": 0.0863, "ms": false }, { "cve": "CVE-2024-57728", "vendor": "SimpleHelp", "product": "SimpleHelp", "name": "SimpleHelp Path Traversal Vulnerability", "date": "2026-04-24", "ransom": true, "due": "2026-05-08", "cvss": 7.2, "epss": 0.0698, "ms": false }, { "cve": "CVE-2024-7399", "vendor": "Samsung", "product": "MagicINFO 9 Server", "name": "Samsung MagicINFO 9 Server Path Traversal Vulnerability", "date": "2026-04-24", "ransom": false, "due": "2026-05-08", "cvss": 9.8, "epss": 0.9194, "ms": false }, { "cve": "CVE-2025-29635", "vendor": "D-Link", "product": "DIR-823X", "name": "D-Link DIR-823X Command Injection Vulnerability", "date": "2026-04-24", "ransom": false, "due": "2026-05-08", "cvss": 7.2, "epss": 0.8964, "ms": false }, { "cve": "CVE-2026-39987", "vendor": "Marimo", "product": "Marimo", "name": "Marimo Remote Code Execution Vulnerability", "date": "2026-04-23", "ransom": false, "due": "2026-05-07", "cvss": 9.8, "epss": 0.9658, "ms": false }, { "cve": "CVE-2026-33825", "vendor": "Microsoft", "product": "Defender", "name": "Microsoft Defender Insufficient Granularity of Access Control Vulnerability", "date": "2026-04-22", "ransom": true, "due": "2026-05-06", "ms": true }, { "cve": "CVE-2023-27351", "vendor": "PaperCut", "product": "NG/MF", "name": "PaperCut NG/MF Improper Authentication Vulnerability", "date": "2026-04-20", "ransom": true, "due": "2026-05-04", "cvss": 7.5, "epss": 0.7739, "ms": false }, { "cve": "CVE-2024-27199", "vendor": "JetBrains", "product": "TeamCity", "name": "JetBrains TeamCity Relative Path Traversal Vulnerability", "date": "2026-04-20", "ransom": true, "due": "2026-05-04", "cvss": 7.3, "epss": 0.9999, "ms": false }, { "cve": "CVE-2025-2749", "vendor": "Kentico", "product": "Kentico Xperience", "name": "Kentico Xperience Path Traversal Vulnerability", "date": "2026-04-20", "ransom": false, "due": "2026-05-04", "cvss": 7.2, "epss": 0.0385, "ms": false }, { "cve": "CVE-2025-32975", "vendor": "Quest", "product": "KACE Systems Management Appliance (SMA)", "name": "Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability", "date": "2026-04-20", "ransom": false, "due": "2026-05-04", "cvss": 10, "epss": 0.0242, "ms": false }, { "cve": "CVE-2025-48700", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability", "date": "2026-04-20", "ransom": false, "due": "2026-04-23", "cvss": 6.1, "epss": 0.0176, "ms": false }, { "cve": "CVE-2026-20122", "vendor": "Cisco", "product": "Catalyst SD-WAN Manger", "name": "Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability", "date": "2026-04-20", "ransom": false, "due": "2026-04-23", "cvss": 5.4, "epss": 0.2459, "ms": false }, { "cve": "CVE-2026-20128", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "name": "Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability", "date": "2026-04-20", "ransom": false, "due": "2026-04-23", "cvss": 7.5, "epss": 0.0694, "ms": false }, { "cve": "CVE-2026-20133", "vendor": "Cisco", "product": "Catalyst SD-WAN Manager", "name": "Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability", "date": "2026-04-20", "ransom": false, "due": "2026-04-23", "cvss": 7.5, "epss": 0.3135, "ms": false }, { "cve": "CVE-2026-34197", "vendor": "Apache", "product": "ActiveMQ", "name": "Apache ActiveMQ Improper Input Validation Vulnerability", "date": "2026-04-16", "ransom": false, "due": "2026-04-30", "cvss": 8.8, "epss": 0.9722, "ms": false }, { "cve": "CVE-2009-0238", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Remote Code Execution", "date": "2026-04-14", "ransom": false, "due": "2026-04-28", "ms": true }, { "cve": "CVE-2026-32201", "vendor": "Microsoft", "product": "SharePoint Server", "name": "Microsoft SharePoint Server Improper Input Validation Vulnerability", "date": "2026-04-14", "ransom": false, "due": "2026-04-28", "ms": true }, { "cve": "CVE-2012-1854", "vendor": "Microsoft", "product": "Visual Basic for Applications (VBA)", "name": "Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability", "date": "2026-04-13", "ransom": false, "due": "2026-04-27", "ms": true }, { "cve": "CVE-2020-9715", "vendor": "Adobe", "product": "Acrobat", "name": "Adobe Acrobat Use-After-Free Vulnerability", "date": "2026-04-13", "ransom": false, "due": "2026-04-27", "cvss": 7.8, "epss": 0.4844, "ms": false }, { "cve": "CVE-2023-21529", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability", "date": "2026-04-13", "ransom": true, "due": "2026-04-27", "ms": true }, { "cve": "CVE-2023-36424", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Out-of-Bounds Read Vulnerability", "date": "2026-04-13", "ransom": false, "due": "2026-04-27", "ms": true }, { "cve": "CVE-2025-60710", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Link Following Vulnerability", "date": "2026-04-13", "ransom": false, "due": "2026-04-27", "ms": true }, { "cve": "CVE-2026-21643", "vendor": "Fortinet", "product": "FortiClient EMS", "name": "Fortinet FortiClient EMS SQL Injection Vulnerability", "date": "2026-04-13", "ransom": false, "due": "2026-04-16", "cvss": 9.8, "epss": 0.9408, "ms": false }, { "cve": "CVE-2026-34621", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Prototype Pollution Vulnerability", "date": "2026-04-13", "ransom": false, "due": "2026-04-27", "cvss": 8.6, "epss": 0.0709, "ms": false }, { "cve": "CVE-2026-1340", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability", "date": "2026-04-08", "ransom": false, "due": "2026-04-11", "cvss": 9.8, "epss": 0.8404, "ms": false }, { "cve": "CVE-2026-35616", "vendor": "Fortinet", "product": "FortiClient EMS", "name": "Fortinet FortiClient EMS Improper Access Control Vulnerability", "date": "2026-04-06", "ransom": false, "due": "2026-04-09", "cvss": 9.8, "epss": 0.8894, "ms": false }, { "cve": "CVE-2026-3502", "vendor": "TrueConf", "product": "Client", "name": "TrueConf Client Download of Code Without Integrity Check Vulnerability", "date": "2026-04-02", "ransom": false, "due": "2026-04-16", "cvss": 7.8, "epss": 0.0575, "ms": false }, { "cve": "CVE-2026-5281", "vendor": "Google", "product": "Dawn", "name": "Google Dawn Use-After-Free Vulnerability", "date": "2026-04-01", "ransom": false, "due": "2026-04-15", "cvss": 8.8, "epss": 0.0504, "ms": false }, { "cve": "CVE-2026-3055", "vendor": "Citrix", "product": "NetScaler", "name": "Citrix NetScaler Out-of-Bounds Read Vulnerability", "date": "2026-03-30", "ransom": false, "due": "2026-04-02", "cvss": 9.8, "epss": 0.8447, "ms": false }, { "cve": "CVE-2025-53521", "vendor": "F5", "product": "BIG-IP", "name": "F5 BIG-IP Stack-Based Buffer Overflow Vulnerability", "date": "2026-03-27", "ransom": false, "due": "2026-03-30", "cvss": 9.8, "epss": 0.0221, "ms": false }, { "cve": "CVE-2026-33634", "vendor": "Aquasecurity", "product": "Trivy", "name": "Aquasecurity Trivy Embedded Malicious Code Vulnerability", "date": "2026-03-26", "ransom": false, "due": "2026-04-09", "cvss": 8.8, "epss": 0.5916, "ms": false }, { "cve": "CVE-2026-33017", "vendor": "Langflow", "product": "Langflow", "name": "Langflow Code Injection Vulnerability", "date": "2026-03-25", "ransom": false, "due": "2026-04-08", "cvss": 9.8, "epss": 0.9984, "ms": false }, { "cve": "CVE-2025-31277", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Buffer Overflow Vulnerability", "date": "2026-03-20", "ransom": false, "due": "2026-04-03", "cvss": 8.8, "epss": 0.0148, "ms": false }, { "cve": "CVE-2025-32432", "vendor": "Craft CMS", "product": "Craft CMS", "name": "Craft CMS Code Injection Vulnerability", "date": "2026-03-20", "ransom": false, "due": "2026-04-03", "cvss": 10, "epss": 0.9984, "ms": false }, { "cve": "CVE-2025-43510", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Improper Locking Vulnerability", "date": "2026-03-20", "ransom": false, "due": "2026-04-03", "cvss": 7.8, "epss": 0.0036, "ms": false }, { "cve": "CVE-2025-43520", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Classic Buffer Overflow Vulnerability", "date": "2026-03-20", "ransom": false, "due": "2026-04-03", "cvss": 5.5, "epss": 0.0042, "ms": false }, { "cve": "CVE-2025-54068", "vendor": "Laravel", "product": "Livewire", "name": "Laravel Livewire Code Injection Vulnerability", "date": "2026-03-20", "ransom": false, "due": "2026-04-03", "cvss": 9.8, "epss": 0.9538, "ms": false }, { "cve": "CVE-2026-20131", "vendor": "Cisco", "product": "Secure Firewall Management Center (FMC)", "name": "Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability", "date": "2026-03-19", "ransom": true, "due": "2026-03-22", "cvss": 10, "epss": 0.2816, "ms": false }, { "cve": "CVE-2025-66376", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability", "date": "2026-03-18", "ransom": false, "due": "2026-04-01", "cvss": 6.1, "epss": 0.2197, "ms": false }, { "cve": "CVE-2026-20963", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "date": "2026-03-18", "ransom": false, "due": "2026-03-21", "ms": true }, { "cve": "CVE-2025-47813", "vendor": "Wing FTP Server", "product": "Wing FTP Server", "name": "Wing FTP Server Information Disclosure Vulnerability", "date": "2026-03-16", "ransom": false, "due": "2026-03-30", "cvss": 4.3, "epss": 0.5873, "ms": false }, { "cve": "CVE-2026-3909", "vendor": "Google", "product": "Skia", "name": "Google Skia Out-of-Bounds Write Vulnerability", "date": "2026-03-13", "ransom": false, "due": "2026-03-27", "cvss": 8.8, "epss": 0.0163, "ms": false }, { "cve": "CVE-2026-3910", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability", "date": "2026-03-13", "ransom": false, "due": "2026-03-27", "cvss": 8.8, "epss": 0.02, "ms": false }, { "cve": "CVE-2025-68613", "vendor": "n8n", "product": "n8n", "name": "n8n Improper Control of Dynamically-Managed Code Resources Vulnerability", "date": "2026-03-11", "ransom": false, "due": "2026-03-25", "cvss": 8.8, "epss": 0.9788, "ms": false }, { "cve": "CVE-2021-22054", "vendor": "Omnissa", "product": "Workspace One UEM", "name": "Omnissa Workspace ONE Server-Side Request Forgery", "date": "2026-03-09", "ransom": false, "due": "2026-03-23", "cvss": 7.5, "epss": 0.9737, "ms": false }, { "cve": "CVE-2025-26399", "vendor": "SolarWinds", "product": "Web Help Desk", "name": "SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability", "date": "2026-03-09", "ransom": true, "due": "2026-03-12", "cvss": 9.8, "epss": 0.8833, "ms": false }, { "cve": "CVE-2026-1603", "vendor": "Ivanti", "product": "Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability", "date": "2026-03-09", "ransom": false, "due": "2026-03-23", "cvss": 7.5, "epss": 0.8056, "ms": false }, { "cve": "CVE-2017-7921", "vendor": "Hikvision", "product": "Multiple Products", "name": "Hikvision Multiple Products Improper Authentication Vulnerability", "date": "2026-03-05", "ransom": false, "due": "2026-03-26", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2021-22681", "vendor": "Rockwell", "product": "Multiple Products", "name": "Rockwell Multiple Products Insufficient Protected Credentials Vulnerability", "date": "2026-03-05", "ransom": false, "due": "2026-03-26", "cvss": 9.8, "epss": 0.6099, "ms": false }, { "cve": "CVE-2021-30952", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Integer Overflow or Wraparound Vulnerability", "date": "2026-03-05", "ransom": false, "due": "2026-03-26", "cvss": 7.8, "epss": 0.0762, "ms": false }, { "cve": "CVE-2023-41974", "vendor": "Apple", "product": "iOS and iPadOS", "name": "Apple iOS and iPadOS Use-After-Free Vulnerability", "date": "2026-03-05", "ransom": false, "due": "2026-03-26", "cvss": 7.8, "epss": 0.0141, "ms": false }, { "cve": "CVE-2023-43000", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple products Use-After-Free Vulnerability", "date": "2026-03-05", "ransom": false, "due": "2026-03-26", "cvss": 8.8, "epss": 0.039, "ms": false }, { "cve": "CVE-2026-21385", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Memory Corruption Vulnerability", "date": "2026-03-03", "ransom": false, "due": "2026-03-24", "cvss": 7.8, "epss": 0.0107, "ms": false }, { "cve": "CVE-2026-22719", "vendor": "Broadcom", "product": "VMware Aria Operations", "name": "Broadcom VMware Aria Operations Command Injection Vulnerability", "date": "2026-03-03", "ransom": false, "due": "2026-03-24", "cvss": 8.1, "epss": 0.1742, "ms": false }, { "cve": "CVE-2022-20775", "vendor": "Cisco", "product": "SD-WAN", "name": "Cisco SD-WAN Path Traversal Vulnerability", "date": "2026-02-25", "ransom": false, "due": "2026-02-27", "cvss": 7.8, "epss": 0.1247, "ms": false }, { "cve": "CVE-2026-20127", "vendor": "Cisco", "product": "Catalyst SD-WAN Controller and Manager", "name": "Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability", "date": "2026-02-25", "ransom": false, "due": "2026-02-27", "cvss": 10, "epss": 0.8824, "ms": false }, { "cve": "CVE-2026-25108", "vendor": "Soliton Systems K.K", "product": "FileZen", "name": "Soliton Systems K.K FileZen OS Command Injection Vulnerability", "date": "2026-02-24", "ransom": false, "due": "2026-03-17", "cvss": 8.8, "epss": 0.0498, "ms": false }, { "cve": "CVE-2025-49113", "vendor": "Roundcube", "product": "Webmail", "name": "RoundCube Webmail Deserialization of Untrusted Data Vulnerability", "date": "2026-02-20", "ransom": false, "due": "2026-03-13", "cvss": 8.8, "epss": 0.9769, "ms": false }, { "cve": "CVE-2025-68461", "vendor": "Roundcube", "product": "Webmail", "name": "RoundCube Webmail Cross-site Scripting Vulnerability", "date": "2026-02-20", "ransom": false, "due": "2026-03-13", "cvss": 6.1, "epss": 0.2009, "ms": false }, { "cve": "CVE-2021-22175", "vendor": "GitLab", "product": "GitLab", "name": "GitLab Server-Side Request Forgery (SSRF) Vulnerability", "date": "2026-02-18", "ransom": false, "due": "2026-03-11", "cvss": 9.8, "epss": 0.5337, "ms": false }, { "cve": "CVE-2026-22769", "vendor": "Dell", "product": "RecoverPoint for Virtual Machines (RP4VMs)", "name": "Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability", "date": "2026-02-18", "ransom": false, "due": "2026-02-21", "cvss": 10, "epss": 0.1312, "ms": false }, { "cve": "CVE-2008-0015", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability", "date": "2026-02-17", "ransom": false, "due": "2026-03-10", "ms": true }, { "cve": "CVE-2020-7796", "vendor": "Synacor", "product": "Zimbra Collaboration Suite", "name": "Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability", "date": "2026-02-17", "ransom": false, "due": "2026-03-10", "cvss": 9.8, "epss": 0.8442, "ms": false }, { "cve": "CVE-2024-7694", "vendor": "TeamT5", "product": "ThreatSonar Anti-Ransomware", "name": "TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2026-02-17", "ransom": false, "due": "2026-03-10", "cvss": 7.2, "epss": 0.0181, "ms": false }, { "cve": "CVE-2026-2441", "vendor": "Google", "product": "Chromium", "name": "Google Chromium CSS Use-After-Free Vulnerability", "date": "2026-02-17", "ransom": false, "due": "2026-03-10", "cvss": 8.8, "epss": 0.2202, "ms": false }, { "cve": "CVE-2026-1731", "vendor": "BeyondTrust", "product": "Remote Support (RS) and Privileged Remote Access (PRA)", "name": "BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability", "date": "2026-02-13", "ransom": true, "due": "2026-02-16", "cvss": 9.8, "epss": 0.8811, "ms": false }, { "cve": "CVE-2024-43468", "vendor": "Microsoft", "product": "Configuration Manager", "name": "Microsoft Configuration Manager SQL Injection Vulnerability", "date": "2026-02-12", "ransom": false, "due": "2026-03-05", "ms": true }, { "cve": "CVE-2025-15556", "vendor": "Notepad++", "product": "Notepad++", "name": "Notepad++ Download of Code Without Integrity Check Vulnerability", "date": "2026-02-12", "ransom": false, "due": "2026-03-05", "cvss": 7.5, "epss": 0.0127, "ms": false }, { "cve": "CVE-2025-40536", "vendor": "SolarWinds", "product": "Web Help Desk", "name": "SolarWinds Web Help Desk Security Control Bypass Vulnerability", "date": "2026-02-12", "ransom": false, "due": "2026-02-15", "cvss": 9.8, "epss": 0.7155, "ms": false }, { "cve": "CVE-2026-20700", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Buffer Overflow Vulnerability", "date": "2026-02-12", "ransom": false, "due": "2026-03-05", "cvss": 7.8, "epss": 0.0132, "ms": false }, { "cve": "CVE-2026-21510", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Shell Protection Mechanism Failure Vulnerability", "date": "2026-02-10", "ransom": false, "due": "2026-03-03", "ms": true }, { "cve": "CVE-2026-21513", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability", "date": "2026-02-10", "ransom": false, "due": "2026-03-03", "ms": true }, { "cve": "CVE-2026-21514", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability", "date": "2026-02-10", "ransom": false, "due": "2026-03-03", "ms": true }, { "cve": "CVE-2026-21519", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Type Confusion Vulnerability", "date": "2026-02-10", "ransom": false, "due": "2026-03-03", "ms": true }, { "cve": "CVE-2026-21525", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows NULL Pointer Dereference Vulnerability", "date": "2026-02-10", "ransom": false, "due": "2026-03-03", "ms": true }, { "cve": "CVE-2026-21533", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Improper Privilege Management Vulnerability", "date": "2026-02-10", "ransom": false, "due": "2026-03-03", "ms": true }, { "cve": "CVE-2025-11953", "vendor": "React Native Community", "product": "CLI", "name": "React Native Community CLI OS Command Injection Vulnerability", "date": "2026-02-05", "ransom": false, "due": "2026-02-26", "cvss": 9.8, "epss": 0.6192, "ms": false }, { "cve": "CVE-2026-24423", "vendor": "SmarterTools", "product": "SmarterMail", "name": "SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability", "date": "2026-02-05", "ransom": true, "due": "2026-02-26", "cvss": 9.8, "epss": 0.8769, "ms": false }, { "cve": "CVE-2019-19006", "vendor": "Sangoma", "product": "FreePBX", "name": "Sangoma FreePBX Improper Authentication Vulnerability", "date": "2026-02-03", "ransom": false, "due": "2026-02-24", "cvss": 9.8, "epss": 0.3661, "ms": false }, { "cve": "CVE-2021-39935", "vendor": "GitLab", "product": "Community and Enterprise Editions", "name": "GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability", "date": "2026-02-03", "ransom": false, "due": "2026-02-24", "cvss": 7.5, "epss": 0.3565, "ms": false }, { "cve": "CVE-2025-40551", "vendor": "SolarWinds", "product": "Web Help Desk", "name": "SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability", "date": "2026-02-03", "ransom": false, "due": "2026-02-06", "cvss": 9.8, "epss": 0.8362, "ms": false }, { "cve": "CVE-2025-64328", "vendor": "Sangoma", "product": "FreePBX", "name": "Sangoma FreePBX OS Command Injection Vulnerability", "date": "2026-02-03", "ransom": false, "due": "2026-02-24", "cvss": 7.2, "epss": 0.8462, "ms": false }, { "cve": "CVE-2026-1281", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability", "date": "2026-01-29", "ransom": false, "due": "2026-02-01", "cvss": 9.8, "epss": 0.8152, "ms": false }, { "cve": "CVE-2026-24858", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability", "date": "2026-01-27", "ransom": false, "due": "2026-01-30", "cvss": 9.8, "epss": 0.8584, "ms": false }, { "cve": "CVE-2018-14634", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Integer Overflow Vulnerability", "date": "2026-01-26", "ransom": false, "due": "2026-02-16", "cvss": 7.8, "epss": 0.1469, "ms": false }, { "cve": "CVE-2025-52691", "vendor": "SmarterTools", "product": "SmarterMail", "name": "SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2026-01-26", "ransom": true, "due": "2026-02-16", "cvss": 10, "epss": 0.8546, "ms": false }, { "cve": "CVE-2026-21509", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Security Feature Bypass Vulnerability", "date": "2026-01-26", "ransom": false, "due": "2026-02-16", "ms": true }, { "cve": "CVE-2026-23760", "vendor": "SmarterTools", "product": "SmarterMail", "name": "SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability", "date": "2026-01-26", "ransom": true, "due": "2026-02-16", "cvss": 9.8, "epss": 0.9627, "ms": false }, { "cve": "CVE-2026-24061", "vendor": "GNU", "product": "InetUtils", "name": "GNU InetUtils Argument Injection Vulnerability", "date": "2026-01-26", "ransom": false, "due": "2026-02-16", "cvss": 9.8, "epss": 0.9788, "ms": false }, { "cve": "CVE-2024-37079", "vendor": "Broadcom", "product": "VMware vCenter Server", "name": "Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability", "date": "2026-01-23", "ransom": false, "due": "2026-02-13", "cvss": 9.8, "epss": 0.2238, "ms": false }, { "cve": "CVE-2025-31125", "vendor": "Vite", "product": "Vitejs", "name": "Vite Vitejs Improper Access Control Vulnerability", "date": "2026-01-22", "ransom": false, "due": "2026-02-12", "cvss": 7.5, "epss": 0.588, "ms": false }, { "cve": "CVE-2025-34026", "vendor": "Versa", "product": "Concerto", "name": "Versa Concerto Improper Authentication Vulnerability", "date": "2026-01-22", "ransom": false, "due": "2026-02-12", "cvss": 7.5, "epss": 0.8323, "ms": false }, { "cve": "CVE-2025-54313", "vendor": "Prettier", "product": "eslint-config-prettier", "name": "Prettier eslint-config-prettier Embedded Malicious Code Vulnerability", "date": "2026-01-22", "ransom": false, "due": "2026-02-12", "cvss": 7.5, "epss": 0.0411, "ms": false }, { "cve": "CVE-2025-68645", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability", "date": "2026-01-22", "ransom": false, "due": "2026-02-12", "cvss": 8.8, "epss": 0.3177, "ms": false }, { "cve": "CVE-2026-20045", "vendor": "Cisco", "product": "Unified Communications Manager", "name": "Cisco Unified Communications Products Code Injection Vulnerability", "date": "2026-01-21", "ransom": false, "due": "2026-02-11", "cvss": 9.8, "epss": 0.0431, "ms": false }, { "cve": "CVE-2026-20805", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Information Disclosure Vulnerability", "date": "2026-01-13", "ransom": false, "due": "2026-02-03", "ms": true }, { "cve": "CVE-2025-8110", "vendor": "Gogs", "product": "Gogs", "name": "Gogs Path Traversal Vulnerability", "date": "2026-01-12", "ransom": false, "due": "2026-02-02", "cvss": 8.8, "epss": 0.8248, "ms": false }, { "cve": "CVE-2009-0556", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office PowerPoint Code Injection Vulnerability", "date": "2026-01-07", "ransom": false, "due": "2026-01-28", "ms": true }, { "cve": "CVE-2025-37164", "vendor": "Hewlett Packard Enterprise (HPE)", "product": "OneView", "name": "Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability", "date": "2026-01-07", "ransom": false, "due": "2026-01-28", "cvss": 9.8, "epss": 0.9001, "ms": false }, { "cve": "CVE-2025-14847", "vendor": "MongoDB", "product": "MongoDB and MongoDB Server", "name": "MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability", "date": "2025-12-29", "ransom": false, "due": "2026-01-19", "cvss": 7.5, "epss": 0.8301, "ms": false }, { "cve": "CVE-2023-52163", "vendor": "Digiever", "product": "DS-2105 Pro", "name": "Digiever DS-2105 Pro Missing Authorization Vulnerability", "date": "2025-12-22", "ransom": false, "due": "2026-01-12", "cvss": 8.8, "epss": 0.9692, "ms": false }, { "cve": "CVE-2025-14733", "vendor": "WatchGuard", "product": "Firebox", "name": "WatchGuard Firebox Out of Bounds Write Vulnerability", "date": "2025-12-19", "ransom": false, "due": "2025-12-26", "cvss": 9.8, "epss": 0.2184, "ms": false }, { "cve": "CVE-2025-20393", "vendor": "Cisco", "product": "Multiple Products", "name": "Cisco Multiple Products Improper Input Validation Vulnerability", "date": "2025-12-17", "ransom": false, "due": "2025-12-24", "cvss": 10, "epss": 0.2951, "ms": false }, { "cve": "CVE-2025-40602", "vendor": "SonicWall", "product": "SMA1000 appliance", "name": "SonicWall SMA1000 Missing Authorization Vulnerability", "date": "2025-12-17", "ransom": false, "due": "2025-12-24", "cvss": 6.6, "epss": 0.0194, "ms": false }, { "cve": "CVE-2025-59374", "vendor": "ASUS", "product": "Live Update", "name": "ASUS Live Update Embedded Malicious Code Vulnerability", "date": "2025-12-17", "ransom": false, "due": "2026-01-07", "cvss": 9.8, "epss": 0.0113, "ms": false }, { "cve": "CVE-2025-59718", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability", "date": "2025-12-16", "ransom": false, "due": "2025-12-23", "cvss": 9.8, "epss": 0.6302, "ms": false }, { "cve": "CVE-2025-14611", "vendor": "Gladinet", "product": "CentreStack and Triofox", "name": "Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability", "date": "2025-12-15", "ransom": false, "due": "2026-01-05", "cvss": 9.8, "epss": 0.5095, "ms": false }, { "cve": "CVE-2025-43529", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Use-After-Free WebKit Vulnerability", "date": "2025-12-15", "ransom": false, "due": "2026-01-05", "cvss": 8.8, "epss": 0.0877, "ms": false }, { "cve": "CVE-2018-4063", "vendor": "Sierra Wireless", "product": "AirLink ALEOS", "name": "Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2025-12-12", "ransom": false, "due": "2026-01-02", "cvss": 8.8, "epss": 0.2751, "ms": false }, { "cve": "CVE-2025-14174", "vendor": "Google", "product": "Chromium", "name": "Google Chromium Out of Bounds Memory Access Vulnerability", "date": "2025-12-12", "ransom": false, "due": "2026-01-02", "cvss": 8.8, "epss": 0.2272, "ms": false }, { "cve": "CVE-2025-58360", "vendor": "OSGeo", "product": "GeoServer", "name": "OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability", "date": "2025-12-11", "ransom": false, "due": "2026-01-01", "cvss": 9.8, "epss": 0.6487, "ms": false }, { "cve": "CVE-2025-6218", "vendor": "RARLAB", "product": "WinRAR", "name": "RARLAB WinRAR Path Traversal Vulnerability", "date": "2025-12-09", "ransom": false, "due": "2025-12-30", "cvss": 7.8, "epss": 0.8942, "ms": false }, { "cve": "CVE-2025-62221", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Use After Free Vulnerability", "date": "2025-12-09", "ransom": false, "due": "2025-12-30", "ms": true }, { "cve": "CVE-2022-37055", "vendor": "D-Link", "product": "Routers", "name": "D-Link Routers Buffer Overflow Vulnerability", "date": "2025-12-08", "ransom": false, "due": "2025-12-29", "cvss": 9.8, "epss": 0.5704, "ms": false }, { "cve": "CVE-2025-66644", "vendor": "Array Networks", "product": "ArrayOS AG", "name": "Array Networks ArrayOS AG OS Command Injection Vulnerability", "date": "2025-12-08", "ransom": false, "due": "2025-12-29", "cvss": 9.8, "epss": 0.0346, "ms": false }, { "cve": "CVE-2025-55182", "vendor": "Meta", "product": "React Server Components", "name": "Meta React Server Components Remote Code Execution Vulnerability", "date": "2025-12-05", "ransom": true, "due": "2025-12-12", "cvss": 10, "epss": 0.9962, "ms": false }, { "cve": "CVE-2021-26828", "vendor": "OpenPLC", "product": "ScadaBR", "name": "OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability", "date": "2025-12-03", "ransom": false, "due": "2025-12-24", "cvss": 8.8, "epss": 0.3936, "ms": false }, { "cve": "CVE-2025-48572", "vendor": "Android", "product": "Framework", "name": "Android Framework Privilege Escalation Vulnerability", "date": "2025-12-02", "ransom": false, "due": "2025-12-23", "cvss": 7.8, "epss": 0.0025, "ms": false }, { "cve": "CVE-2025-48633", "vendor": "Android", "product": "Framework", "name": "Android Framework Information Disclosure Vulnerability", "date": "2025-12-02", "ransom": false, "due": "2025-12-23", "cvss": 5.5, "epss": 0.0026, "ms": false }, { "cve": "CVE-2021-26829", "vendor": "OpenPLC", "product": "ScadaBR", "name": "OpenPLC ScadaBR Cross-site Scripting Vulnerability", "date": "2025-11-28", "ransom": false, "due": "2025-12-19", "cvss": 5.4, "epss": 0.4805, "ms": false }, { "cve": "CVE-2025-61757", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability", "date": "2025-11-21", "ransom": false, "due": "2025-12-12", "cvss": 9.8, "epss": 0.8831, "ms": false }, { "cve": "CVE-2025-13223", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2025-11-19", "ransom": false, "due": "2025-12-10", "cvss": 8.8, "epss": 0.0491, "ms": false }, { "cve": "CVE-2025-58034", "vendor": "Fortinet", "product": "FortiWeb", "name": "Fortinet FortiWeb OS Command Injection Vulnerability", "date": "2025-11-18", "ransom": false, "due": "2025-11-25", "cvss": 7.2, "epss": 0.5558, "ms": false }, { "cve": "CVE-2025-64446", "vendor": "Fortinet", "product": "FortiWeb", "name": "Fortinet FortiWeb Path Traversal Vulnerability", "date": "2025-11-14", "ransom": false, "due": "2025-11-21", "cvss": 9.8, "epss": 0.9184, "ms": false }, { "cve": "CVE-2025-12480", "vendor": "Gladinet", "product": "Triofox", "name": "Gladinet Triofox Improper Access Control Vulnerability", "date": "2025-11-12", "ransom": false, "due": "2025-12-03", "cvss": 9.1, "epss": 0.9053, "ms": false }, { "cve": "CVE-2025-62215", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Race Condition Vulnerability", "date": "2025-11-12", "ransom": false, "due": "2025-12-03", "ms": true }, { "cve": "CVE-2025-9242", "vendor": "WatchGuard", "product": "Firebox", "name": "WatchGuard Firebox Out-of-Bounds Write Vulnerability", "date": "2025-11-12", "ransom": false, "due": "2025-12-03", "cvss": 9.8, "epss": 0.9112, "ms": false }, { "cve": "CVE-2025-21042", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Out-of-Bounds Write Vulnerability", "date": "2025-11-10", "ransom": false, "due": "2025-12-01", "cvss": 9.8, "epss": 0.3307, "ms": false }, { "cve": "CVE-2025-11371", "vendor": "Gladinet", "product": "CentreStack and Triofox", "name": "Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability", "date": "2025-11-04", "ransom": false, "due": "2025-11-25", "cvss": 7.5, "epss": 0.9209, "ms": false }, { "cve": "CVE-2025-48703", "vendor": "CWP", "product": "Control Web Panel", "name": "CWP Control Web Panel OS Command Injection Vulnerability", "date": "2025-11-04", "ransom": false, "due": "2025-11-25", "cvss": 9, "epss": 0.9962, "ms": false }, { "cve": "CVE-2025-24893", "vendor": "XWiki", "product": "Platform", "name": "XWiki Platform Eval Injection Vulnerability", "date": "2025-10-30", "ransom": false, "due": "2025-11-20", "cvss": 9.8, "epss": 0.9986, "ms": false }, { "cve": "CVE-2025-41244", "vendor": "Broadcom", "product": "VMware Aria Operations and VMware Tools", "name": "Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability", "date": "2025-10-30", "ransom": false, "due": "2025-11-20", "cvss": 7.8, "epss": 0.0788, "ms": false }, { "cve": "CVE-2025-6204", "vendor": "Dassault Systèmes", "product": "DELMIA Apriso", "name": "Dassault Systèmes DELMIA Apriso Code Injection Vulnerability", "date": "2025-10-28", "ransom": false, "due": "2025-11-18", "cvss": 8, "epss": 0.7615, "ms": false }, { "cve": "CVE-2025-6205", "vendor": "Dassault Systèmes", "product": "DELMIA Apriso", "name": "Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability", "date": "2025-10-28", "ransom": false, "due": "2025-11-18", "cvss": 9.1, "epss": 0.7106, "ms": false }, { "cve": "CVE-2025-54236", "vendor": "Adobe", "product": "Commerce and Magento", "name": "Adobe Commerce and Magento Improper Input Validation Vulnerability", "date": "2025-10-24", "ransom": false, "due": "2025-11-14", "cvss": 9.1, "epss": 0.9674, "ms": false }, { "cve": "CVE-2025-59287", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability", "date": "2025-10-24", "ransom": false, "due": "2025-11-14", "ms": true }, { "cve": "CVE-2025-61932", "vendor": "Motex", "product": "LANSCOPE Endpoint Manager", "name": "Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability", "date": "2025-10-22", "ransom": false, "due": "2025-11-12", "cvss": 9.8, "epss": 0.0263, "ms": false }, { "cve": "CVE-2022-48503", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Unspecified Vulnerability", "date": "2025-10-20", "ransom": false, "due": "2025-11-10", "cvss": 8.8, "epss": 0.0321, "ms": false }, { "cve": "CVE-2025-2746", "vendor": "Kentico", "product": "Xperience CMS", "name": "Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability", "date": "2025-10-20", "ransom": false, "due": "2025-11-10", "cvss": 9.8, "epss": 0.5843, "ms": false }, { "cve": "CVE-2025-2747", "vendor": "Kentico", "product": "Xperience CMS", "name": "Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability", "date": "2025-10-20", "ransom": false, "due": "2025-11-10", "cvss": 9.8, "epss": 0.9216, "ms": false }, { "cve": "CVE-2025-33073", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows SMB Client Improper Access Control Vulnerability", "date": "2025-10-20", "ransom": false, "due": "2025-11-10", "ms": true }, { "cve": "CVE-2025-61884", "vendor": "Oracle", "product": "E-Business Suite", "name": "Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability", "date": "2025-10-20", "ransom": true, "due": "2025-11-10", "cvss": 7.5, "epss": 0.9779, "ms": false }, { "cve": "CVE-2025-54253", "vendor": "Adobe", "product": "Experience Manager (AEM) Forms", "name": "Adobe Experience Manager Forms Code Execution Vulnerability", "date": "2025-10-15", "ransom": false, "due": "2025-11-05", "cvss": 10, "epss": 0.8751, "ms": false }, { "cve": "CVE-2016-7836", "vendor": "SKYSEA", "product": "Client View", "name": "SKYSEA Client View Improper Authentication Vulnerability", "date": "2025-10-14", "ransom": false, "due": "2025-11-04", "cvss": 9.8, "epss": 0.1938, "ms": false }, { "cve": "CVE-2025-24990", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Untrusted Pointer Dereference Vulnerability", "date": "2025-10-14", "ransom": false, "due": "2025-11-04", "ms": true }, { "cve": "CVE-2025-47827", "vendor": "IGEL", "product": "IGEL OS", "name": "IGEL OS Use of a Key Past its Expiration Date Vulnerability", "date": "2025-10-14", "ransom": false, "due": "2025-11-04", "cvss": 4.6, "epss": 0.0402, "ms": false }, { "cve": "CVE-2025-59230", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Improper Access Control Vulnerability", "date": "2025-10-14", "ransom": false, "due": "2025-11-04", "ms": true }, { "cve": "CVE-2021-43798", "vendor": "Grafana Labs", "product": "Grafana", "name": "Grafana Path Traversal Vulnerability", "date": "2025-10-09", "ransom": false, "due": "2025-10-30", "cvss": 7.5, "epss": 0.8885, "ms": false }, { "cve": "CVE-2025-27915", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability", "date": "2025-10-07", "ransom": false, "due": "2025-10-28", "cvss": 5.4, "epss": 0.0434, "ms": false }, { "cve": "CVE-2010-3765", "vendor": "Mozilla", "product": "Multiple Products", "name": "Mozilla Multiple Products Remote Code Execution Vulnerability", "date": "2025-10-06", "ransom": false, "due": "2025-10-27", "cvss": 9.8, "epss": 0.8328, "ms": false }, { "cve": "CVE-2010-3962", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability", "date": "2025-10-06", "ransom": false, "due": "2025-10-27", "ms": true }, { "cve": "CVE-2011-3402", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Remote Code Execution Vulnerability", "date": "2025-10-06", "ransom": false, "due": "2025-10-27", "ms": true }, { "cve": "CVE-2013-3918", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Out-of-Bounds Write Vulnerability", "date": "2025-10-06", "ransom": false, "due": "2025-10-27", "ms": true }, { "cve": "CVE-2021-22555", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Heap Out-of-Bounds Write Vulnerability", "date": "2025-10-06", "ransom": false, "due": "2025-10-27", "cvss": 7.8, "epss": 0.7868, "ms": false }, { "cve": "CVE-2021-43226", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "date": "2025-10-06", "ransom": false, "due": "2025-10-27", "ms": true }, { "cve": "CVE-2025-61882", "vendor": "Oracle", "product": "E-Business Suite", "name": "Oracle E-Business Suite Unspecified Vulnerability", "date": "2025-10-06", "ransom": true, "due": "2025-10-27", "cvss": 9.8, "epss": 0.9972, "ms": false }, { "cve": "CVE-2014-6278", "vendor": "GNU", "product": "GNU Bash", "name": "GNU Bash OS Command Injection Vulnerability", "date": "2025-10-02", "ransom": false, "due": "2025-10-23", "cvss": 8.8, "epss": 0.9962, "ms": false }, { "cve": "CVE-2015-7755", "vendor": "Juniper", "product": "ScreenOS", "name": "Juniper ScreenOS Improper Authentication Vulnerability", "date": "2025-10-02", "ransom": false, "due": "2025-10-23", "cvss": 9.8, "epss": 0.614, "ms": false }, { "cve": "CVE-2017-1000353", "vendor": "Jenkins", "product": "Jenkins", "name": "Jenkins Remote Code Execution Vulnerability", "date": "2025-10-02", "ransom": false, "due": "2025-10-23", "cvss": 9.8, "epss": 0.9968, "ms": false }, { "cve": "CVE-2025-21043", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Out-of-Bounds Write Vulnerability", "date": "2025-10-02", "ransom": false, "due": "2025-10-23", "cvss": 9.8, "epss": 0.019, "ms": false }, { "cve": "CVE-2025-4008", "vendor": "Smartbedded", "product": "Meteobridge", "name": "Smartbedded Meteobridge Command Injection Vulnerability", "date": "2025-10-02", "ransom": false, "due": "2025-10-23", "cvss": 8.8, "epss": 0.951, "ms": false }, { "cve": "CVE-2021-21311", "vendor": "Adminer", "product": "Adminer", "name": "Adminer Server-Side Request Forgery Vulnerability", "date": "2025-09-29", "ransom": false, "due": "2025-10-20", "cvss": 7.2, "epss": 0.9046, "ms": false }, { "cve": "CVE-2025-10035", "vendor": "Fortra", "product": "GoAnywhere MFT", "name": "Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability", "date": "2025-09-29", "ransom": true, "due": "2025-10-20", "cvss": 9.8, "epss": 0.9961, "ms": false }, { "cve": "CVE-2025-20352", "vendor": "Cisco", "product": "IOS and IOS XE", "name": "Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability", "date": "2025-09-29", "ransom": false, "due": "2025-10-20", "cvss": 7.7, "epss": 0.3875, "ms": false }, { "cve": "CVE-2025-32463", "vendor": "Sudo", "product": "Sudo", "name": "Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability", "date": "2025-09-29", "ransom": false, "due": "2025-10-20", "cvss": 7.8, "epss": 0.5494, "ms": false }, { "cve": "CVE-2025-59689", "vendor": "Libraesva", "product": "Email Security Gateway", "name": "Libraesva Email Security Gateway Command Injection Vulnerability", "date": "2025-09-29", "ransom": false, "due": "2025-10-20", "cvss": 6.1, "epss": 0.0191, "ms": false }, { "cve": "CVE-2025-20333", "vendor": "Cisco", "product": "Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability", "date": "2025-09-25", "ransom": false, "due": "2025-09-26", "cvss": 9.9, "epss": 0.4039, "ms": false }, { "cve": "CVE-2025-20362", "vendor": "Cisco", "product": "Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "name": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability", "date": "2025-09-25", "ransom": false, "due": "2025-09-26", "cvss": 8.6, "epss": 0.8554, "ms": false }, { "cve": "CVE-2025-10585", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2025-09-23", "ransom": false, "due": "2025-10-14", "cvss": 9.8, "epss": 0.0543, "ms": false }, { "cve": "CVE-2025-5086", "vendor": "Dassault Systèmes", "product": "DELMIA Apriso", "name": "Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability", "date": "2025-09-11", "ransom": false, "due": "2025-10-02", "cvss": 9, "epss": 0.8975, "ms": false }, { "cve": "CVE-2025-38352", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability", "date": "2025-09-04", "ransom": false, "due": "2025-09-25", "cvss": 7.8, "epss": 0.0125, "ms": false }, { "cve": "CVE-2025-48543", "vendor": "Android", "product": "Runtime", "name": "Android Runtime Use-After-Free Vulnerability", "date": "2025-09-04", "ransom": false, "due": "2025-09-25", "cvss": 8.8, "epss": 0.0053, "ms": false }, { "cve": "CVE-2025-53690", "vendor": "Sitecore", "product": "Multiple Products", "name": "Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability", "date": "2025-09-04", "ransom": false, "due": "2025-09-25", "cvss": 9, "epss": 0.314, "ms": false }, { "cve": "CVE-2023-50224", "vendor": "TP-Link", "product": "TL-WR841N", "name": "TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability", "date": "2025-09-03", "ransom": false, "due": "2025-09-24", "cvss": 6.5, "epss": 0.1745, "ms": false }, { "cve": "CVE-2025-9377", "vendor": "TP-Link", "product": "Multiple Routers", "name": "TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability", "date": "2025-09-03", "ransom": false, "due": "2025-09-24", "cvss": 7.2, "epss": 0.1179, "ms": false }, { "cve": "CVE-2020-24363", "vendor": "TP-Link", "product": "TL-WA855RE", "name": "TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability", "date": "2025-09-02", "ransom": false, "due": "2025-09-23", "cvss": 8.8, "epss": 0.2069, "ms": false }, { "cve": "CVE-2025-55177", "vendor": "Meta Platforms", "product": "WhatsApp", "name": "Meta Platforms WhatsApp Incorrect Authorization Vulnerability", "date": "2025-09-02", "ransom": false, "due": "2025-09-23", "cvss": 5.4, "epss": 0.0421, "ms": false }, { "cve": "CVE-2025-57819", "vendor": "Sangoma", "product": "FreePBX", "name": "Sangoma FreePBX Authentication Bypass Vulnerability", "date": "2025-08-29", "ransom": false, "due": "2025-09-19", "cvss": 9.8, "epss": 0.8827, "ms": false }, { "cve": "CVE-2025-7775", "vendor": "Citrix", "product": "NetScaler", "name": "Citrix NetScaler Memory Overflow Vulnerability", "date": "2025-08-26", "ransom": false, "due": "2025-08-28", "cvss": 9.8, "epss": 0.1963, "ms": false }, { "cve": "CVE-2024-8068", "vendor": "Citrix", "product": "Session Recording", "name": "Citrix Session Recording Improper Privilege Management Vulnerability", "date": "2025-08-25", "ransom": false, "due": "2025-09-15", "cvss": 8, "epss": 0.014, "ms": false }, { "cve": "CVE-2024-8069", "vendor": "Citrix", "product": "Session Recording", "name": "Citrix Session Recording Deserialization of Untrusted Data Vulnerability", "date": "2025-08-25", "ransom": false, "due": "2025-09-15", "cvss": 8, "epss": 0.1474, "ms": false }, { "cve": "CVE-2025-48384", "vendor": "Git", "product": "Git", "name": "Git Link Following Vulnerability", "date": "2025-08-25", "ransom": false, "due": "2025-09-15", "cvss": 8, "epss": 0.0284, "ms": false }, { "cve": "CVE-2025-43300", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability", "date": "2025-08-21", "ransom": false, "due": "2025-09-11", "cvss": 10, "epss": 0.2039, "ms": false }, { "cve": "CVE-2025-54948", "vendor": "Trend Micro", "product": "Apex One", "name": "Trend Micro Apex One OS Command Injection Vulnerability", "date": "2025-08-18", "ransom": false, "due": "2025-09-08", "cvss": 9.8, "epss": 0.2079, "ms": false }, { "cve": "CVE-2025-8875", "vendor": "N-able", "product": "N-Central", "name": "N-able N-Central Insecure Deserialization Vulnerability", "date": "2025-08-13", "ransom": false, "due": "2025-08-20", "cvss": 7.8, "epss": 0.0159, "ms": false }, { "cve": "CVE-2025-8876", "vendor": "N-able", "product": "N-Central", "name": "N-able N-Central Command Injection Vulnerability", "date": "2025-08-13", "ransom": false, "due": "2025-08-20", "cvss": 8.8, "epss": 0.0309, "ms": false }, { "cve": "CVE-2007-0671", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Excel Remote Code Execution Vulnerability", "date": "2025-08-12", "ransom": false, "due": "2025-09-02", "ms": true }, { "cve": "CVE-2013-3893", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Resource Management Errors Vulnerability", "date": "2025-08-12", "ransom": false, "due": "2025-09-02", "ms": true }, { "cve": "CVE-2025-8088", "vendor": "RARLAB", "product": "WinRAR", "name": "RARLAB WinRAR Path Traversal Vulnerability", "date": "2025-08-12", "ransom": false, "due": "2025-09-02", "cvss": 8.8, "epss": 0.9455, "ms": false }, { "cve": "CVE-2020-25078", "vendor": "D-Link", "product": "DCS-2530L and DCS-2670L Devices", "name": "D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability", "date": "2025-08-05", "ransom": false, "due": "2025-08-26", "cvss": 7.5, "epss": 0.9771, "ms": false }, { "cve": "CVE-2020-25079", "vendor": "D-Link", "product": "DCS-2530L and DCS-2670L Devices", "name": "D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability", "date": "2025-08-05", "ransom": false, "due": "2025-08-26", "cvss": 8.8, "epss": 0.5272, "ms": false }, { "cve": "CVE-2022-40799", "vendor": "D-Link", "product": "DNR-322L", "name": "D-Link DNR-322L Download of Code Without Integrity Check Vulnerability", "date": "2025-08-05", "ransom": false, "due": "2025-08-26", "cvss": 8.8, "epss": 0.3172, "ms": false }, { "cve": "CVE-2023-2533", "vendor": "PaperCut", "product": "NG/MF", "name": "PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability", "date": "2025-07-28", "ransom": false, "due": "2025-08-18", "cvss": 8.8, "epss": 0.2925, "ms": false }, { "cve": "CVE-2025-20281", "vendor": "Cisco", "product": "Identity Services Engine", "name": "Cisco Identity Services Engine Injection Vulnerability", "date": "2025-07-28", "ransom": false, "due": "2025-08-18", "cvss": 10, "epss": 0.9707, "ms": false }, { "cve": "CVE-2025-20337", "vendor": "Cisco", "product": "Identity Services Engine", "name": "Cisco Identity Services Engine Injection Vulnerability", "date": "2025-07-28", "ransom": false, "due": "2025-08-18", "cvss": 10, "epss": 0.6629, "ms": false }, { "cve": "CVE-2025-2775", "vendor": "SysAid", "product": "SysAid On-Prem", "name": "SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability", "date": "2025-07-22", "ransom": false, "due": "2025-08-12", "cvss": 7.5, "epss": 0.4224, "ms": false }, { "cve": "CVE-2025-2776", "vendor": "SysAid", "product": "SysAid On-Prem", "name": "SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability", "date": "2025-07-22", "ransom": false, "due": "2025-08-12", "cvss": 9.8, "epss": 0.64, "ms": false }, { "cve": "CVE-2025-49704", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Code Injection Vulnerability", "date": "2025-07-22", "ransom": true, "due": "2025-07-23", "ms": true }, { "cve": "CVE-2025-49706", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Improper Authentication Vulnerability", "date": "2025-07-22", "ransom": true, "due": "2025-07-23", "ms": true }, { "cve": "CVE-2025-54309", "vendor": "CrushFTP", "product": "CrushFTP", "name": "CrushFTP Unprotected Alternate Channel Vulnerability", "date": "2025-07-22", "ransom": false, "due": "2025-08-12", "cvss": 9.8, "epss": 0.9203, "ms": false }, { "cve": "CVE-2025-6558", "vendor": "Google", "product": "Chromium", "name": "Google Chromium ANGLE and GPU Improper Input Validation Vulnerability", "date": "2025-07-22", "ransom": false, "due": "2025-08-12", "cvss": 8.8, "epss": 0.0919, "ms": false }, { "cve": "CVE-2025-53770", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "date": "2025-07-20", "ransom": true, "due": "2025-07-21", "ms": true }, { "cve": "CVE-2025-25257", "vendor": "Fortinet", "product": "FortiWeb", "name": "Fortinet FortiWeb SQL Injection Vulnerability", "date": "2025-07-18", "ransom": false, "due": "2025-08-08", "cvss": 9.8, "epss": 0.9671, "ms": false }, { "cve": "CVE-2025-47812", "vendor": "Wing FTP Server", "product": "Wing FTP Server", "name": "Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability", "date": "2025-07-14", "ransom": false, "due": "2025-08-04", "cvss": 10, "epss": 0.9534, "ms": false }, { "cve": "CVE-2025-5777", "vendor": "Citrix", "product": "NetScaler ADC and Gateway", "name": "Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability", "date": "2025-07-10", "ransom": true, "due": "2025-07-11", "cvss": 7.5, "epss": 0.9996, "ms": false }, { "cve": "CVE-2014-3931", "vendor": "Looking Glass", "product": "Multi-Router Looking Glass (MRLG)", "name": "Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability", "date": "2025-07-07", "ransom": false, "due": "2025-07-28", "cvss": 9.8, "epss": 0.2657, "ms": false }, { "cve": "CVE-2016-10033", "vendor": "PHP", "product": "PHPMailer", "name": "PHPMailer Command Injection Vulnerability", "date": "2025-07-07", "ransom": false, "due": "2025-07-28", "cvss": 9.8, "epss": 0.9971, "ms": false }, { "cve": "CVE-2019-5418", "vendor": "Rails", "product": "Ruby on Rails", "name": "Rails Ruby on Rails Path Traversal Vulnerability", "date": "2025-07-07", "ransom": false, "due": "2025-07-28", "cvss": 7.5, "epss": 0.9851, "ms": false }, { "cve": "CVE-2019-9621", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability", "date": "2025-07-07", "ransom": false, "due": "2025-07-28", "cvss": 7.5, "epss": 0.8091, "ms": false }, { "cve": "CVE-2025-6554", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2025-07-02", "ransom": false, "due": "2025-07-23", "cvss": 8.1, "epss": 0.0863, "ms": false }, { "cve": "CVE-2025-48927", "vendor": "TeleMessage", "product": "TM SGNL", "name": "TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability", "date": "2025-07-01", "ransom": false, "due": "2025-07-22", "cvss": 5.3, "epss": 0.0866, "ms": false }, { "cve": "CVE-2025-48928", "vendor": "TeleMessage", "product": "TM SGNL", "name": "TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability", "date": "2025-07-01", "ransom": false, "due": "2025-07-22", "cvss": 4, "epss": 0.0037, "ms": false }, { "cve": "CVE-2025-6543", "vendor": "Citrix", "product": "NetScaler ADC and Gateway", "name": "Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability", "date": "2025-06-30", "ransom": false, "due": "2025-07-21", "cvss": 9.8, "epss": 0.1009, "ms": false }, { "cve": "CVE-2019-6693", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability", "date": "2025-06-25", "ransom": true, "due": "2025-07-16", "cvss": 6.5, "epss": 0.0566, "ms": false }, { "cve": "CVE-2024-0769", "vendor": "D-Link", "product": "DIR-859 Router", "name": "D-Link DIR-859 Router Path Traversal Vulnerability", "date": "2025-06-25", "ransom": false, "due": "2025-07-16", "cvss": 9.8, "epss": 0.8271, "ms": false }, { "cve": "CVE-2024-54085", "vendor": "AMI", "product": "MegaRAC SPx", "name": "AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability", "date": "2025-06-25", "ransom": false, "due": "2025-07-16", "cvss": 9.8, "epss": 0.6106, "ms": false }, { "cve": "CVE-2023-0386", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Improper Ownership Management Vulnerability", "date": "2025-06-17", "ransom": false, "due": "2025-07-08", "cvss": 7.8, "epss": 0.0788, "ms": false }, { "cve": "CVE-2023-33538", "vendor": "TP-Link", "product": "Multiple Routers", "name": "TP-Link Multiple Routers Command Injection Vulnerability", "date": "2025-06-16", "ransom": false, "due": "2025-07-07", "cvss": 8.8, "epss": 0.4187, "ms": false }, { "cve": "CVE-2025-43200", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Unspecified Vulnerability", "date": "2025-06-16", "ransom": false, "due": "2025-07-07", "cvss": 4.2, "epss": 0.0106, "ms": false }, { "cve": "CVE-2025-24016", "vendor": "Wazuh", "product": "Wazuh Server", "name": "Wazuh Server Deserialization of Untrusted Data Vulnerability", "date": "2025-06-10", "ransom": false, "due": "2025-07-01", "cvss": 9.9, "epss": 0.9384, "ms": false }, { "cve": "CVE-2025-33053", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows External Control of File Name or Path Vulnerability", "date": "2025-06-10", "ransom": false, "due": "2025-07-01", "ms": true }, { "cve": "CVE-2024-42009", "vendor": "Roundcube", "product": "Webmail", "name": "RoundCube Webmail Cross-Site Scripting Vulnerability", "date": "2025-06-09", "ransom": false, "due": "2025-06-30", "cvss": 9.3, "epss": 0.7962, "ms": false }, { "cve": "CVE-2025-32433", "vendor": "Erlang", "product": "Erlang/OTP", "name": "Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability", "date": "2025-06-09", "ransom": false, "due": "2025-06-30", "cvss": 10, "epss": 0.9859, "ms": false }, { "cve": "CVE-2025-5419", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Read and Write Vulnerability", "date": "2025-06-05", "ransom": false, "due": "2025-06-26", "cvss": 8.8, "epss": 0.0645, "ms": false }, { "cve": "CVE-2025-21479", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability", "date": "2025-06-03", "ransom": false, "due": "2025-06-24", "cvss": 8.6, "epss": 0.0078, "ms": false }, { "cve": "CVE-2025-21480", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability", "date": "2025-06-03", "ransom": false, "due": "2025-06-24", "cvss": 8.6, "epss": 0.0043, "ms": false }, { "cve": "CVE-2025-27038", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Use-After-Free Vulnerability", "date": "2025-06-03", "ransom": false, "due": "2025-06-24", "cvss": 7.5, "epss": 0.0083, "ms": false }, { "cve": "CVE-2021-32030", "vendor": "ASUS", "product": "Routers", "name": "ASUS Routers Improper Authentication Vulnerability", "date": "2025-06-02", "ransom": false, "due": "2025-06-23", "cvss": 9.8, "epss": 0.9939, "ms": false }, { "cve": "CVE-2023-39780", "vendor": "ASUS", "product": "RT-AX55 Routers", "name": "ASUS RT-AX55 Routers OS Command Injection Vulnerability", "date": "2025-06-02", "ransom": false, "due": "2025-06-23", "cvss": 8.8, "epss": 0.3388, "ms": false }, { "cve": "CVE-2024-56145", "vendor": "Craft CMS", "product": "Craft CMS", "name": "Craft CMS Code Injection Vulnerability", "date": "2025-06-02", "ransom": false, "due": "2025-06-23", "cvss": 9.8, "epss": 0.9745, "ms": false }, { "cve": "CVE-2025-35939", "vendor": "Craft CMS", "product": "Craft CMS", "name": "Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability", "date": "2025-06-02", "ransom": false, "due": "2025-06-23", "cvss": 5.3, "epss": 0.0127, "ms": false }, { "cve": "CVE-2025-3935", "vendor": "ConnectWise", "product": "ScreenConnect", "name": "ConnectWise ScreenConnect Improper Authentication Vulnerability", "date": "2025-06-02", "ransom": false, "due": "2025-06-23", "cvss": 7.2, "epss": 0.0342, "ms": false }, { "cve": "CVE-2025-4632", "vendor": "Samsung", "product": "MagicINFO 9 Server", "name": "Samsung MagicINFO 9 Server Path Traversal Vulnerability", "date": "2025-05-22", "ransom": false, "due": "2025-06-12", "cvss": 9.8, "epss": 0.2444, "ms": false }, { "cve": "CVE-2023-38950", "vendor": "ZKTeco", "product": "BioTime", "name": "ZKTeco BioTime Path Traversal Vulnerability", "date": "2025-05-19", "ransom": false, "due": "2025-06-09", "cvss": 7.5, "epss": 0.847, "ms": false }, { "cve": "CVE-2024-11182", "vendor": "MDaemon", "product": "Email Server", "name": "MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability", "date": "2025-05-19", "ransom": false, "due": "2025-06-09", "cvss": 6.1, "epss": 0.1711, "ms": false }, { "cve": "CVE-2024-27443", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "date": "2025-05-19", "ransom": false, "due": "2025-06-09", "cvss": 6.1, "epss": 0.2363, "ms": false }, { "cve": "CVE-2025-27920", "vendor": "Srimax", "product": "Output Messenger", "name": "Srimax Output Messenger Directory Traversal Vulnerability", "date": "2025-05-19", "ransom": false, "due": "2025-06-09", "cvss": 8.8, "epss": 0.0177, "ms": false }, { "cve": "CVE-2025-4427", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability", "date": "2025-05-19", "ransom": false, "due": "2025-06-09", "cvss": 7.5, "epss": 0.9991, "ms": false }, { "cve": "CVE-2025-4428", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability", "date": "2025-05-19", "ransom": false, "due": "2025-06-09", "cvss": 8.8, "epss": 0.8534, "ms": false }, { "cve": "CVE-2024-12987", "vendor": "DrayTek", "product": "Vigor Routers", "name": "DrayTek Vigor Routers OS Command Injection Vulnerability", "date": "2025-05-15", "ransom": false, "due": "2025-06-05", "cvss": 9.8, "epss": 0.9808, "ms": false }, { "cve": "CVE-2025-42999", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Deserialization Vulnerability", "date": "2025-05-15", "ransom": false, "due": "2025-06-05", "cvss": 9.1, "epss": 0.1128, "ms": false }, { "cve": "CVE-2025-32756", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability", "date": "2025-05-14", "ransom": false, "due": "2025-06-04", "cvss": 9.8, "epss": 0.3255, "ms": false }, { "cve": "CVE-2025-30397", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Scripting Engine Type Confusion Vulnerability", "date": "2025-05-13", "ransom": false, "due": "2025-06-03", "ms": true }, { "cve": "CVE-2025-30400", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows DWM Core Library Use-After-Free Vulnerability", "date": "2025-05-13", "ransom": false, "due": "2025-06-03", "ms": true }, { "cve": "CVE-2025-32701", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability", "date": "2025-05-13", "ransom": false, "due": "2025-06-03", "ms": true }, { "cve": "CVE-2025-32706", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability", "date": "2025-05-13", "ransom": false, "due": "2025-06-03", "ms": true }, { "cve": "CVE-2025-32709", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability", "date": "2025-05-13", "ransom": false, "due": "2025-06-03", "ms": true }, { "cve": "CVE-2025-47729", "vendor": "TeleMessage", "product": "TM SGNL", "name": "TeleMessage TM SGNL Hidden Functionality Vulnerability", "date": "2025-05-12", "ransom": false, "due": "2025-06-02", "cvss": 4.9, "epss": 0.0041, "ms": false }, { "cve": "CVE-2024-11120", "vendor": "GeoVision", "product": "Multiple Devices", "name": "GeoVision Devices OS Command Injection Vulnerability", "date": "2025-05-07", "ransom": false, "due": "2025-05-28", "cvss": 9.8, "epss": 0.2855, "ms": false }, { "cve": "CVE-2024-6047", "vendor": "GeoVision", "product": "Multiple Devices", "name": "GeoVision Devices OS Command Injection Vulnerability", "date": "2025-05-07", "ransom": false, "due": "2025-05-28", "cvss": 9.8, "epss": 0.1007, "ms": false }, { "cve": "CVE-2025-27363", "vendor": "FreeType", "product": "FreeType", "name": "FreeType Out-of-Bounds Write Vulnerability", "date": "2025-05-06", "ransom": false, "due": "2025-05-27", "cvss": 8.1, "epss": 0.2605, "ms": false }, { "cve": "CVE-2025-3248", "vendor": "Langflow", "product": "Langflow", "name": "Langflow Missing Authentication Vulnerability", "date": "2025-05-05", "ransom": true, "due": "2025-05-26", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2024-58136", "vendor": "Yiiframework", "product": "Yii", "name": "Yiiframework Yii Improper Protection of Alternate Path Vulnerability", "date": "2025-05-02", "ransom": false, "due": "2025-05-23", "cvss": 9.8, "epss": 0.8476, "ms": false }, { "cve": "CVE-2025-34028", "vendor": "Commvault", "product": "Command Center", "name": "Commvault Command Center Path Traversal Vulnerability", "date": "2025-05-02", "ransom": false, "due": "2025-05-23", "cvss": 10, "epss": 0.9766, "ms": false }, { "cve": "CVE-2023-44221", "vendor": "SonicWall", "product": "SMA100 Appliances", "name": "SonicWall SMA100 Appliances OS Command Injection Vulnerability", "date": "2025-05-01", "ransom": false, "due": "2025-05-22", "cvss": 7.2, "epss": 0.7493, "ms": false }, { "cve": "CVE-2024-38475", "vendor": "Apache", "product": "HTTP Server", "name": "Apache HTTP Server Improper Escaping of Output Vulnerability", "date": "2025-05-01", "ransom": false, "due": "2025-05-22", "cvss": 9.1, "epss": 0.9996, "ms": false }, { "cve": "CVE-2025-31324", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Unrestricted File Upload Vulnerability", "date": "2025-04-29", "ransom": true, "due": "2025-05-20", "cvss": 9.8, "epss": 0.9951, "ms": false }, { "cve": "CVE-2025-1976", "vendor": "Broadcom", "product": "Brocade Fabric OS", "name": "Broadcom Brocade Fabric OS Code Injection Vulnerability", "date": "2025-04-28", "ransom": false, "due": "2025-05-19", "cvss": 6.7, "epss": 0.0078, "ms": false }, { "cve": "CVE-2025-3928", "vendor": "Commvault", "product": "Web Server", "name": "Commvault Web Server Unspecified Vulnerability", "date": "2025-04-28", "ransom": false, "due": "2025-05-19", "cvss": 8.8, "epss": 0.0209, "ms": false }, { "cve": "CVE-2025-42599", "vendor": "Qualitia", "product": "Active! Mail", "name": "Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability", "date": "2025-04-28", "ransom": false, "due": "2025-05-19", "cvss": 9.8, "epss": 0.0321, "ms": false }, { "cve": "CVE-2025-24054", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability", "date": "2025-04-17", "ransom": false, "due": "2025-05-08", "ms": true }, { "cve": "CVE-2025-31200", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2025-04-17", "ransom": false, "due": "2025-05-08", "cvss": 9.8, "epss": 0.1966, "ms": false }, { "cve": "CVE-2025-31201", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Arbitrary Read and Write Vulnerability", "date": "2025-04-17", "ransom": false, "due": "2025-05-08", "cvss": 9.8, "epss": 0.1465, "ms": false }, { "cve": "CVE-2021-20035", "vendor": "SonicWall", "product": "SMA100 Appliances", "name": "SonicWall SMA100 Appliances OS Command Injection Vulnerability", "date": "2025-04-16", "ransom": false, "due": "2025-05-07", "cvss": 6.5, "epss": 0.0418, "ms": false }, { "cve": "CVE-2024-53150", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Out-of-Bounds Read Vulnerability", "date": "2025-04-09", "ransom": false, "due": "2025-04-30", "cvss": 7.1, "epss": 0.0135, "ms": false }, { "cve": "CVE-2024-53197", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Out-of-Bounds Access Vulnerability", "date": "2025-04-09", "ransom": false, "due": "2025-04-30", "cvss": 7.8, "epss": 0.0356, "ms": false }, { "cve": "CVE-2025-29824", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability", "date": "2025-04-08", "ransom": true, "due": "2025-04-29", "ms": true }, { "cve": "CVE-2025-30406", "vendor": "Gladinet", "product": "CentreStack", "name": "Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability", "date": "2025-04-08", "ransom": false, "due": "2025-04-29", "cvss": 9.8, "epss": 0.9384, "ms": false }, { "cve": "CVE-2025-31161", "vendor": "CrushFTP", "product": "CrushFTP", "name": "CrushFTP Authentication Bypass Vulnerability", "date": "2025-04-07", "ransom": true, "due": "2025-04-28", "cvss": 9.8, "epss": 0.9995, "ms": false }, { "cve": "CVE-2025-22457", "vendor": "Ivanti", "product": "Connect Secure, Policy Secure, and ZTA Gateways", "name": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability", "date": "2025-04-04", "ransom": true, "due": "2025-04-11", "cvss": 9.8, "epss": 0.9999, "ms": false }, { "cve": "CVE-2025-24813", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat Path Equivalence Vulnerability", "date": "2025-04-01", "ransom": false, "due": "2025-04-22", "cvss": 9.8, "epss": 0.9996, "ms": false }, { "cve": "CVE-2024-20439", "vendor": "Cisco", "product": "Smart Licensing Utility", "name": "Cisco Smart Licensing Utility Static Credential Vulnerability", "date": "2025-03-31", "ransom": false, "due": "2025-04-21", "cvss": 9.8, "epss": 0.9206, "ms": false }, { "cve": "CVE-2025-2783", "vendor": "Google", "product": "Chromium Mojo", "name": "Google Chromium Mojo Sandbox Escape Vulnerability", "date": "2025-03-27", "ransom": false, "due": "2025-04-17", "cvss": 8.3, "epss": 0.084, "ms": false }, { "cve": "CVE-2019-9874", "vendor": "Sitecore", "product": "CMS and Experience Platform (XP)", "name": "Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability", "date": "2025-03-26", "ransom": false, "due": "2025-04-16", "cvss": 9.8, "epss": 0.8386, "ms": false }, { "cve": "CVE-2019-9875", "vendor": "Sitecore", "product": "CMS and Experience Platform (XP)", "name": "Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability", "date": "2025-03-26", "ransom": false, "due": "2025-04-16", "cvss": 8.8, "epss": 0.1415, "ms": false }, { "cve": "CVE-2025-30154", "vendor": "reviewdog", "product": "action-setup GitHub Action", "name": "reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability", "date": "2025-03-24", "ransom": false, "due": "2025-04-14", "cvss": 8.6, "epss": 0.023, "ms": false }, { "cve": "CVE-2017-12637", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Directory Traversal Vulnerability", "date": "2025-03-19", "ransom": false, "due": "2025-04-09", "cvss": 7.5, "epss": 0.9456, "ms": false }, { "cve": "CVE-2024-48248", "vendor": "NAKIVO", "product": "Backup and Replication", "name": "NAKIVO Backup and Replication Absolute Path Traversal Vulnerability", "date": "2025-03-19", "ransom": false, "due": "2025-04-09", "cvss": 8.6, "epss": 0.9426, "ms": false }, { "cve": "CVE-2025-1316", "vendor": "Edimax", "product": "IC-7100 IP Camera", "name": "Edimax IC-7100 IP Camera OS Command Injection Vulnerability", "date": "2025-03-19", "ransom": false, "due": "2025-04-09", "cvss": 9.8, "epss": 0.7304, "ms": false }, { "cve": "CVE-2025-24472", "vendor": "Fortinet", "product": "FortiOS and FortiProxy", "name": "Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability", "date": "2025-03-18", "ransom": true, "due": "2025-04-08", "cvss": 8.1, "epss": 0.0334, "ms": false }, { "cve": "CVE-2025-30066", "vendor": "tj-actions", "product": "changed-files GitHub Action", "name": "tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability", "date": "2025-03-18", "ransom": false, "due": "2025-04-08", "cvss": 8.6, "epss": 0.7239, "ms": false }, { "cve": "CVE-2025-21590", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability", "date": "2025-03-13", "ransom": false, "due": "2025-04-03", "cvss": 4.4, "epss": 0.0166, "ms": false }, { "cve": "CVE-2025-24201", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability", "date": "2025-03-13", "ransom": false, "due": "2025-04-03", "cvss": 10, "epss": 0.0424, "ms": false }, { "cve": "CVE-2025-24983", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Win32k Use-After-Free Vulnerability", "date": "2025-03-11", "ransom": false, "due": "2025-04-01", "ms": true }, { "cve": "CVE-2025-24984", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows NTFS Information Disclosure Vulnerability", "date": "2025-03-11", "ransom": false, "due": "2025-04-01", "ms": true }, { "cve": "CVE-2025-24985", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability", "date": "2025-03-11", "ransom": false, "due": "2025-04-01", "ms": true }, { "cve": "CVE-2025-24991", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability", "date": "2025-03-11", "ransom": false, "due": "2025-04-01", "ms": true }, { "cve": "CVE-2025-24993", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability", "date": "2025-03-11", "ransom": false, "due": "2025-04-01", "ms": true }, { "cve": "CVE-2025-26633", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability", "date": "2025-03-11", "ransom": true, "due": "2025-04-01", "ms": true }, { "cve": "CVE-2024-13159", "vendor": "Ivanti", "product": "Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability", "date": "2025-03-10", "ransom": false, "due": "2025-03-31", "cvss": 7.5, "epss": 0.9983, "ms": false }, { "cve": "CVE-2024-13160", "vendor": "Ivanti", "product": "Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability", "date": "2025-03-10", "ransom": false, "due": "2025-03-31", "cvss": 7.5, "epss": 0.91, "ms": false }, { "cve": "CVE-2024-13161", "vendor": "Ivanti", "product": "Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability", "date": "2025-03-10", "ransom": false, "due": "2025-03-31", "cvss": 7.5, "epss": 0.8983, "ms": false }, { "cve": "CVE-2024-57968", "vendor": "Advantive", "product": "VeraCore", "name": "Advantive VeraCore Unrestricted File Upload Vulnerability", "date": "2025-03-10", "ransom": false, "due": "2025-03-31", "cvss": 8.8, "epss": 0.3251, "ms": false }, { "cve": "CVE-2025-25181", "vendor": "Advantive", "product": "VeraCore", "name": "Advantive VeraCore SQL Injection Vulnerability", "date": "2025-03-10", "ransom": false, "due": "2025-03-31", "cvss": 7.5, "epss": 0.5086, "ms": false }, { "cve": "CVE-2024-50302", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Use of Uninitialized Resource Vulnerability", "date": "2025-03-04", "ransom": false, "due": "2025-03-25", "cvss": 5.5, "epss": 0.0081, "ms": false }, { "cve": "CVE-2025-22224", "vendor": "VMware", "product": "ESXi and Workstation", "name": "VMware ESXi and Workstation TOCTOU Race Condition Vulnerability", "date": "2025-03-04", "ransom": false, "due": "2025-03-25", "cvss": 8.2, "epss": 0.0156, "ms": false }, { "cve": "CVE-2025-22225", "vendor": "VMware", "product": "ESXi", "name": "VMware ESXi Arbitrary Write Vulnerability", "date": "2025-03-04", "ransom": true, "due": "2025-03-25", "cvss": 8.2, "epss": 0.01, "ms": false }, { "cve": "CVE-2025-22226", "vendor": "VMware", "product": "ESXi, Workstation, and Fusion", "name": "VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability", "date": "2025-03-04", "ransom": false, "due": "2025-03-25", "cvss": 6, "epss": 0.0174, "ms": false }, { "cve": "CVE-2018-8639", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability", "date": "2025-03-03", "ransom": true, "due": "2025-03-24", "ms": true }, { "cve": "CVE-2022-43769", "vendor": "Hitachi Vantara", "product": "Pentaho Business Analytics (BA) Server", "name": "Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability", "date": "2025-03-03", "ransom": false, "due": "2025-03-24", "cvss": 7.2, "epss": 0.9767, "ms": false }, { "cve": "CVE-2022-43939", "vendor": "Hitachi Vantara", "product": "Pentaho Business Analytics (BA) Server", "name": "Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability", "date": "2025-03-03", "ransom": false, "due": "2025-03-24", "cvss": 9.8, "epss": 0.9227, "ms": false }, { "cve": "CVE-2023-20118", "vendor": "Cisco", "product": "Small Business RV Series Routers", "name": "Cisco Small Business RV Series Routers Command Injection Vulnerability", "date": "2025-03-03", "ransom": false, "due": "2025-03-24", "cvss": 7.2, "epss": 0.5411, "ms": false }, { "cve": "CVE-2024-4885", "vendor": "Progress", "product": "WhatsUp Gold", "name": "Progress WhatsUp Gold Path Traversal Vulnerability", "date": "2025-03-03", "ransom": false, "due": "2025-03-24", "cvss": 9.8, "epss": 0.9929, "ms": false }, { "cve": "CVE-2023-34192", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "date": "2025-02-25", "ransom": false, "due": "2025-03-18", "cvss": 9, "epss": 0.7727, "ms": false }, { "cve": "CVE-2024-49035", "vendor": "Microsoft", "product": "Partner Center", "name": "Microsoft Partner Center Improper Access Control Vulnerability", "date": "2025-02-25", "ransom": false, "due": "2025-03-18", "ms": true }, { "cve": "CVE-2017-3066", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization Vulnerability", "date": "2025-02-24", "ransom": false, "due": "2025-03-17", "cvss": 9.8, "epss": 0.906, "ms": false }, { "cve": "CVE-2024-20953", "vendor": "Oracle", "product": "Agile Product Lifecycle Management (PLM)", "name": "Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability", "date": "2025-02-24", "ransom": false, "due": "2025-03-17", "cvss": 8.8, "epss": 0.034, "ms": false }, { "cve": "CVE-2025-24989", "vendor": "Microsoft", "product": "Power Pages", "name": "Microsoft Power Pages Improper Access Control Vulnerability", "date": "2025-02-21", "ransom": false, "due": "2025-03-14", "ms": true }, { "cve": "CVE-2025-0111", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS File Read Vulnerability", "date": "2025-02-20", "ransom": false, "due": "2025-03-13", "cvss": 6.5, "epss": 0.0193, "ms": false }, { "cve": "CVE-2025-23209", "vendor": "Craft CMS", "product": "Craft CMS", "name": "Craft CMS Code Injection Vulnerability", "date": "2025-02-20", "ransom": false, "due": "2025-03-13", "cvss": 8.1, "epss": 0.0436, "ms": false }, { "cve": "CVE-2024-53704", "vendor": "SonicWall", "product": "SonicOS", "name": "SonicWall SonicOS SSLVPN Improper Authentication Vulnerability", "date": "2025-02-18", "ransom": true, "due": "2025-03-11", "cvss": 9.8, "epss": 0.9513, "ms": false }, { "cve": "CVE-2025-0108", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "date": "2025-02-18", "ransom": false, "due": "2025-03-11", "cvss": 9.1, "epss": 0.9846, "ms": false }, { "cve": "CVE-2024-57727", "vendor": "SimpleHelp", "product": "SimpleHelp", "name": "SimpleHelp Path Traversal Vulnerability", "date": "2025-02-13", "ransom": true, "due": "2025-03-06", "cvss": 7.5, "epss": 0.9515, "ms": false }, { "cve": "CVE-2024-41710", "vendor": "Mitel", "product": "SIP Phones", "name": "Mitel SIP Phones Argument Injection Vulnerability", "date": "2025-02-12", "ransom": false, "due": "2025-03-05", "cvss": 7.2, "epss": 0.4165, "ms": false }, { "cve": "CVE-2025-24200", "vendor": "Apple", "product": "iOS and iPadOS", "name": "Apple iOS and iPadOS Incorrect Authorization Vulnerability", "date": "2025-02-12", "ransom": false, "due": "2025-03-05", "cvss": 6.1, "epss": 0.0437, "ms": false }, { "cve": "CVE-2024-40890", "vendor": "Zyxel", "product": "DSL CPE Devices", "name": "Zyxel DSL CPE OS Command Injection Vulnerability", "date": "2025-02-11", "ransom": false, "due": "2025-03-04", "cvss": 8.8, "epss": 0.2225, "ms": false }, { "cve": "CVE-2024-40891", "vendor": "Zyxel", "product": "DSL CPE Devices", "name": "Zyxel DSL CPE OS Command Injection Vulnerability", "date": "2025-02-11", "ransom": false, "due": "2025-03-04", "cvss": 8.8, "epss": 0.2183, "ms": false }, { "cve": "CVE-2025-21391", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Storage Link Following Vulnerability", "date": "2025-02-11", "ransom": false, "due": "2025-03-04", "ms": true }, { "cve": "CVE-2025-21418", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability", "date": "2025-02-11", "ransom": false, "due": "2025-03-04", "ms": true }, { "cve": "CVE-2025-0994", "vendor": "Trimble", "product": "Cityworks", "name": "Trimble Cityworks Deserialization Vulnerability", "date": "2025-02-07", "ransom": false, "due": "2025-02-28", "cvss": 8.8, "epss": 0.3131, "ms": false }, { "cve": "CVE-2020-15069", "vendor": "Sophos", "product": "XG Firewall", "name": "Sophos XG Firewall Buffer Overflow Vulnerability", "date": "2025-02-06", "ransom": false, "due": "2025-02-27", "cvss": 9.8, "epss": 0.1067, "ms": false }, { "cve": "CVE-2020-29574", "vendor": "Sophos", "product": "CyberoamOS", "name": "CyberoamOS (CROS) SQL Injection Vulnerability", "date": "2025-02-06", "ransom": false, "due": "2025-02-27", "cvss": 9.8, "epss": 0.0473, "ms": false }, { "cve": "CVE-2022-23748", "vendor": "Audinate", "product": "Dante Discovery", "name": "Dante Discovery Process Control Vulnerability", "date": "2025-02-06", "ransom": false, "due": "2025-02-27", "cvss": 7.8, "epss": 0.0853, "ms": false }, { "cve": "CVE-2024-21413", "vendor": "Microsoft", "product": "Office Outlook", "name": "Microsoft Outlook Improper Input Validation Vulnerability", "date": "2025-02-06", "ransom": false, "due": "2025-02-27", "ms": true }, { "cve": "CVE-2025-0411", "vendor": "7-Zip", "product": "7-Zip", "name": "7-Zip Mark of the Web Bypass Vulnerability", "date": "2025-02-06", "ransom": false, "due": "2025-02-27", "cvss": 7, "epss": 0.6707, "ms": false }, { "cve": "CVE-2024-53104", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Out-of-Bounds Write Vulnerability", "date": "2025-02-05", "ransom": false, "due": "2025-02-26", "cvss": 7.8, "epss": 0.033, "ms": false }, { "cve": "CVE-2018-19410", "vendor": "Paessler", "product": "PRTG Network Monitor", "name": "Paessler PRTG Network Monitor Local File Inclusion Vulnerability", "date": "2025-02-04", "ransom": false, "due": "2025-02-25", "cvss": 9.8, "epss": 0.8658, "ms": false }, { "cve": "CVE-2018-9276", "vendor": "Paessler", "product": "PRTG Network Monitor", "name": "Paessler PRTG Network Monitor OS Command Injection Vulnerability", "date": "2025-02-04", "ransom": false, "due": "2025-02-25", "cvss": 7.2, "epss": 0.8717, "ms": false }, { "cve": "CVE-2024-29059", "vendor": "Microsoft", "product": ".NET Framework", "name": "Microsoft .NET Framework Information Disclosure Vulnerability", "date": "2025-02-04", "ransom": false, "due": "2025-02-25", "ms": true }, { "cve": "CVE-2024-45195", "vendor": "Apache", "product": "OFBiz", "name": "Apache OFBiz Forced Browsing Vulnerability", "date": "2025-02-04", "ransom": false, "due": "2025-02-25", "cvss": 7.5, "epss": 0.9998, "ms": false }, { "cve": "CVE-2025-24085", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Use-After-Free Vulnerability", "date": "2025-01-29", "ransom": false, "due": "2025-02-19", "cvss": 10, "epss": 0.1732, "ms": false }, { "cve": "CVE-2025-23006", "vendor": "SonicWall", "product": "SMA1000 Appliances", "name": "SonicWall SMA1000 Appliances Deserialization Vulnerability", "date": "2025-01-24", "ransom": true, "due": "2025-02-14", "cvss": 9.8, "epss": 0.2343, "ms": false }, { "cve": "CVE-2020-11023", "vendor": "JQuery", "product": "JQuery", "name": "JQuery Cross-Site Scripting (XSS) Vulnerability", "date": "2025-01-23", "ransom": false, "due": "2025-02-13", "cvss": 6.1, "epss": 0.8383, "ms": false }, { "cve": "CVE-2024-50603", "vendor": "Aviatrix", "product": "Controllers", "name": "Aviatrix Controllers OS Command Injection Vulnerability", "date": "2025-01-16", "ransom": false, "due": "2025-02-06", "cvss": 9.8, "epss": 0.9855, "ms": false }, { "cve": "CVE-2024-55591", "vendor": "Fortinet", "product": "FortiOS and FortiProxy", "name": "Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability", "date": "2025-01-14", "ransom": true, "due": "2025-01-21", "cvss": 9.8, "epss": 0.9826, "ms": false }, { "cve": "CVE-2025-21333", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability", "date": "2025-01-14", "ransom": false, "due": "2025-02-04", "ms": true }, { "cve": "CVE-2025-21334", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability", "date": "2025-01-14", "ransom": false, "due": "2025-02-04", "ms": true }, { "cve": "CVE-2025-21335", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability", "date": "2025-01-14", "ransom": false, "due": "2025-02-04", "ms": true }, { "cve": "CVE-2023-48365", "vendor": "Qlik", "product": "Sense", "name": "Qlik Sense HTTP Tunneling Vulnerability", "date": "2025-01-13", "ransom": true, "due": "2025-02-03", "cvss": 9.9, "epss": 0.2468, "ms": false }, { "cve": "CVE-2024-12686", "vendor": "BeyondTrust", "product": "Privileged Remote Access (PRA) and Remote Support (RS)", "name": "BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability", "date": "2025-01-13", "ransom": false, "due": "2025-02-03", "cvss": 7.2, "epss": 0.1379, "ms": false }, { "cve": "CVE-2025-0282", "vendor": "Ivanti", "product": "Connect Secure, Policy Secure, and ZTA Gateways", "name": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability", "date": "2025-01-08", "ransom": true, "due": "2025-01-15", "cvss": 9, "epss": 0.9997, "ms": false }, { "cve": "CVE-2020-2883", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Unspecified Vulnerability", "date": "2025-01-07", "ransom": false, "due": "2025-01-28", "cvss": 9.8, "epss": 0.9493, "ms": false }, { "cve": "CVE-2024-41713", "vendor": "Mitel", "product": "MiCollab", "name": "Mitel MiCollab Path Traversal Vulnerability", "date": "2025-01-07", "ransom": true, "due": "2025-01-28", "cvss": 9.1, "epss": 0.9811, "ms": false }, { "cve": "CVE-2024-55550", "vendor": "Mitel", "product": "MiCollab", "name": "Mitel MiCollab Path Traversal Vulnerability", "date": "2025-01-07", "ransom": true, "due": "2025-01-28", "cvss": 2.7, "epss": 0.381, "ms": false }, { "cve": "CVE-2024-3393", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability", "date": "2024-12-30", "ransom": false, "due": "2025-01-20", "cvss": 7.5, "epss": 0.2862, "ms": false }, { "cve": "CVE-2021-44207", "vendor": "Acclaim Systems", "product": "USAHERDS", "name": "Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability", "date": "2024-12-23", "ransom": false, "due": "2025-01-13", "cvss": 8.1, "epss": 0.1758, "ms": false }, { "cve": "CVE-2024-12356", "vendor": "BeyondTrust", "product": "Privileged Remote Access (PRA) and Remote Support (RS)", "name": "BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability", "date": "2024-12-19", "ransom": false, "due": "2024-12-27", "cvss": 9.8, "epss": 0.8799, "ms": false }, { "cve": "CVE-2018-14933", "vendor": "NUUO", "product": "NVRmini Devices", "name": "NUUO NVRmini Devices OS Command Injection Vulnerability", "date": "2024-12-18", "ransom": false, "due": "2025-01-08", "cvss": 9.8, "epss": 0.9375, "ms": false }, { "cve": "CVE-2019-11001", "vendor": "Reolink", "product": "Multiple IP Cameras", "name": "Reolink Multiple IP Cameras OS Command Injection Vulnerability", "date": "2024-12-18", "ransom": false, "due": "2025-01-08", "cvss": 7.2, "epss": 0.3696, "ms": false }, { "cve": "CVE-2021-40407", "vendor": "Reolink", "product": "RLC-410W IP Camera", "name": "Reolink RLC-410W IP Camera OS Command Injection Vulnerability", "date": "2024-12-18", "ransom": false, "due": "2025-01-08", "cvss": 7.2, "epss": 0.4699, "ms": false }, { "cve": "CVE-2022-23227", "vendor": "NUUO", "product": "NVRmini2 Devices", "name": "NUUO NVRmini2 Devices Missing Authentication Vulnerability", "date": "2024-12-18", "ransom": false, "due": "2025-01-08", "cvss": 9.8, "epss": 0.4943, "ms": false }, { "cve": "CVE-2024-55956", "vendor": "Cleo", "product": "Multiple Products", "name": "Cleo Multiple Products Unauthenticated File Upload Vulnerability", "date": "2024-12-17", "ransom": true, "due": "2025-01-07", "cvss": 9.8, "epss": 0.938, "ms": false }, { "cve": "CVE-2024-20767", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Improper Access Control Vulnerability", "date": "2024-12-16", "ransom": false, "due": "2025-01-06", "cvss": 7.4, "epss": 0.9851, "ms": false }, { "cve": "CVE-2024-35250", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability", "date": "2024-12-16", "ransom": false, "due": "2025-01-06", "ms": true }, { "cve": "CVE-2024-50623", "vendor": "Cleo", "product": "Multiple Products", "name": "Cleo Multiple Products Unrestricted File Upload Vulnerability", "date": "2024-12-13", "ransom": true, "due": "2025-01-03", "cvss": 9.8, "epss": 0.9861, "ms": false }, { "cve": "CVE-2024-49138", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability", "date": "2024-12-10", "ransom": false, "due": "2024-12-31", "ms": true }, { "cve": "CVE-2024-51378", "vendor": "CyberPersons", "product": "CyberPanel", "name": "CyberPanel Incorrect Default Permissions Vulnerability", "date": "2024-12-04", "ransom": true, "due": "2024-12-25", "cvss": 9.8, "epss": 0.9473, "ms": false }, { "cve": "CVE-2023-45727", "vendor": "North Grid", "product": "Proself", "name": "North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability", "date": "2024-12-03", "ransom": false, "due": "2024-12-24", "cvss": 7.5, "epss": 0.0354, "ms": false }, { "cve": "CVE-2024-11667", "vendor": "Zyxel", "product": "Multiple Firewalls", "name": "Zyxel Multiple Firewalls Path Traversal Vulnerability", "date": "2024-12-03", "ransom": true, "due": "2024-12-24", "cvss": 9.8, "epss": 0.0302, "ms": false }, { "cve": "CVE-2024-11680", "vendor": "ProjectSend", "product": "ProjectSend", "name": "ProjectSend Improper Authentication Vulnerability", "date": "2024-12-03", "ransom": false, "due": "2024-12-24", "cvss": 9.8, "epss": 0.9156, "ms": false }, { "cve": "CVE-2023-28461", "vendor": "Array Networks", "product": "AG/vxAG ArrayOS", "name": "Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability", "date": "2024-11-25", "ransom": true, "due": "2024-12-16", "cvss": 9.8, "epss": 0.6786, "ms": false }, { "cve": "CVE-2024-21287", "vendor": "Oracle", "product": "Agile Product Lifecycle Management (PLM)", "name": "Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability", "date": "2024-11-21", "ransom": false, "due": "2024-12-12", "cvss": 7.5, "epss": 0.015, "ms": false }, { "cve": "CVE-2024-44308", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Code Execution Vulnerability", "date": "2024-11-21", "ransom": false, "due": "2024-12-12", "cvss": 8.8, "epss": 0.0919, "ms": false }, { "cve": "CVE-2024-44309", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability", "date": "2024-11-21", "ransom": false, "due": "2024-12-12", "cvss": 6.3, "epss": 0.2273, "ms": false }, { "cve": "CVE-2024-38812", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Heap-Based Buffer Overflow Vulnerability", "date": "2024-11-20", "ransom": false, "due": "2024-12-11", "cvss": 9.8, "epss": 0.5457, "ms": false }, { "cve": "CVE-2024-38813", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Privilege Escalation Vulnerability", "date": "2024-11-20", "ransom": false, "due": "2024-12-11", "cvss": 9.8, "epss": 0.1736, "ms": false }, { "cve": "CVE-2024-0012", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability", "date": "2024-11-18", "ransom": true, "due": "2024-12-09", "cvss": 9.8, "epss": 0.997, "ms": false }, { "cve": "CVE-2024-1212", "vendor": "Progress", "product": "Kemp LoadMaster", "name": "Progress Kemp LoadMaster OS Command Injection Vulnerability", "date": "2024-11-18", "ransom": false, "due": "2024-12-09", "cvss": 9.8, "epss": 0.9539, "ms": false }, { "cve": "CVE-2024-9474", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability", "date": "2024-11-18", "ransom": true, "due": "2024-12-09", "cvss": 7.2, "epss": 0.9477, "ms": false }, { "cve": "CVE-2024-9463", "vendor": "Palo Alto Networks", "product": "Expedition", "name": "Palo Alto Networks Expedition OS Command Injection Vulnerability", "date": "2024-11-14", "ransom": false, "due": "2024-12-05", "cvss": 7.5, "epss": 0.9849, "ms": false }, { "cve": "CVE-2024-9465", "vendor": "Palo Alto Networks", "product": "Expedition", "name": "Palo Alto Networks Expedition SQL Injection Vulnerability", "date": "2024-11-14", "ransom": false, "due": "2024-12-05", "cvss": 9.1, "epss": 0.9961, "ms": false }, { "cve": "CVE-2014-2120", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA)", "name": "Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability", "date": "2024-11-12", "ransom": false, "due": "2024-12-03", "cvss": 6.1, "epss": 0.1403, "ms": false }, { "cve": "CVE-2021-26086", "vendor": "Atlassian", "product": "Jira Server and Data Center", "name": "Atlassian Jira Server and Data Center Path Traversal Vulnerability", "date": "2024-11-12", "ransom": false, "due": "2024-12-03", "cvss": 5.3, "epss": 1, "ms": false }, { "cve": "CVE-2021-41277", "vendor": "Metabase", "product": "Metabase", "name": "Metabase GeoJSON API Local File Inclusion Vulnerability", "date": "2024-11-12", "ransom": false, "due": "2024-12-03", "cvss": 7.5, "epss": 0.9718, "ms": false }, { "cve": "CVE-2024-43451", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability", "date": "2024-11-12", "ransom": false, "due": "2024-12-03", "ms": true }, { "cve": "CVE-2024-49039", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Task Scheduler Privilege Escalation Vulnerability", "date": "2024-11-12", "ransom": true, "due": "2024-12-03", "ms": true }, { "cve": "CVE-2019-16278", "vendor": "Nostromo", "product": "nhttpd", "name": "Nostromo nhttpd Directory Traversal Vulnerability", "date": "2024-11-07", "ransom": false, "due": "2024-11-28", "cvss": 9.8, "epss": 0.9903, "ms": false }, { "cve": "CVE-2024-43093", "vendor": "Android", "product": "Framework", "name": "Android Framework Privilege Escalation Vulnerability", "date": "2024-11-07", "ransom": false, "due": "2024-11-28", "cvss": 7.3, "epss": 0.0071, "ms": false }, { "cve": "CVE-2024-51567", "vendor": "CyberPersons", "product": "CyberPanel", "name": "CyberPanel Incorrect Default Permissions Vulnerability", "date": "2024-11-07", "ransom": true, "due": "2024-11-28", "cvss": 9.8, "epss": 0.8663, "ms": false }, { "cve": "CVE-2024-5910", "vendor": "Palo Alto Networks", "product": "Expedition", "name": "Palo Alto Networks Expedition Missing Authentication Vulnerability", "date": "2024-11-07", "ransom": false, "due": "2024-11-28", "cvss": 9.8, "epss": 0.9178, "ms": false }, { "cve": "CVE-2024-8956", "vendor": "PTZOptics", "product": "PT30X-SDI/NDI Cameras", "name": "PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability", "date": "2024-11-04", "ransom": false, "due": "2024-11-25", "cvss": 9.1, "epss": 0.6128, "ms": false }, { "cve": "CVE-2024-8957", "vendor": "PTZOptics", "product": "PT30X-SDI/NDI Cameras", "name": "PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability", "date": "2024-11-04", "ransom": false, "due": "2024-11-25", "cvss": 7.2, "epss": 0.8204, "ms": false }, { "cve": "CVE-2024-20481", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Denial-of-Service Vulnerability", "date": "2024-10-24", "ransom": false, "due": "2024-11-14", "cvss": 5.8, "epss": 0.1585, "ms": false }, { "cve": "CVE-2024-37383", "vendor": "Roundcube", "product": "Webmail", "name": "RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability", "date": "2024-10-24", "ransom": false, "due": "2024-11-14", "cvss": 6.1, "epss": 0.733, "ms": false }, { "cve": "CVE-2024-47575", "vendor": "Fortinet", "product": "FortiManager", "name": "Fortinet FortiManager Missing Authentication Vulnerability", "date": "2024-10-23", "ransom": false, "due": "2024-11-13", "cvss": 9.8, "epss": 0.9495, "ms": false }, { "cve": "CVE-2024-38094", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Deserialization Vulnerability", "date": "2024-10-22", "ransom": true, "due": "2024-11-12", "ms": true }, { "cve": "CVE-2024-9537", "vendor": "ScienceLogic", "product": "SL1", "name": "ScienceLogic SL1 Unspecified Vulnerability", "date": "2024-10-21", "ransom": false, "due": "2024-11-11", "cvss": 9.8, "epss": 0.0383, "ms": false }, { "cve": "CVE-2024-40711", "vendor": "Veeam", "product": "Backup & Replication", "name": "Veeam Backup and Replication Deserialization Vulnerability", "date": "2024-10-17", "ransom": true, "due": "2024-11-07", "cvss": 9.8, "epss": 0.9037, "ms": false }, { "cve": "CVE-2024-28987", "vendor": "SolarWinds", "product": "Web Help Desk", "name": "SolarWinds Web Help Desk Hardcoded Credential Vulnerability", "date": "2024-10-15", "ransom": false, "due": "2024-11-05", "cvss": 9.1, "epss": 0.9321, "ms": false }, { "cve": "CVE-2024-30088", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel TOCTOU Race Condition Vulnerability", "date": "2024-10-15", "ransom": true, "due": "2024-11-05", "ms": true }, { "cve": "CVE-2024-9680", "vendor": "Mozilla", "product": "Firefox", "name": "Mozilla Firefox Use-After-Free Vulnerability", "date": "2024-10-15", "ransom": true, "due": "2024-11-05", "cvss": 9.8, "epss": 0.2318, "ms": false }, { "cve": "CVE-2024-23113", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Format String Vulnerability", "date": "2024-10-09", "ransom": false, "due": "2024-10-30", "cvss": 9.8, "epss": 0.6172, "ms": false }, { "cve": "CVE-2024-9379", "vendor": "Ivanti", "product": "Cloud Services Appliance (CSA)", "name": "Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability", "date": "2024-10-09", "ransom": false, "due": "2024-10-30", "cvss": 7.2, "epss": 0.4336, "ms": false }, { "cve": "CVE-2024-9380", "vendor": "Ivanti", "product": "Cloud Services Appliance (CSA)", "name": "Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability", "date": "2024-10-09", "ransom": false, "due": "2024-10-30", "cvss": 7.2, "epss": 0.6279, "ms": false }, { "cve": "CVE-2024-43047", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Use-After-Free Vulnerability", "date": "2024-10-08", "ransom": false, "due": "2024-10-29", "cvss": 7.8, "epss": 0.0067, "ms": false }, { "cve": "CVE-2024-43572", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Management Console Remote Code Execution Vulnerability", "date": "2024-10-08", "ransom": false, "due": "2024-10-29", "ms": true }, { "cve": "CVE-2024-43573", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows MSHTML Platform Spoofing Vulnerability", "date": "2024-10-08", "ransom": false, "due": "2024-10-29", "ms": true }, { "cve": "CVE-2024-45519", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability", "date": "2024-10-03", "ransom": false, "due": "2024-10-24", "cvss": 9.8, "epss": 0.9988, "ms": false }, { "cve": "CVE-2024-29824", "vendor": "Ivanti", "product": "Endpoint Manager (EPM)", "name": "Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability", "date": "2024-10-02", "ransom": false, "due": "2024-10-23", "cvss": 8.8, "epss": 0.9995, "ms": false }, { "cve": "CVE-2019-0344", "vendor": "SAP", "product": "Commerce Cloud", "name": "SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability", "date": "2024-09-30", "ransom": false, "due": "2024-10-21", "cvss": 9.8, "epss": 0.0708, "ms": false }, { "cve": "CVE-2020-15415", "vendor": "DrayTek", "product": "Multiple Vigor Routers", "name": "DrayTek Multiple Vigor Routers OS Command Injection Vulnerability", "date": "2024-09-30", "ransom": false, "due": "2024-10-21", "cvss": 9.8, "epss": 0.846, "ms": false }, { "cve": "CVE-2023-25280", "vendor": "D-Link", "product": "DIR-820 Router", "name": "D-Link DIR-820 Router OS Command Injection Vulnerability", "date": "2024-09-30", "ransom": false, "due": "2024-10-21", "cvss": 9.8, "epss": 0.9786, "ms": false }, { "cve": "CVE-2024-7593", "vendor": "Ivanti", "product": "Virtual Traffic Manager", "name": "Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability", "date": "2024-09-24", "ransom": false, "due": "2024-10-15", "cvss": 9.8, "epss": 0.9999, "ms": false }, { "cve": "CVE-2024-8963", "vendor": "Ivanti", "product": "Cloud Services Appliance (CSA)", "name": "Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability", "date": "2024-09-19", "ransom": false, "due": "2024-10-10", "cvss": 9.1, "epss": 0.9861, "ms": false }, { "cve": "CVE-2020-0618", "vendor": "Microsoft", "product": "SQL Server", "name": "Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability", "date": "2024-09-18", "ransom": false, "due": "2024-10-09", "ms": true }, { "cve": "CVE-2020-14644", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Remote Code Execution Vulnerability", "date": "2024-09-18", "ransom": false, "due": "2024-10-09", "cvss": 9.8, "epss": 0.9446, "ms": false }, { "cve": "CVE-2022-21445", "vendor": "Oracle", "product": "ADF Faces", "name": "Oracle ADF Faces Deserialization of Untrusted Data Vulnerability", "date": "2024-09-18", "ransom": false, "due": "2024-10-09", "cvss": 9.8, "epss": 0.6248, "ms": false }, { "cve": "CVE-2024-27348", "vendor": "Apache", "product": "HugeGraph-Server", "name": "Apache HugeGraph-Server Improper Access Control Vulnerability", "date": "2024-09-18", "ransom": false, "due": "2024-10-09", "cvss": 9.8, "epss": 0.9921, "ms": false }, { "cve": "CVE-2013-0643", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Incorrect Default Permissions Vulnerability", "date": "2024-09-17", "ransom": false, "due": "2024-10-08", "cvss": 8.8, "epss": 0.1053, "ms": false }, { "cve": "CVE-2013-0648", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Code Execution Vulnerability", "date": "2024-09-17", "ransom": false, "due": "2024-10-08", "cvss": 8.8, "epss": 0.1109, "ms": false }, { "cve": "CVE-2014-0497", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Integer Underflow Vulnerablity", "date": "2024-09-17", "ransom": false, "due": "2024-10-08", "cvss": 9.8, "epss": 0.9988, "ms": false }, { "cve": "CVE-2014-0502", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Double Free Vulnerablity", "date": "2024-09-17", "ransom": false, "due": "2024-10-08", "cvss": 8.8, "epss": 0.242, "ms": false }, { "cve": "CVE-2024-43461", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows MSHTML Platform Spoofing Vulnerability", "date": "2024-09-16", "ransom": false, "due": "2024-10-07", "ms": true }, { "cve": "CVE-2024-6670", "vendor": "Progress", "product": "WhatsUp Gold", "name": "Progress WhatsUp Gold SQL Injection Vulnerability", "date": "2024-09-16", "ransom": true, "due": "2024-10-07", "cvss": 9.8, "epss": 0.9466, "ms": false }, { "cve": "CVE-2024-8190", "vendor": "Ivanti", "product": "Cloud Services Appliance", "name": "Ivanti Cloud Services Appliance OS Command Injection Vulnerability", "date": "2024-09-13", "ransom": false, "due": "2024-10-04", "cvss": 7.2, "epss": 0.8912, "ms": false }, { "cve": "CVE-2024-38014", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Installer Improper Privilege Management Vulnerability", "date": "2024-09-10", "ransom": false, "due": "2024-10-01", "ms": true }, { "cve": "CVE-2024-38217", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability", "date": "2024-09-10", "ransom": false, "due": "2024-10-01", "ms": true }, { "cve": "CVE-2024-38226", "vendor": "Microsoft", "product": "Publisher", "name": "Microsoft Publisher Protection Mechanism Failure Vulnerability", "date": "2024-09-10", "ransom": false, "due": "2024-10-01", "ms": true }, { "cve": "CVE-2016-3714", "vendor": "ImageMagick", "product": "ImageMagick", "name": "ImageMagick Improper Input Validation Vulnerability", "date": "2024-09-09", "ransom": false, "due": "2024-09-30", "cvss": 8.4, "epss": 0.9748, "ms": false }, { "cve": "CVE-2017-1000253", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel PIE Stack Buffer Corruption Vulnerability", "date": "2024-09-09", "ransom": true, "due": "2024-09-30", "cvss": 7.8, "epss": 0.107, "ms": false }, { "cve": "CVE-2024-40766", "vendor": "SonicWall", "product": "SonicOS", "name": "SonicWall SonicOS Improper Access Control Vulnerability", "date": "2024-09-09", "ransom": true, "due": "2024-09-30", "cvss": 9.8, "epss": 0.1818, "ms": false }, { "cve": "CVE-2021-20123", "vendor": "DrayTek", "product": "VigorConnect", "name": "Draytek VigorConnect Path Traversal Vulnerability", "date": "2024-09-03", "ransom": false, "due": "2024-09-24", "cvss": 7.5, "epss": 0.7428, "ms": false }, { "cve": "CVE-2021-20124", "vendor": "DrayTek", "product": "VigorConnect", "name": "Draytek VigorConnect Path Traversal Vulnerability", "date": "2024-09-03", "ransom": false, "due": "2024-09-24", "cvss": 7.5, "epss": 0.6925, "ms": false }, { "cve": "CVE-2024-7262", "vendor": "Kingsoft", "product": "WPS Office", "name": "Kingsoft WPS Office Path Traversal Vulnerability", "date": "2024-09-03", "ransom": false, "due": "2024-09-24", "cvss": 7.8, "epss": 0.0177, "ms": false }, { "cve": "CVE-2024-7965", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Inappropriate Implementation Vulnerability", "date": "2024-08-28", "ransom": false, "due": "2024-09-18", "cvss": 8.8, "epss": 0.1838, "ms": false }, { "cve": "CVE-2024-38856", "vendor": "Apache", "product": "OFBiz", "name": "Apache OFBiz Incorrect Authorization Vulnerability", "date": "2024-08-27", "ransom": false, "due": "2024-09-17", "cvss": 9.8, "epss": 0.9943, "ms": false }, { "cve": "CVE-2024-7971", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2024-08-26", "ransom": false, "due": "2024-09-16", "cvss": 9.6, "epss": 0.2055, "ms": false }, { "cve": "CVE-2024-39717", "vendor": "Versa", "product": "Director", "name": "Versa Director Dangerous File Type Upload Vulnerability", "date": "2024-08-23", "ransom": false, "due": "2024-09-13", "cvss": 7.2, "epss": 0.0397, "ms": false }, { "cve": "CVE-2021-31196", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Information Disclosure Vulnerability", "date": "2024-08-21", "ransom": false, "due": "2024-09-11", "ms": true }, { "cve": "CVE-2021-33044", "vendor": "Dahua", "product": "IP Camera Firmware", "name": "Dahua IP Camera Authentication Bypass Vulnerability", "date": "2024-08-21", "ransom": false, "due": "2024-09-11", "cvss": 9.8, "epss": 0.9987, "ms": false }, { "cve": "CVE-2021-33045", "vendor": "Dahua", "product": "IP Camera Firmware", "name": "Dahua IP Camera Authentication Bypass Vulnerability", "date": "2024-08-21", "ransom": false, "due": "2024-09-11", "cvss": 9.8, "epss": 0.9956, "ms": false }, { "cve": "CVE-2022-0185", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Heap-Based Buffer Overflow Vulnerability", "date": "2024-08-21", "ransom": false, "due": "2024-09-11", "cvss": 8.4, "epss": 0.2515, "ms": false }, { "cve": "CVE-2024-23897", "vendor": "Jenkins", "product": "Jenkins Command Line Interface (CLI)", "name": "Jenkins Command Line Interface (CLI) Path Traversal Vulnerability", "date": "2024-08-19", "ransom": true, "due": "2024-09-09", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2024-28986", "vendor": "SolarWinds", "product": "Web Help Desk", "name": "SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability", "date": "2024-08-15", "ransom": false, "due": "2024-09-05", "cvss": 9.8, "epss": 0.8463, "ms": false }, { "cve": "CVE-2024-38106", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "date": "2024-08-13", "ransom": false, "due": "2024-09-03", "ms": true }, { "cve": "CVE-2024-38107", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability", "date": "2024-08-13", "ransom": false, "due": "2024-09-03", "ms": true }, { "cve": "CVE-2024-38178", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Scripting Engine Memory Corruption Vulnerability", "date": "2024-08-13", "ransom": false, "due": "2024-09-03", "ms": true }, { "cve": "CVE-2024-38189", "vendor": "Microsoft", "product": "Project", "name": "Microsoft Project Remote Code Execution Vulnerability", "date": "2024-08-13", "ransom": false, "due": "2024-09-03", "ms": true }, { "cve": "CVE-2024-38193", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability", "date": "2024-08-13", "ransom": false, "due": "2024-09-03", "ms": true }, { "cve": "CVE-2024-38213", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability", "date": "2024-08-13", "ransom": false, "due": "2024-09-03", "ms": true }, { "cve": "CVE-2024-32113", "vendor": "Apache", "product": "OFBiz", "name": "Apache OFBiz Path Traversal Vulnerability", "date": "2024-08-07", "ransom": false, "due": "2024-08-28", "cvss": 9.8, "epss": 0.9944, "ms": false }, { "cve": "CVE-2024-36971", "vendor": "Android", "product": "Kernel", "name": "Android Kernel Remote Code Execution Vulnerability", "date": "2024-08-07", "ransom": false, "due": "2024-08-28", "cvss": 7.8, "epss": 0.027, "ms": false }, { "cve": "CVE-2018-0824", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability", "date": "2024-08-05", "ransom": false, "due": "2024-08-26", "ms": true }, { "cve": "CVE-2024-37085", "vendor": "VMware", "product": "ESXi", "name": "VMware ESXi Authentication Bypass Vulnerability", "date": "2024-07-30", "ransom": true, "due": "2024-08-20", "cvss": 7.2, "epss": 0.2595, "ms": false }, { "cve": "CVE-2023-45249", "vendor": "Acronis", "product": "Cyber Infrastructure (ACI)", "name": "Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability", "date": "2024-07-29", "ransom": false, "due": "2024-08-19", "cvss": 9.8, "epss": 0.5325, "ms": false }, { "cve": "CVE-2024-4879", "vendor": "ServiceNow", "product": "Utah, Vancouver, and Washington DC Now Platform", "name": "ServiceNow Improper Input Validation Vulnerability", "date": "2024-07-29", "ransom": false, "due": "2024-08-19", "cvss": 9.8, "epss": 0.9998, "ms": false }, { "cve": "CVE-2024-5217", "vendor": "ServiceNow", "product": "Utah, Vancouver, and Washington DC Now Platform", "name": "ServiceNow Incomplete List of Disallowed Inputs Vulnerability", "date": "2024-07-29", "ransom": false, "due": "2024-08-19", "cvss": 9.8, "epss": 0.9963, "ms": false }, { "cve": "CVE-2012-4792", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "date": "2024-07-23", "ransom": false, "due": "2024-08-13", "ms": true }, { "cve": "CVE-2024-39891", "vendor": "Twilio", "product": "Authy", "name": "Twilio Authy Information Disclosure Vulnerability", "date": "2024-07-23", "ransom": false, "due": "2024-08-13", "cvss": 5.3, "epss": 0.0148, "ms": false }, { "cve": "CVE-2022-22948", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Incorrect Default File Permissions Vulnerability", "date": "2024-07-17", "ransom": false, "due": "2024-08-07", "cvss": 6.5, "epss": 0.1383, "ms": false }, { "cve": "CVE-2024-28995", "vendor": "SolarWinds", "product": "Serv-U", "name": "SolarWinds Serv-U Path Traversal Vulnerability", "date": "2024-07-17", "ransom": false, "due": "2024-08-07", "cvss": 7.5, "epss": 0.9961, "ms": false }, { "cve": "CVE-2024-34102", "vendor": "Adobe", "product": "Commerce and Magento Open Source", "name": "Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability", "date": "2024-07-17", "ransom": false, "due": "2024-08-07", "cvss": 9.8, "epss": 0.9999, "ms": false }, { "cve": "CVE-2024-36401", "vendor": "OSGeo", "product": "GeoServer", "name": "OSGeo GeoServer GeoTools Eval Injection Vulnerability", "date": "2024-07-15", "ransom": false, "due": "2024-08-05", "cvss": 9.8, "epss": 0.9979, "ms": false }, { "cve": "CVE-2024-23692", "vendor": "Rejetto", "product": "HTTP File Server", "name": "Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability", "date": "2024-07-09", "ransom": false, "due": "2024-07-30", "cvss": 9.8, "epss": 0.9947, "ms": false }, { "cve": "CVE-2024-38080", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Hyper-V Privilege Escalation Vulnerability", "date": "2024-07-09", "ransom": false, "due": "2024-07-30", "ms": true }, { "cve": "CVE-2024-38112", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows MSHTML Platform Spoofing Vulnerability", "date": "2024-07-09", "ransom": false, "due": "2024-07-30", "ms": true }, { "cve": "CVE-2024-20399", "vendor": "Cisco", "product": "NX-OS", "name": "Cisco NX-OS Command Injection Vulnerability", "date": "2024-07-02", "ransom": false, "due": "2024-07-23", "cvss": 6.7, "epss": 0.0431, "ms": false }, { "cve": "CVE-2020-13965", "vendor": "Roundcube", "product": "Webmail", "name": "Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability", "date": "2024-06-26", "ransom": false, "due": "2024-07-17", "cvss": 6.1, "epss": 0.766, "ms": false }, { "cve": "CVE-2022-24816", "vendor": "OSGeo", "product": "JAI-EXT", "name": "OSGeo GeoServer JAI-EXT Code Injection Vulnerability", "date": "2024-06-26", "ransom": false, "due": "2024-07-17", "cvss": 10, "epss": 0.9874, "ms": false }, { "cve": "CVE-2022-2586", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Use-After-Free Vulnerability", "date": "2024-06-26", "ransom": false, "due": "2024-07-17", "cvss": 7.8, "epss": 0.1046, "ms": false }, { "cve": "CVE-2024-26169", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability", "date": "2024-06-13", "ransom": true, "due": "2024-07-04", "ms": true }, { "cve": "CVE-2024-32896", "vendor": "Android", "product": "Pixel", "name": "Android Pixel Privilege Escalation Vulnerability", "date": "2024-06-13", "ransom": false, "due": "2024-07-04", "cvss": 7.8, "epss": 0.0301, "ms": false }, { "cve": "CVE-2024-4358", "vendor": "Progress", "product": "Telerik Report Server", "name": "Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability", "date": "2024-06-13", "ransom": false, "due": "2024-07-04", "cvss": 9.8, "epss": 0.9748, "ms": false }, { "cve": "CVE-2024-4577", "vendor": "PHP Group", "product": "PHP", "name": "PHP-CGI OS Command Injection Vulnerability", "date": "2024-06-12", "ransom": true, "due": "2024-07-03", "cvss": 9.8, "epss": 0.9999, "ms": false }, { "cve": "CVE-2024-4610", "vendor": "Arm", "product": "Mali GPU Kernel Driver", "name": "Arm Mali GPU Kernel Driver Use-After-Free Vulnerability", "date": "2024-06-12", "ransom": false, "due": "2024-07-03", "cvss": 7.8, "epss": 0.0076, "ms": false }, { "cve": "CVE-2017-3506", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server OS Command Injection Vulnerability", "date": "2024-06-03", "ransom": false, "due": "2024-06-24", "cvss": 7.4, "epss": 0.9628, "ms": false }, { "cve": "CVE-2024-1086", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Use-After-Free Vulnerability", "date": "2024-05-30", "ransom": true, "due": "2024-06-20", "cvss": 7.8, "epss": 0.2806, "ms": false }, { "cve": "CVE-2024-24919", "vendor": "Check Point", "product": "Quantum Security Gateways", "name": "Check Point Quantum Security Gateways Information Disclosure Vulnerability", "date": "2024-05-30", "ransom": true, "due": "2024-06-20", "cvss": 8.6, "epss": 0.9998, "ms": false }, { "cve": "CVE-2024-4978", "vendor": "Justice AV Solutions", "product": "Viewer", "name": "Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability", "date": "2024-05-29", "ransom": false, "due": "2024-06-19", "cvss": 8.4, "epss": 0.2694, "ms": false }, { "cve": "CVE-2024-5274", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2024-05-28", "ransom": false, "due": "2024-06-18", "cvss": 9.6, "epss": 0.1002, "ms": false }, { "cve": "CVE-2020-17519", "vendor": "Apache", "product": "Flink", "name": "Apache Flink Improper Access Control Vulnerability", "date": "2024-05-23", "ransom": false, "due": "2024-06-13", "cvss": 7.5, "epss": 0.9786, "ms": false }, { "cve": "CVE-2023-43208", "vendor": "NextGen Healthcare", "product": "Mirth Connect", "name": "NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability", "date": "2024-05-20", "ransom": true, "due": "2024-06-10", "cvss": 9.8, "epss": 0.8271, "ms": false }, { "cve": "CVE-2024-4947", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2024-05-20", "ransom": false, "due": "2024-06-10", "cvss": 9.6, "epss": 0.1511, "ms": false }, { "cve": "CVE-2014-100005", "vendor": "D-Link", "product": "DIR-600 Router", "name": "D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability", "date": "2024-05-16", "ransom": false, "due": "2024-06-06", "cvss": 8, "epss": 0.4241, "ms": false }, { "cve": "CVE-2021-40655", "vendor": "D-Link", "product": "DIR-605 Router", "name": "D-Link DIR-605 Router Information Disclosure Vulnerability", "date": "2024-05-16", "ransom": false, "due": "2024-06-06", "cvss": 7.5, "epss": 0.8666, "ms": false }, { "cve": "CVE-2024-4761", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Memory Write Vulnerability", "date": "2024-05-16", "ransom": false, "due": "2024-06-06", "cvss": 8.8, "epss": 0.1101, "ms": false }, { "cve": "CVE-2024-30040", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability", "date": "2024-05-14", "ransom": false, "due": "2024-06-04", "ms": true }, { "cve": "CVE-2024-30051", "vendor": "Microsoft", "product": "DWM Core Library", "name": "Microsoft DWM Core Library Privilege Escalation Vulnerability", "date": "2024-05-14", "ransom": true, "due": "2024-06-04", "ms": true }, { "cve": "CVE-2024-4671", "vendor": "Google", "product": "Chromium", "name": "Google Chromium Visuals Use-After-Free Vulnerability", "date": "2024-05-13", "ransom": false, "due": "2024-06-03", "cvss": 9.6, "epss": 0.0835, "ms": false }, { "cve": "CVE-2023-7028", "vendor": "GitLab", "product": "GitLab CE/EE", "name": "GitLab Community and Enterprise Editions Improper Access Control Vulnerability", "date": "2024-05-01", "ransom": false, "due": "2024-05-22", "cvss": 9.8, "epss": 0.9465, "ms": false }, { "cve": "CVE-2024-29988", "vendor": "Microsoft", "product": "SmartScreen Prompt", "name": "Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability", "date": "2024-04-30", "ransom": false, "due": "2024-05-21", "ms": true }, { "cve": "CVE-2024-20353", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Denial of Service Vulnerability", "date": "2024-04-24", "ransom": false, "due": "2024-05-01", "cvss": 8.6, "epss": 0.7069, "ms": false }, { "cve": "CVE-2024-20359", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Privilege Escalation Vulnerability", "date": "2024-04-24", "ransom": false, "due": "2024-05-01", "cvss": 6, "epss": 0.1943, "ms": false }, { "cve": "CVE-2024-4040", "vendor": "CrushFTP", "product": "CrushFTP", "name": "CrushFTP VFS Sandbox Escape Vulnerability", "date": "2024-04-24", "ransom": false, "due": "2024-05-01", "cvss": 10, "epss": 0.9954, "ms": false }, { "cve": "CVE-2022-38028", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "date": "2024-04-23", "ransom": false, "due": "2024-05-14", "ms": true }, { "cve": "CVE-2024-3400", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Command Injection Vulnerability", "date": "2024-04-12", "ransom": true, "due": "2024-04-19", "cvss": 10, "epss": 1, "ms": false }, { "cve": "CVE-2024-3272", "vendor": "D-Link", "product": "Multiple NAS Devices", "name": "D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability", "date": "2024-04-11", "ransom": false, "due": "2024-05-02", "cvss": 9.8, "epss": 0.9804, "ms": false }, { "cve": "CVE-2024-3273", "vendor": "D-Link", "product": "Multiple NAS Devices", "name": "D-Link Multiple NAS Devices Command Injection Vulnerability", "date": "2024-04-11", "ransom": false, "due": "2024-05-02", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2024-29745", "vendor": "Android", "product": "Pixel", "name": "Android Pixel Information Disclosure Vulnerability", "date": "2024-04-04", "ransom": false, "due": "2024-04-25", "cvss": 5.5, "epss": 0.0048, "ms": false }, { "cve": "CVE-2024-29748", "vendor": "Android", "product": "Pixel", "name": "Android Pixel Privilege Escalation Vulnerability", "date": "2024-04-04", "ransom": false, "due": "2024-04-25", "cvss": 7.8, "epss": 0.0068, "ms": false }, { "cve": "CVE-2023-24955", "vendor": "Microsoft", "product": "SharePoint Server", "name": "Microsoft SharePoint Server Code Injection Vulnerability", "date": "2024-03-26", "ransom": true, "due": "2024-04-16", "ms": true }, { "cve": "CVE-2019-7256", "vendor": "Nice", "product": "Linear eMerge E3-Series", "name": "Nice Linear eMerge E3-Series OS Command Injection Vulnerability", "date": "2024-03-25", "ransom": false, "due": "2024-04-15", "cvss": 9.8, "epss": 0.9714, "ms": false }, { "cve": "CVE-2021-44529", "vendor": "Ivanti", "product": "Endpoint Manager Cloud Service Appliance (EPM CSA)", "name": "Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability", "date": "2024-03-25", "ransom": true, "due": "2024-04-15", "cvss": 9.8, "epss": 0.991, "ms": false }, { "cve": "CVE-2023-48788", "vendor": "Fortinet", "product": "FortiClient EMS", "name": "Fortinet FortiClient EMS SQL Injection Vulnerability", "date": "2024-03-25", "ransom": true, "due": "2024-04-15", "cvss": 9.8, "epss": 0.9759, "ms": false }, { "cve": "CVE-2024-27198", "vendor": "JetBrains", "product": "TeamCity", "name": "JetBrains TeamCity Authentication Bypass Vulnerability", "date": "2024-03-07", "ransom": true, "due": "2024-03-28", "cvss": 9.8, "epss": 0.9994, "ms": false }, { "cve": "CVE-2024-23225", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2024-03-06", "ransom": false, "due": "2024-03-27", "cvss": 7.8, "epss": 0.0148, "ms": false }, { "cve": "CVE-2024-23296", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2024-03-06", "ransom": false, "due": "2024-03-27", "cvss": 7.8, "epss": 0.0141, "ms": false }, { "cve": "CVE-2021-36380", "vendor": "Sunhillo", "product": "SureLine", "name": "Sunhillo SureLine OS Command Injection Vulnerablity", "date": "2024-03-05", "ransom": false, "due": "2024-03-26", "cvss": 9.8, "epss": 0.976, "ms": false }, { "cve": "CVE-2023-21237", "vendor": "Android", "product": "Pixel", "name": "Android Pixel Information Disclosure Vulnerability", "date": "2024-03-05", "ransom": false, "due": "2024-03-26", "cvss": 5.5, "epss": 0.0026, "ms": false }, { "cve": "CVE-2024-21338", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability", "date": "2024-03-04", "ransom": true, "due": "2024-03-25", "ms": true }, { "cve": "CVE-2023-29360", "vendor": "Microsoft", "product": "Streaming Service", "name": "Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability", "date": "2024-02-29", "ransom": false, "due": "2024-03-21", "ms": true }, { "cve": "CVE-2024-1709", "vendor": "ConnectWise", "product": "ScreenConnect", "name": "ConnectWise ScreenConnect Authentication Bypass Vulnerability", "date": "2024-02-22", "ransom": true, "due": "2024-02-29", "cvss": 10, "epss": 0.9996, "ms": false }, { "cve": "CVE-2020-3259", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Information Disclosure Vulnerability", "date": "2024-02-15", "ransom": true, "due": "2024-03-07", "cvss": 7.5, "epss": 0.6934, "ms": false }, { "cve": "CVE-2024-21410", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Privilege Escalation Vulnerability", "date": "2024-02-15", "ransom": false, "due": "2024-03-07", "ms": true }, { "cve": "CVE-2024-21351", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability", "date": "2024-02-13", "ransom": false, "due": "2024-03-05", "ms": true }, { "cve": "CVE-2024-21412", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability", "date": "2024-02-13", "ransom": true, "due": "2024-03-05", "ms": true }, { "cve": "CVE-2023-43770", "vendor": "Roundcube", "product": "Webmail", "name": "Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability", "date": "2024-02-12", "ransom": false, "due": "2024-03-04", "cvss": 6.1, "epss": 0.5848, "ms": false }, { "cve": "CVE-2024-21762", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Out-of-Bound Write Vulnerability", "date": "2024-02-09", "ransom": true, "due": "2024-02-16", "cvss": 9.8, "epss": 0.8428, "ms": false }, { "cve": "CVE-2023-4762", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2024-02-06", "ransom": false, "due": "2024-02-27", "cvss": 8.8, "epss": 0.3799, "ms": false }, { "cve": "CVE-2022-48618", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2024-01-31", "ransom": false, "due": "2024-02-21", "cvss": 7, "epss": 0.0049, "ms": false }, { "cve": "CVE-2024-21893", "vendor": "Ivanti", "product": "Connect Secure, Policy Secure, and Neurons", "name": "Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability", "date": "2024-01-31", "ransom": true, "due": "2024-02-02", "cvss": 8.2, "epss": 1, "ms": false }, { "cve": "CVE-2023-22527", "vendor": "Atlassian", "product": "Confluence Data Center and Server", "name": "Atlassian Confluence Data Center and Server Template Injection Vulnerability", "date": "2024-01-24", "ransom": true, "due": "2024-02-14", "cvss": 9.8, "epss": 0.9998, "ms": false }, { "cve": "CVE-2024-23222", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "date": "2024-01-23", "ransom": false, "due": "2024-02-13", "cvss": 8.8, "epss": 0.1059, "ms": false }, { "cve": "CVE-2023-34048", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Out-of-Bounds Write Vulnerability", "date": "2024-01-22", "ransom": false, "due": "2024-02-12", "cvss": 9.8, "epss": 0.9943, "ms": false }, { "cve": "CVE-2023-35082", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM) and MobileIron Core", "name": "Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability", "date": "2024-01-18", "ransom": true, "due": "2024-02-08", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2023-6548", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "name": "Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability", "date": "2024-01-17", "ransom": false, "due": "2024-01-24", "cvss": 8.8, "epss": 0.0319, "ms": false }, { "cve": "CVE-2023-6549", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "name": "Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability", "date": "2024-01-17", "ransom": false, "due": "2024-02-07", "cvss": 7.5, "epss": 0.5763, "ms": false }, { "cve": "CVE-2024-0519", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Memory Access Vulnerability", "date": "2024-01-17", "ransom": false, "due": "2024-02-07", "cvss": 8.8, "epss": 0.0377, "ms": false }, { "cve": "CVE-2018-15133", "vendor": "Laravel", "product": "Laravel Framework", "name": "Laravel Deserialization of Untrusted Data Vulnerability", "date": "2024-01-16", "ransom": false, "due": "2024-02-06", "cvss": 8.1, "epss": 0.7681, "ms": false }, { "cve": "CVE-2023-29357", "vendor": "Microsoft", "product": "SharePoint Server", "name": "Microsoft SharePoint Server Privilege Escalation Vulnerability", "date": "2024-01-10", "ransom": true, "due": "2024-01-31", "ms": true }, { "cve": "CVE-2023-46805", "vendor": "Ivanti", "product": "Connect Secure and Policy Secure", "name": "Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability", "date": "2024-01-10", "ransom": true, "due": "2024-01-22", "cvss": 8.2, "epss": 0.9999, "ms": false }, { "cve": "CVE-2024-21887", "vendor": "Ivanti", "product": "Connect Secure and Policy Secure", "name": "Ivanti Connect Secure and Policy Secure Command Injection Vulnerability", "date": "2024-01-10", "ransom": true, "due": "2024-01-22", "cvss": 9.1, "epss": 1, "ms": false }, { "cve": "CVE-2016-20017", "vendor": "D-Link", "product": "DSL-2750B Devices", "name": "D-Link DSL-2750B Devices Command Injection Vulnerability", "date": "2024-01-08", "ransom": false, "due": "2024-01-29", "cvss": 9.8, "epss": 0.6543, "ms": false }, { "cve": "CVE-2023-23752", "vendor": "Joomla!", "product": "Joomla!", "name": "Joomla! Improper Access Control Vulnerability", "date": "2024-01-08", "ransom": false, "due": "2024-01-29", "cvss": 5.3, "epss": 0.9983, "ms": false }, { "cve": "CVE-2023-27524", "vendor": "Apache", "product": "Superset", "name": "Apache Superset Insecure Default Initialization of Resource Vulnerability", "date": "2024-01-08", "ransom": false, "due": "2024-01-29", "cvss": 9.8, "epss": 0.974, "ms": false }, { "cve": "CVE-2023-29300", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "date": "2024-01-08", "ransom": true, "due": "2024-01-29", "cvss": 9.8, "epss": 0.9999, "ms": false }, { "cve": "CVE-2023-38203", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "date": "2024-01-08", "ransom": true, "due": "2024-01-29", "cvss": 9.8, "epss": 0.9653, "ms": false }, { "cve": "CVE-2023-41990", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Code Execution Vulnerability", "date": "2024-01-08", "ransom": false, "due": "2024-01-29", "cvss": 7.8, "epss": 0.0135, "ms": false }, { "cve": "CVE-2023-7024", "vendor": "Google", "product": "Chromium WebRTC", "name": "Google Chromium WebRTC Heap Buffer Overflow Vulnerability", "date": "2024-01-02", "ransom": false, "due": "2024-01-23", "cvss": 8.8, "epss": 0.0736, "ms": false }, { "cve": "CVE-2023-7101", "vendor": "Spreadsheet::ParseExcel", "product": "Spreadsheet::ParseExcel", "name": "Spreadsheet::ParseExcel Remote Code Execution Vulnerability", "date": "2024-01-02", "ransom": false, "due": "2024-01-23", "cvss": 7.8, "epss": 0.1683, "ms": false }, { "cve": "CVE-2023-47565", "vendor": "QNAP", "product": "VioStor NVR", "name": "QNAP VioStor NVR OS Command Injection Vulnerability", "date": "2023-12-21", "ransom": false, "due": "2024-01-11", "cvss": 8.8, "epss": 0.7328, "ms": false }, { "cve": "CVE-2023-49897", "vendor": "FXC", "product": "AE1021, AE1021PE", "name": "FXC AE1021, AE1021PE OS Command Injection Vulnerability", "date": "2023-12-21", "ransom": false, "due": "2024-01-11", "cvss": 8.8, "epss": 0.5073, "ms": false }, { "cve": "CVE-2023-6448", "vendor": "Unitronics", "product": "Vision PLC and HMI", "name": "Unitronics Vision PLC and HMI Insecure Default Password Vulnerability", "date": "2023-12-11", "ransom": false, "due": "2023-12-18", "cvss": 9.8, "epss": 0.0209, "ms": false }, { "cve": "CVE-2023-41265", "vendor": "Qlik", "product": "Sense", "name": "Qlik Sense HTTP Tunneling Vulnerability", "date": "2023-12-07", "ransom": true, "due": "2023-12-28", "cvss": 9.9, "epss": 0.8447, "ms": false }, { "cve": "CVE-2023-41266", "vendor": "Qlik", "product": "Sense", "name": "Qlik Sense Path Traversal Vulnerability", "date": "2023-12-07", "ransom": true, "due": "2023-12-28", "cvss": 6.5, "epss": 0.8212, "ms": false }, { "cve": "CVE-2022-22071", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Use-After-Free Vulnerability", "date": "2023-12-05", "ransom": false, "due": "2023-12-26", "cvss": 7.8, "epss": 0.0045, "ms": false }, { "cve": "CVE-2023-33063", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Use-After-Free Vulnerability", "date": "2023-12-05", "ransom": false, "due": "2023-12-26", "cvss": 7.8, "epss": 0.007, "ms": false }, { "cve": "CVE-2023-33106", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability", "date": "2023-12-05", "ransom": false, "due": "2023-12-26", "cvss": 7.8, "epss": 0.0085, "ms": false }, { "cve": "CVE-2023-33107", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Integer Overflow Vulnerability", "date": "2023-12-05", "ransom": false, "due": "2023-12-26", "cvss": 7.8, "epss": 0.0089, "ms": false }, { "cve": "CVE-2023-42916", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability", "date": "2023-12-04", "ransom": false, "due": "2023-12-25", "cvss": 6.5, "epss": 0.1782, "ms": false }, { "cve": "CVE-2023-42917", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "date": "2023-12-04", "ransom": false, "due": "2023-12-25", "cvss": 8.8, "epss": 0.0937, "ms": false }, { "cve": "CVE-2023-49103", "vendor": "ownCloud", "product": "ownCloud graphapi", "name": "ownCloud graphapi Information Disclosure Vulnerability", "date": "2023-11-30", "ransom": false, "due": "2023-12-21", "cvss": 7.5, "epss": 0.7843, "ms": false }, { "cve": "CVE-2023-6345", "vendor": "Google", "product": "Chromium Skia", "name": "Google Skia Integer Overflow Vulnerability", "date": "2023-11-30", "ransom": false, "due": "2023-12-21", "cvss": 9.6, "epss": 0.1948, "ms": false }, { "cve": "CVE-2023-4911", "vendor": "GNU", "product": "GNU C Library", "name": "GNU C Library Buffer Overflow Vulnerability", "date": "2023-11-21", "ransom": false, "due": "2023-12-12", "cvss": 7.8, "epss": 0.8142, "ms": false }, { "cve": "CVE-2020-2551", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Unspecified Vulnerability", "date": "2023-11-16", "ransom": false, "due": "2023-12-07", "cvss": 9.8, "epss": 0.9317, "ms": false }, { "cve": "CVE-2023-1671", "vendor": "Sophos", "product": "Web Appliance", "name": "Sophos Web Appliance Command Injection Vulnerability", "date": "2023-11-16", "ransom": false, "due": "2023-12-07", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2023-36584", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability", "date": "2023-11-16", "ransom": false, "due": "2023-12-07", "ms": true }, { "cve": "CVE-2023-36025", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability", "date": "2023-11-14", "ransom": false, "due": "2023-12-05", "ms": true }, { "cve": "CVE-2023-36033", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability", "date": "2023-11-14", "ransom": false, "due": "2023-12-05", "ms": true }, { "cve": "CVE-2023-36036", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability", "date": "2023-11-14", "ransom": false, "due": "2023-12-05", "ms": true }, { "cve": "CVE-2023-36844", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS EX Series PHP External Variable Modification Vulnerability", "date": "2023-11-13", "ransom": false, "due": "2023-11-17", "cvss": 5.3, "epss": 0.9136, "ms": false }, { "cve": "CVE-2023-36845", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability", "date": "2023-11-13", "ransom": false, "due": "2023-11-17", "cvss": 9.8, "epss": 0.9415, "ms": false }, { "cve": "CVE-2023-36846", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability", "date": "2023-11-13", "ransom": false, "due": "2023-11-17", "cvss": 5.3, "epss": 0.9421, "ms": false }, { "cve": "CVE-2023-36847", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability", "date": "2023-11-13", "ransom": false, "due": "2023-11-17", "cvss": 5.3, "epss": 0.8469, "ms": false }, { "cve": "CVE-2023-36851", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability", "date": "2023-11-13", "ransom": false, "due": "2023-11-17", "cvss": 5.3, "epss": 0.0109, "ms": false }, { "cve": "CVE-2023-47246", "vendor": "SysAid", "product": "SysAid Server", "name": "SysAid Server Path Traversal Vulnerability", "date": "2023-11-13", "ransom": true, "due": "2023-12-04", "cvss": 9.8, "epss": 0.9885, "ms": false }, { "cve": "CVE-2023-29552", "vendor": "IETF", "product": "Service Location Protocol (SLP)", "name": "Service Location Protocol (SLP) Denial-of-Service Vulnerability", "date": "2023-11-08", "ransom": false, "due": "2023-11-29", "cvss": 7.5, "epss": 0.6587, "ms": false }, { "cve": "CVE-2023-22518", "vendor": "Atlassian", "product": "Confluence Data Center and Server", "name": "Atlassian Confluence Data Center and Server Improper Authorization Vulnerability", "date": "2023-11-07", "ransom": true, "due": "2023-11-28", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2023-46604", "vendor": "Apache", "product": "ActiveMQ", "name": "Apache ActiveMQ Deserialization of Untrusted Data Vulnerability", "date": "2023-11-02", "ransom": true, "due": "2023-11-23", "cvss": 9.8, "epss": 0.9965, "ms": false }, { "cve": "CVE-2023-46747", "vendor": "F5", "product": "BIG-IP Configuration Utility", "name": "F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability", "date": "2023-10-31", "ransom": true, "due": "2023-11-21", "cvss": 9.8, "epss": 0.9651, "ms": false }, { "cve": "CVE-2023-46748", "vendor": "F5", "product": "BIG-IP Configuration Utility", "name": "F5 BIG-IP Configuration Utility SQL Injection Vulnerability", "date": "2023-10-31", "ransom": false, "due": "2023-11-21", "cvss": 8.8, "epss": 0.0447, "ms": false }, { "cve": "CVE-2023-5631", "vendor": "Roundcube", "product": "Webmail", "name": "Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability", "date": "2023-10-26", "ransom": false, "due": "2023-11-16", "cvss": 5.4, "epss": 0.7587, "ms": false }, { "cve": "CVE-2023-20273", "vendor": "Cisco", "product": "Cisco IOS XE Web UI", "name": "Cisco IOS XE Web UI Command Injection Vulnerability", "date": "2023-10-23", "ransom": false, "due": "2023-10-27", "cvss": 7.2, "epss": 0.8963, "ms": false }, { "cve": "CVE-2023-4966", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "name": "Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability", "date": "2023-10-18", "ransom": true, "due": "2023-11-08", "cvss": 7.5, "epss": 1, "ms": false }, { "cve": "CVE-2023-20198", "vendor": "Cisco", "product": "IOS XE Web UI", "name": "Cisco IOS XE Web UI Privilege Escalation Vulnerability", "date": "2023-10-16", "ransom": false, "due": "2023-10-20", "cvss": 10, "epss": 0.9957, "ms": false }, { "cve": "CVE-2023-20109", "vendor": "Cisco", "product": "IOS and IOS XE", "name": "Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability", "date": "2023-10-10", "ransom": false, "due": "2023-10-31", "cvss": 6.6, "epss": 0.0234, "ms": false }, { "cve": "CVE-2023-21608", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Use-After-Free Vulnerability", "date": "2023-10-10", "ransom": false, "due": "2023-10-31", "cvss": 7.8, "epss": 0.6148, "ms": false }, { "cve": "CVE-2023-36563", "vendor": "Microsoft", "product": "WordPad", "name": "Microsoft WordPad Information Disclosure Vulnerability", "date": "2023-10-10", "ransom": false, "due": "2023-10-31", "ms": true }, { "cve": "CVE-2023-41763", "vendor": "Microsoft", "product": "Skype for Business", "name": "Microsoft Skype for Business Privilege Escalation Vulnerability", "date": "2023-10-10", "ransom": false, "due": "2023-10-31", "ms": true }, { "cve": "CVE-2023-44487", "vendor": "IETF", "product": "HTTP/2", "name": "HTTP/2 Rapid Reset Attack Vulnerability", "date": "2023-10-10", "ransom": false, "due": "2023-10-31", "cvss": 7.5, "epss": 1, "ms": false }, { "cve": "CVE-2023-22515", "vendor": "Atlassian", "product": "Confluence Data Center and Server", "name": "Atlassian Confluence Data Center and Server Broken Access Control Vulnerability", "date": "2023-10-05", "ransom": true, "due": "2023-10-13", "cvss": 9.8, "epss": 0.9916, "ms": false }, { "cve": "CVE-2023-40044", "vendor": "Progress", "product": "WS_FTP Server", "name": "Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability", "date": "2023-10-05", "ransom": true, "due": "2023-10-26", "cvss": 8.8, "epss": 0.9015, "ms": false }, { "cve": "CVE-2023-42824", "vendor": "Apple", "product": "iOS and iPadOS", "name": "Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability", "date": "2023-10-05", "ransom": false, "due": "2023-10-26", "cvss": 7.8, "epss": 0.0094, "ms": false }, { "cve": "CVE-2023-28229", "vendor": "Microsoft", "product": "Windows CNG Key Isolation Service", "name": "Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability", "date": "2023-10-04", "ransom": false, "due": "2023-10-25", "ms": true }, { "cve": "CVE-2023-42793", "vendor": "JetBrains", "product": "TeamCity", "name": "JetBrains TeamCity Authentication Bypass Vulnerability", "date": "2023-10-04", "ransom": true, "due": "2023-10-25", "cvss": 9.8, "epss": 0.9998, "ms": false }, { "cve": "CVE-2023-4211", "vendor": "Arm", "product": "Mali GPU Kernel Driver", "name": "Arm Mali GPU Kernel Driver Use-After-Free Vulnerability", "date": "2023-10-03", "ransom": false, "due": "2023-10-24", "cvss": 5.5, "epss": 0.0136, "ms": false }, { "cve": "CVE-2023-5217", "vendor": "Google", "product": "Chromium libvpx", "name": "Google Chromium libvpx Heap Buffer Overflow Vulnerability", "date": "2023-10-02", "ransom": false, "due": "2023-10-23", "cvss": 8.8, "epss": 0.4901, "ms": false }, { "cve": "CVE-2018-14667", "vendor": "Red Hat", "product": "JBoss RichFaces Framework", "name": "Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability", "date": "2023-09-28", "ransom": false, "due": "2023-10-19", "cvss": 9.8, "epss": 0.7417, "ms": false }, { "cve": "CVE-2023-41991", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Improper Certificate Validation Vulnerability", "date": "2023-09-25", "ransom": false, "due": "2023-10-16", "cvss": 5.5, "epss": 0.0455, "ms": false }, { "cve": "CVE-2023-41992", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Kernel Privilege Escalation Vulnerability", "date": "2023-09-25", "ransom": false, "due": "2023-10-16", "cvss": 7.8, "epss": 0.0292, "ms": false }, { "cve": "CVE-2023-41993", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Code Execution Vulnerability", "date": "2023-09-25", "ransom": false, "due": "2023-10-16", "cvss": 8.8, "epss": 0.2918, "ms": false }, { "cve": "CVE-2023-41179", "vendor": "Trend Micro", "product": "Apex One and Worry-Free Business Security", "name": "Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability", "date": "2023-09-21", "ransom": false, "due": "2023-10-12", "cvss": 7.2, "epss": 0.0474, "ms": false }, { "cve": "CVE-2023-28434", "vendor": "MinIO", "product": "MinIO", "name": "MinIO Security Feature Bypass Vulnerability", "date": "2023-09-19", "ransom": false, "due": "2023-10-10", "cvss": 8.8, "epss": 0.0668, "ms": false }, { "cve": "CVE-2014-8361", "vendor": "Realtek", "product": "SDK", "name": "Realtek SDK Improper Input Validation Vulnerability", "date": "2023-09-18", "ransom": false, "due": "2023-10-09", "cvss": 9.8, "epss": 0.9998, "ms": false }, { "cve": "CVE-2017-6884", "vendor": "Zyxel", "product": "EMG2926 Routers", "name": "Zyxel EMG2926 Routers Command Injection Vulnerability", "date": "2023-09-18", "ransom": true, "due": "2023-10-09", "cvss": 8.8, "epss": 0.3763, "ms": false }, { "cve": "CVE-2021-3129", "vendor": "Laravel", "product": "Ignition", "name": "Laravel Ignition File Upload Vulnerability", "date": "2023-09-18", "ransom": true, "due": "2023-10-09", "cvss": 9.8, "epss": 0.9994, "ms": false }, { "cve": "CVE-2022-22265", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Use-After-Free Vulnerability", "date": "2023-09-18", "ransom": false, "due": "2023-10-09", "cvss": 7.8, "epss": 0.0039, "ms": false }, { "cve": "CVE-2023-26369", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability", "date": "2023-09-14", "ransom": false, "due": "2023-10-05", "cvss": 7.8, "epss": 0.0704, "ms": false }, { "cve": "CVE-2023-20269", "vendor": "Cisco", "product": "Adaptive Security Appliance and Firepower Threat Defense", "name": "Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability", "date": "2023-09-13", "ransom": true, "due": "2023-10-04", "cvss": 9.1, "epss": 0.2158, "ms": false }, { "cve": "CVE-2023-35674", "vendor": "Android", "product": "Framework", "name": "Android Framework Privilege Escalation Vulnerability", "date": "2023-09-13", "ransom": false, "due": "2023-10-04", "cvss": 7.8, "epss": 0.022, "ms": false }, { "cve": "CVE-2023-4863", "vendor": "Google", "product": "Chromium WebP", "name": "Google Chromium WebP Heap-Based Buffer Overflow Vulnerability", "date": "2023-09-13", "ransom": false, "due": "2023-10-04", "cvss": 8.8, "epss": 0.9973, "ms": false }, { "cve": "CVE-2023-36761", "vendor": "Microsoft", "product": "Word", "name": "Microsoft Word Information Disclosure Vulnerability", "date": "2023-09-12", "ransom": false, "due": "2023-10-03", "ms": true }, { "cve": "CVE-2023-36802", "vendor": "Microsoft", "product": "Streaming Service Proxy", "name": "Microsoft Streaming Service Proxy Privilege Escalation Vulnerability", "date": "2023-09-12", "ransom": false, "due": "2023-10-03", "ms": true }, { "cve": "CVE-2023-41061", "vendor": "Apple", "product": "iOS, iPadOS, and watchOS", "name": "Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability", "date": "2023-09-11", "ransom": false, "due": "2023-10-02", "cvss": 7.8, "epss": 0.0313, "ms": false }, { "cve": "CVE-2023-41064", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability", "date": "2023-09-11", "ransom": false, "due": "2023-10-02", "cvss": 7.8, "epss": 0.1526, "ms": false }, { "cve": "CVE-2023-33246", "vendor": "Apache", "product": "RocketMQ", "name": "Apache RocketMQ Command Execution Vulnerability", "date": "2023-09-06", "ransom": false, "due": "2023-09-27", "cvss": 9.8, "epss": 0.966, "ms": false }, { "cve": "CVE-2023-32315", "vendor": "Ignite Realtime", "product": "Openfire", "name": "Ignite Realtime Openfire Path Traversal Vulnerability", "date": "2023-08-24", "ransom": false, "due": "2023-09-14", "cvss": 7.5, "epss": 1, "ms": false }, { "cve": "CVE-2023-38831", "vendor": "RARLAB", "product": "WinRAR", "name": "RARLAB WinRAR Code Execution Vulnerability", "date": "2023-08-24", "ransom": true, "due": "2023-09-14", "cvss": 7.8, "epss": 0.9781, "ms": false }, { "cve": "CVE-2023-27532", "vendor": "Veeam", "product": "Backup & Replication", "name": "Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability", "date": "2023-08-22", "ransom": true, "due": "2023-09-12", "cvss": 7.5, "epss": 0.7761, "ms": false }, { "cve": "CVE-2023-38035", "vendor": "Ivanti", "product": "Sentry", "name": "Ivanti Sentry Authentication Bypass Vulnerability", "date": "2023-08-22", "ransom": true, "due": "2023-09-12", "cvss": 9.8, "epss": 0.9995, "ms": false }, { "cve": "CVE-2023-26359", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "date": "2023-08-21", "ransom": false, "due": "2023-09-11", "cvss": 9.8, "epss": 0.1794, "ms": false }, { "cve": "CVE-2023-24489", "vendor": "Citrix", "product": "Content Collaboration", "name": "Citrix Content Collaboration ShareFile Improper Access Control Vulnerability", "date": "2023-08-16", "ransom": false, "due": "2023-09-06", "cvss": 9.8, "epss": 0.9466, "ms": false }, { "cve": "CVE-2023-38180", "vendor": "Microsoft", "product": ".NET Core and Visual Studio", "name": "Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability", "date": "2023-08-09", "ransom": false, "due": "2023-08-30", "ms": true }, { "cve": "CVE-2017-18368", "vendor": "Zyxel", "product": "P660HN-T1A Routers", "name": "Zyxel P660HN-T1A Routers Command Injection Vulnerability", "date": "2023-08-07", "ransom": false, "due": "2023-08-28", "cvss": 9.8, "epss": 0.9451, "ms": false }, { "cve": "CVE-2023-35081", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability", "date": "2023-07-31", "ransom": false, "due": "2023-08-21", "cvss": 7.2, "epss": 0.6358, "ms": false }, { "cve": "CVE-2023-37580", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "date": "2023-07-27", "ransom": false, "due": "2023-08-17", "cvss": 6.1, "epss": 0.4671, "ms": false }, { "cve": "CVE-2023-38606", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Kernel Unspecified Vulnerability", "date": "2023-07-26", "ransom": false, "due": "2023-08-16", "cvss": 5.5, "epss": 0.029, "ms": false }, { "cve": "CVE-2023-35078", "vendor": "Ivanti", "product": "Endpoint Manager Mobile (EPMM)", "name": "Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability", "date": "2023-07-25", "ransom": true, "due": "2023-08-15", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2023-29298", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Improper Access Control Vulnerability", "date": "2023-07-20", "ransom": false, "due": "2023-08-10", "cvss": 7.5, "epss": 0.9976, "ms": false }, { "cve": "CVE-2023-38205", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Improper Access Control Vulnerability", "date": "2023-07-20", "ransom": false, "due": "2023-08-10", "cvss": 7.5, "epss": 0.9977, "ms": false }, { "cve": "CVE-2023-3519", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "name": "Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability", "date": "2023-07-19", "ransom": true, "due": "2023-08-09", "cvss": 9.8, "epss": 0.9971, "ms": false }, { "cve": "CVE-2023-36884", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Search Remote Code Execution Vulnerability", "date": "2023-07-17", "ransom": true, "due": "2023-08-29", "ms": true }, { "cve": "CVE-2022-29303", "vendor": "SolarView", "product": "Compact", "name": "SolarView Compact Command Injection Vulnerability", "date": "2023-07-13", "ransom": false, "due": "2023-08-03", "cvss": 9.8, "epss": 0.9804, "ms": false }, { "cve": "CVE-2023-37450", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Code Execution Vulnerability", "date": "2023-07-13", "ransom": false, "due": "2023-08-03", "cvss": 8.8, "epss": 0.1895, "ms": false }, { "cve": "CVE-2022-31199", "vendor": "Netwrix", "product": "Auditor", "name": "Netwrix Auditor Insecure Object Deserialization Vulnerability", "date": "2023-07-11", "ransom": true, "due": "2023-08-01", "cvss": 9.8, "epss": 0.3601, "ms": false }, { "cve": "CVE-2023-32046", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability", "date": "2023-07-11", "ransom": false, "due": "2023-08-01", "ms": true }, { "cve": "CVE-2023-32049", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability", "date": "2023-07-11", "ransom": false, "due": "2023-08-01", "ms": true }, { "cve": "CVE-2023-35311", "vendor": "Microsoft", "product": "Outlook", "name": "Microsoft Outlook Security Feature Bypass Vulnerability", "date": "2023-07-11", "ransom": false, "due": "2023-08-01", "ms": true }, { "cve": "CVE-2023-36874", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability", "date": "2023-07-11", "ransom": false, "due": "2023-08-01", "ms": true }, { "cve": "CVE-2021-29256", "vendor": "Arm", "product": "Mali Graphics Processing Unit (GPU)", "name": "Arm Mali GPU Kernel Driver Use-After-Free Vulnerability", "date": "2023-07-07", "ransom": false, "due": "2023-07-28", "cvss": 8.8, "epss": 0.0302, "ms": false }, { "cve": "CVE-2019-17621", "vendor": "D-Link", "product": "DIR-859 Router", "name": "D-Link DIR-859 Router Command Execution Vulnerability", "date": "2023-06-29", "ransom": false, "due": "2023-07-20", "cvss": 9.8, "epss": 0.8962, "ms": false }, { "cve": "CVE-2019-20500", "vendor": "D-Link", "product": "DWL-2600AP Access Point", "name": "D-Link DWL-2600AP Access Point Command Injection Vulnerability", "date": "2023-06-29", "ransom": false, "due": "2023-07-20", "cvss": 7.8, "epss": 0.9711, "ms": false }, { "cve": "CVE-2021-25371", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Unspecified Vulnerability", "date": "2023-06-29", "ransom": false, "due": "2023-07-20", "cvss": 6.7, "epss": 0.008, "ms": false }, { "cve": "CVE-2021-25372", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Improper Boundary Check Vulnerability", "date": "2023-06-29", "ransom": false, "due": "2023-07-20", "cvss": 6.7, "epss": 0.008, "ms": false }, { "cve": "CVE-2021-25394", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Race Condition Vulnerability", "date": "2023-06-29", "ransom": false, "due": "2023-07-20", "cvss": 6.4, "epss": 0.004, "ms": false }, { "cve": "CVE-2021-25395", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Race Condition Vulnerability", "date": "2023-06-29", "ransom": false, "due": "2023-07-20", "cvss": 6.4, "epss": 0.0037, "ms": false }, { "cve": "CVE-2021-25487", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Out-of-Bounds Read Vulnerability", "date": "2023-06-29", "ransom": false, "due": "2023-07-20", "cvss": 7.8, "epss": 0.0063, "ms": false }, { "cve": "CVE-2021-25489", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Improper Input Validation Vulnerability", "date": "2023-06-29", "ransom": false, "due": "2023-07-20", "cvss": 5.5, "epss": 0.0053, "ms": false }, { "cve": "CVE-2023-20867", "vendor": "VMware", "product": "Tools", "name": "VMware Tools Authentication Bypass Vulnerability", "date": "2023-06-23", "ransom": false, "due": "2023-07-14", "cvss": 3.9, "epss": 0.1353, "ms": false }, { "cve": "CVE-2023-27992", "vendor": "Zyxel", "product": "Multiple Network-Attached Storage (NAS) Devices", "name": "Zyxel Multiple NAS Devices Command Injection Vulnerability", "date": "2023-06-23", "ransom": false, "due": "2023-07-14", "cvss": 9.8, "epss": 0.8419, "ms": false }, { "cve": "CVE-2023-32434", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Integer Overflow Vulnerability", "date": "2023-06-23", "ransom": false, "due": "2023-07-14", "cvss": 7.8, "epss": 0.5152, "ms": false }, { "cve": "CVE-2023-32435", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "date": "2023-06-23", "ransom": false, "due": "2023-07-14", "cvss": 8.8, "epss": 0.2295, "ms": false }, { "cve": "CVE-2023-32439", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "date": "2023-06-23", "ransom": false, "due": "2023-07-14", "cvss": 8.8, "epss": 0.2379, "ms": false }, { "cve": "CVE-2016-0165", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2023-06-22", "ransom": false, "due": "2023-07-13", "ms": true }, { "cve": "CVE-2016-9079", "vendor": "Mozilla", "product": "Firefox, Firefox ESR, and Thunderbird", "name": "Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability", "date": "2023-06-22", "ransom": false, "due": "2023-07-13", "cvss": 7.5, "epss": 0.876, "ms": false }, { "cve": "CVE-2020-12641", "vendor": "Roundcube", "product": "Roundcube Webmail", "name": "Roundcube Webmail Remote Code Execution Vulnerability", "date": "2023-06-22", "ransom": false, "due": "2023-07-13", "cvss": 9.8, "epss": 0.8446, "ms": false }, { "cve": "CVE-2020-35730", "vendor": "Roundcube", "product": "Roundcube Webmail", "name": "Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability", "date": "2023-06-22", "ransom": false, "due": "2023-07-13", "cvss": 6.1, "epss": 0.3269, "ms": false }, { "cve": "CVE-2021-44026", "vendor": "Roundcube", "product": "Roundcube Webmail", "name": "Roundcube Webmail SQL Injection Vulnerability", "date": "2023-06-22", "ransom": false, "due": "2023-07-13", "cvss": 9.8, "epss": 0.4275, "ms": false }, { "cve": "CVE-2023-20887", "vendor": "VMware", "product": "Aria Operations for Networks", "name": "Vmware Aria Operations for Networks Command Injection Vulnerability", "date": "2023-06-22", "ransom": false, "due": "2023-07-13", "cvss": 9.8, "epss": 0.9828, "ms": false }, { "cve": "CVE-2023-27997", "vendor": "Fortinet", "product": "FortiOS and FortiProxy SSL-VPN", "name": "Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability", "date": "2023-06-13", "ransom": true, "due": "2023-07-04", "cvss": 9.8, "epss": 0.8569, "ms": false }, { "cve": "CVE-2023-3079", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2023-06-07", "ransom": false, "due": "2023-06-28", "cvss": 8.8, "epss": 0.3211, "ms": false }, { "cve": "CVE-2023-33009", "vendor": "Zyxel", "product": "Multiple Firewalls", "name": "Zyxel Multiple Firewalls Buffer Overflow Vulnerability", "date": "2023-06-05", "ransom": false, "due": "2023-06-26", "cvss": 9.8, "epss": 0.2814, "ms": false }, { "cve": "CVE-2023-33010", "vendor": "Zyxel", "product": "Multiple Firewalls", "name": "Zyxel Multiple Firewalls Buffer Overflow Vulnerability", "date": "2023-06-05", "ransom": false, "due": "2023-06-26", "cvss": 9.8, "epss": 0.2881, "ms": false }, { "cve": "CVE-2023-34362", "vendor": "Progress", "product": "MOVEit Transfer", "name": "Progress MOVEit Transfer SQL Injection Vulnerability", "date": "2023-06-02", "ransom": true, "due": "2023-06-23", "cvss": 9.8, "epss": 0.9993, "ms": false }, { "cve": "CVE-2023-28771", "vendor": "Zyxel", "product": "Multiple Firewalls", "name": "Zyxel Multiple Firewalls OS Command Injection Vulnerability", "date": "2023-05-31", "ransom": false, "due": "2023-06-21", "cvss": 9.8, "epss": 0.9928, "ms": false }, { "cve": "CVE-2023-2868", "vendor": "Barracuda Networks", "product": "Email Security Gateway (ESG) Appliance", "name": "Barracuda Networks ESG Appliance Improper Input Validation Vulnerability", "date": "2023-05-26", "ransom": false, "due": "2023-06-16", "cvss": 9.8, "epss": 0.8745, "ms": false }, { "cve": "CVE-2023-28204", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability", "date": "2023-05-22", "ransom": false, "due": "2023-06-12", "cvss": 6.5, "epss": 0.1429, "ms": false }, { "cve": "CVE-2023-32373", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Use-After-Free Vulnerability", "date": "2023-05-22", "ransom": false, "due": "2023-06-12", "cvss": 8.8, "epss": 0.1217, "ms": false }, { "cve": "CVE-2023-32409", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Sandbox Escape Vulnerability", "date": "2023-05-22", "ransom": false, "due": "2023-06-12", "cvss": 8.6, "epss": 0.1653, "ms": false }, { "cve": "CVE-2004-1464", "vendor": "Cisco", "product": "IOS", "name": "Cisco IOS Denial-of-Service Vulnerability", "date": "2023-05-19", "ransom": false, "due": "2023-06-09", "cvss": 5.9, "epss": 0.0513, "ms": false }, { "cve": "CVE-2016-6415", "vendor": "Cisco", "product": "IOS, IOS XR, and IOS XE", "name": "Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability", "date": "2023-05-19", "ransom": false, "due": "2023-06-09", "cvss": 7.5, "epss": 0.8731, "ms": false }, { "cve": "CVE-2023-21492", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability", "date": "2023-05-19", "ransom": false, "due": "2023-06-09", "cvss": 4.4, "epss": 0.0255, "ms": false }, { "cve": "CVE-2010-3904", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Improper Input Validation Vulnerability", "date": "2023-05-12", "ransom": false, "due": "2023-06-02", "cvss": 7.8, "epss": 0.1216, "ms": false }, { "cve": "CVE-2014-0196", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Race Condition Vulnerability", "date": "2023-05-12", "ransom": false, "due": "2023-06-02", "cvss": 5.5, "epss": 0.2248, "ms": false }, { "cve": "CVE-2015-5317", "vendor": "Jenkins", "product": "Jenkins User Interface (UI)", "name": "Jenkins User Interface (UI) Information Disclosure Vulnerability", "date": "2023-05-12", "ransom": false, "due": "2023-06-02", "cvss": 7.5, "epss": 0.2243, "ms": false }, { "cve": "CVE-2016-3427", "vendor": "Oracle", "product": "Java SE and JRockit", "name": "Oracle Java SE and JRockit Unspecified Vulnerability", "date": "2023-05-12", "ransom": false, "due": "2023-06-02", "cvss": 9.8, "epss": 0.9233, "ms": false }, { "cve": "CVE-2016-8735", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat Remote Code Execution Vulnerability", "date": "2023-05-12", "ransom": false, "due": "2023-06-02", "cvss": 9.8, "epss": 0.9034, "ms": false }, { "cve": "CVE-2021-3560", "vendor": "Red Hat", "product": "Polkit", "name": "Red Hat Polkit Incorrect Authorization Vulnerability", "date": "2023-05-12", "ransom": false, "due": "2023-06-02", "cvss": 7.8, "epss": 0.2219, "ms": false }, { "cve": "CVE-2023-25717", "vendor": "Ruckus Wireless", "product": "Multiple Products", "name": "Multiple Ruckus Wireless Products CSRF and RCE Vulnerability", "date": "2023-05-12", "ransom": false, "due": "2023-06-02", "cvss": 9.8, "epss": 0.9807, "ms": false }, { "cve": "CVE-2023-29336", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32K Privilege Escalation Vulnerability", "date": "2023-05-09", "ransom": false, "due": "2023-05-30", "ms": true }, { "cve": "CVE-2021-45046", "vendor": "Apache", "product": "Log4j2", "name": "Apache Log4j2 Deserialization of Untrusted Data Vulnerability", "date": "2023-05-01", "ransom": true, "due": "2023-05-22", "cvss": 9, "epss": 0.9998, "ms": false }, { "cve": "CVE-2023-1389", "vendor": "TP-Link", "product": "Archer AX21", "name": "TP-Link Archer AX-21 Command Injection Vulnerability", "date": "2023-05-01", "ransom": false, "due": "2023-05-22", "cvss": 8.8, "epss": 1, "ms": false }, { "cve": "CVE-2023-21839", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Unspecified Vulnerability", "date": "2023-05-01", "ransom": false, "due": "2023-05-22", "cvss": 7.5, "epss": 0.9981, "ms": false }, { "cve": "CVE-2023-2136", "vendor": "Google", "product": "Chromium Skia", "name": "Google Chrome Skia Integer Overflow Vulnerability", "date": "2023-04-21", "ransom": false, "due": "2023-05-12", "cvss": 9.6, "epss": 0.0574, "ms": false }, { "cve": "CVE-2023-27350", "vendor": "PaperCut", "product": "MF/NG", "name": "PaperCut MF/NG Improper Access Control Vulnerability", "date": "2023-04-21", "ransom": true, "due": "2023-05-12", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2023-28432", "vendor": "MinIO", "product": "MinIO", "name": "MinIO Information Disclosure Vulnerability", "date": "2023-04-21", "ransom": false, "due": "2023-05-12", "cvss": 7.5, "epss": 0.8396, "ms": false }, { "cve": "CVE-2017-6742", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2023-04-19", "ransom": false, "due": "2023-05-10", "cvss": 8.8, "epss": 0.2142, "ms": false }, { "cve": "CVE-2019-8526", "vendor": "Apple", "product": "macOS", "name": "Apple macOS Use-After-Free Vulnerability", "date": "2023-04-17", "ransom": false, "due": "2023-05-08", "cvss": 7.8, "epss": 0.007, "ms": false }, { "cve": "CVE-2023-2033", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2023-04-17", "ransom": false, "due": "2023-05-08", "cvss": 8.8, "epss": 0.408, "ms": false }, { "cve": "CVE-2023-20963", "vendor": "Android", "product": "Framework", "name": "Android Framework Privilege Escalation Vulnerability", "date": "2023-04-13", "ransom": false, "due": "2023-05-04", "cvss": 7.8, "epss": 0.0146, "ms": false }, { "cve": "CVE-2023-29492", "vendor": "Novi Survey", "product": "Novi Survey", "name": "Novi Survey Insecure Deserialization Vulnerability", "date": "2023-04-13", "ransom": false, "due": "2023-05-04", "cvss": 9.8, "epss": 0.0269, "ms": false }, { "cve": "CVE-2023-28252", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "date": "2023-04-11", "ransom": true, "due": "2023-05-02", "ms": true }, { "cve": "CVE-2023-28205", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Use-After-Free Vulnerability", "date": "2023-04-10", "ransom": false, "due": "2023-05-01", "cvss": 8.8, "epss": 0.2708, "ms": false }, { "cve": "CVE-2023-28206", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability", "date": "2023-04-10", "ransom": false, "due": "2023-05-01", "cvss": 8.6, "epss": 0.2451, "ms": false }, { "cve": "CVE-2019-1388", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability", "date": "2023-04-07", "ransom": true, "due": "2023-04-28", "ms": true }, { "cve": "CVE-2021-27876", "vendor": "Veritas", "product": "Backup Exec Agent", "name": "Veritas Backup Exec Agent File Access Vulnerability", "date": "2023-04-07", "ransom": true, "due": "2023-04-28", "cvss": 8.1, "epss": 0.1341, "ms": false }, { "cve": "CVE-2021-27877", "vendor": "Veritas", "product": "Backup Exec Agent", "name": "Veritas Backup Exec Agent Improper Authentication Vulnerability", "date": "2023-04-07", "ransom": true, "due": "2023-04-28", "cvss": 9.8, "epss": 0.6491, "ms": false }, { "cve": "CVE-2021-27878", "vendor": "Veritas", "product": "Backup Exec Agent", "name": "Veritas Backup Exec Agent Command Execution Vulnerability", "date": "2023-04-07", "ransom": true, "due": "2023-04-28", "cvss": 8.8, "epss": 0.2395, "ms": false }, { "cve": "CVE-2023-26083", "vendor": "Arm", "product": "Mali Graphics Processing Unit (GPU)", "name": "Arm Mali GPU Kernel Driver Information Disclosure Vulnerability", "date": "2023-04-07", "ransom": false, "due": "2023-04-28", "cvss": 3.3, "epss": 0.0126, "ms": false }, { "cve": "CVE-2022-27926", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "date": "2023-04-03", "ransom": false, "due": "2023-04-24", "cvss": 6.1, "epss": 0.1763, "ms": false }, { "cve": "CVE-2013-3163", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "date": "2023-03-30", "ransom": false, "due": "2023-04-20", "ms": true }, { "cve": "CVE-2017-7494", "vendor": "Samba", "product": "Samba", "name": "Samba Remote Code Execution Vulnerability", "date": "2023-03-30", "ransom": true, "due": "2023-04-20", "cvss": 9.8, "epss": 0.9945, "ms": false }, { "cve": "CVE-2021-30900", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability", "date": "2023-03-30", "ransom": false, "due": "2023-04-20", "cvss": 7.8, "epss": 0.052, "ms": false }, { "cve": "CVE-2022-22706", "vendor": "Arm", "product": "Mali Graphics Processing Unit (GPU)", "name": "Arm Mali GPU Kernel Driver Unspecified Vulnerability", "date": "2023-03-30", "ransom": false, "due": "2023-04-20", "cvss": 7.8, "epss": 0.0109, "ms": false }, { "cve": "CVE-2022-3038", "vendor": "Google", "product": "Chromium Network Service", "name": "Google Chromium Network Service Use-After-Free Vulnerability", "date": "2023-03-30", "ransom": false, "due": "2023-04-20", "cvss": 8.8, "epss": 0.2474, "ms": false }, { "cve": "CVE-2022-38181", "vendor": "Arm", "product": "Mali Graphics Processing Unit (GPU)", "name": "Arm Mali GPU Kernel Driver Use-After-Free Vulnerability", "date": "2023-03-30", "ransom": false, "due": "2023-04-20", "cvss": 8.8, "epss": 0.1282, "ms": false }, { "cve": "CVE-2022-39197", "vendor": "Fortra", "product": "Cobalt Strike", "name": "Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability", "date": "2023-03-30", "ransom": false, "due": "2023-04-20", "cvss": 6.1, "epss": 0.4645, "ms": false }, { "cve": "CVE-2022-42948", "vendor": "Fortra", "product": "Cobalt Strike", "name": "Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability", "date": "2023-03-30", "ransom": false, "due": "2023-04-20", "cvss": 9.8, "epss": 0.0271, "ms": false }, { "cve": "CVE-2023-0266", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Use-After-Free Vulnerability", "date": "2023-03-30", "ransom": false, "due": "2023-04-20", "cvss": 7, "epss": 0.037, "ms": false }, { "cve": "CVE-2023-26360", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "date": "2023-03-15", "ransom": false, "due": "2023-04-05", "cvss": 8.6, "epss": 0.9734, "ms": false }, { "cve": "CVE-2022-41328", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Path Traversal Vulnerability", "date": "2023-03-14", "ransom": false, "due": "2023-04-04", "cvss": 7.1, "epss": 0.1191, "ms": false }, { "cve": "CVE-2023-23397", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Outlook Privilege Escalation Vulnerability", "date": "2023-03-14", "ransom": false, "due": "2023-04-04", "ms": true }, { "cve": "CVE-2023-24880", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability", "date": "2023-03-14", "ransom": true, "due": "2023-04-04", "ms": true }, { "cve": "CVE-2020-5741", "vendor": "Plex", "product": "Media Server", "name": "Plex Media Server Remote Code Execution Vulnerability", "date": "2023-03-10", "ransom": false, "due": "2023-03-31", "cvss": 7.2, "epss": 0.7294, "ms": false }, { "cve": "CVE-2021-39144", "vendor": "XStream", "product": "XStream", "name": "XStream Remote Code Execution Vulnerability", "date": "2023-03-10", "ransom": false, "due": "2023-03-31", "cvss": 8.5, "epss": 0.9812, "ms": false }, { "cve": "CVE-2022-28810", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability", "date": "2023-03-07", "ransom": false, "due": "2023-03-28", "cvss": 6.8, "epss": 0.7097, "ms": false }, { "cve": "CVE-2022-33891", "vendor": "Apache", "product": "Spark", "name": "Apache Spark Command Injection Vulnerability", "date": "2023-03-07", "ransom": false, "due": "2023-03-28", "cvss": 8.8, "epss": 0.9308, "ms": false }, { "cve": "CVE-2022-35914", "vendor": "Teclib", "product": "GLPI", "name": "Teclib GLPI Remote Code Execution Vulnerability", "date": "2023-03-07", "ransom": false, "due": "2023-03-28", "cvss": 9.8, "epss": 0.997, "ms": false }, { "cve": "CVE-2022-36537", "vendor": "ZK Framework", "product": "AuUploader", "name": "ZK Framework AuUploader Unspecified Vulnerability", "date": "2023-02-27", "ransom": true, "due": "2023-03-20", "cvss": 7.5, "epss": 0.9534, "ms": false }, { "cve": "CVE-2022-40765", "vendor": "Mitel", "product": "MiVoice Connect", "name": "Mitel MiVoice Connect Command Injection Vulnerability", "date": "2023-02-21", "ransom": true, "due": "2023-03-14", "cvss": 6.8, "epss": 0.1048, "ms": false }, { "cve": "CVE-2022-41223", "vendor": "Mitel", "product": "MiVoice Connect", "name": "Mitel MiVoice Connect Code Injection Vulnerability", "date": "2023-02-21", "ransom": true, "due": "2023-03-14", "cvss": 6.8, "epss": 0.1057, "ms": false }, { "cve": "CVE-2022-47986", "vendor": "IBM", "product": "Aspera Faspex", "name": "IBM Aspera Faspex Code Execution Vulnerability", "date": "2023-02-21", "ransom": true, "due": "2023-03-14", "cvss": 9.8, "epss": 0.9997, "ms": false }, { "cve": "CVE-2022-46169", "vendor": "Cacti", "product": "Cacti", "name": "Cacti Command Injection Vulnerability", "date": "2023-02-16", "ransom": false, "due": "2023-03-09", "cvss": 9.8, "epss": 0.9983, "ms": false }, { "cve": "CVE-2023-21715", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Publisher Security Feature Bypass Vulnerability", "date": "2023-02-14", "ransom": false, "due": "2023-03-07", "ms": true }, { "cve": "CVE-2023-21823", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Graphic Component Privilege Escalation Vulnerability", "date": "2023-02-14", "ransom": false, "due": "2023-03-07", "ms": true }, { "cve": "CVE-2023-23376", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "date": "2023-02-14", "ransom": true, "due": "2023-03-07", "ms": true }, { "cve": "CVE-2023-23529", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "date": "2023-02-14", "ransom": false, "due": "2023-03-07", "cvss": 8.8, "epss": 0.095, "ms": false }, { "cve": "CVE-2015-2291", "vendor": "Intel", "product": "Ethernet Diagnostics Driver for Windows", "name": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability", "date": "2023-02-10", "ransom": true, "due": "2023-03-03", "cvss": 7.8, "epss": 0.0901, "ms": false }, { "cve": "CVE-2022-24990", "vendor": "TerraMaster", "product": "TerraMaster OS", "name": "TerraMaster OS Remote Command Execution Vulnerability", "date": "2023-02-10", "ransom": true, "due": "2023-03-03", "cvss": 7.5, "epss": 0.8355, "ms": false }, { "cve": "CVE-2023-0669", "vendor": "Fortra", "product": "GoAnywhere MFT", "name": "Fortra GoAnywhere MFT Remote Code Execution Vulnerability", "date": "2023-02-10", "ransom": true, "due": "2023-03-03", "cvss": 7.2, "epss": 1, "ms": false }, { "cve": "CVE-2022-21587", "vendor": "Oracle", "product": "E-Business Suite", "name": "Oracle E-Business Suite Unspecified Vulnerability", "date": "2023-02-02", "ransom": true, "due": "2023-02-23", "cvss": 9.8, "epss": 0.9834, "ms": false }, { "cve": "CVE-2023-22952", "vendor": "SugarCRM", "product": "Multiple Products", "name": "Multiple SugarCRM Products Remote Code Execution Vulnerability", "date": "2023-02-02", "ransom": false, "due": "2023-02-23", "cvss": 8.8, "epss": 0.8027, "ms": false }, { "cve": "CVE-2017-11357", "vendor": "Telerik", "product": "User Interface (UI) for ASP.NET AJAX", "name": "Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability", "date": "2023-01-26", "ransom": true, "due": "2023-02-16", "cvss": 9.8, "epss": 0.7571, "ms": false }, { "cve": "CVE-2022-47966", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability", "date": "2023-01-23", "ransom": true, "due": "2023-02-13", "cvss": 9.8, "epss": 0.9975, "ms": false }, { "cve": "CVE-2022-44877", "vendor": "CWP", "product": "Control Web Panel", "name": "CWP Control Web Panel OS Command Injection Vulnerability", "date": "2023-01-17", "ransom": false, "due": "2023-02-07", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2022-41080", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Privilege Escalation Vulnerability", "date": "2023-01-10", "ransom": true, "due": "2023-01-31", "ms": true }, { "cve": "CVE-2023-21674", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability", "date": "2023-01-10", "ransom": false, "due": "2023-01-31", "ms": true }, { "cve": "CVE-2018-18809", "vendor": "TIBCO", "product": "JasperReports", "name": "TIBCO JasperReports Library Directory Traversal Vulnerability", "date": "2022-12-29", "ransom": false, "due": "2023-01-19", "cvss": 6.5, "epss": 0.7906, "ms": false }, { "cve": "CVE-2018-5430", "vendor": "TIBCO", "product": "JasperReports", "name": "TIBCO JasperReports Server Information Disclosure Vulnerability", "date": "2022-12-29", "ransom": false, "due": "2023-01-19", "cvss": 8.8, "epss": 0.4875, "ms": false }, { "cve": "CVE-2022-42856", "vendor": "Apple", "product": "iOS", "name": "Apple iOS Type Confusion Vulnerability", "date": "2022-12-14", "ransom": false, "due": "2023-01-04", "cvss": 8.8, "epss": 0.0852, "ms": false }, { "cve": "CVE-2022-26500", "vendor": "Veeam", "product": "Backup & Replication", "name": "Veeam Backup & Replication Remote Code Execution Vulnerability", "date": "2022-12-13", "ransom": true, "due": "2023-01-03", "cvss": 8.8, "epss": 0.0594, "ms": false }, { "cve": "CVE-2022-26501", "vendor": "Veeam", "product": "Backup & Replication", "name": "Veeam Backup & Replication Remote Code Execution Vulnerability", "date": "2022-12-13", "ransom": true, "due": "2023-01-03", "cvss": 9.8, "epss": 0.0428, "ms": false }, { "cve": "CVE-2022-27518", "vendor": "Citrix", "product": "Application Delivery Controller (ADC) and Gateway", "name": "Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability", "date": "2022-12-13", "ransom": false, "due": "2023-01-03", "cvss": 9.8, "epss": 0.0688, "ms": false }, { "cve": "CVE-2022-42475", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability", "date": "2022-12-13", "ransom": true, "due": "2023-01-03", "cvss": 9.8, "epss": 0.9947, "ms": false }, { "cve": "CVE-2022-44698", "vendor": "Microsoft", "product": "Defender", "name": "Microsoft Defender SmartScreen Security Feature Bypass Vulnerability", "date": "2022-12-13", "ransom": true, "due": "2023-01-03", "ms": true }, { "cve": "CVE-2022-4262", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2022-12-05", "ransom": false, "due": "2022-12-26", "cvss": 8.8, "epss": 0.1547, "ms": false }, { "cve": "CVE-2021-35587", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Unspecified Vulnerability", "date": "2022-11-28", "ransom": false, "due": "2022-12-19", "cvss": 9.8, "epss": 0.9628, "ms": false }, { "cve": "CVE-2022-4135", "vendor": "Google", "product": "Chromium GPU", "name": "Google Chromium GPU Heap Buffer Overflow Vulnerability", "date": "2022-11-28", "ransom": false, "due": "2022-12-19", "cvss": 9.6, "epss": 0.3186, "ms": false }, { "cve": "CVE-2022-41049", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability", "date": "2022-11-14", "ransom": false, "due": "2022-12-09", "ms": true }, { "cve": "CVE-2021-25337", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Improper Access Control Vulnerability", "date": "2022-11-08", "ransom": false, "due": "2022-11-29", "cvss": 7.1, "epss": 0.0283, "ms": false }, { "cve": "CVE-2021-25369", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Improper Access Control Vulnerability", "date": "2022-11-08", "ransom": false, "due": "2022-11-29", "cvss": 5.5, "epss": 0.0112, "ms": false }, { "cve": "CVE-2021-25370", "vendor": "Samsung", "product": "Mobile Devices", "name": "Samsung Mobile Devices Memory Corruption Vulnerability", "date": "2022-11-08", "ransom": false, "due": "2022-11-29", "cvss": 4.4, "epss": 0.0089, "ms": false }, { "cve": "CVE-2022-41073", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "date": "2022-11-08", "ransom": true, "due": "2022-12-09", "ms": true }, { "cve": "CVE-2022-41091", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability", "date": "2022-11-08", "ransom": true, "due": "2022-12-09", "ms": true }, { "cve": "CVE-2022-41125", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability", "date": "2022-11-08", "ransom": false, "due": "2022-12-09", "ms": true }, { "cve": "CVE-2022-41128", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Scripting Languages Remote Code Execution Vulnerability", "date": "2022-11-08", "ransom": false, "due": "2022-12-09", "ms": true }, { "cve": "CVE-2022-3723", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2022-10-28", "ransom": false, "due": "2022-11-18", "cvss": 8.8, "epss": 0.0786, "ms": false }, { "cve": "CVE-2022-42827", "vendor": "Apple", "product": "iOS and iPadOS", "name": "Apple iOS and iPadOS Out-of-Bounds Write Vulnerability", "date": "2022-10-25", "ransom": false, "due": "2022-11-15", "cvss": 7.8, "epss": 0.0114, "ms": false }, { "cve": "CVE-2018-19320", "vendor": "GIGABYTE", "product": "Multiple Products", "name": "GIGABYTE Multiple Products Unspecified Vulnerability", "date": "2022-10-24", "ransom": true, "due": "2022-11-14", "cvss": 7.8, "epss": 0.036, "ms": false }, { "cve": "CVE-2018-19321", "vendor": "GIGABYTE", "product": "Multiple Products", "name": "GIGABYTE Multiple Products Privilege Escalation Vulnerability", "date": "2022-10-24", "ransom": true, "due": "2022-11-14", "cvss": 7.8, "epss": 0.0367, "ms": false }, { "cve": "CVE-2018-19322", "vendor": "GIGABYTE", "product": "Multiple Products", "name": "GIGABYTE Multiple Products Code Execution Vulnerability", "date": "2022-10-24", "ransom": true, "due": "2022-11-14", "cvss": 7.8, "epss": 0.0187, "ms": false }, { "cve": "CVE-2018-19323", "vendor": "GIGABYTE", "product": "Multiple Products", "name": "GIGABYTE Multiple Products Privilege Escalation Vulnerability", "date": "2022-10-24", "ransom": true, "due": "2022-11-14", "cvss": 9.8, "epss": 0.0852, "ms": false }, { "cve": "CVE-2020-3153", "vendor": "Cisco", "product": "AnyConnect Secure", "name": "Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability", "date": "2022-10-24", "ransom": true, "due": "2022-11-14", "cvss": 6.5, "epss": 0.2745, "ms": false }, { "cve": "CVE-2020-3433", "vendor": "Cisco", "product": "AnyConnect Secure", "name": "Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability", "date": "2022-10-24", "ransom": true, "due": "2022-11-14", "cvss": 7.8, "epss": 0.1005, "ms": false }, { "cve": "CVE-2021-3493", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Privilege Escalation Vulnerability", "date": "2022-10-20", "ransom": false, "due": "2022-11-10", "cvss": 7.8, "epss": 0.4917, "ms": false }, { "cve": "CVE-2022-41352", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability", "date": "2022-10-20", "ransom": false, "due": "2022-11-10", "cvss": 9.8, "epss": 0.9548, "ms": false }, { "cve": "CVE-2022-40684", "vendor": "Fortinet", "product": "Multiple Products", "name": "Fortinet Multiple Products Authentication Bypass Vulnerability", "date": "2022-10-11", "ransom": true, "due": "2022-11-01", "cvss": 9.8, "epss": 0.9998, "ms": false }, { "cve": "CVE-2022-41033", "vendor": "Microsoft", "product": "Windows COM+ Event System Service", "name": "Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability", "date": "2022-10-11", "ransom": false, "due": "2022-11-01", "ms": true }, { "cve": "CVE-2022-36804", "vendor": "Atlassian", "product": "Bitbucket Server and Data Center", "name": "Atlassian Bitbucket Server and Data Center Command Injection Vulnerability", "date": "2022-09-30", "ransom": false, "due": "2022-10-21", "cvss": 8.8, "epss": 0.9908, "ms": false }, { "cve": "CVE-2022-41040", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Server-Side Request Forgery Vulnerability", "date": "2022-09-30", "ransom": true, "due": "2022-10-21", "ms": true }, { "cve": "CVE-2022-41082", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "date": "2022-09-30", "ransom": true, "due": "2022-10-21", "ms": true }, { "cve": "CVE-2022-3236", "vendor": "Sophos", "product": "Firewall", "name": "Sophos Firewall Code Injection Vulnerability", "date": "2022-09-23", "ransom": false, "due": "2022-10-14", "cvss": 9.8, "epss": 0.989, "ms": false }, { "cve": "CVE-2022-35405", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability", "date": "2022-09-22", "ransom": false, "due": "2022-10-13", "cvss": 9.8, "epss": 0.9994, "ms": false }, { "cve": "CVE-2010-2568", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Remote Code Execution Vulnerability", "date": "2022-09-15", "ransom": false, "due": "2022-10-06", "ms": true }, { "cve": "CVE-2013-2094", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Privilege Escalation Vulnerability", "date": "2022-09-15", "ransom": false, "due": "2022-10-06", "cvss": 8.4, "epss": 0.4771, "ms": false }, { "cve": "CVE-2013-2596", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Integer Overflow Vulnerability", "date": "2022-09-15", "ransom": false, "due": "2022-10-06", "cvss": 7.8, "epss": 0.0337, "ms": false }, { "cve": "CVE-2013-2597", "vendor": "Code Aurora", "product": "ACDB Audio Driver", "name": "Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability", "date": "2022-09-15", "ransom": false, "due": "2022-10-06", "cvss": 8.4, "epss": 0.0152, "ms": false }, { "cve": "CVE-2013-6282", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Improper Input Validation Vulnerability", "date": "2022-09-15", "ransom": false, "due": "2022-10-06", "cvss": 8.8, "epss": 0.3971, "ms": false }, { "cve": "CVE-2022-40139", "vendor": "Trend Micro", "product": "Apex One and Apex One as a Service", "name": "Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability", "date": "2022-09-15", "ransom": false, "due": "2022-10-06", "cvss": 7.2, "epss": 0.0284, "ms": false }, { "cve": "CVE-2022-32917", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability", "date": "2022-09-14", "ransom": false, "due": "2022-10-05", "cvss": 7.8, "epss": 0.056, "ms": false }, { "cve": "CVE-2022-37969", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "date": "2022-09-14", "ransom": false, "due": "2022-10-05", "ms": true }, { "cve": "CVE-2011-1823", "vendor": "Android", "product": "Android OS", "name": "Android OS Privilege Escalation Vulnerability", "date": "2022-09-08", "ransom": false, "due": "2022-09-29", "cvss": 7.8, "epss": 0.4163, "ms": false }, { "cve": "CVE-2011-4723", "vendor": "D-Link", "product": "DIR-300 Router", "name": "D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability", "date": "2022-09-08", "ransom": false, "due": "2022-09-29", "cvss": 5.7, "epss": 0.0298, "ms": false }, { "cve": "CVE-2017-5521", "vendor": "NETGEAR", "product": "Multiple Devices", "name": "NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability", "date": "2022-09-08", "ransom": false, "due": "2022-09-29", "cvss": 8.1, "epss": 0.8935, "ms": false }, { "cve": "CVE-2018-13374", "vendor": "Fortinet", "product": "FortiOS and FortiADC", "name": "Fortinet FortiOS and FortiADC Improper Access Control Vulnerability", "date": "2022-09-08", "ransom": true, "due": "2022-09-29", "cvss": 4.3, "epss": 0.3809, "ms": false }, { "cve": "CVE-2018-2628", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Unspecified Vulnerability", "date": "2022-09-08", "ransom": false, "due": "2022-09-29", "cvss": 9.8, "epss": 0.9945, "ms": false }, { "cve": "CVE-2018-6530", "vendor": "D-Link", "product": "Multiple Routers", "name": "D-Link Multiple Routers OS Command Injection Vulnerability", "date": "2022-09-08", "ransom": true, "due": "2022-09-29", "cvss": 9.8, "epss": 0.9668, "ms": false }, { "cve": "CVE-2018-7445", "vendor": "MikroTik", "product": "RouterOS", "name": "MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability", "date": "2022-09-08", "ransom": false, "due": "2022-09-29", "cvss": 9.8, "epss": 0.6102, "ms": false }, { "cve": "CVE-2020-9934", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS Input Validation Vulnerability", "date": "2022-09-08", "ransom": false, "due": "2022-09-29", "cvss": 5.5, "epss": 0.0321, "ms": false }, { "cve": "CVE-2022-26258", "vendor": "D-Link", "product": "DIR-820L", "name": "D-Link DIR-820L Remote Code Execution Vulnerability", "date": "2022-09-08", "ransom": false, "due": "2022-09-29", "cvss": 9.8, "epss": 0.7981, "ms": false }, { "cve": "CVE-2022-27593", "vendor": "QNAP", "product": "Photo Station", "name": "QNAP Photo Station Externally Controlled Reference Vulnerability", "date": "2022-09-08", "ransom": true, "due": "2022-09-29", "cvss": 9.1, "epss": 0.8791, "ms": false }, { "cve": "CVE-2022-3075", "vendor": "Google", "product": "Chromium Mojo", "name": "Google Chromium Mojo Insufficient Data Validation Vulnerability", "date": "2022-09-08", "ransom": false, "due": "2022-09-29", "cvss": 9.6, "epss": 0.0568, "ms": false }, { "cve": "CVE-2020-28949", "vendor": "PEAR", "product": "Archive_Tar", "name": "PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability", "date": "2022-08-25", "ransom": false, "due": "2022-09-15", "cvss": 7.8, "epss": 0.8455, "ms": false }, { "cve": "CVE-2020-36193", "vendor": "PEAR", "product": "Archive_Tar", "name": "PEAR Archive_Tar Improper Link Resolution Vulnerability", "date": "2022-08-25", "ransom": false, "due": "2022-09-15", "cvss": 7.5, "epss": 0.7059, "ms": false }, { "cve": "CVE-2021-31010", "vendor": "Apple", "product": "iOS, macOS, watchOS", "name": "Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability", "date": "2022-08-25", "ransom": false, "due": "2022-09-15", "cvss": 7.5, "epss": 0.0367, "ms": false }, { "cve": "CVE-2021-38406", "vendor": "Delta Electronics", "product": "DOPSoft 2", "name": "Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability", "date": "2022-08-25", "ransom": false, "due": "2022-09-15", "cvss": 7.8, "epss": 0.7789, "ms": false }, { "cve": "CVE-2021-39226", "vendor": "Grafana Labs", "product": "Grafana", "name": "Grafana Authentication Bypass Vulnerability", "date": "2022-08-25", "ransom": false, "due": "2022-09-15", "cvss": 7.3, "epss": 0.9993, "ms": false }, { "cve": "CVE-2022-2294", "vendor": "WebRTC", "product": "WebRTC", "name": "WebRTC Heap Buffer Overflow Vulnerability", "date": "2022-08-25", "ransom": true, "due": "2022-09-15", "cvss": 8.8, "epss": 0.7046, "ms": false }, { "cve": "CVE-2022-22963", "vendor": "VMware Tanzu", "product": "Spring Cloud", "name": "VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability", "date": "2022-08-25", "ransom": false, "due": "2022-09-15", "cvss": 9.8, "epss": 0.9994, "ms": false }, { "cve": "CVE-2022-24112", "vendor": "Apache", "product": "APISIX", "name": "Apache APISIX Authentication Bypass Vulnerability", "date": "2022-08-25", "ransom": false, "due": "2022-09-15", "cvss": 9.8, "epss": 0.96, "ms": false }, { "cve": "CVE-2022-24706", "vendor": "Apache", "product": "CouchDB", "name": "Apache CouchDB Insecure Default Initialization of Resource Vulnerability", "date": "2022-08-25", "ransom": false, "due": "2022-09-15", "cvss": 9.8, "epss": 0.9241, "ms": false }, { "cve": "CVE-2022-26352", "vendor": "dotCMS", "product": "dotCMS", "name": "dotCMS Unrestricted Upload of File Vulnerability", "date": "2022-08-25", "ransom": true, "due": "2022-09-15", "cvss": 9.8, "epss": 0.9108, "ms": false }, { "cve": "CVE-2022-0028", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability", "date": "2022-08-22", "ransom": false, "due": "2022-09-12", "cvss": 8.6, "epss": 0.0213, "ms": false }, { "cve": "CVE-2017-15944", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Remote Code Execution Vulnerability", "date": "2022-08-18", "ransom": false, "due": "2022-09-08", "cvss": 9.8, "epss": 0.9834, "ms": false }, { "cve": "CVE-2022-21971", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Runtime Remote Code Execution Vulnerability", "date": "2022-08-18", "ransom": false, "due": "2022-09-08", "ms": true }, { "cve": "CVE-2022-22536", "vendor": "SAP", "product": "Multiple Products", "name": "SAP Multiple Products HTTP Request Smuggling Vulnerability", "date": "2022-08-18", "ransom": false, "due": "2022-09-08", "cvss": 10, "epss": 0.9795, "ms": false }, { "cve": "CVE-2022-26923", "vendor": "Microsoft", "product": "Active Directory", "name": "Microsoft Active Directory Domain Services Privilege Escalation Vulnerability", "date": "2022-08-18", "ransom": false, "due": "2022-09-08", "ms": true }, { "cve": "CVE-2022-2856", "vendor": "Google", "product": "Chromium Intents", "name": "Google Chromium Intents Insufficient Input Validation Vulnerability", "date": "2022-08-18", "ransom": false, "due": "2022-09-08", "cvss": 6.5, "epss": 0.0453, "ms": false }, { "cve": "CVE-2022-32893", "vendor": "Apple", "product": "iOS and macOS", "name": "Apple iOS and macOS Out-of-Bounds Write Vulnerability", "date": "2022-08-18", "ransom": false, "due": "2022-09-08", "cvss": 8.8, "epss": 0.0986, "ms": false }, { "cve": "CVE-2022-32894", "vendor": "Apple", "product": "iOS and macOS", "name": "Apple iOS and macOS Out-of-Bounds Write Vulnerability", "date": "2022-08-18", "ransom": false, "due": "2022-09-08", "cvss": 7.8, "epss": 0.0329, "ms": false }, { "cve": "CVE-2022-27925", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability", "date": "2022-08-11", "ransom": true, "due": "2022-09-01", "cvss": 7.2, "epss": 0.9859, "ms": false }, { "cve": "CVE-2022-37042", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability", "date": "2022-08-11", "ransom": true, "due": "2022-09-01", "cvss": 9.8, "epss": 0.888, "ms": false }, { "cve": "CVE-2022-30333", "vendor": "RARLAB", "product": "UnRAR", "name": "RARLAB UnRAR Directory Traversal Vulnerability", "date": "2022-08-09", "ransom": true, "due": "2022-08-30", "cvss": 7.5, "epss": 0.9911, "ms": false }, { "cve": "CVE-2022-34713", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability", "date": "2022-08-09", "ransom": false, "due": "2022-08-30", "ms": true }, { "cve": "CVE-2022-27924", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability", "date": "2022-08-04", "ransom": true, "due": "2022-08-25", "cvss": 7.5, "epss": 0.854, "ms": false }, { "cve": "CVE-2022-26138", "vendor": "Atlassian", "product": "Confluence", "name": "Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability", "date": "2022-07-29", "ransom": false, "due": "2022-08-19", "cvss": 9.8, "epss": 0.9817, "ms": false }, { "cve": "CVE-2022-22047", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability", "date": "2022-07-12", "ransom": false, "due": "2022-08-02", "ms": true }, { "cve": "CVE-2022-26925", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows LSA Spoofing Vulnerability", "date": "2022-07-01", "ransom": false, "due": "2022-07-22", "ms": true }, { "cve": "CVE-2018-4344", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2022-06-27", "ransom": false, "due": "2022-07-18", "cvss": 7.8, "epss": 0.0294, "ms": false }, { "cve": "CVE-2019-8605", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Use-After-Free Vulnerability", "date": "2022-06-27", "ransom": false, "due": "2022-07-18", "cvss": 7.8, "epss": 0.1744, "ms": false }, { "cve": "CVE-2020-3837", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2022-06-27", "ransom": false, "due": "2022-07-18", "cvss": 7.8, "epss": 0.145, "ms": false }, { "cve": "CVE-2020-9907", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2022-06-27", "ransom": false, "due": "2022-07-18", "cvss": 7.8, "epss": 0.039, "ms": false }, { "cve": "CVE-2021-30533", "vendor": "Google", "product": "Chromium PopupBlocker", "name": "Google Chromium PopupBlocker Security Bypass Vulnerability", "date": "2022-06-27", "ransom": false, "due": "2022-07-18", "cvss": 6.5, "epss": 0.1661, "ms": false }, { "cve": "CVE-2021-30983", "vendor": "Apple", "product": "iOS and iPadOS", "name": "Apple iOS and iPadOS Buffer Overflow Vulnerability", "date": "2022-06-27", "ransom": false, "due": "2022-07-18", "cvss": 7.8, "epss": 0.0292, "ms": false }, { "cve": "CVE-2021-4034", "vendor": "Red Hat", "product": "Polkit", "name": "Red Hat Polkit Out-of-Bounds Read and Write Vulnerability", "date": "2022-06-27", "ransom": false, "due": "2022-07-18", "cvss": 7.8, "epss": 0.9492, "ms": false }, { "cve": "CVE-2022-29499", "vendor": "Mitel", "product": "MiVoice Connect", "name": "Mitel MiVoice Connect Data Validation Vulnerability", "date": "2022-06-27", "ransom": true, "due": "2022-07-18", "cvss": 9.8, "epss": 0.554, "ms": false }, { "cve": "CVE-2022-30190", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability", "date": "2022-06-14", "ransom": true, "due": "2022-07-05", "ms": true }, { "cve": "CVE-2016-2386", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver SQL Injection Vulnerability", "date": "2022-06-09", "ransom": false, "due": "2022-06-30", "cvss": 9.8, "epss": 0.7106, "ms": false }, { "cve": "CVE-2016-2388", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Information Disclosure Vulnerability", "date": "2022-06-09", "ransom": false, "due": "2022-06-30", "cvss": 5.3, "epss": 0.5155, "ms": false }, { "cve": "CVE-2021-38163", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Unrestricted File Upload Vulnerability", "date": "2022-06-09", "ransom": false, "due": "2022-06-30", "cvss": 8.8, "epss": 0.3602, "ms": false }, { "cve": "CVE-2006-2492", "vendor": "Microsoft", "product": "Word", "name": "Microsoft Word Malformed Object Pointer Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "ms": true }, { "cve": "CVE-2007-5659", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Buffer Overflow Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 7.8, "epss": 0.9422, "ms": false }, { "cve": "CVE-2008-0655", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Unspecified Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 8.8, "epss": 0.3684, "ms": false }, { "cve": "CVE-2009-0557", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Object Record Corruption Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "ms": true }, { "cve": "CVE-2009-0563", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Buffer Overflow Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "ms": true }, { "cve": "CVE-2009-1862", "vendor": "Adobe", "product": "Acrobat and Reader, Flash Player", "name": "Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 7.8, "epss": 0.2501, "ms": false }, { "cve": "CVE-2009-3953", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 8.8, "epss": 0.8386, "ms": false }, { "cve": "CVE-2009-4324", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Use-After-Free Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 7.8, "epss": 0.8181, "ms": false }, { "cve": "CVE-2010-1297", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Memory Corruption Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 7.8, "epss": 0.8236, "ms": false }, { "cve": "CVE-2010-2572", "vendor": "Microsoft", "product": "PowerPoint", "name": "Microsoft PowerPoint Buffer Overflow Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "ms": true }, { "cve": "CVE-2010-2883", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 7.3, "epss": 0.8248, "ms": false }, { "cve": "CVE-2011-0609", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Unspecified Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 7.8, "epss": 0.6682, "ms": false }, { "cve": "CVE-2011-2462", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 9.8, "epss": 0.8656, "ms": false }, { "cve": "CVE-2012-0151", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "ms": true }, { "cve": "CVE-2012-0754", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Memory Corruption Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 8.1, "epss": 0.9203, "ms": false }, { "cve": "CVE-2012-0767", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 6.1, "epss": 0.0666, "ms": false }, { "cve": "CVE-2012-1889", "vendor": "Microsoft", "product": "XML Core Services", "name": "Microsoft XML Core Services Memory Corruption Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "ms": true }, { "cve": "CVE-2012-4969", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "ms": true }, { "cve": "CVE-2012-5054", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Integer Overflow Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 8.8, "epss": 0.2119, "ms": false }, { "cve": "CVE-2013-1331", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Buffer Overflow Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "ms": true }, { "cve": "CVE-2016-1646", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Read Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 8.8, "epss": 0.4811, "ms": false }, { "cve": "CVE-2016-5198", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Memory Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 8.8, "epss": 0.3481, "ms": false }, { "cve": "CVE-2017-5030", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Memory Corruption Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 8.8, "epss": 0.416, "ms": false }, { "cve": "CVE-2017-5070", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 8.8, "epss": 0.3121, "ms": false }, { "cve": "CVE-2017-6862", "vendor": "NETGEAR", "product": "Multiple Devices", "name": "NETGEAR Multiple Devices Buffer Overflow Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 9.8, "epss": 0.427, "ms": false }, { "cve": "CVE-2018-17463", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Remote Code Execution Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 8.8, "epss": 0.8456, "ms": false }, { "cve": "CVE-2018-17480", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Write Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 8.8, "epss": 0.3429, "ms": false }, { "cve": "CVE-2018-4990", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Double Free Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 8.8, "epss": 0.3636, "ms": false }, { "cve": "CVE-2018-6065", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Integer Overflow Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 8.8, "epss": 0.603, "ms": false }, { "cve": "CVE-2019-15271", "vendor": "Cisco", "product": "RV Series Routers", "name": "Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 8.8, "epss": 0.0598, "ms": false }, { "cve": "CVE-2019-5825", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Write Vulnerability", "date": "2022-06-08", "ransom": false, "due": "2022-06-22", "cvss": 6.5, "epss": 0.5593, "ms": false }, { "cve": "CVE-2019-7192", "vendor": "QNAP", "product": "Photo Station", "name": "QNAP Photo Station Improper Access Control Vulnerability", "date": "2022-06-08", "ransom": true, "due": "2022-06-22", "cvss": 9.8, "epss": 0.8821, "ms": false }, { "cve": "CVE-2019-7193", "vendor": "QNAP", "product": "QTS", "name": "QNAP QTS Improper Input Validation Vulnerability", "date": "2022-06-08", "ransom": true, "due": "2022-06-22", "cvss": 9.8, "epss": 0.1437, "ms": false }, { "cve": "CVE-2019-7194", "vendor": "QNAP", "product": "Photo Station", "name": "QNAP Photo Station Path Traversal Vulnerability", "date": "2022-06-08", "ransom": true, "due": "2022-06-22", "cvss": 9.8, "epss": 0.8297, "ms": false }, { "cve": "CVE-2019-7195", "vendor": "QNAP", "product": "Photo Station", "name": "QNAP Photo Station Path Traversal Vulnerability", "date": "2022-06-08", "ransom": true, "due": "2022-06-22", "cvss": 9.8, "epss": 0.8968, "ms": false }, { "cve": "CVE-2022-26134", "vendor": "Atlassian", "product": "Confluence Server/Data Center", "name": "Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability", "date": "2022-06-02", "ransom": true, "due": "2022-06-06", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2010-0738", "vendor": "Red Hat", "product": "JBoss", "name": "Red Hat JBoss Authentication Bypass Vulnerability", "date": "2022-05-25", "ransom": true, "due": "2022-06-15", "cvss": 5.3, "epss": 0.7942, "ms": false }, { "cve": "CVE-2010-0840", "vendor": "Oracle", "product": "Java Runtime Environment (JRE)", "name": "Oracle JRE Unspecified Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "cvss": 9.8, "epss": 0.9632, "ms": false }, { "cve": "CVE-2010-1428", "vendor": "Red Hat", "product": "JBoss", "name": "Red Hat JBoss Information Disclosure Vulnerability", "date": "2022-05-25", "ransom": true, "due": "2022-06-15", "cvss": 7.5, "epss": 0.6231, "ms": false }, { "cve": "CVE-2012-1710", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Unspecified Vulnerability", "date": "2022-05-25", "ransom": true, "due": "2022-06-15", "cvss": 9.8, "epss": 0.1164, "ms": false }, { "cve": "CVE-2013-0074", "vendor": "Microsoft", "product": "Silverlight", "name": "Microsoft Silverlight Double Dereference Vulnerability", "date": "2022-05-25", "ransom": true, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2013-0422", "vendor": "Oracle", "product": "Java Runtime Environment (JRE)", "name": "Oracle JRE Remote Code Execution Vulnerability", "date": "2022-05-25", "ransom": true, "due": "2022-06-15", "cvss": 9.8, "epss": 0.9761, "ms": false }, { "cve": "CVE-2013-0431", "vendor": "Oracle", "product": "Java Runtime Environment (JRE)", "name": "Oracle JRE Sandbox Bypass Vulnerability", "date": "2022-05-25", "ransom": true, "due": "2022-06-15", "cvss": 5.3, "epss": 0.8999, "ms": false }, { "cve": "CVE-2013-2423", "vendor": "Oracle", "product": "Java Runtime Environment (JRE)", "name": "Oracle JRE Unspecified Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "cvss": 3.7, "epss": 0.8533, "ms": false }, { "cve": "CVE-2013-3896", "vendor": "Microsoft", "product": "Silverlight", "name": "Microsoft Silverlight Information Disclosure Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2013-3993", "vendor": "IBM", "product": "InfoSphere BigInsights", "name": "IBM InfoSphere BigInsights Invalid Input Vulnerability", "date": "2022-05-25", "ransom": true, "due": "2022-06-15", "cvss": 6.5, "epss": 0.0524, "ms": false }, { "cve": "CVE-2013-7331", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Information Disclosure Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2014-0546", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Sandbox Bypass Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "cvss": 9.8, "epss": 0.2233, "ms": false }, { "cve": "CVE-2014-2817", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Privilege Escalation Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2014-3153", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Privilege Escalation Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "cvss": 7.8, "epss": 0.3723, "ms": false }, { "cve": "CVE-2014-4077", "vendor": "Microsoft", "product": "Input Method Editor (IME) Japanese", "name": "Microsoft IME Japanese Privilege Escalation Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2014-4123", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Privilege Escalation Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2014-4148", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Remote Code Execution Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2014-8439", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Dereferenced Pointer Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "cvss": 8.8, "epss": 0.2001, "ms": false }, { "cve": "CVE-2015-0016", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows TS WebProxy Directory Traversal Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2015-0071", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer ASLR Bypass Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2015-0310", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player ASLR Bypass Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "cvss": 7.8, "epss": 0.1522, "ms": false }, { "cve": "CVE-2015-1671", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Remote Code Execution Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2015-1769", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Mount Manager Privilege Escalation Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2015-2360", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2015-2425", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2015-4495", "vendor": "Mozilla", "product": "Firefox", "name": "Mozilla Firefox Security Feature Bypass Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "cvss": 8.8, "epss": 0.6866, "ms": false }, { "cve": "CVE-2015-6175", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2015-8651", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Integer Overflow Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "cvss": 8.8, "epss": 0.6792, "ms": false }, { "cve": "CVE-2016-0034", "vendor": "Microsoft", "product": "Silverlight", "name": "Microsoft Silverlight Runtime Remote Code Execution Vulnerability", "date": "2022-05-25", "ransom": true, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2016-0984", "vendor": "Adobe", "product": "Flash Player and AIR", "name": "Adobe Flash Player and AIR Use-After-Free Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "cvss": 8.8, "epss": 0.5537, "ms": false }, { "cve": "CVE-2016-1010", "vendor": "Adobe", "product": "Flash Player and AIR", "name": "Adobe Flash Player and AIR Integer Overflow Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "cvss": 8.8, "epss": 0.1978, "ms": false }, { "cve": "CVE-2016-3393", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2016-7256", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Open Type Font Remote Code Execution Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "ms": true }, { "cve": "CVE-2019-3010", "vendor": "Oracle", "product": "Solaris", "name": "Oracle Solaris Privilege Escalation Vulnerability", "date": "2022-05-25", "ransom": false, "due": "2022-06-15", "cvss": 8.8, "epss": 0.134, "ms": false }, { "cve": "CVE-2016-0162", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Information Disclosure Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "ms": true }, { "cve": "CVE-2016-3298", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "ms": true }, { "cve": "CVE-2016-3351", "vendor": "Microsoft", "product": "Internet Explorer and Edge", "name": "Microsoft Internet Explorer and Edge Information Disclosure Vulnerability", "date": "2022-05-24", "ransom": true, "due": "2022-06-14", "ms": true }, { "cve": "CVE-2016-4655", "vendor": "Apple", "product": "iOS", "name": "Apple iOS Information Disclosure Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "cvss": 5.5, "epss": 0.3032, "ms": false }, { "cve": "CVE-2016-4656", "vendor": "Apple", "product": "iOS", "name": "Apple iOS Memory Corruption Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "cvss": 7.8, "epss": 0.2134, "ms": false }, { "cve": "CVE-2016-4657", "vendor": "Apple", "product": "iOS", "name": "Apple iOS Webkit Memory Corruption Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "cvss": 8.8, "epss": 0.6358, "ms": false }, { "cve": "CVE-2016-6366", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA)", "name": "Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "cvss": 8.8, "epss": 0.8757, "ms": false }, { "cve": "CVE-2016-6367", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA)", "name": "Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "cvss": 7.8, "epss": 0.2258, "ms": false }, { "cve": "CVE-2017-0005", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "ms": true }, { "cve": "CVE-2017-0022", "vendor": "Microsoft", "product": "XML Core Services", "name": "Microsoft XML Core Services Information Disclosure Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "ms": true }, { "cve": "CVE-2017-0147", "vendor": "Microsoft", "product": "SMBv1 server", "name": "Microsoft Windows SMBv1 Information Disclosure Vulnerability", "date": "2022-05-24", "ransom": true, "due": "2022-06-14", "ms": true }, { "cve": "CVE-2017-0149", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "ms": true }, { "cve": "CVE-2017-0210", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Privilege Escalation Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "ms": true }, { "cve": "CVE-2017-18362", "vendor": "Kaseya", "product": "Virtual System/Server Administrator (VSA)", "name": "Kaseya VSA SQL Injection Vulnerability", "date": "2022-05-24", "ransom": true, "due": "2022-06-14", "cvss": 9.8, "epss": 0.8671, "ms": false }, { "cve": "CVE-2017-8291", "vendor": "Artifex", "product": "Ghostscript", "name": "Artifex Ghostscript Type Confusion Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "cvss": 7.8, "epss": 0.9614, "ms": false }, { "cve": "CVE-2017-8543", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Search Remote Code Execution Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "ms": true }, { "cve": "CVE-2018-19943", "vendor": "QNAP", "product": "Network Attached Storage (NAS)", "name": "QNAP NAS File Station Cross-Site Scripting Vulnerability", "date": "2022-05-24", "ransom": true, "due": "2022-06-14", "cvss": 5.4, "epss": 0.1771, "ms": false }, { "cve": "CVE-2018-19949", "vendor": "QNAP", "product": "Network Attached Storage (NAS)", "name": "QNAP NAS File Station Command Injection Vulnerability", "date": "2022-05-24", "ransom": true, "due": "2022-06-14", "cvss": 9.8, "epss": 0.2445, "ms": false }, { "cve": "CVE-2018-19953", "vendor": "QNAP", "product": "Network Attached Storage (NAS)", "name": "QNAP NAS File Station Cross-Site Scripting Vulnerability", "date": "2022-05-24", "ransom": true, "due": "2022-06-14", "cvss": 6.1, "epss": 0.2389, "ms": false }, { "cve": "CVE-2018-8611", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "date": "2022-05-24", "ransom": false, "due": "2022-06-14", "ms": true }, { "cve": "CVE-2018-5002", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Stack-based Buffer Overflow Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "cvss": 7.8, "epss": 0.2535, "ms": false }, { "cve": "CVE-2018-8589", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "ms": true }, { "cve": "CVE-2019-0676", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Information Disclosure Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "ms": true }, { "cve": "CVE-2019-0703", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows SMB Information Disclosure Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "ms": true }, { "cve": "CVE-2019-0880", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "ms": true }, { "cve": "CVE-2019-1130", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability", "date": "2022-05-23", "ransom": true, "due": "2022-06-13", "ms": true }, { "cve": "CVE-2019-11707", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "name": "Mozilla Firefox and Thunderbird Type Confusion Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "cvss": 8.8, "epss": 0.3795, "ms": false }, { "cve": "CVE-2019-11708", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "name": "Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "cvss": 10, "epss": 0.5587, "ms": false }, { "cve": "CVE-2019-13720", "vendor": "Google", "product": "Chrome WebAudio", "name": "Google Chrome WebAudio Use-After-Free Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "cvss": 8.8, "epss": 0.4914, "ms": false }, { "cve": "CVE-2019-1385", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability", "date": "2022-05-23", "ransom": true, "due": "2022-06-13", "ms": true }, { "cve": "CVE-2019-18426", "vendor": "Meta Platforms", "product": "WhatsApp", "name": "WhatsApp Cross-Site Scripting Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "cvss": 8.2, "epss": 0.6786, "ms": false }, { "cve": "CVE-2019-5786", "vendor": "Google", "product": "Chrome Blink", "name": "Google Chrome Blink Use-After-Free Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "cvss": 6.5, "epss": 0.6154, "ms": false }, { "cve": "CVE-2019-7286", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "cvss": 7.8, "epss": 0.157, "ms": false }, { "cve": "CVE-2019-7287", "vendor": "Apple", "product": "iOS", "name": "Apple iOS Memory Corruption Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "cvss": 7.8, "epss": 0.0459, "ms": false }, { "cve": "CVE-2019-8720", "vendor": "WebKitGTK", "product": "WebKitGTK", "name": "WebKitGTK Memory Corruption Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "cvss": 8.8, "epss": 0.0154, "ms": false }, { "cve": "CVE-2020-0638", "vendor": "Microsoft", "product": "Update Notification Manager", "name": "Microsoft Update Notification Manager Privilege Escalation Vulnerability", "date": "2022-05-23", "ransom": true, "due": "2022-06-13", "ms": true }, { "cve": "CVE-2020-1027", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "ms": true }, { "cve": "CVE-2021-0920", "vendor": "Android", "product": "Kernel", "name": "Android Kernel Race Condition Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "cvss": 6.4, "epss": 0.0081, "ms": false }, { "cve": "CVE-2021-1048", "vendor": "Android", "product": "Kernel", "name": "Android Kernel Use-After-Free Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "cvss": 7.8, "epss": 0.0078, "ms": false }, { "cve": "CVE-2021-30883", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "cvss": 7.8, "epss": 0.1472, "ms": false }, { "cve": "CVE-2022-20821", "vendor": "Cisco", "product": "IOS XR", "name": "Cisco IOS XR Open Port Vulnerability", "date": "2022-05-23", "ransom": false, "due": "2022-06-13", "cvss": 6.5, "epss": 0.1176, "ms": false }, { "cve": "CVE-2022-22947", "vendor": "VMware", "product": "Spring Cloud Gateway", "name": "VMware Spring Cloud Gateway Code Injection Vulnerability", "date": "2022-05-16", "ransom": false, "due": "2022-06-06", "cvss": 10, "epss": 0.9825, "ms": false }, { "cve": "CVE-2022-30525", "vendor": "Zyxel", "product": "Multiple Firewalls", "name": "Zyxel Multiple Firewalls OS Command Injection Vulnerability", "date": "2022-05-16", "ransom": false, "due": "2022-06-06", "cvss": 9.8, "epss": 0.9994, "ms": false }, { "cve": "CVE-2022-1388", "vendor": "F5", "product": "BIG-IP", "name": "F5 BIG-IP Missing Authentication Vulnerability", "date": "2022-05-10", "ransom": true, "due": "2022-05-31", "cvss": 9.8, "epss": 0.9996, "ms": false }, { "cve": "CVE-2014-0160", "vendor": "OpenSSL", "product": "OpenSSL", "name": "OpenSSL Information Disclosure Vulnerability", "date": "2022-05-04", "ransom": false, "due": "2022-05-25", "cvss": 7.5, "epss": 1, "ms": false }, { "cve": "CVE-2014-0322", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "date": "2022-05-04", "ransom": false, "due": "2022-05-25", "ms": true }, { "cve": "CVE-2014-4113", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2022-05-04", "ransom": false, "due": "2022-05-25", "ms": true }, { "cve": "CVE-2019-8506", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Type Confusion Vulnerability", "date": "2022-05-04", "ransom": false, "due": "2022-05-25", "cvss": 8.8, "epss": 0.1811, "ms": false }, { "cve": "CVE-2021-1789", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Type Confusion Vulnerability", "date": "2022-05-04", "ransom": false, "due": "2022-05-25", "cvss": 8.8, "epss": 0.1322, "ms": false }, { "cve": "CVE-2019-1003029", "vendor": "Jenkins", "product": "Script Security Plugin", "name": "Jenkins Script Security Plugin Sandbox Bypass Vulnerability", "date": "2022-04-25", "ransom": false, "due": "2022-05-16", "cvss": 9.9, "epss": 0.7385, "ms": false }, { "cve": "CVE-2021-40450", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2022-04-25", "ransom": false, "due": "2022-05-16", "ms": true }, { "cve": "CVE-2021-41357", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2022-04-25", "ransom": false, "due": "2022-05-16", "ms": true }, { "cve": "CVE-2022-0847", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Privilege Escalation Vulnerability", "date": "2022-04-25", "ransom": false, "due": "2022-05-16", "cvss": 7.8, "epss": 0.8861, "ms": false }, { "cve": "CVE-2022-21919", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows User Profile Service Privilege Escalation Vulnerability", "date": "2022-04-25", "ransom": false, "due": "2022-05-16", "ms": true }, { "cve": "CVE-2022-26904", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows User Profile Service Privilege Escalation Vulnerability", "date": "2022-04-25", "ransom": false, "due": "2022-05-16", "ms": true }, { "cve": "CVE-2022-29464", "vendor": "WSO2", "product": "Multiple Products", "name": "WSO2 Multiple Products Unrestrictive Upload of File Vulnerability", "date": "2022-04-25", "ransom": true, "due": "2022-05-16", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2018-6882", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "date": "2022-04-19", "ransom": true, "due": "2022-05-10", "cvss": 6.1, "epss": 0.2523, "ms": false }, { "cve": "CVE-2019-3568", "vendor": "Meta Platforms", "product": "WhatsApp", "name": "WhatsApp VOIP Stack Buffer Overflow Vulnerability", "date": "2022-04-19", "ransom": false, "due": "2022-05-10", "cvss": 9.8, "epss": 0.3917, "ms": false }, { "cve": "CVE-2022-22718", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "date": "2022-04-19", "ransom": false, "due": "2022-05-10", "ms": true }, { "cve": "CVE-2007-3010", "vendor": "Alcatel", "product": "OmniPCX Enterprise", "name": "Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability", "date": "2022-04-15", "ransom": false, "due": "2022-05-06", "cvss": 9.8, "epss": 0.9741, "ms": false }, { "cve": "CVE-2010-5330", "vendor": "Ubiquiti", "product": "AirOS", "name": "Ubiquiti AirOS Command Injection Vulnerability", "date": "2022-04-15", "ransom": false, "due": "2022-05-06", "cvss": 9.8, "epss": 0.3464, "ms": false }, { "cve": "CVE-2014-0780", "vendor": "InduSoft", "product": "Web Studio", "name": "InduSoft Web Studio NTWebServer Directory Traversal Vulnerability", "date": "2022-04-15", "ransom": false, "due": "2022-05-06", "cvss": 9.8, "epss": 0.7455, "ms": false }, { "cve": "CVE-2016-4523", "vendor": "Trihedral", "product": "VTScada (formerly VTS)", "name": "Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability", "date": "2022-04-15", "ransom": false, "due": "2022-05-06", "cvss": 7.5, "epss": 0.3139, "ms": false }, { "cve": "CVE-2018-7841", "vendor": "Schneider Electric", "product": "U.motion Builder", "name": "Schneider Electric U.motion Builder SQL Injection Vulnerability", "date": "2022-04-15", "ransom": false, "due": "2022-05-06", "cvss": 9.8, "epss": 0.7268, "ms": false }, { "cve": "CVE-2019-16057", "vendor": "D-Link", "product": "DNS-320 Storage Device", "name": "D-Link DNS-320 Remote Code Execution Vulnerability", "date": "2022-04-15", "ransom": true, "due": "2022-05-06", "cvss": 9.8, "epss": 0.8721, "ms": false }, { "cve": "CVE-2019-3929", "vendor": "Crestron", "product": "Multiple Products", "name": "Crestron Multiple Products Command Injection Vulnerability", "date": "2022-04-15", "ransom": false, "due": "2022-05-06", "cvss": 9.8, "epss": 0.9895, "ms": false }, { "cve": "CVE-2022-1364", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2022-04-15", "ransom": false, "due": "2022-05-06", "cvss": 8.8, "epss": 0.1372, "ms": false }, { "cve": "CVE-2022-22960", "vendor": "VMware", "product": "Multiple Products", "name": "VMware Multiple Products Privilege Escalation Vulnerability", "date": "2022-04-15", "ransom": false, "due": "2022-05-06", "cvss": 7.8, "epss": 0.3639, "ms": false }, { "cve": "CVE-2022-22954", "vendor": "VMware", "product": "Workspace ONE Access and Identity Manager", "name": "VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability", "date": "2022-04-14", "ransom": true, "due": "2022-05-05", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2014-9163", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Stack-Based Buffer Overflow Vulnerability", "date": "2022-04-13", "ransom": false, "due": "2022-05-04", "cvss": 7.8, "epss": 0.2036, "ms": false }, { "cve": "CVE-2015-0311", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Remote Code Execution Vulnerability", "date": "2022-04-13", "ransom": false, "due": "2022-05-04", "cvss": 9.8, "epss": 0.8582, "ms": false }, { "cve": "CVE-2015-0313", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-04-13", "ransom": false, "due": "2022-05-04", "cvss": 9.8, "epss": 0.9568, "ms": false }, { "cve": "CVE-2015-2502", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "date": "2022-04-13", "ransom": false, "due": "2022-05-04", "ms": true }, { "cve": "CVE-2015-3113", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Heap-Based Buffer Overflow Vulnerability", "date": "2022-04-13", "ransom": false, "due": "2022-05-04", "cvss": 9.8, "epss": 0.9994, "ms": false }, { "cve": "CVE-2015-5122", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-04-13", "ransom": false, "due": "2022-05-04", "cvss": 9.8, "epss": 0.9369, "ms": false }, { "cve": "CVE-2015-5123", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-04-13", "ransom": false, "due": "2022-05-04", "cvss": 9.8, "epss": 0.1849, "ms": false }, { "cve": "CVE-2018-20753", "vendor": "Kaseya", "product": "Virtual System/Server Administrator (VSA)", "name": "Kaseya VSA Remote Code Execution Vulnerability", "date": "2022-04-13", "ransom": true, "due": "2022-05-04", "cvss": 9.8, "epss": 0.2934, "ms": false }, { "cve": "CVE-2018-7602", "vendor": "Drupal", "product": "Core", "name": "Drupal Core Remote Code Execution Vulnerability", "date": "2022-04-13", "ransom": true, "due": "2022-05-04", "cvss": 9.8, "epss": 0.9924, "ms": false }, { "cve": "CVE-2022-24521", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows CLFS Driver Privilege Escalation Vulnerability", "date": "2022-04-13", "ransom": true, "due": "2022-05-04", "ms": true }, { "cve": "CVE-2017-11317", "vendor": "Telerik", "product": "User Interface (UI) for ASP.NET AJAX", "name": "Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability", "date": "2022-04-11", "ransom": false, "due": "2022-05-02", "cvss": 9.8, "epss": 0.8348, "ms": false }, { "cve": "CVE-2020-2509", "vendor": "QNAP", "product": "QNAP Network-Attached Storage (NAS)", "name": "QNAP Network-Attached Storage (NAS) Command Injection Vulnerability", "date": "2022-04-11", "ransom": false, "due": "2022-05-02", "cvss": 9.8, "epss": 0.3338, "ms": false }, { "cve": "CVE-2021-22600", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Privilege Escalation Vulnerability", "date": "2022-04-11", "ransom": false, "due": "2022-05-02", "cvss": 7, "epss": 0.0587, "ms": false }, { "cve": "CVE-2021-27852", "vendor": "Checkbox", "product": "Checkbox Survey", "name": "Checkbox Survey Deserialization of Untrusted Data Vulnerability", "date": "2022-04-11", "ransom": false, "due": "2022-05-02", "cvss": 9.8, "epss": 0.3195, "ms": false }, { "cve": "CVE-2021-39793", "vendor": "Google", "product": "Pixel", "name": "Google Pixel Out-of-Bounds Write Vulnerability", "date": "2022-04-11", "ransom": false, "due": "2022-05-02", "cvss": 7.8, "epss": 0.0074, "ms": false }, { "cve": "CVE-2021-42278", "vendor": "Microsoft", "product": "Active Directory", "name": "Microsoft Active Directory Domain Services Privilege Escalation Vulnerability", "date": "2022-04-11", "ransom": true, "due": "2022-05-02", "ms": true }, { "cve": "CVE-2021-42287", "vendor": "Microsoft", "product": "Active Directory", "name": "Microsoft Active Directory Domain Services Privilege Escalation Vulnerability", "date": "2022-04-11", "ransom": true, "due": "2022-05-02", "ms": true }, { "cve": "CVE-2022-23176", "vendor": "WatchGuard", "product": "Firebox and XTM", "name": "WatchGuard Firebox and XTM Privilege Escalation Vulnerability", "date": "2022-04-11", "ransom": false, "due": "2022-05-02", "cvss": 8.8, "epss": 0.1279, "ms": false }, { "cve": "CVE-2017-0148", "vendor": "Microsoft", "product": "SMBv1 server", "name": "Microsoft SMBv1 Server Remote Code Execution Vulnerability", "date": "2022-04-06", "ransom": true, "due": "2022-04-27", "ms": true }, { "cve": "CVE-2021-31166", "vendor": "Microsoft", "product": "HTTP Protocol Stack", "name": "Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability", "date": "2022-04-06", "ransom": false, "due": "2022-04-27", "ms": true }, { "cve": "CVE-2021-3156", "vendor": "Sudo", "product": "Sudo", "name": "Sudo Heap-Based Buffer Overflow Vulnerability", "date": "2022-04-06", "ransom": false, "due": "2022-04-27", "cvss": 7.8, "epss": 0.9929, "ms": false }, { "cve": "CVE-2021-45382", "vendor": "D-Link", "product": "Multiple Routers", "name": "D-Link Multiple Routers Remote Code Execution Vulnerability", "date": "2022-04-04", "ransom": false, "due": "2022-04-25", "cvss": 9.8, "epss": 0.9764, "ms": false }, { "cve": "CVE-2022-22674", "vendor": "Apple", "product": "macOS", "name": "Apple macOS Out-of-Bounds Read Vulnerability", "date": "2022-04-04", "ransom": false, "due": "2022-04-25", "cvss": 5.5, "epss": 0.0113, "ms": false }, { "cve": "CVE-2022-22675", "vendor": "Apple", "product": "macOS", "name": "Apple macOS Out-of-Bounds Write Vulnerability", "date": "2022-04-04", "ransom": false, "due": "2022-04-25", "cvss": 7.8, "epss": 0.1264, "ms": false }, { "cve": "CVE-2022-22965", "vendor": "VMware", "product": "Spring Framework", "name": "Spring Framework JDK 9+ Remote Code Execution Vulnerability", "date": "2022-04-04", "ransom": false, "due": "2022-04-25", "cvss": 9.8, "epss": 0.9968, "ms": false }, { "cve": "CVE-2018-10561", "vendor": "Dasan", "product": "Gigabit Passive Optical Network (GPON) Routers", "name": "Dasan GPON Routers Authentication Bypass Vulnerability", "date": "2022-03-31", "ransom": false, "due": "2022-04-21", "cvss": 9.8, "epss": 0.9237, "ms": false }, { "cve": "CVE-2018-10562", "vendor": "Dasan", "product": "Gigabit Passive Optical Network (GPON) Routers", "name": "Dasan GPON Routers Command Injection Vulnerability", "date": "2022-03-31", "ransom": true, "due": "2022-04-21", "cvss": 9.8, "epss": 0.9994, "ms": false }, { "cve": "CVE-2021-21551", "vendor": "Dell", "product": "dbutil Driver", "name": "Dell dbutil Driver Insufficient Access Control Vulnerability", "date": "2022-03-31", "ransom": false, "due": "2022-04-21", "cvss": 7.8, "epss": 0.5312, "ms": false }, { "cve": "CVE-2021-28799", "vendor": "QNAP", "product": "Network Attached Storage (NAS)", "name": "QNAP NAS Improper Authorization Vulnerability", "date": "2022-03-31", "ransom": true, "due": "2022-04-21", "cvss": 9.8, "epss": 0.7825, "ms": false }, { "cve": "CVE-2021-34484", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows User Profile Service Privilege Escalation Vulnerability", "date": "2022-03-31", "ransom": false, "due": "2022-04-21", "ms": true }, { "cve": "CVE-2022-1040", "vendor": "Sophos", "product": "Firewall", "name": "Sophos Firewall Authentication Bypass Vulnerability", "date": "2022-03-31", "ransom": false, "due": "2022-04-21", "cvss": 9.8, "epss": 0.998, "ms": false }, { "cve": "CVE-2022-26871", "vendor": "Trend Micro", "product": "Apex Central", "name": "Trend Micro Apex Central Arbitrary File Upload Vulnerability", "date": "2022-03-31", "ransom": false, "due": "2022-04-21", "cvss": 9.8, "epss": 0.1963, "ms": false }, { "cve": "CVE-2010-4398", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-21", "ms": true }, { "cve": "CVE-2011-2005", "vendor": "Microsoft", "product": "Ancillary Function Driver (afd.sys)", "name": "Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2012-0518", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Unspecified Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "cvss": 4.7, "epss": 0.0466, "ms": false }, { "cve": "CVE-2012-2034", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Memory Corruption Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "cvss": 7.5, "epss": 0.078, "ms": false }, { "cve": "CVE-2012-2539", "vendor": "Microsoft", "product": "Word", "name": "Microsoft Word Remote Code Execution Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2012-5076", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Sandbox Bypass Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "cvss": 9.8, "epss": 0.9101, "ms": false }, { "cve": "CVE-2013-1690", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "name": "Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "cvss": 8.8, "epss": 0.6902, "ms": false }, { "cve": "CVE-2013-2465", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Unspecified Vulnerability", "date": "2022-03-28", "ransom": true, "due": "2022-04-18", "cvss": 9.8, "epss": 0.987, "ms": false }, { "cve": "CVE-2013-2551", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "date": "2022-03-28", "ransom": true, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2013-2729", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "cvss": 9.8, "epss": 0.6655, "ms": false }, { "cve": "CVE-2013-3660", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2015-1770", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Uninitialized Memory Use Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2015-2419", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2015-2426", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2016-0040", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2016-0151", "vendor": "Microsoft", "product": "Client-Server Run-time Subsystem (CSRSS)", "name": "Microsoft Windows CSRSS Security Feature Bypass Vulnerability", "date": "2022-03-28", "ransom": true, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2016-0189", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2016-7200", "vendor": "Microsoft", "product": "Edge", "name": "Microsoft Edge Memory Corruption Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2016-7201", "vendor": "Microsoft", "product": "Edge", "name": "Microsoft Edge Memory Corruption Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2017-0037", "vendor": "Microsoft", "product": "Edge and Internet Explorer", "name": "Microsoft Edge and Internet Explorer Type Confusion Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2017-0059", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Information Disclosure Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2017-0213", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "date": "2022-03-28", "ransom": true, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2018-8405", "vendor": "Microsoft", "product": "DirectX Graphics Kernel (DXGKRNL)", "name": "Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability", "date": "2022-03-28", "ransom": true, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2018-8406", "vendor": "Microsoft", "product": "DirectX Graphics Kernel (DXGKRNL)", "name": "Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability", "date": "2022-03-28", "ransom": true, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2018-8440", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "date": "2022-03-28", "ransom": true, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2019-7483", "vendor": "SonicWall", "product": "SMA100", "name": "SonicWall SMA100 Directory Traversal Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "cvss": 7.5, "epss": 0.0398, "ms": false }, { "cve": "CVE-2021-20028", "vendor": "SonicWall", "product": "Secure Remote Access (SRA)", "name": "SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability", "date": "2022-03-28", "ransom": true, "due": "2022-04-18", "cvss": 9.8, "epss": 0.2987, "ms": false }, { "cve": "CVE-2021-26085", "vendor": "Atlassian", "product": "Confluence Server", "name": "Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability", "date": "2022-03-28", "ransom": true, "due": "2022-04-18", "cvss": 5.3, "epss": 0.9994, "ms": false }, { "cve": "CVE-2021-34486", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Event Tracing Privilege Escalation Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2021-38646", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability", "date": "2022-03-28", "ransom": true, "due": "2022-04-18", "ms": true }, { "cve": "CVE-2022-0543", "vendor": "Redis", "product": "Debian-specific Redis Servers", "name": "Debian-specific Redis Server Lua Sandbox Escape Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "cvss": 10, "epss": 0.9928, "ms": false }, { "cve": "CVE-2022-1096", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2022-03-28", "ransom": false, "due": "2022-04-18", "cvss": 8.8, "epss": 0.2349, "ms": false }, { "cve": "CVE-2005-2773", "vendor": "Hewlett Packard (HP)", "product": "OpenView Network Node Manager", "name": "HP OpenView Network Node Manager Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.7409, "ms": false }, { "cve": "CVE-2009-0927", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 8.8, "epss": 0.9663, "ms": false }, { "cve": "CVE-2009-1151", "vendor": "phpMyAdmin", "product": "phpMyAdmin", "name": "phpMyAdmin Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9544, "ms": false }, { "cve": "CVE-2009-2055", "vendor": "Cisco", "product": "IOS XR", "name": "Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 5.9, "epss": 0.0333, "ms": false }, { "cve": "CVE-2010-2861", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": true, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9972, "ms": false }, { "cve": "CVE-2010-3035", "vendor": "Cisco", "product": "IOS XR", "name": "Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 7.5, "epss": 0.0556, "ms": false }, { "cve": "CVE-2010-4344", "vendor": "Exim", "product": "Exim", "name": "Exim Heap-Based Buffer Overflow Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.719, "ms": false }, { "cve": "CVE-2010-4345", "vendor": "Exim", "product": "Exim", "name": "Exim Privilege Escalation Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 7.8, "epss": 0.181, "ms": false }, { "cve": "CVE-2012-1823", "vendor": "PHP", "product": "PHP", "name": "PHP-CGI Query String Parameter Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2013-2251", "vendor": "Apache", "product": "Struts", "name": "Apache Struts Improper Input Validation Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2013-4810", "vendor": "Hewlett Packard (HP)", "product": "ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management", "name": "HP Multiple Products Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.79, "ms": false }, { "cve": "CVE-2013-5223", "vendor": "D-Link", "product": "DSL-2760U", "name": "D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 5.4, "epss": 0.3357, "ms": false }, { "cve": "CVE-2014-0130", "vendor": "Rails", "product": "Ruby on Rails", "name": "Ruby on Rails Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 7.5, "epss": 0.537, "ms": false }, { "cve": "CVE-2014-3120", "vendor": "Elastic", "product": "Elasticsearch", "name": "Elasticsearch Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 8.1, "epss": 0.8856, "ms": false }, { "cve": "CVE-2014-6287", "vendor": "Rejetto", "product": "HTTP File Server (HFS)", "name": "Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9932, "ms": false }, { "cve": "CVE-2014-6324", "vendor": "Microsoft", "product": "Kerberos Key Distribution Center (KDC)", "name": "Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "ms": true }, { "cve": "CVE-2014-6332", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "ms": true }, { "cve": "CVE-2015-0666", "vendor": "Cisco", "product": "Prime Data Center Network Manager (DCNM)", "name": "Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 7.5, "epss": 0.4038, "ms": false }, { "cve": "CVE-2015-1187", "vendor": "D-Link and TRENDnet", "product": "Multiple Devices", "name": "D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.8286, "ms": false }, { "cve": "CVE-2015-1427", "vendor": "Elastic", "product": "Elasticsearch", "name": "Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9991, "ms": false }, { "cve": "CVE-2015-3035", "vendor": "TP-Link", "product": "Multiple Archer Devices", "name": "TP-Link Multiple Archer Devices Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 7.5, "epss": 0.8367, "ms": false }, { "cve": "CVE-2015-4068", "vendor": "Arcserve", "product": "Unified Data Protection (UDP)", "name": "Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.1, "epss": 0.6364, "ms": false }, { "cve": "CVE-2016-0752", "vendor": "Rails", "product": "Ruby on Rails", "name": "Ruby on Rails Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 7.5, "epss": 0.9554, "ms": false }, { "cve": "CVE-2016-10174", "vendor": "NETGEAR", "product": "WNR2000v5 Router", "name": "NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.8345, "ms": false }, { "cve": "CVE-2016-11021", "vendor": "D-Link", "product": "DCS-930L Devices", "name": "D-Link DCS-930L Devices OS Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 7.2, "epss": 0.6887, "ms": false }, { "cve": "CVE-2016-1555", "vendor": "NETGEAR", "product": "Wireless Access Point (WAP) Devices", "name": "NETGEAR Multiple WAP Devices Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9832, "ms": false }, { "cve": "CVE-2016-4171", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.2021, "ms": false }, { "cve": "CVE-2016-7892", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 8.8, "epss": 0.1879, "ms": false }, { "cve": "CVE-2017-0146", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows SMB Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": true, "due": "2022-04-15", "ms": true }, { "cve": "CVE-2017-12615", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat on Windows Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": true, "due": "2022-04-15", "cvss": 8.1, "epss": 0.9961, "ms": false }, { "cve": "CVE-2017-12617", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 8.1, "epss": 0.9999, "ms": false }, { "cve": "CVE-2017-3881", "vendor": "Cisco", "product": "IOS and IOS XE", "name": "Cisco IOS and IOS XE Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9898, "ms": false }, { "cve": "CVE-2017-6316", "vendor": "Citrix", "product": "NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server", "name": "Citrix Multiple Products Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.726, "ms": false }, { "cve": "CVE-2017-6334", "vendor": "NETGEAR", "product": "DGN2200 Devices", "name": "NETGEAR DGN2200 Devices OS Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 8.8, "epss": 0.722, "ms": false }, { "cve": "CVE-2018-0125", "vendor": "Cisco", "product": "VPN Routers", "name": "Cisco VPN Routers Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.5519, "ms": false }, { "cve": "CVE-2018-0147", "vendor": "Cisco", "product": "Secure Access Control System (ACS)", "name": "Cisco Secure Access Control System Java Deserialization Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.1833, "ms": false }, { "cve": "CVE-2018-11138", "vendor": "Quest", "product": "KACE System Management Appliance", "name": "Quest KACE System Management Appliance Remote Command Execution Vulnerability", "date": "2022-03-25", "ransom": true, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9178, "ms": false }, { "cve": "CVE-2018-1273", "vendor": "VMware Tanzu", "product": "Spring Data Commons", "name": "VMware Tanzu Spring Data Commons Property Binder Vulnerability", "date": "2022-03-25", "ransom": true, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9565, "ms": false }, { "cve": "CVE-2018-14839", "vendor": "LG", "product": "N1A1 NAS", "name": "LG N1A1 NAS Remote Command Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.8935, "ms": false }, { "cve": "CVE-2018-6961", "vendor": "VMware", "product": "SD-WAN Edge", "name": "VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 8.1, "epss": 0.8643, "ms": false }, { "cve": "CVE-2018-8373", "vendor": "Microsoft", "product": "Internet Explorer Scripting Engine", "name": "Microsoft Scripting Engine Memory Corruption Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "ms": true }, { "cve": "CVE-2018-8414", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Shell Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "ms": true }, { "cve": "CVE-2019-0903", "vendor": "Microsoft", "product": "Graphics Device Interface (GDI)", "name": "Microsoft GDI Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "ms": true }, { "cve": "CVE-2019-1003030", "vendor": "Jenkins", "product": "Matrix Project Plugin", "name": "Jenkins Matrix Project Plugin Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.9, "epss": 0.7559, "ms": false }, { "cve": "CVE-2019-10068", "vendor": "Kentico", "product": "Xperience", "name": "Kentico Xperience Deserialization of Untrusted Data Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9603, "ms": false }, { "cve": "CVE-2019-11043", "vendor": "PHP", "product": "FastCGI Process Manager (FPM)", "name": "PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability", "date": "2022-03-25", "ransom": true, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9941, "ms": false }, { "cve": "CVE-2019-12989", "vendor": "Citrix", "product": "SD-WAN and NetScaler", "name": "Citrix SD-WAN and NetScaler SQL Injection Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9413, "ms": false }, { "cve": "CVE-2019-12991", "vendor": "Citrix", "product": "SD-WAN and NetScaler", "name": "Citrix SD-WAN and NetScaler Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 8.8, "epss": 0.7405, "ms": false }, { "cve": "CVE-2019-15107", "vendor": "Webmin", "product": "Webmin", "name": "Webmin Command Injection Vulnerability", "date": "2022-03-25", "ransom": true, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9977, "ms": false }, { "cve": "CVE-2019-16920", "vendor": "D-Link", "product": "Multiple Routers", "name": "D-Link Multiple Routers Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2019-2616", "vendor": "Oracle", "product": "BI Publisher (Formerly XML Publisher)", "name": "Oracle BI Publisher Unauthorized Access Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 7.2, "epss": 0.9218, "ms": false }, { "cve": "CVE-2019-6340", "vendor": "Drupal", "product": "Core", "name": "Drupal Core Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 8.1, "epss": 0.9202, "ms": false }, { "cve": "CVE-2020-1631", "vendor": "Juniper", "product": "Junos OS", "name": "Juniper Junos OS Path Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.0473, "ms": false }, { "cve": "CVE-2020-1956", "vendor": "Apache", "product": "Kylin", "name": "Apache Kylin OS Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 8.8, "epss": 0.9734, "ms": false }, { "cve": "CVE-2020-2021", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "date": "2022-03-25", "ransom": true, "due": "2022-04-15", "cvss": 10, "epss": 0.0436, "ms": false }, { "cve": "CVE-2020-2506", "vendor": "QNAP Systems", "product": "Helpdesk", "name": "QNAP Helpdesk Improper Access Control Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.0198, "ms": false }, { "cve": "CVE-2020-25223", "vendor": "Sophos", "product": "SG UTM", "name": "Sophos SG UTM Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9669, "ms": false }, { "cve": "CVE-2020-5410", "vendor": "VMware Tanzu", "product": "Spring Cloud Configuration (Config) Server", "name": "VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 7.5, "epss": 0.9559, "ms": false }, { "cve": "CVE-2020-7247", "vendor": "OpenBSD", "product": "OpenSMTPD", "name": "OpenSMTPD Remote Code Execution Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9895, "ms": false }, { "cve": "CVE-2020-9054", "vendor": "Zyxel", "product": "Multiple Network-Attached Storage (NAS) Devices", "name": "Zyxel Multiple NAS Devices OS Command Injection Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.9999, "ms": false }, { "cve": "CVE-2020-9377", "vendor": "D-Link", "product": "DIR-610 Devices", "name": "D-Link DIR-610 Devices Remote Command Execution", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 8.8, "epss": 0.2134, "ms": false }, { "cve": "CVE-2021-22941", "vendor": "Citrix", "product": "ShareFile", "name": "Citrix ShareFile Improper Access Control Vulnerability", "date": "2022-03-25", "ransom": true, "due": "2022-04-15", "cvss": 9.8, "epss": 0.5359, "ms": false }, { "cve": "CVE-2021-42237", "vendor": "Sitecore", "product": "XP", "name": "Sitecore XP Remote Command Execution Vulnerability", "date": "2022-03-25", "ransom": true, "due": "2022-04-15", "cvss": 9.8, "epss": 0.979, "ms": false }, { "cve": "CVE-2022-21999", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "date": "2022-03-25", "ransom": true, "due": "2022-04-15", "ms": true }, { "cve": "CVE-2022-26143", "vendor": "Mitel", "product": "MiCollab, MiVoice Business Express", "name": "MiCollab, MiVoice Business Express Access Control Vulnerability", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.8721, "ms": false }, { "cve": "CVE-2022-26318", "vendor": "WatchGuard", "product": "Firebox and XTM Appliances", "name": "WatchGuard Firebox and XTM Appliances Arbitrary Code Execution", "date": "2022-03-25", "ransom": false, "due": "2022-04-15", "cvss": 9.8, "epss": 0.7816, "ms": false }, { "cve": "CVE-2015-2546", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Memory Corruption Vulnerability", "date": "2022-03-15", "ransom": true, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2016-3309", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "date": "2022-03-15", "ransom": true, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2017-0101", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Transaction Manager Privilege Escalation Vulnerability", "date": "2022-03-15", "ransom": true, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2018-8120", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2022-03-15", "ransom": true, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2019-0543", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "date": "2022-03-15", "ransom": true, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2019-0841", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability", "date": "2022-03-15", "ransom": true, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2019-1064", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability", "date": "2022-03-15", "ransom": true, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2019-1069", "vendor": "Microsoft", "product": "Task Scheduler", "name": "Microsoft Task Scheduler Privilege Escalation Vulnerability", "date": "2022-03-15", "ransom": true, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2019-1129", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability", "date": "2022-03-15", "ransom": true, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2019-1132", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2022-03-15", "ransom": false, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2019-1253", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability", "date": "2022-03-15", "ransom": true, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2019-1315", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability", "date": "2022-03-15", "ransom": true, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2019-1322", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "date": "2022-03-15", "ransom": true, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2019-1405", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability", "date": "2022-03-15", "ransom": true, "due": "2022-04-05", "ms": true }, { "cve": "CVE-2020-5135", "vendor": "SonicWall", "product": "SonicOS", "name": "SonicWall SonicOS Buffer Overflow Vulnerability", "date": "2022-03-15", "ransom": false, "due": "2022-04-05", "cvss": 9.8, "epss": 0.2456, "ms": false }, { "cve": "CVE-2009-3960", "vendor": "Adobe", "product": "BlazeDS", "name": "Adobe BlazeDS Information Disclosure Vulnerability", "date": "2022-03-07", "ransom": true, "due": "2022-09-07", "cvss": 6.5, "epss": 0.9001, "ms": false }, { "cve": "CVE-2013-0625", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Authentication Bypass Vulnerability", "date": "2022-03-07", "ransom": false, "due": "2022-09-07", "cvss": 9.8, "epss": 0.938, "ms": false }, { "cve": "CVE-2013-0629", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Directory Traversal Vulnerability", "date": "2022-03-07", "ransom": false, "due": "2022-09-07", "cvss": 7.5, "epss": 0.659, "ms": false }, { "cve": "CVE-2013-0631", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Information Disclosure Vulnerability", "date": "2022-03-07", "ransom": false, "due": "2022-09-07", "cvss": 7.5, "epss": 0.6587, "ms": false }, { "cve": "CVE-2016-6277", "vendor": "NETGEAR", "product": "Multiple Routers", "name": "NETGEAR Multiple Routers Remote Code Execution Vulnerability", "date": "2022-03-07", "ransom": false, "due": "2022-09-07", "cvss": 8.8, "epss": 0.9978, "ms": false }, { "cve": "CVE-2017-6077", "vendor": "NETGEAR", "product": "Wireless Router DGN2200", "name": "NETGEAR DGN2200 Remote Code Execution Vulnerability", "date": "2022-03-07", "ransom": false, "due": "2022-09-07", "cvss": 9.8, "epss": 0.682, "ms": false }, { "cve": "CVE-2019-11581", "vendor": "Atlassian", "product": "Jira Server and Data Center", "name": "Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability", "date": "2022-03-07", "ransom": false, "due": "2022-09-07", "cvss": 9.8, "epss": 0.8462, "ms": false }, { "cve": "CVE-2020-8218", "vendor": "Pulse Secure", "product": "Pulse Connect Secure", "name": "Pulse Connect Secure Code Injection Vulnerability", "date": "2022-03-07", "ransom": false, "due": "2022-09-07", "cvss": 7.2, "epss": 0.3225, "ms": false }, { "cve": "CVE-2021-21973", "vendor": "VMware", "product": "vCenter Server and Cloud Foundation", "name": "VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability", "date": "2022-03-07", "ransom": false, "due": "2022-03-21", "cvss": 5.3, "epss": 0.8801, "ms": false }, { "cve": "CVE-2022-26485", "vendor": "Mozilla", "product": "Firefox", "name": "Mozilla Firefox Use-After-Free Vulnerability", "date": "2022-03-07", "ransom": false, "due": "2022-03-21", "cvss": 8.8, "epss": 0.138, "ms": false }, { "cve": "CVE-2022-26486", "vendor": "Mozilla", "product": "Firefox", "name": "Mozilla Firefox Use-After-Free Vulnerability", "date": "2022-03-07", "ransom": false, "due": "2022-03-21", "cvss": 9.6, "epss": 0.0235, "ms": false }, { "cve": "CVE-2002-0367", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2004-0210", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2008-2992", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Reader and Acrobat Input Validation Vulnerability", "date": "2022-03-03", "ransom": true, "due": "2022-03-24", "cvss": 7.8, "epss": 0.9848, "ms": false }, { "cve": "CVE-2008-3431", "vendor": "Oracle", "product": "VirtualBox", "name": "Oracle VirtualBox Insufficient Input Validation Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 8.8, "epss": 0.0693, "ms": false }, { "cve": "CVE-2009-1123", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Improper Input Validation Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2009-3129", "vendor": "Microsoft", "product": "Excel", "name": "Microsoft Excel Featheader Record Memory Corruption Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2010-0188", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": true, "due": "2022-03-24", "cvss": 7.8, "epss": 0.8825, "ms": false }, { "cve": "CVE-2010-0232", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Exception Handler Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2010-3333", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Stack-based Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2011-0611", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 8.8, "epss": 0.942, "ms": false }, { "cve": "CVE-2011-1889", "vendor": "Microsoft", "product": "Forefront Threat Management Gateway (TMG)", "name": "Microsoft Forefront TMG Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2011-3544", "vendor": "Oracle", "product": "Java SE JDK and JRE", "name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 9.8, "epss": 0.9671, "ms": false }, { "cve": "CVE-2012-0507", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": true, "due": "2022-03-24", "cvss": 9.8, "epss": 0.9811, "ms": false }, { "cve": "CVE-2012-1535", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 7.8, "epss": 0.7038, "ms": false }, { "cve": "CVE-2012-1723", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": true, "due": "2022-03-24", "cvss": 9.8, "epss": 0.9369, "ms": false }, { "cve": "CVE-2012-1856", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2012-4681", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": true, "due": "2022-03-24", "cvss": 9.8, "epss": 0.9854, "ms": false }, { "cve": "CVE-2013-0632", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Authentication Bypass Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 9.8, "epss": 0.9369, "ms": false }, { "cve": "CVE-2013-0640", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Memory Corruption Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 7.8, "epss": 0.8698, "ms": false }, { "cve": "CVE-2013-0641", "vendor": "Adobe", "product": "Reader", "name": "Adobe Reader Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 7.8, "epss": 0.3245, "ms": false }, { "cve": "CVE-2013-1347", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2013-1675", "vendor": "Mozilla", "product": "Firefox", "name": "Mozilla Firefox Information Disclosure Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 6.5, "epss": 0.067, "ms": false }, { "cve": "CVE-2013-3346", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Memory Corruption Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 9.8, "epss": 0.7858, "ms": false }, { "cve": "CVE-2013-3897", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2013-5065", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2014-0496", "vendor": "Adobe", "product": "Reader and Acrobat", "name": "Adobe Reader and Acrobat Use-After-Free Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 8.8, "epss": 0.4024, "ms": false }, { "cve": "CVE-2014-4114", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2015-1642", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Memory Corruption Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2015-1701", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2022-03-03", "ransom": true, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2015-2387", "vendor": "Microsoft", "product": "ATM Font Driver", "name": "Microsoft ATM Font Driver Privilege Escalation Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2015-2424", "vendor": "Microsoft", "product": "PowerPoint", "name": "Microsoft PowerPoint Memory Corruption Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2015-2545", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Malformed EPS File Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2015-2590", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 9.8, "epss": 0.2547, "ms": false }, { "cve": "CVE-2015-3043", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Memory Corruption Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 9.8, "epss": 0.7445, "ms": false }, { "cve": "CVE-2015-4902", "vendor": "Oracle", "product": "Java SE", "name": "Oracle Java SE Integrity Check Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 5.3, "epss": 0.1335, "ms": false }, { "cve": "CVE-2015-5119", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 9.8, "epss": 0.9934, "ms": false }, { "cve": "CVE-2015-7645", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": true, "due": "2022-03-24", "cvss": 7.8, "epss": 0.684, "ms": false }, { "cve": "CVE-2016-0099", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability", "date": "2022-03-03", "ransom": true, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2016-1019", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": true, "due": "2022-03-24", "cvss": 9.8, "epss": 0.2249, "ms": false }, { "cve": "CVE-2016-4117", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Arbitrary Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 9.8, "epss": 0.9435, "ms": false }, { "cve": "CVE-2016-5195", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Race Condition Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 7, "epss": 0.8301, "ms": false }, { "cve": "CVE-2016-7193", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Memory Corruption Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2016-7262", "vendor": "Microsoft", "product": "Excel", "name": "Microsoft Office Security Feature Bypass Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2016-7855", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 8.8, "epss": 0.252, "ms": false }, { "cve": "CVE-2016-8562", "vendor": "Siemens", "product": "SIMATIC CP", "name": "Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 7.5, "epss": 0.0362, "ms": false }, { "cve": "CVE-2017-0001", "vendor": "Microsoft", "product": "Graphics Device Interface (GDI)", "name": "Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2017-0261", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Use-After-Free Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2017-11292", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Type Confusion Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 8.8, "epss": 0.121, "ms": false }, { "cve": "CVE-2017-11826", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2017-12231", "vendor": "Cisco", "product": "IOS software", "name": "Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 7.5, "epss": 0.0713, "ms": false }, { "cve": "CVE-2017-12232", "vendor": "Cisco", "product": "IOS software", "name": "Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 6.5, "epss": 0.0217, "ms": false }, { "cve": "CVE-2017-12233", "vendor": "Cisco", "product": "IOS software", "name": "Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 7.5, "epss": 0.0713, "ms": false }, { "cve": "CVE-2017-12234", "vendor": "Cisco", "product": "IOS software", "name": "Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 7.5, "epss": 0.0713, "ms": false }, { "cve": "CVE-2017-12235", "vendor": "Cisco", "product": "IOS software", "name": "Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 7.5, "epss": 0.0713, "ms": false }, { "cve": "CVE-2017-12237", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 7.5, "epss": 0.0713, "ms": false }, { "cve": "CVE-2017-12238", "vendor": "Cisco", "product": "Catalyst 6800 Series Switches", "name": "Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 6.5, "epss": 0.0203, "ms": false }, { "cve": "CVE-2017-12240", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 9.8, "epss": 0.1388, "ms": false }, { "cve": "CVE-2017-12319", "vendor": "Cisco", "product": "IOS XE Software", "name": "Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 5.9, "epss": 0.0528, "ms": false }, { "cve": "CVE-2017-6627", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 7.5, "epss": 0.0604, "ms": false }, { "cve": "CVE-2017-6663", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 6.5, "epss": 0.0214, "ms": false }, { "cve": "CVE-2017-6736", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 8.8, "epss": 0.7056, "ms": false }, { "cve": "CVE-2017-6737", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 8.8, "epss": 0.4263, "ms": false }, { "cve": "CVE-2017-6738", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 8.8, "epss": 0.1055, "ms": false }, { "cve": "CVE-2017-6739", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 8.8, "epss": 0.1055, "ms": false }, { "cve": "CVE-2017-6740", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 8.8, "epss": 0.1079, "ms": false }, { "cve": "CVE-2017-6743", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 8.8, "epss": 0.1055, "ms": false }, { "cve": "CVE-2017-6744", "vendor": "Cisco", "product": "IOS software", "name": "Cisco IOS Software SNMP Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "cvss": 8.8, "epss": 0.0716, "ms": false }, { "cve": "CVE-2017-8540", "vendor": "Microsoft", "product": "Malware Protection Engine", "name": "Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-24", "ms": true }, { "cve": "CVE-2018-0151", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 9.8, "epss": 0.1429, "ms": false }, { "cve": "CVE-2018-0154", "vendor": "Cisco", "product": "IOS Software", "name": "Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 7.5, "epss": 0.0712, "ms": false }, { "cve": "CVE-2018-0155", "vendor": "Cisco", "product": "Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches", "name": "Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 8.6, "epss": 0.0779, "ms": false }, { "cve": "CVE-2018-0156", "vendor": "Cisco", "product": "IOS Software and Cisco IOS XE Software", "name": "Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 7.5, "epss": 0.0819, "ms": false }, { "cve": "CVE-2018-0158", "vendor": "Cisco", "product": "IOS Software and Cisco IOS XE Software", "name": "Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 8.6, "epss": 0.0724, "ms": false }, { "cve": "CVE-2018-0159", "vendor": "Cisco", "product": "IOS Software and Cisco IOS XE Software", "name": "Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 7.5, "epss": 0.0692, "ms": false }, { "cve": "CVE-2018-0161", "vendor": "Cisco", "product": "IOS Software", "name": "Cisco IOS Software Resource Management Errors Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 6.3, "epss": 0.0467, "ms": false }, { "cve": "CVE-2018-0167", "vendor": "Cisco", "product": "IOS, XR, and XE Software", "name": "Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 8.8, "epss": 0.0338, "ms": false }, { "cve": "CVE-2018-0172", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software Improper Input Validation Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 8.6, "epss": 0.0787, "ms": false }, { "cve": "CVE-2018-0173", "vendor": "Cisco", "product": "IOS and IOS XE Software", "name": "Cisco IOS and IOS XE Software Improper Input Validation Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 8.6, "epss": 0.0766, "ms": false }, { "cve": "CVE-2018-0174", "vendor": "Cisco", "product": "IOS XE Software", "name": "Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 8.6, "epss": 0.0766, "ms": false }, { "cve": "CVE-2018-0175", "vendor": "Cisco", "product": "IOS, XR, and XE Software", "name": "Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 8, "epss": 0.035, "ms": false }, { "cve": "CVE-2018-0179", "vendor": "Cisco", "product": "IOS Software", "name": "Cisco IOS Software Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 5.9, "epss": 0.0497, "ms": false }, { "cve": "CVE-2018-0180", "vendor": "Cisco", "product": "IOS Software", "name": "Cisco IOS Software Denial-of-Service Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 5.9, "epss": 0.0497, "ms": false }, { "cve": "CVE-2018-8298", "vendor": "ChakraCore", "product": "ChakraCore scripting engine", "name": "ChakraCore Scripting Engine Type Confusion Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 7.5, "epss": 0.7534, "ms": false }, { "cve": "CVE-2018-8581", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Privilege Escalation Vulnerability", "date": "2022-03-03", "ransom": true, "due": "2022-03-17", "ms": true }, { "cve": "CVE-2019-1297", "vendor": "Microsoft", "product": "Excel", "name": "Microsoft Excel Remote Code Execution Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "ms": true }, { "cve": "CVE-2019-1652", "vendor": "Cisco", "product": "Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers", "name": "Cisco Small Business Routers Improper Input Validation Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 7.2, "epss": 0.9592, "ms": false }, { "cve": "CVE-2019-16928", "vendor": "Exim", "product": "Exim Internet Mailer", "name": "Exim Out-of-bounds Write Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 9.8, "epss": 0.4159, "ms": false }, { "cve": "CVE-2020-11899", "vendor": "Treck TCP/IP stack", "product": "IPv6", "name": "Treck TCP/IP stack Out-of-Bounds Read Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 5.4, "epss": 0.1856, "ms": false }, { "cve": "CVE-2020-1938", "vendor": "Apache", "product": "Tomcat", "name": "Apache Tomcat Improper Privilege Management Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 9.8, "epss": 0.9927, "ms": false }, { "cve": "CVE-2021-41379", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Installer Privilege Escalation Vulnerability", "date": "2022-03-03", "ransom": true, "due": "2022-03-17", "ms": true }, { "cve": "CVE-2022-20699", "vendor": "Cisco", "product": "Small Business RV160, RV260, RV340, and RV345 Series Routers", "name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 9.8, "epss": 0.7246, "ms": false }, { "cve": "CVE-2022-20700", "vendor": "Cisco", "product": "Small Business RV160, RV260, RV340, and RV345 Series Routers", "name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 9.8, "epss": 0.0566, "ms": false }, { "cve": "CVE-2022-20701", "vendor": "Cisco", "product": "Small Business RV160, RV260, RV340, and RV345 Series Routers", "name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 7.8, "epss": 0.0975, "ms": false }, { "cve": "CVE-2022-20703", "vendor": "Cisco", "product": "Small Business RV160, RV260, RV340, and RV345 Series Routers", "name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 8, "epss": 0.092, "ms": false }, { "cve": "CVE-2022-20708", "vendor": "Cisco", "product": "Small Business RV160, RV260, RV340, and RV345 Series Routers", "name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "date": "2022-03-03", "ransom": false, "due": "2022-03-17", "cvss": 8, "epss": 0.1486, "ms": false }, { "cve": "CVE-2014-6352", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Code Injection Vulnerability", "date": "2022-02-25", "ransom": false, "due": "2022-08-25", "ms": true }, { "cve": "CVE-2017-0222", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Remote Code Execution Vulnerability", "date": "2022-02-25", "ransom": false, "due": "2022-08-25", "ms": true }, { "cve": "CVE-2017-8570", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Remote Code Execution Vulnerability", "date": "2022-02-25", "ransom": false, "due": "2022-08-25", "ms": true }, { "cve": "CVE-2022-24682", "vendor": "Synacor", "product": "Zimbra Collaborate Suite (ZCS)", "name": "Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability", "date": "2022-02-25", "ransom": true, "due": "2022-03-11", "cvss": 6.1, "epss": 0.3093, "ms": false }, { "cve": "CVE-2022-23131", "vendor": "Zabbix", "product": "Frontend", "name": "Zabbix Frontend Authentication Bypass Vulnerability", "date": "2022-02-22", "ransom": false, "due": "2022-03-08", "cvss": 9.8, "epss": 0.9568, "ms": false }, { "cve": "CVE-2022-23134", "vendor": "Zabbix", "product": "Frontend", "name": "Zabbix Frontend Improper Access Control Vulnerability", "date": "2022-02-22", "ransom": false, "due": "2022-03-08", "cvss": 5.3, "epss": 0.8466, "ms": false }, { "cve": "CVE-2013-3906", "vendor": "Microsoft", "product": "Graphics Component", "name": "Microsoft Graphics Component Memory Corruption Vulnerability", "date": "2022-02-15", "ransom": false, "due": "2022-08-15", "ms": true }, { "cve": "CVE-2014-1761", "vendor": "Microsoft", "product": "Word", "name": "Microsoft Word Memory Corruption Vulnerability", "date": "2022-02-15", "ransom": false, "due": "2022-08-15", "ms": true }, { "cve": "CVE-2017-9841", "vendor": "PHPUnit", "product": "PHPUnit", "name": "PHPUnit Command Injection Vulnerability", "date": "2022-02-15", "ransom": false, "due": "2022-08-15", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2018-15982", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2022-02-15", "ransom": true, "due": "2022-08-15", "cvss": 7.8, "epss": 0.8246, "ms": false }, { "cve": "CVE-2018-20250", "vendor": "RARLAB", "product": "WinRAR", "name": "WinRAR Absolute Path Traversal Vulnerability", "date": "2022-02-15", "ransom": true, "due": "2022-08-15", "cvss": 7.8, "epss": 0.9627, "ms": false }, { "cve": "CVE-2018-8174", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability", "date": "2022-02-15", "ransom": true, "due": "2022-08-15", "ms": true }, { "cve": "CVE-2019-0752", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Type Confusion Vulnerability", "date": "2022-02-15", "ransom": true, "due": "2022-08-15", "ms": true }, { "cve": "CVE-2022-0609", "vendor": "Google", "product": "Chromium Animation", "name": "Google Chromium Animation Use-After-Free Vulnerability", "date": "2022-02-15", "ransom": false, "due": "2022-03-01", "cvss": 8.8, "epss": 0.2122, "ms": false }, { "cve": "CVE-2022-24086", "vendor": "Adobe", "product": "Commerce and Magento Open Source", "name": "Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability", "date": "2022-02-15", "ransom": false, "due": "2022-03-01", "cvss": 9.8, "epss": 0.9911, "ms": false }, { "cve": "CVE-2022-22620", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability", "date": "2022-02-11", "ransom": false, "due": "2022-02-25", "cvss": 8.8, "epss": 0.1621, "ms": false }, { "cve": "CVE-2014-4404", "vendor": "Apple", "product": "OS X", "name": "Apple OS X Heap-Based Buffer Overflow Vulnerability", "date": "2022-02-10", "ransom": false, "due": "2022-08-10", "cvss": 7.8, "epss": 0.4905, "ms": false }, { "cve": "CVE-2015-1130", "vendor": "Apple", "product": "OS X", "name": "Apple OS X Authentication Bypass Vulnerability", "date": "2022-02-10", "ransom": false, "due": "2022-08-10", "cvss": 7.8, "epss": 0.0989, "ms": false }, { "cve": "CVE-2015-1635", "vendor": "Microsoft", "product": "HTTP.sys", "name": "Microsoft HTTP.sys Remote Code Execution Vulnerability", "date": "2022-02-10", "ransom": false, "due": "2022-08-10", "ms": true }, { "cve": "CVE-2015-2051", "vendor": "D-Link", "product": "DIR-645 Router", "name": "D-Link DIR-645 Router Remote Code Execution Vulnerability", "date": "2022-02-10", "ransom": false, "due": "2022-08-10", "cvss": 8.8, "epss": 0.9686, "ms": false }, { "cve": "CVE-2016-3088", "vendor": "Apache", "product": "ActiveMQ", "name": "Apache ActiveMQ Improper Input Validation Vulnerability", "date": "2022-02-10", "ransom": false, "due": "2022-08-10", "cvss": 9.8, "epss": 0.9852, "ms": false }, { "cve": "CVE-2017-0144", "vendor": "Microsoft", "product": "SMBv1", "name": "Microsoft SMBv1 Remote Code Execution Vulnerability", "date": "2022-02-10", "ransom": true, "due": "2022-08-10", "ms": true }, { "cve": "CVE-2017-0145", "vendor": "Microsoft", "product": "SMBv1", "name": "Microsoft SMBv1 Remote Code Execution Vulnerability", "date": "2022-02-10", "ransom": true, "due": "2022-08-10", "ms": true }, { "cve": "CVE-2017-0262", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Remote Code Execution Vulnerability", "date": "2022-02-10", "ransom": false, "due": "2022-08-10", "ms": true }, { "cve": "CVE-2017-0263", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2022-02-10", "ransom": false, "due": "2022-08-10", "ms": true }, { "cve": "CVE-2017-10271", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle Corporation WebLogic Server Remote Code Execution Vulnerability", "date": "2022-02-10", "ransom": true, "due": "2022-08-10", "cvss": 7.5, "epss": 0.9999, "ms": false }, { "cve": "CVE-2017-8464", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability", "date": "2022-02-10", "ransom": false, "due": "2022-08-10", "ms": true }, { "cve": "CVE-2017-9791", "vendor": "Apache", "product": "Struts 1", "name": "Apache Struts 1 Improper Input Validation Vulnerability", "date": "2022-02-10", "ransom": false, "due": "2022-08-10", "cvss": 9.8, "epss": 0.9882, "ms": false }, { "cve": "CVE-2018-1000861", "vendor": "Jenkins", "product": "Jenkins Stapler Web Framework", "name": "Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability", "date": "2022-02-10", "ransom": false, "due": "2022-08-10", "cvss": 9.8, "epss": 0.9833, "ms": false }, { "cve": "CVE-2020-0796", "vendor": "Microsoft", "product": "SMBv3", "name": "Microsoft SMBv3 Remote Code Execution Vulnerability", "date": "2022-02-10", "ransom": true, "due": "2022-08-10", "ms": true }, { "cve": "CVE-2021-36934", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows SAM Local Privilege Escalation Vulnerability", "date": "2022-02-10", "ransom": false, "due": "2022-02-24", "ms": true }, { "cve": "CVE-2022-21882", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2022-02-04", "ransom": false, "due": "2022-02-18", "ms": true }, { "cve": "CVE-2014-1776", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "date": "2022-01-28", "ransom": false, "due": "2022-07-28", "ms": true }, { "cve": "CVE-2014-6271", "vendor": "GNU", "product": "Bourne-Again Shell (Bash)", "name": "GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability", "date": "2022-01-28", "ransom": false, "due": "2022-07-28", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2014-7169", "vendor": "GNU", "product": "Bourne-Again Shell (Bash)", "name": "GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability", "date": "2022-01-28", "ransom": false, "due": "2022-07-28", "cvss": 9.8, "epss": 0.9994, "ms": false }, { "cve": "CVE-2017-5689", "vendor": "Intel", "product": "Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability", "name": "Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability", "date": "2022-01-28", "ransom": false, "due": "2022-07-28", "cvss": 9.8, "epss": 0.9219, "ms": false }, { "cve": "CVE-2020-0787", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability", "date": "2022-01-28", "ransom": true, "due": "2022-07-28", "ms": true }, { "cve": "CVE-2020-5722", "vendor": "Grandstream", "product": "UCM6200", "name": "Grandstream Networks UCM6200 Series SQL Injection Vulnerability", "date": "2022-01-28", "ransom": false, "due": "2022-07-28", "cvss": 9.8, "epss": 0.8405, "ms": false }, { "cve": "CVE-2021-20038", "vendor": "SonicWall", "product": "SMA 100 Appliances", "name": "SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability", "date": "2022-01-28", "ransom": true, "due": "2022-02-11", "cvss": 9.8, "epss": 0.999, "ms": false }, { "cve": "CVE-2022-22587", "vendor": "Apple", "product": "iOS and macOS", "name": "Apple Memory Corruption Vulnerability", "date": "2022-01-28", "ransom": false, "due": "2022-02-11", "cvss": 9.8, "epss": 0.1164, "ms": false }, { "cve": "CVE-2006-1547", "vendor": "Apache", "product": "Struts 1", "name": "Apache Struts 1 ActionForm Denial-of-Service Vulnerability", "date": "2022-01-21", "ransom": false, "due": "2022-07-21", "cvss": 7.5, "epss": 0.5464, "ms": false }, { "cve": "CVE-2012-0391", "vendor": "Apache", "product": "Struts 2", "name": "Apache Struts 2 Improper Input Validation Vulnerability", "date": "2022-01-21", "ransom": false, "due": "2022-07-21", "cvss": 9.8, "epss": 0.7507, "ms": false }, { "cve": "CVE-2018-8453", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2022-01-21", "ransom": true, "due": "2022-07-21", "ms": true }, { "cve": "CVE-2021-35247", "vendor": "SolarWinds", "product": "Serv-U", "name": "SolarWinds Serv-U Improper Input Validation Vulnerability", "date": "2022-01-21", "ransom": false, "due": "2022-02-04", "cvss": 5.3, "epss": 0.0345, "ms": false }, { "cve": "CVE-2020-11978", "vendor": "Apache", "product": "Airflow", "name": "Apache Airflow Command Injection", "date": "2022-01-18", "ransom": false, "due": "2022-07-18", "cvss": 8.8, "epss": 0.9919, "ms": false }, { "cve": "CVE-2020-13671", "vendor": "Drupal", "product": "Drupal core", "name": "Drupal core Un-restricted Upload of File", "date": "2022-01-18", "ransom": false, "due": "2022-07-18", "cvss": 8.8, "epss": 0.043, "ms": false }, { "cve": "CVE-2020-13927", "vendor": "Apache", "product": "Airflow's Experimental API", "name": "Apache Airflow's Experimental API Authentication Bypass", "date": "2022-01-18", "ransom": false, "due": "2022-07-18", "cvss": 9.8, "epss": 0.9978, "ms": false }, { "cve": "CVE-2020-14864", "vendor": "Oracle", "product": "Intelligence Enterprise Edition", "name": "Oracle Business Intelligence Enterprise Edition Path Transversal", "date": "2022-01-18", "ransom": false, "due": "2022-07-18", "cvss": 7.5, "epss": 0.9723, "ms": false }, { "cve": "CVE-2021-21315", "vendor": "Npm package", "product": "System Information Library for Node.JS", "name": "System Information Library for Node.JS Command Injection", "date": "2022-01-18", "ransom": false, "due": "2022-02-01", "cvss": 7.8, "epss": 0.9067, "ms": false }, { "cve": "CVE-2021-21975", "vendor": "VMware", "product": "vRealize Operations Manager API", "name": "VMware Server Side Request Forgery in vRealize Operations Manager API", "date": "2022-01-18", "ransom": true, "due": "2022-02-01", "cvss": 7.5, "epss": 0.7829, "ms": false }, { "cve": "CVE-2021-22991", "vendor": "F5", "product": "BIG-IP Traffic Management Microkernel", "name": "F5 BIG-IP Traffic Management Microkernel Buffer Overflow", "date": "2022-01-18", "ransom": false, "due": "2022-02-01", "cvss": 9.8, "epss": 0.6106, "ms": false }, { "cve": "CVE-2021-25296", "vendor": "Nagios", "product": "Nagios XI", "name": "Nagios XI OS Command Injection", "date": "2022-01-18", "ransom": false, "due": "2022-02-01", "cvss": 8.8, "epss": 0.7154, "ms": false }, { "cve": "CVE-2021-25297", "vendor": "Nagios", "product": "Nagios XI", "name": "Nagios XI OS Command Injection", "date": "2022-01-18", "ransom": false, "due": "2022-02-01", "cvss": 8.8, "epss": 0.5638, "ms": false }, { "cve": "CVE-2021-25298", "vendor": "Nagios", "product": "Nagios XI", "name": "Nagios XI OS Command Injection", "date": "2022-01-18", "ransom": false, "due": "2022-02-01", "cvss": 8.8, "epss": 0.7498, "ms": false }, { "cve": "CVE-2021-32648", "vendor": "October CMS", "product": "October CMS", "name": "October CMS Improper Authentication", "date": "2022-01-18", "ransom": false, "due": "2022-02-01", "cvss": 9.1, "epss": 0.9042, "ms": false }, { "cve": "CVE-2021-33766", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Information Disclosure", "date": "2022-01-18", "ransom": false, "due": "2022-02-01", "ms": true }, { "cve": "CVE-2021-40870", "vendor": "Aviatrix", "product": "Aviatrix Controller", "name": "Aviatrix Controller Unrestricted Upload of File", "date": "2022-01-18", "ransom": false, "due": "2022-02-01", "cvss": 9.8, "epss": 0.9302, "ms": false }, { "cve": "CVE-2013-3900", "vendor": "Microsoft", "product": "WinVerifyTrust function", "name": "Microsoft WinVerifyTrust function Remote Code Execution", "date": "2022-01-10", "ransom": false, "due": "2022-07-10", "ms": true }, { "cve": "CVE-2015-7450", "vendor": "IBM", "product": "WebSphere Application Server and Server Hypervisor Edition", "name": "IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.", "date": "2022-01-10", "ransom": false, "due": "2022-07-10", "cvss": 9.8, "epss": 0.9766, "ms": false }, { "cve": "CVE-2017-1000486", "vendor": "Primetek", "product": "Primefaces Application", "name": "Primetek Primefaces Remote Code Execution Vulnerability", "date": "2022-01-10", "ransom": false, "due": "2022-07-10", "cvss": 9.8, "epss": 0.941, "ms": false }, { "cve": "CVE-2018-13382", "vendor": "Fortinet", "product": "FortiOS and FortiProxy", "name": "Fortinet FortiOS and FortiProxy Improper Authorization", "date": "2022-01-10", "ransom": true, "due": "2022-07-10", "cvss": 7.5, "epss": 0.8169, "ms": false }, { "cve": "CVE-2018-13383", "vendor": "Fortinet", "product": "FortiOS and FortiProxy", "name": "Fortinet FortiOS and FortiProxy Out-of-bounds Write", "date": "2022-01-10", "ransom": true, "due": "2022-07-10", "cvss": 6.5, "epss": 0.3365, "ms": false }, { "cve": "CVE-2019-10149", "vendor": "Exim", "product": "Mail Transfer Agent (MTA)", "name": "Exim Mail Transfer Agent (MTA) Improper Input Validation", "date": "2022-01-10", "ransom": false, "due": "2022-07-10", "cvss": 9.8, "epss": 0.9996, "ms": false }, { "cve": "CVE-2019-1458", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2022-01-10", "ransom": true, "due": "2022-07-10", "ms": true }, { "cve": "CVE-2019-1579", "vendor": "Palo Alto Networks", "product": "PAN-OS", "name": "Palo Alto Networks PAN-OS Remote Code Execution Vulnerability", "date": "2022-01-10", "ransom": true, "due": "2022-07-10", "cvss": 8.1, "epss": 0.4596, "ms": false }, { "cve": "CVE-2019-2725", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server, Injection", "date": "2022-01-10", "ransom": true, "due": "2022-07-10", "cvss": 9.8, "epss": 0.9996, "ms": false }, { "cve": "CVE-2019-7609", "vendor": "Elastic", "product": "Kibana", "name": "Kibana Arbitrary Code Execution", "date": "2022-01-10", "ransom": false, "due": "2022-07-10", "cvss": 10, "epss": 0.9534, "ms": false }, { "cve": "CVE-2019-9670", "vendor": "Synacor", "product": "Zimbra Collaboration Suite (ZCS)", "name": "Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference", "date": "2022-01-10", "ransom": false, "due": "2022-07-10", "cvss": 9.8, "epss": 0.9999, "ms": false }, { "cve": "CVE-2020-6572", "vendor": "Google", "product": "Chrome Media", "name": "Google Chrome Media Use-After-Free Vulnerability", "date": "2022-01-10", "ransom": false, "due": "2022-07-10", "cvss": 8.8, "epss": 0.1059, "ms": false }, { "cve": "CVE-2021-22017", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Improper Access Control", "date": "2022-01-10", "ransom": false, "due": "2022-01-24", "cvss": 5.3, "epss": 0.4918, "ms": false }, { "cve": "CVE-2021-27860", "vendor": "FatPipe", "product": "WARP, IPVPN, and MPVPN software", "name": "FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit", "date": "2022-01-10", "ransom": false, "due": "2022-01-24", "cvss": 8.8, "epss": 0.3982, "ms": false }, { "cve": "CVE-2021-36260", "vendor": "Hikvision", "product": "Security cameras web server", "name": "Hikvision Improper Input Validation", "date": "2022-01-10", "ransom": false, "due": "2022-01-24", "cvss": 9.8, "epss": 0.9987, "ms": false }, { "cve": "CVE-2021-4102", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Use-After-Free Vulnerability", "date": "2021-12-15", "ransom": false, "due": "2021-12-29", "cvss": 8.8, "epss": 0.0784, "ms": false }, { "cve": "CVE-2021-43890", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows AppX Installer Spoofing Vulnerability", "date": "2021-12-15", "ransom": true, "due": "2021-12-29", "ms": true }, { "cve": "CVE-2010-1871", "vendor": "Red Hat", "product": "JBoss Seam 2", "name": "Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": false, "due": "2022-06-10", "cvss": 8.8, "epss": 0.834, "ms": false }, { "cve": "CVE-2017-12149", "vendor": "Red Hat", "product": "JBoss Application Server", "name": "Red Hat JBoss Application Server Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": true, "due": "2022-06-10", "cvss": 9.8, "epss": 0.9071, "ms": false }, { "cve": "CVE-2017-17562", "vendor": "Embedthis", "product": "GoAhead", "name": "Embedthis GoAhead Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": false, "due": "2022-06-10", "cvss": 8.1, "epss": 0.9633, "ms": false }, { "cve": "CVE-2019-0193", "vendor": "Apache", "product": "Solr", "name": "Apache Solr DataImportHandler Code Injection Vulnerability", "date": "2021-12-10", "ransom": false, "due": "2022-06-10", "cvss": 7.2, "epss": 0.8355, "ms": false }, { "cve": "CVE-2019-10758", "vendor": "MongoDB", "product": "mongo-express", "name": "MongoDB mongo-express Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": false, "due": "2022-06-10", "cvss": 9.9, "epss": 0.8485, "ms": false }, { "cve": "CVE-2019-13272", "vendor": "Linux", "product": "Kernel", "name": "Linux Kernel Improper Privilege Management Vulnerability", "date": "2021-12-10", "ransom": false, "due": "2022-06-10", "cvss": 7.8, "epss": 0.522, "ms": false }, { "cve": "CVE-2019-7238", "vendor": "Sonatype", "product": "Nexus Repository Manager", "name": "Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability", "date": "2021-12-10", "ransom": false, "due": "2022-06-10", "cvss": 9.8, "epss": 0.7653, "ms": false }, { "cve": "CVE-2020-17463", "vendor": "Fuel CMS", "product": "Fuel CMS", "name": "Fuel CMS SQL Injection Vulnerability", "date": "2021-12-10", "ransom": false, "due": "2022-06-10", "cvss": 9.8, "epss": 0.9004, "ms": false }, { "cve": "CVE-2020-8816", "vendor": "Pi-hole", "product": "AdminLTE", "name": "Pi-Hole AdminLTE Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": false, "due": "2022-06-10", "cvss": 7.2, "epss": 0.7819, "ms": false }, { "cve": "CVE-2021-35394", "vendor": "Realtek", "product": "Jungle Software Development Kit (SDK)", "name": "Realtek Jungle SDK Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": false, "due": "2021-12-24", "cvss": 9.8, "epss": 0.9986, "ms": false }, { "cve": "CVE-2021-44168", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Arbitrary File Download", "date": "2021-12-10", "ransom": false, "due": "2021-12-24", "cvss": 7.8, "epss": 0.0087, "ms": false }, { "cve": "CVE-2021-44228", "vendor": "Apache", "product": "Log4j2", "name": "Apache Log4j2 Remote Code Execution Vulnerability", "date": "2021-12-10", "ransom": true, "due": "2021-12-24", "cvss": 10, "epss": 1, "ms": false }, { "cve": "CVE-2021-44515", "vendor": "Zoho", "product": "Desktop Central", "name": "Zoho Desktop Central Authentication Bypass Vulnerability", "date": "2021-12-10", "ransom": false, "due": "2021-12-24", "cvss": 9.8, "epss": 0.9987, "ms": false }, { "cve": "CVE-2018-14847", "vendor": "MikroTik", "product": "RouterOS", "name": "MikroTik Router OS Directory Traversal Vulnerability", "date": "2021-12-01", "ransom": false, "due": "2022-06-01", "cvss": 9.1, "epss": 0.9609, "ms": false }, { "cve": "CVE-2020-11261", "vendor": "Qualcomm", "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", "name": "Qualcomm Multiple Chipsets Improper Input Validation Vulnerability", "date": "2021-12-01", "ransom": false, "due": "2022-06-01", "cvss": 7.8, "epss": 0.0177, "ms": false }, { "cve": "CVE-2021-37415", "vendor": "Zoho", "product": "ManageEngine ServiceDesk Plus (SDP)", "name": "Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability", "date": "2021-12-01", "ransom": false, "due": "2021-12-15", "cvss": 9.8, "epss": 0.9982, "ms": false }, { "cve": "CVE-2021-40438", "vendor": "Apache", "product": "Apache", "name": "Apache HTTP Server-Side Request Forgery (SSRF)", "date": "2021-12-01", "ransom": true, "due": "2021-12-15", "cvss": 9, "epss": 1, "ms": false }, { "cve": "CVE-2021-44077", "vendor": "Zoho", "product": "ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus", "name": "Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability", "date": "2021-12-01", "ransom": false, "due": "2021-12-15", "cvss": 9.8, "epss": 0.9351, "ms": false }, { "cve": "CVE-2021-22204", "vendor": "Perl", "product": "Exiftool", "name": "ExifTool Remote Code Execution Vulnerability", "date": "2021-11-17", "ransom": false, "due": "2021-12-01", "cvss": 7.8, "epss": 0.9998, "ms": false }, { "cve": "CVE-2021-40449", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Win32k Privilege Escalation Vulnerability", "date": "2021-11-17", "ransom": true, "due": "2021-12-01", "ms": true }, { "cve": "CVE-2021-42292", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Excel Security Feature Bypass", "date": "2021-11-17", "ransom": false, "due": "2021-12-01", "ms": true }, { "cve": "CVE-2021-42321", "vendor": "Microsoft", "product": "Exchange", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "date": "2021-11-17", "ransom": true, "due": "2021-12-01", "ms": true }, { "cve": "CVE-2010-5326", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 10, "epss": 0.1745, "ms": false }, { "cve": "CVE-2012-0158", "vendor": "Microsoft", "product": "MSCOMCTL.OCX", "name": "Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2012-3152", "vendor": "Oracle", "product": "Fusion Middleware", "name": "Oracle Fusion Middleware Unspecified Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.1, "epss": 0.9869, "ms": false }, { "cve": "CVE-2014-1812", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2015-1641", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2015-4852", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9603, "ms": false }, { "cve": "CVE-2016-0167", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2016-0185", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Media Center Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2016-3235", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office OLE DLL Side Loading Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2016-3643", "vendor": "SolarWinds", "product": "Virtualization Manager", "name": "SolarWinds Virtualization Manager Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.037, "ms": false }, { "cve": "CVE-2016-3715", "vendor": "ImageMagick", "product": "ImageMagick", "name": "ImageMagick Arbitrary File Deletion Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 5.5, "epss": 0.7538, "ms": false }, { "cve": "CVE-2016-3718", "vendor": "ImageMagick", "product": "ImageMagick", "name": "ImageMagick Server-Side Request Forgery (SSRF) Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 5.5, "epss": 0.769, "ms": false }, { "cve": "CVE-2016-3976", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Directory Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.5, "epss": 0.4661, "ms": false }, { "cve": "CVE-2016-4437", "vendor": "Apache", "product": "Shiro", "name": "Apache Shiro Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9304, "ms": false }, { "cve": "CVE-2016-7255", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2016-9563", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver XML External Entity (XXE) Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 6.5, "epss": 0.2381, "ms": false }, { "cve": "CVE-2017-0143", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2017-0199", "vendor": "Microsoft", "product": "Office and WordPad", "name": "Microsoft Office and WordPad Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2017-11774", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Outlook Security Feature Bypass Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2017-11882", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2017-16651", "vendor": "Roundcube", "product": "Roundcube Webmail", "name": "Roundcube Webmail File Disclosure Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.3692, "ms": false }, { "cve": "CVE-2017-5638", "vendor": "Apache", "product": "Struts", "name": "Apache Struts Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2017-6327", "vendor": "Symantec", "product": "Symantec Messaging Gateway", "name": "Symantec Messaging Gateway Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.3534, "ms": false }, { "cve": "CVE-2017-7269", "vendor": "Microsoft", "product": "Internet Information Services (IIS)", "name": "Microsoft Windows Server Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2017-8759", "vendor": "Microsoft", "product": ".NET Framework", "name": "Microsoft .NET Framework Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2017-9248", "vendor": "Progress", "product": "ASP.NET AJAX and Sitefinity", "name": "Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.751, "ms": false }, { "cve": "CVE-2017-9805", "vendor": "Apache", "product": "Struts", "name": "Apache Struts Deserialization of Untrusted Data Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.1, "epss": 0.994, "ms": false }, { "cve": "CVE-2017-9822", "vendor": "DotNetNuke (DNN)", "product": "DotNetNuke (DNN)", "name": "DotNetNuke (DNN) Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 8.8, "epss": 0.9479, "ms": false }, { "cve": "CVE-2018-0171", "vendor": "Cisco", "product": "IOS and IOS XE", "name": "Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9949, "ms": false }, { "cve": "CVE-2018-0296", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA)", "name": "Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.5, "epss": 0.999, "ms": false }, { "cve": "CVE-2018-0798", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2018-0802", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2018-11776", "vendor": "Apache", "product": "Struts", "name": "Apache Struts Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.1, "epss": 0.9999, "ms": false }, { "cve": "CVE-2018-13379", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS SSL VPN Path Traversal Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2018-14558", "vendor": "Tenda", "product": "AC7, AC9, and AC10 Routers", "name": "Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.0867, "ms": false }, { "cve": "CVE-2018-15811", "vendor": "DotNetNuke (DNN)", "product": "DotNetNuke (DNN)", "name": "DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.5, "epss": 0.7405, "ms": false }, { "cve": "CVE-2018-15961", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Unrestricted File Upload Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9995, "ms": false }, { "cve": "CVE-2018-18325", "vendor": "DotNetNuke (DNN)", "product": "DotNetNuke (DNN)", "name": "DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.5, "epss": 0.7405, "ms": false }, { "cve": "CVE-2018-20062", "vendor": "ThinkPHP", "product": "noneCms", "name": "ThinkPHP \"noneCms\" Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9953, "ms": false }, { "cve": "CVE-2018-2380", "vendor": "SAP", "product": "Customer Relationship Management (CRM)", "name": "SAP Customer Relationship Management (CRM) Path Traversal Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 6.6, "epss": 0.2889, "ms": false }, { "cve": "CVE-2018-4878", "vendor": "Adobe", "product": "Flash Player", "name": "Adobe Flash Player Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 7.8, "epss": 0.8953, "ms": false }, { "cve": "CVE-2018-4939", "vendor": "Adobe", "product": "ColdFusion", "name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.6291, "ms": false }, { "cve": "CVE-2018-6789", "vendor": "Exim", "product": "Exim", "name": "Exim Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 0.8172, "ms": false }, { "cve": "CVE-2018-7600", "vendor": "Drupal", "product": "Drupal Core", "name": "Drupal Core Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2018-8653", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2019-0211", "vendor": "Apache", "product": "HTTP Server", "name": "Apache HTTP Server Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.6501, "ms": false }, { "cve": "CVE-2019-0541", "vendor": "Microsoft", "product": "MSHTML", "name": "Microsoft MSHTML Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2019-0604", "vendor": "Microsoft", "product": "SharePoint", "name": "Microsoft SharePoint Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2019-0708", "vendor": "Microsoft", "product": "Remote Desktop Services", "name": "Microsoft Remote Desktop Services Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2019-0797", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2019-0803", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2019-0808", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2019-0859", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2019-0863", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2019-11510", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 10, "epss": 1, "ms": false }, { "cve": "CVE-2019-11539", "vendor": "Ivanti", "product": "Pulse Connect Secure and Pulse Policy Secure", "name": "Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 7.2, "epss": 0.9862, "ms": false }, { "cve": "CVE-2019-11580", "vendor": "Atlassian", "product": "Crowd and Crowd Data Center", "name": "Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9536, "ms": false }, { "cve": "CVE-2019-11634", "vendor": "Citrix", "product": "Workspace Application and Receiver for Windows", "name": "Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 0.0803, "ms": false }, { "cve": "CVE-2019-1214", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2019-1215", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2019-13608", "vendor": "Citrix", "product": "StoreFront Server", "name": "Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 7.5, "epss": 0.3004, "ms": false }, { "cve": "CVE-2019-1367", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2019-1429", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2019-15752", "vendor": "Docker", "product": "Desktop Community Edition", "name": "Docker Desktop Community Edition Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.3192, "ms": false }, { "cve": "CVE-2019-15949", "vendor": "Nagios", "product": "Nagios XI", "name": "Nagios XI Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.7774, "ms": false }, { "cve": "CVE-2019-16256", "vendor": "SIMalliance", "product": "Toolbox Browser", "name": "SIMalliance Toolbox Browser Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.0495, "ms": false }, { "cve": "CVE-2019-1653", "vendor": "Cisco", "product": "Small Business RV320 and RV325 Routers", "name": "Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.5, "epss": 0.9988, "ms": false }, { "cve": "CVE-2019-16759", "vendor": "vBulletin", "product": "vBulletin", "name": "vBulletin PHP Module Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9973, "ms": false }, { "cve": "CVE-2019-17026", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "name": "Mozilla Firefox And Thunderbird Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.4368, "ms": false }, { "cve": "CVE-2019-17558", "vendor": "Apache", "product": "Solr", "name": "Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.5, "epss": 0.9857, "ms": false }, { "cve": "CVE-2019-18187", "vendor": "Trend Micro", "product": "OfficeScan", "name": "Trend Micro OfficeScan Directory Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.5, "epss": 0.2512, "ms": false }, { "cve": "CVE-2019-18935", "vendor": "Progress", "product": "Telerik UI for ASP.NET AJAX", "name": "Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9974, "ms": false }, { "cve": "CVE-2019-18988", "vendor": "TeamViewer", "product": "Desktop", "name": "TeamViewer Desktop Bypass Remote Login Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7, "epss": 0.0471, "ms": false }, { "cve": "CVE-2019-19356", "vendor": "Netis", "product": "WF2419 Devices", "name": "Netis WF2419 Devices Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.5, "epss": 0.2817, "ms": false }, { "cve": "CVE-2019-19781", "vendor": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2019-20085", "vendor": "TVT", "product": "NVMS-1000", "name": "TVT NVMS-1000 Directory Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.5, "epss": 0.9607, "ms": false }, { "cve": "CVE-2019-2215", "vendor": "Android", "product": "Android Kernel", "name": "Android Kernel Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.4382, "ms": false }, { "cve": "CVE-2019-3396", "vendor": "Atlassian", "product": "Confluence Server and Data Server", "name": "Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9991, "ms": false }, { "cve": "CVE-2019-3398", "vendor": "Atlassian", "product": "Confluence Server and Data Center", "name": "Atlassian Confluence Server and Data Center Path Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.9715, "ms": false }, { "cve": "CVE-2019-4716", "vendor": "IBM", "product": "Planning Analytics", "name": "IBM Planning Analytics Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.8644, "ms": false }, { "cve": "CVE-2019-5544", "vendor": "VMware", "product": "VMware ESXi and Horizon DaaS", "name": "VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9682, "ms": false }, { "cve": "CVE-2019-5591", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS Default Configuration Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 6.5, "epss": 0.1857, "ms": false }, { "cve": "CVE-2019-6223", "vendor": "Apple", "product": "iOS and macOS", "name": "Apple iOS and macOS Group Facetime Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.5, "epss": 0.0263, "ms": false }, { "cve": "CVE-2019-7481", "vendor": "SonicWall", "product": "SMA100", "name": "SonicWall SMA100 SQL Injection Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 7.5, "epss": 0.9991, "ms": false }, { "cve": "CVE-2019-8394", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 6.5, "epss": 0.6334, "ms": false }, { "cve": "CVE-2019-9082", "vendor": "ThinkPHP", "product": "ThinkPHP", "name": "ThinkPHP Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.9742, "ms": false }, { "cve": "CVE-2019-9978", "vendor": "WordPress", "product": "Social Warfare Plugin", "name": "WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 6.1, "epss": 0.7295, "ms": false }, { "cve": "CVE-2020-0041", "vendor": "Android", "product": "Android Kernel", "name": "Android Kernel Out-of-Bounds Write Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.0325, "ms": false }, { "cve": "CVE-2020-0069", "vendor": "MediaTek", "product": "Multiple Chipsets", "name": "Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.013, "ms": false }, { "cve": "CVE-2020-0601", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows CryptoAPI Spoofing Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-0646", "vendor": "Microsoft", "product": ".NET Framework", "name": "Microsoft .NET Framework Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-0674", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-0683", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Installer Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-0688", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-0878", "vendor": "Microsoft", "product": "Edge and Internet Explorer", "name": "Microsoft Edge and Internet Explorer Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-0938", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-0968", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-0986", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-10148", "vendor": "SolarWinds", "product": "Orion", "name": "SolarWinds Orion Authentication Bypass Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9198, "ms": false }, { "cve": "CVE-2020-10181", "vendor": "Sumavision", "product": "Enhanced Multimedia Router (EMR)", "name": "Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.1467, "ms": false }, { "cve": "CVE-2020-10189", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine Desktop Central File Upload Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9994, "ms": false }, { "cve": "CVE-2020-10199", "vendor": "Sonatype", "product": "Nexus Repository", "name": "Sonatype Nexus Repository Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.9906, "ms": false }, { "cve": "CVE-2020-1020", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-10221", "vendor": "rConfig", "product": "rConfig", "name": "rConfig OS Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.3675, "ms": false }, { "cve": "CVE-2020-1040", "vendor": "Microsoft", "product": "Hyper-V RemoteFX", "name": "Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-1054", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-10987", "vendor": "Tenda", "product": "AC1900 Router AC15 Model", "name": "Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.7981, "ms": false }, { "cve": "CVE-2020-1147", "vendor": "Microsoft", "product": ".NET Framework, SharePoint, Visual Studio", "name": "Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-11651", "vendor": "SaltStack", "product": "Salt", "name": "SaltStack Salt Authentication Bypass Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9661, "ms": false }, { "cve": "CVE-2020-11652", "vendor": "SaltStack", "product": "Salt", "name": "SaltStack Salt Path Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 6.5, "epss": 0.8618, "ms": false }, { "cve": "CVE-2020-11738", "vendor": "WordPress", "product": "Snap Creek Duplicator Plugin", "name": "WordPress Snap Creek Duplicator Plugin File Download Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.5, "epss": 0.9782, "ms": false }, { "cve": "CVE-2020-12271", "vendor": "Sophos", "product": "SFOS", "name": "Sophos SFOS SQL Injection Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 0.4243, "ms": false }, { "cve": "CVE-2020-12812", "vendor": "Fortinet", "product": "FortiOS", "name": "Fortinet FortiOS SSL VPN Improper Authentication Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 0.4934, "ms": false }, { "cve": "CVE-2020-1350", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows DNS Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-1380", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-1464", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Spoofing Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-1472", "vendor": "Microsoft", "product": "Netlogon", "name": "Microsoft Netlogon Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-14750", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9927, "ms": false }, { "cve": "CVE-2020-14871", "vendor": "Oracle", "product": "Solaris and Zettabyte File System (ZFS)", "name": "Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 10, "epss": 0.7984, "ms": false }, { "cve": "CVE-2020-14882", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2020-14883", "vendor": "Oracle", "product": "WebLogic Server", "name": "Oracle WebLogic Server Unspecified Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.2, "epss": 0.9793, "ms": false }, { "cve": "CVE-2020-15505", "vendor": "Ivanti", "product": "MobileIron Multiple Products", "name": "Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9974, "ms": false }, { "cve": "CVE-2020-15999", "vendor": "Google", "product": "Chrome FreeType", "name": "Google Chrome FreeType Heap Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 9.6, "epss": 0.5063, "ms": false }, { "cve": "CVE-2020-16009", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.4857, "ms": false }, { "cve": "CVE-2020-16010", "vendor": "Google", "product": "Chrome for Android UI", "name": "Google Chrome for Android UI Heap Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.6, "epss": 0.0641, "ms": false }, { "cve": "CVE-2020-16013", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Incorrect Implementation Vulnerabililty", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.0283, "ms": false }, { "cve": "CVE-2020-16017", "vendor": "Google", "product": "Chrome", "name": "Google Chrome Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.6, "epss": 0.0275, "ms": false }, { "cve": "CVE-2020-16846", "vendor": "SaltStack", "product": "Salt", "name": "SaltStack Salt Shell Injection Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9959, "ms": false }, { "cve": "CVE-2020-17087", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-17144", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2020-17496", "vendor": "vBulletin", "product": "vBulletin", "name": "vBulletin PHP Module Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.8774, "ms": false }, { "cve": "CVE-2020-17530", "vendor": "Apache", "product": "Struts", "name": "Apache Struts Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9562, "ms": false }, { "cve": "CVE-2020-24557", "vendor": "Trend Micro", "product": "Apex One, OfficeScan, and Worry-Free Business Security", "name": "Trend Micro Multiple Products Improper Access Control Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.0264, "ms": false }, { "cve": "CVE-2020-25213", "vendor": "WordPress", "product": "File Manager Plugin", "name": "WordPress File Manager Plugin Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9733, "ms": false }, { "cve": "CVE-2020-25506", "vendor": "D-Link", "product": "DNS-320 Device", "name": "D-Link DNS-320 Device Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9997, "ms": false }, { "cve": "CVE-2020-2555", "vendor": "Oracle", "product": "Multiple Products", "name": "Oracle Multiple Products Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9712, "ms": false }, { "cve": "CVE-2020-26919", "vendor": "NETGEAR", "product": "JGS516PE Devices", "name": "Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.5754, "ms": false }, { "cve": "CVE-2020-27930", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.2218, "ms": false }, { "cve": "CVE-2020-27932", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.1034, "ms": false }, { "cve": "CVE-2020-27950", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Initialization Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 5.5, "epss": 0.1652, "ms": false }, { "cve": "CVE-2020-29557", "vendor": "D-Link", "product": "DIR-825 R1 Devices", "name": "D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.5432, "ms": false }, { "cve": "CVE-2020-29583", "vendor": "Zyxel", "product": "Multiple Products", "name": "Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9005, "ms": false }, { "cve": "CVE-2020-3118", "vendor": "Cisco", "product": "IOS XR", "name": "Cisco IOS XR Software Discovery Protocol Format String Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.1168, "ms": false }, { "cve": "CVE-2020-3161", "vendor": "Cisco", "product": "Cisco IP Phones", "name": "Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.8373, "ms": false }, { "cve": "CVE-2020-3452", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Read-Only Path Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.5, "epss": 0.9999, "ms": false }, { "cve": "CVE-2020-3566", "vendor": "Cisco", "product": "IOS XR", "name": "Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.6, "epss": 0.0363, "ms": false }, { "cve": "CVE-2020-3569", "vendor": "Cisco", "product": "IOS XR", "name": "Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.6, "epss": 0.0329, "ms": false }, { "cve": "CVE-2020-3580", "vendor": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "name": "Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 6.1, "epss": 0.8558, "ms": false }, { "cve": "CVE-2020-3950", "vendor": "VMware", "product": "Multiple Products", "name": "VMware Multiple Products Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.0725, "ms": false }, { "cve": "CVE-2020-3952", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Information Disclosure Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9038, "ms": false }, { "cve": "CVE-2020-3992", "vendor": "VMware", "product": "ESXi", "name": "VMware ESXi OpenSLP Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 0.8302, "ms": false }, { "cve": "CVE-2020-4006", "vendor": "VMware", "product": "Multiple Products", "name": "Multiple VMware Products Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.1, "epss": 0.2377, "ms": false }, { "cve": "CVE-2020-4427", "vendor": "IBM", "product": "Data Risk Manager", "name": "IBM Data Risk Manager Security Bypass Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.7003, "ms": false }, { "cve": "CVE-2020-4428", "vendor": "IBM", "product": "Data Risk Manager", "name": "IBM Data Risk Manager Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.1, "epss": 0.6169, "ms": false }, { "cve": "CVE-2020-4430", "vendor": "IBM", "product": "Data Risk Manager", "name": "IBM Data Risk Manager Directory Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 4.3, "epss": 0.6854, "ms": false }, { "cve": "CVE-2020-5735", "vendor": "Amcrest", "product": "Cameras and Network Video Recorder (NVR)", "name": "Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.3564, "ms": false }, { "cve": "CVE-2020-5847", "vendor": "Unraid", "product": "Unraid", "name": "Unraid Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9584, "ms": false }, { "cve": "CVE-2020-5849", "vendor": "Unraid", "product": "Unraid", "name": "Unraid Authentication Bypass Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.5, "epss": 0.9324, "ms": false }, { "cve": "CVE-2020-5902", "vendor": "F5", "product": "BIG-IP", "name": "F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2020-6207", "vendor": "SAP", "product": "Solution Manager", "name": "SAP Solution Manager Missing Authentication for Critical Function Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9827, "ms": false }, { "cve": "CVE-2020-6287", "vendor": "SAP", "product": "NetWeaver", "name": "SAP NetWeaver Missing Authentication for Critical Function Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 10, "epss": 0.9472, "ms": false }, { "cve": "CVE-2020-6418", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.7881, "ms": false }, { "cve": "CVE-2020-6819", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "name": "Mozilla Firefox And Thunderbird Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.1, "epss": 0.0298, "ms": false }, { "cve": "CVE-2020-6820", "vendor": "Mozilla", "product": "Firefox and Thunderbird", "name": "Mozilla Firefox And Thunderbird Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.1, "epss": 0.063, "ms": false }, { "cve": "CVE-2020-7961", "vendor": "Liferay", "product": "Liferay Portal", "name": "Liferay Portal Deserialization of Untrusted Data Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9977, "ms": false }, { "cve": "CVE-2020-8193", "vendor": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 6.5, "epss": 0.8841, "ms": false }, { "cve": "CVE-2020-8195", "vendor": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 6.5, "epss": 0.3326, "ms": false }, { "cve": "CVE-2020-8196", "vendor": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 4.3, "epss": 0.2633, "ms": false }, { "cve": "CVE-2020-8243", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.2, "epss": 0.9076, "ms": false }, { "cve": "CVE-2020-8260", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.2, "epss": 0.9648, "ms": false }, { "cve": "CVE-2020-8467", "vendor": "Trend Micro", "product": "Apex One and OfficeScan", "name": "Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.1079, "ms": false }, { "cve": "CVE-2020-8468", "vendor": "Trend Micro", "product": "Apex One, OfficeScan and Worry-Free Business Security Agents", "name": "Trend Micro Multiple Products Content Validation Escape Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.0575, "ms": false }, { "cve": "CVE-2020-8515", "vendor": "DrayTek", "product": "Multiple Vigor Routers", "name": "Multiple DrayTek Vigor Routers Web Management Page Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9999, "ms": false }, { "cve": "CVE-2020-8599", "vendor": "Trend Micro", "product": "Apex One and OfficeScan", "name": "Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.1186, "ms": false }, { "cve": "CVE-2020-8644", "vendor": "PlaySMS", "product": "PlaySMS", "name": "PlaySMS Server-Side Template Injection Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.8669, "ms": false }, { "cve": "CVE-2020-8655", "vendor": "EyesOfNetwork", "product": "EyesOfNetwork", "name": "EyesOfNetwork Improper Privilege Management Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.6008, "ms": false }, { "cve": "CVE-2020-8657", "vendor": "EyesOfNetwork", "product": "EyesOfNetwork", "name": "EyesOfNetwork Use of Hard-Coded Credentials Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 9.8, "epss": 0.9187, "ms": false }, { "cve": "CVE-2020-9818", "vendor": "Apple", "product": "iOS, iPadOS, and watchOS", "name": "Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.0229, "ms": false }, { "cve": "CVE-2020-9819", "vendor": "Apple", "product": "iOS, iPadOS, and watchOS", "name": "Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 4.3, "epss": 0.0218, "ms": false }, { "cve": "CVE-2020-9859", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.0083, "ms": false }, { "cve": "CVE-2021-1497", "vendor": "Cisco", "product": "HyperFlex HX", "name": "Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 9.8, "epss": 0.9993, "ms": false }, { "cve": "CVE-2021-1498", "vendor": "Cisco", "product": "HyperFlex HX", "name": "Cisco HyperFlex HX Data Platform Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2021-1647", "vendor": "Microsoft", "product": "Defender", "name": "Microsoft Defender Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-1675", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Print Spooler Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-1732", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-1782", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Race Condition Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 7, "epss": 0.0222, "ms": false }, { "cve": "CVE-2021-1870", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 9.8, "epss": 0.0792, "ms": false }, { "cve": "CVE-2021-1871", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 9.8, "epss": 0.0712, "ms": false }, { "cve": "CVE-2021-1879", "vendor": "Apple", "product": "iOS, iPadOS, and watchOS", "name": "Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 6.1, "epss": 0.0684, "ms": false }, { "cve": "CVE-2021-1905", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.8, "epss": 0.0115, "ms": false }, { "cve": "CVE-2021-1906", "vendor": "Qualcomm", "product": "Multiple Chipsets", "name": "Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 5.5, "epss": 0.0052, "ms": false }, { "cve": "CVE-2021-20016", "vendor": "SonicWall", "product": "SSLVPN SMA100", "name": "SonicWall SSLVPN SMA100 SQL Injection Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 0.3695, "ms": false }, { "cve": "CVE-2021-20021", "vendor": "SonicWall", "product": "SonicWall Email Security", "name": "SonicWall Email Security Improper Privilege Management Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 0.8343, "ms": false }, { "cve": "CVE-2021-20022", "vendor": "SonicWall", "product": "SonicWall Email Security", "name": "SonicWall Email Security Unrestricted Upload of File Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 7.2, "epss": 0.1651, "ms": false }, { "cve": "CVE-2021-20023", "vendor": "SonicWall", "product": "SonicWall Email Security", "name": "SonicWall Email Security Path Traversal Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 4.9, "epss": 0.5023, "ms": false }, { "cve": "CVE-2021-20090", "vendor": "Arcadyan", "product": "Buffalo Firmware", "name": "Arcadyan Buffalo Firmware Path Traversal Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 9.8, "epss": 0.9998, "ms": false }, { "cve": "CVE-2021-21017", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.8621, "ms": false }, { "cve": "CVE-2021-21148", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Heap Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.1981, "ms": false }, { "cve": "CVE-2021-21166", "vendor": "Google", "product": "Chromium", "name": "Google Chromium Race Condition Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.2385, "ms": false }, { "cve": "CVE-2021-21193", "vendor": "Google", "product": "Chromium Blink", "name": "Google Chromium Blink Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.0987, "ms": false }, { "cve": "CVE-2021-21206", "vendor": "Google", "product": "Chromium Blink", "name": "Google Chromium Blink Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.094, "ms": false }, { "cve": "CVE-2021-21220", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Improper Input Validation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.6929, "ms": false }, { "cve": "CVE-2021-21224", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.5624, "ms": false }, { "cve": "CVE-2021-21972", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 0.9952, "ms": false }, { "cve": "CVE-2021-21985", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server Improper Input Validation Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2021-22005", "vendor": "VMware", "product": "vCenter Server", "name": "VMware vCenter Server File Upload Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2021-22205", "vendor": "GitLab", "product": "Community and Enterprise Editions", "name": "GitLab Community and Enterprise Editions Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 10, "epss": 0.9973, "ms": false }, { "cve": "CVE-2021-22502", "vendor": "Micro Focus", "product": "Operation Bridge Reporter (OBR)", "name": "Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 9.8, "epss": 0.9674, "ms": false }, { "cve": "CVE-2021-22506", "vendor": "Micro Focus", "product": "Micro Focus Access Manager", "name": "Micro Focus Access Manager Information Leakage Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 7.5, "epss": 0.257, "ms": false }, { "cve": "CVE-2021-22893", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "cvss": 10, "epss": 0.4717, "ms": false }, { "cve": "CVE-2021-22894", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.4128, "ms": false }, { "cve": "CVE-2021-22899", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Command Injection Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 8.8, "epss": 0.2234, "ms": false }, { "cve": "CVE-2021-22900", "vendor": "Ivanti", "product": "Pulse Connect Secure", "name": "Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2022-05-03", "cvss": 7.2, "epss": 0.1415, "ms": false }, { "cve": "CVE-2021-22986", "vendor": "F5", "product": "BIG-IP and BIG-IQ Centralized Management", "name": "F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 0.999, "ms": false }, { "cve": "CVE-2021-23874", "vendor": "McAfee", "product": "McAfee Total Protection (MTP)", "name": "McAfee Total Protection (MTP) Improper Privilege Management Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 7.8, "epss": 0.0103, "ms": false }, { "cve": "CVE-2021-26084", "vendor": "Atlassian", "product": "Confluence Server and Data Center", "name": "Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2021-26411", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-26855", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2021-26857", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2021-26858", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2021-27059", "vendor": "Microsoft", "product": "Office", "name": "Microsoft Office Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-27065", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2021-27085", "vendor": "Microsoft", "product": "Internet Explorer", "name": "Microsoft Internet Explorer Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-27101", "vendor": "Accellion", "product": "FTA", "name": "Accellion FTA SQL Injection Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 0.0595, "ms": false }, { "cve": "CVE-2021-27102", "vendor": "Accellion", "product": "FTA", "name": "Accellion FTA OS Command Injection Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 7.8, "epss": 0.0362, "ms": false }, { "cve": "CVE-2021-27103", "vendor": "Accellion", "product": "FTA", "name": "Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 0.1132, "ms": false }, { "cve": "CVE-2021-27104", "vendor": "Accellion", "product": "FTA", "name": "Accellion FTA OS Command Injection Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 0.5641, "ms": false }, { "cve": "CVE-2021-27561", "vendor": "Yealink", "product": "Device Management", "name": "Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 9.8, "epss": 0.8252, "ms": false }, { "cve": "CVE-2021-27562", "vendor": "Arm", "product": "Trusted Firmware", "name": "Arm Trusted Firmware Out-of-Bounds Write Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 5.5, "epss": 0.0309, "ms": false }, { "cve": "CVE-2021-28310", "vendor": "Microsoft", "product": "Win32k", "name": "Microsoft Win32k Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-28550", "vendor": "Adobe", "product": "Acrobat and Reader", "name": "Adobe Acrobat and Reader Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.5201, "ms": false }, { "cve": "CVE-2021-28663", "vendor": "Arm", "product": "Mali Graphics Processing Unit (GPU)", "name": "Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.1208, "ms": false }, { "cve": "CVE-2021-28664", "vendor": "Arm", "product": "Mali Graphics Processing Unit (GPU)", "name": "Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.0541, "ms": false }, { "cve": "CVE-2021-30116", "vendor": "Kaseya", "product": "Virtual System/Server Administrator (VSA)", "name": "Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 0.8573, "ms": false }, { "cve": "CVE-2021-30551", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.647, "ms": false }, { "cve": "CVE-2021-30554", "vendor": "Google", "product": "Chromium WebGL", "name": "Google Chromium WebGL Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.0737, "ms": false }, { "cve": "CVE-2021-30563", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.0893, "ms": false }, { "cve": "CVE-2021-30632", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Out-of-Bounds Write Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.6455, "ms": false }, { "cve": "CVE-2021-30633", "vendor": "Google", "product": "Chromium Indexed DB API", "name": "Google Chromium Indexed DB API Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 9.6, "epss": 0.3266, "ms": false }, { "cve": "CVE-2021-30657", "vendor": "Apple", "product": "macOS", "name": "Apple macOS Unspecified Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 5.5, "epss": 0.6853, "ms": false }, { "cve": "CVE-2021-30661", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Storage Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.0453, "ms": false }, { "cve": "CVE-2021-30663", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Integer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.0369, "ms": false }, { "cve": "CVE-2021-30665", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.0369, "ms": false }, { "cve": "CVE-2021-30666", "vendor": "Apple", "product": "iOS", "name": "Apple iOS WebKit Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.0303, "ms": false }, { "cve": "CVE-2021-30713", "vendor": "Apple", "product": "macOS", "name": "Apple macOS Unspecified Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 7.8, "epss": 0.0658, "ms": false }, { "cve": "CVE-2021-30761", "vendor": "Apple", "product": "iOS", "name": "Apple iOS WebKit Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.1059, "ms": false }, { "cve": "CVE-2021-30762", "vendor": "Apple", "product": "iOS", "name": "Apple iOS WebKit Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.1099, "ms": false }, { "cve": "CVE-2021-30807", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 7.8, "epss": 0.2884, "ms": false }, { "cve": "CVE-2021-30858", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, macOS Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.1349, "ms": false }, { "cve": "CVE-2021-30860", "vendor": "Apple", "product": "Multiple Products", "name": "Apple Multiple Products Integer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 7.8, "epss": 0.7599, "ms": false }, { "cve": "CVE-2021-30869", "vendor": "Apple", "product": "iOS, iPadOS, and macOS", "name": "Apple iOS, iPadOS, and macOS Type Confusion Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 7.8, "epss": 0.0415, "ms": false }, { "cve": "CVE-2021-31199", "vendor": "Microsoft", "product": "Enhanced Cryptographic Provider", "name": "Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-31201", "vendor": "Microsoft", "product": "Enhanced Cryptographic Provider", "name": "Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-31207", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Security Feature Bypass Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-31755", "vendor": "Tenda", "product": "AC11 Router", "name": "Tenda AC11 Router Stack Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 9.8, "epss": 0.8585, "ms": false }, { "cve": "CVE-2021-31955", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Information Disclosure Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-31956", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows NTFS Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-31979", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-33739", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-33742", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-33771", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-34448", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Scripting Engine Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-34473", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-34523", "vendor": "Microsoft", "product": "Exchange Server", "name": "Microsoft Exchange Server Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-34527", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Print Spooler Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2022-05-03", "ms": true }, { "cve": "CVE-2021-35211", "vendor": "SolarWinds", "product": "Serv-U", "name": "SolarWinds Serv-U Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 10, "epss": 0.9116, "ms": false }, { "cve": "CVE-2021-35395", "vendor": "Realtek", "product": "AP-Router SDK", "name": "Realtek AP-Router SDK Buffer Overflow Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 9.8, "epss": 0.9796, "ms": false }, { "cve": "CVE-2021-35464", "vendor": "ForgeRock", "product": "Access Management (AM)", "name": "ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 1, "ms": false }, { "cve": "CVE-2021-36741", "vendor": "Trend Micro", "product": "Apex One, Apex One as a Service, and Worry-Free Business Security", "name": "Trend Micro Multiple Products Improper Input Validation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.0495, "ms": false }, { "cve": "CVE-2021-36742", "vendor": "Trend Micro", "product": "Apex One, Apex One as a Service, and Worry-Free Business Security", "name": "Trend Micro Multiple Products Improper Input Validation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 7.8, "epss": 0.0148, "ms": false }, { "cve": "CVE-2021-36942", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-36948", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Update Medic Service Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-36955", "vendor": "Microsoft", "product": "Windows", "name": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-37973", "vendor": "Google", "product": "Chromium Portals", "name": "Google Chromium Portals Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 9.6, "epss": 0.1173, "ms": false }, { "cve": "CVE-2021-37975", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Use-After-Free Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.3489, "ms": false }, { "cve": "CVE-2021-37976", "vendor": "Google", "product": "Chromium", "name": "Google Chromium Information Disclosure Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 6.5, "epss": 0.199, "ms": false }, { "cve": "CVE-2021-38000", "vendor": "Google", "product": "Chromium Intents", "name": "Google Chromium Intents Improper Input Validation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 6.1, "epss": 0.0449, "ms": false }, { "cve": "CVE-2021-38003", "vendor": "Google", "product": "Chromium V8", "name": "Google Chromium V8 Memory Corruption Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "cvss": 8.8, "epss": 0.3857, "ms": false }, { "cve": "CVE-2021-38645", "vendor": "Microsoft", "product": "Open Management Infrastructure (OMI)", "name": "Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-38647", "vendor": "Microsoft", "product": "Open Management Infrastructure (OMI)", "name": "Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-38648", "vendor": "Microsoft", "product": "Open Management Infrastructure (OMI)", "name": "Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-38649", "vendor": "Microsoft", "product": "Open Management Infrastructure (OMI)", "name": "Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability", "date": "2021-11-03", "ransom": false, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-40444", "vendor": "Microsoft", "product": "MSHTML", "name": "Microsoft MSHTML Remote Code Execution Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "ms": true }, { "cve": "CVE-2021-40539", "vendor": "Zoho", "product": "ManageEngine", "name": "Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 0.9896, "ms": false }, { "cve": "CVE-2021-41773", "vendor": "Apache", "product": "HTTP Server", "name": "Apache HTTP Server Path Traversal Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 0.9999, "ms": false }, { "cve": "CVE-2021-42013", "vendor": "Apache", "product": "HTTP Server", "name": "Apache HTTP Server Path Traversal Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 0.9996, "ms": false }, { "cve": "CVE-2021-42258", "vendor": "BQE", "product": "BillQuick Web Suite", "name": "BQE BillQuick Web Suite SQL Injection Vulnerability", "date": "2021-11-03", "ransom": true, "due": "2021-11-17", "cvss": 9.8, "epss": 0.7345, "ms": false } ] }