Latest vulnerabilities

639 results · Clear filters · Feed

• Critical 9.8
  CVE-2020-7961 Exploited Public exploit Scanner template EPSS 100%

  Deserialization of Untrusted Data in Liferay Portal

  Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).

  com.liferay.portal:com.liferay.portal.kernel Maven
  Mar 20, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-8599 Exploited EPSS 12%

  Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker t…

  Trend Micro Trend Micro OfficeScan, Trend Micro Apex One
  Mar 18, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-5847 Exploited Public exploit Scanner template EPSS 96%

  Unraid through 6.8.0 allows Remote Code Execution.

  Mar 16, 2020

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2020-0796 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Mar 12, 2020

  KEV Feb 10, 2022
• Critical 9.8
  CVE-2020-10181 Exploited EPSS 15%

  goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevat…

  Mar 11, 2020

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2020-6207 Exploited Public exploit Scanner template EPSS 98%

  SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform a…

  SAP SAP Solution Manager (User Experience Monitoring)
  Mar 10, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-10189 Exploited Public exploit Scanner template EPSS 100%

  Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted …

  Mar 6, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-9054 Exploited Public exploit Scanner template EPSS 100%

  ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi

  Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS de…

  Zyxel NSA325v2 NSA210 NSA221 Network devices
  Mar 4, 2020

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2020-1938 Exploited Public exploit Scanner template EPSS 99%

  Improper Privilege Management in Tomcat

  When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an atta…

  Apache Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  Feb 24, 2020

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2020-7796 Exploited Scanner template EPSS 94%

  Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is ena…

  Feb 18, 2020

  KEV Feb 17, 2026
• Critical 9.8
  CVE-2020-0618 Exploited · Ransomware Public exploit Scanner template EPSS 99%

  A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles pag…

  Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) Microsoft SQL Server Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)
  Feb 11, 2020

  KEV Sep 18, 2024
• Critical 9.8
  CVE-2020-8657 Exploited Public exploit Scanner template EPSS 92%

  An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in includ…

  Feb 6, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-8644 Exploited Public exploit Scanner template EPSS 86%

  PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

  Feb 5, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-8515 Exploited Public exploit Scanner template EPSS 100%

  DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allo…

  Feb 1, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-7247 Exploited Public exploit Scanner template EPSS 99%

  smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to…

  opensmtpd opensmtpd opensmtpd Debian Ubuntu Alpine
  Jan 29, 2020

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2020-2551 Exploited Public exploit Scanner template EPSS 93%

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppo…

  Oracle WebLogic Server
  Jan 15, 2020

  KEV Nov 16, 2023
• Critical 9.8
  CVE-2020-2555 Exploited Public exploit EPSS 97%

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). S…

  Oracle WebCenter Portal Utilities Framework
  Jan 15, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-0646 Exploited Public exploit EPSS 99%

  A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows
  Jan 14, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-17621 Exploited Public exploit EPSS 91%

  The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated re…

  Dec 30, 2019

  KEV Jun 29, 2023
• Critical 9.8
  CVE-2019-19781 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. T…

  Dec 27, 2019

  KEV Nov 3, 2021
• Critical 9.9
  CVE-2019-10758 Exploited Public exploit Scanner template EPSS 85%

  Remote Code Execution Vulnerability in NPM mongo-express

  mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.

  mongo-express npm
  Dec 24, 2019

  KEV Dec 10, 2021
• Critical 10.0
  CVE-2019-4716 Exploited Public exploit Scanner template EPSS 86%

  IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated us…

  IBM Planning Analytics
  Dec 18, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-18935 Exploited · Ransomware Public exploit EPSS 100%

  Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncU…

  Dec 11, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-5544 Exploited · Ransomware Public exploit Scanner template EPSS 98%

  OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity o…

  openslp-dfsg openslp Virtualization Ubuntu Azure Linux
  Dec 6, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-7195 Exploited · Ransomware Public exploit Scanner template EPSS 89%

  This external control of file name or path vulnerability allows remote attackers to access or modify system files. To f…

  Dec 5, 2019

  KEV Jun 8, 2022
• Critical 9.8
  CVE-2019-7194 Exploited · Ransomware Public exploit Scanner template EPSS 83%

  This external control of file name or path vulnerability allows remote attackers to access or modify system files. To f…

  Dec 5, 2019

  KEV Jun 8, 2022
• Critical 9.8
  CVE-2019-7193 Exploited · Ransomware EPSS 14%

  This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the…

  Dec 5, 2019

  KEV Jun 8, 2022
• Critical 9.8
  CVE-2019-7192 Exploited · Ransomware Public exploit Scanner template EPSS 88%

  This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix th…

  Dec 5, 2019

  KEV Jun 8, 2022
• Critical 9.8
  CVE-2019-19006 Exploited EPSS 55%

  Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.

  Nov 21, 2019

  KEV Feb 3, 2026
• Critical 9.8
  CVE-2019-16278 Exploited Public exploit Scanner template EPSS 99%

  Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote c…

  Oct 14, 2019

  KEV Nov 7, 2024
• Critical 9.8
  CVE-2019-16928 Exploited EPSS 42%

  Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-b…

  exim4 exim Debian Alpine
  Sep 27, 2019

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2019-16920 Exploited Public exploit Scanner template EPSS 100%

  Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The …

  Sep 27, 2019

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2019-16759 Exploited Public exploit Scanner template EPSS 100%

  vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widg…

  Sep 24, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-16057 Exploited · Ransomware Scanner template EPSS 86%

  The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

  Sep 16, 2019

  KEV Apr 15, 2022
• Critical 9.8
  CVE-2019-16256 Exploited

  Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote at…

  Sep 12, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-15107 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulner…

  Aug 16, 2019

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2019-0344 Exploited

  Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 18…

  SAP SAP Commerce Cloud (virtualjdbc extension)
  Aug 14, 2019

  KEV Sep 30, 2024
• Critical 9.8
  CVE-2019-11581 Exploited Public exploit Scanner template EPSS 85%

  There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators a…

  Atlassian Jira Server and Data Center Web / CMS
  Aug 9, 2019

  KEV Mar 7, 2022
• Critical 10.0
  CVE-2019-11708 Exploited Public exploit EPSS 56%

  Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can resul…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019

  KEV May 23, 2022
• Critical 9.8
  CVE-2019-12989 Exploited Public exploit Scanner template EPSS 95%

  Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.

  Jul 16, 2019

  KEV Mar 25, 2022