Latest vulnerabilities

931 results · Clear filters · Feed

• High 8.8
  CVE-2021-21166 Exploited EPSS 24%

  Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corrupt…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Mar 9, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-27065 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-26858 Exploited · Ransomware EPSS 94%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-26857 Exploited · Ransomware Public exploit EPSS 96%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• High 8.2
  CVE-2021-27877 Exploited · Ransomware Public exploit Scanner template EPSS 65%

  An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentica…

  Mar 1, 2021

  KEV Apr 7, 2023
• High 8.8
  CVE-2021-27878 Exploited · Ransomware Public exploit EPSS 24%

  An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires su…

  Mar 1, 2021

  KEV Apr 7, 2023
• High 8.1
  CVE-2021-27876 Exploited · Ransomware Public exploit EPSS 14%

  An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires su…

  Mar 1, 2021

  KEV Apr 7, 2023
• High 7.8
  CVE-2021-1732 Exploited · Ransomware Public exploit EPSS 78%

  Windows Win32k Elevation of Privilege Vulnerability

  Windows Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 25, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-27102 Exploited · Ransomware

  Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version …

  Feb 16, 2021

  KEV Nov 3, 2021
• High 7.1
  CVE-2021-21315 Exploited Public exploit Scanner template EPSS 91%

  Command Injection Vulnerability

  The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerabili…

  sebhildebrandt systeminformation systeminformation npm
  Feb 16, 2021

  KEV Jan 18, 2022
• High 8.8
  CVE-2021-25298 Exploited Public exploit Scanner template EPSS 74%

  Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosx…

  Feb 15, 2021

  KEV Jan 18, 2022
• High 8.8
  CVE-2021-25296 Exploited Public exploit Scanner template EPSS 72%

  Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosx…

  Feb 15, 2021

  KEV Jan 18, 2022
• High 8.8
  CVE-2021-25297 Exploited Public exploit Scanner template EPSS 57%

  Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosx…

  Feb 15, 2021

  KEV Jan 18, 2022
• High 7.2
  CVE-2021-21311 Exploited Public exploit Scanner template EPSS 98%

  SSRF in adminer

  Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is …

  vrana adminer adminer adminer Debian Ubuntu Packagist
  Feb 11, 2021

  KEV Sep 29, 2025
• High 8.8
  CVE-2021-21017 Exploited Public exploit EPSS 86%

  Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

  Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achiev…

  Adobe Acrobat Reader
  Feb 11, 2021

  KEV Nov 3, 2021
• High 8.2
  CVE-2021-23874 Exploited

  McAfee Total Protection (MTP) privilege escalation vulnerability

  Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.

  McAfee McAfee Total Protection (MTP)
  Feb 10, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-21148 Exploited Public exploit EPSS 20%

  Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit hea…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Feb 9, 2021

  KEV Nov 3, 2021
• High 7.3
  CVE-2020-2506 Exploited

  improper access control vulnerability in Helpdesk

  The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges, or reading sensitive information. This iss…

  QNAP Systems Helpdesk
  Feb 3, 2021

  KEV Mar 25, 2022
• High 7.8
  CVE-2021-3156 Exploited Public exploit EPSS 100%

  Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…

  sudo sudo sudo Debian Ubuntu Alpine
  Jan 26, 2021

  KEV Apr 6, 2022
• High 7.5
  CVE-2020-36193 Exploited EPSS 71%

  Directory Traversal in Archive_Tar

  Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

  drupal7 php-pear php-pear pear/archive_tar Debian Ubuntu Alpine Packagist
  Jan 18, 2021

  KEV Aug 25, 2022
• High 8.8
  CVE-2020-6572 Exploited EPSS 11%

  Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jan 14, 2021

  KEV Jan 10, 2022
• High 7.8
  CVE-2021-1647 Exploited Public exploit EPSS 40%

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Microsoft Security Essentials Windows Defender Microsoft System Center Endpoint Protection Windows
  Jan 12, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2020-16013 Exploited

  Inappropriate implementation in V8 in CefSharp

  Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu NuGet
  Jan 8, 2021

  KEV Nov 3, 2021
• High 8.4
  CVE-2020-17144 Exploited Public exploit EPSS 37%

  Microsoft Exchange Remote Code Execution Vulnerability

  Microsoft Exchange Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31
  Dec 9, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-27930 Exploited Public exploit EPSS 22%

  A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, wa…

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Dec 8, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-27932 Exploited EPSS 10%

  A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS…

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Dec 8, 2020

  KEV Nov 3, 2021
• High 8.8
  CVE-2020-13671 Exploited Public exploit EPSS 36%

  Drupal core Unrestricted Upload of File with Dangerous Type

  Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupa…

  Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Alpine Packagist
  Nov 20, 2020

  KEV Jan 18, 2022
• High 7.8
  CVE-2020-28949 Exploited Public exploit EPSS 85%

  Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrappe…

  drupal7 drupal7 php-pear php-pear Debian Ubuntu Alpine
  Nov 19, 2020

  KEV Aug 25, 2022
• High 7.8
  CVE-2020-17087 Exploited Public exploit

  Windows Kernel Local Elevation of Privilege Vulnerability

  Windows Kernel Local Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 11, 2020

  KEV Nov 3, 2021
• High 8.8
  CVE-2020-16009 Exploited EPSS 48%

  Inappropriate implementation in V8

  Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu NuGet
  Nov 3, 2020

  KEV Nov 3, 2021
• High 8.0
  CVE-2018-19943 Exploited · Ransomware EPSS 23%

  If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has a…

  QNAP Systems QTS
  Oct 28, 2020

  KEV May 24, 2022
• High 7.2
  CVE-2020-8260 Exploited Public exploit EPSS 96%

  A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perfor…

  Oct 28, 2020

  KEV Nov 3, 2021
• High 7.2
  CVE-2020-14883 Exploited Public exploit Scanner template EPSS 98%

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

  Oracle WebLogic Server
  Oct 21, 2020

  KEV Nov 3, 2021
• High 7.5
  CVE-2020-14864 Exploited Public exploit Scanner template EPSS 97%

  Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: In…

  Oracle Business Intelligence Enterprise Edition
  Oct 21, 2020

  KEV Jan 18, 2022
• High 7.8
  CVE-2020-9907 Exploited

  A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.…

  Apple tvOS iOS iOS
  Oct 16, 2020

  KEV Jun 27, 2022
• High 7.2
  CVE-2020-8243 Exploited EPSS 91%

  A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to uplo…

  Sep 29, 2020

  KEV Nov 3, 2021
• High 8.6
  CVE-2020-3569 Exploited

  Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities

  Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol (IGMP) process or make it co…

  Cisco Cisco IOS XR Software iOS Network devices
  Sep 23, 2020

  KEV Nov 3, 2021
• High 7.5
  CVE-2020-25078 Exploited Public exploit Scanner template EPSS 98%

  An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticat…

  Sep 2, 2020

  KEV Aug 5, 2025
• High 8.8
  CVE-2020-25079 Exploited EPSS 54%

  An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.…

  Sep 2, 2020

  KEV Aug 5, 2025
• High 7.8
  CVE-2020-24557 Exploited

  A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an att…

  Trend Micro Trend Micro Apex One Trend Micro Worry-Free Business Security
  Sep 1, 2020

  KEV Nov 3, 2021