Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-27 09:26Z
2021-11-10
2021-11-10 01:19Z
HIGH

CVE-2021-42321 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-42321in the wild

Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 100th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
8.8
CVSS v3.1
100
Edit Score
2021-11-10
2021-11-10 01:19Z
HIGH

CVE-2021-42316 — Microsoft Dynamics_365: Dynamics 365 On-Premises Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-42316

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 81th percentile

VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-11-10
2021-11-10 01:19Z
HIGH

CVE-2021-42292 — Microsoft 365_apps: Excel Security Feature Bypass Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-42292in the wild

Microsoft Excel Security Feature Bypass Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 98th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
99
Edit Score
2021-11-10
2021-11-10 01:19Z
HIGH

CVE-2021-42287 — Microsoft Windows_server_2008: Active Directory Domain Services Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-42287in the wild

Active Directory Domain Services Elevation of Privilege Vulnerability CVSSv3.1 7.5 (HIGH) · EPSS 99th percentile

VNDMicrosoftVNDActiveTYPVulnerabilitySTAitw exploited
7.5
CVSS v3.1
100
Edit Score
2021-11-10
2021-11-10 01:19Z
HIGH

CVE-2021-42283 — Microsoft Windows_10: NTFS Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-42283

NTFS Elevation of Privilege Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 36th percentile

CWECWE 269VNDMicrosoftVNDNtfsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-11-10
2021-11-10 01:19Z
HIGH

CVE-2021-42278 — Microsoft Windows_server_2004: Active Directory Domain Services Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-42278in the wild

Active Directory Domain Services Elevation of Privilege Vulnerability CVSSv3.1 7.5 (HIGH) · EPSS 99th percentile

VNDMicrosoftVNDActiveTYPVulnerabilitySTAitw exploited
7.5
CVSS v3.1
100
Edit Score
2021-11-10
2021-11-10 01:19Z
HIGH

CVE-2021-42275 — Microsoft Windows_10: COM for Windows Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-42275

Microsoft COM for Windows Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 78th percentile

VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
728 × 90 / responsive · programmatic ad slot
2021-11-10
2021-11-10 01:19Z
MED

CVE-2021-41379 — Microsoft Windows_10_1507: Windows Installer Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-41379in the wild

Windows Installer Elevation of Privilege Vulnerability CVSSv3.1 5.5 (MEDIUM) · EPSS 97th percentile

CWECWE 59VNDMicrosoftTYPVulnerabilitySTAitw exploited
5.5
CVSS v3.1
84
Edit Score
2021-11-10
2021-11-10 01:19Z
MED

CVE-2021-41349 — Microsoft Exchange_server: Exchange Server Spoofing Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-41349

Microsoft Exchange Server Spoofing Vulnerability CVSSv3.1 6.5 (MEDIUM) · EPSS 100th percentile

VNDMicrosoftTYPVulnerability
6.5
CVSS v3.1
100
Edit Score
2021-11-10
2021-11-10 01:18Z
HIGH

CVE-2021-38666 — Microsoft Windows_10: Remote Desktop Client Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-38666

Remote Desktop Client Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 96th percentile

VNDMicrosoftVNDDesktopTYPVulnerability
8.8
CVSS v3.1
98
Edit Score
2021-11-10
2021-11-10 01:16Z
CRIT

CVE-2021-26443 — Microsoft Windows_10: Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26443

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability CVSSv3.1 9.0 (CRITICAL) · EPSS 73th percentile

VNDMicrosoftTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2021-11-05
2021-11-05 10:15Z
CRIT

CVE-2021-42237 — Sitecore Experience_platform: XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-42237in the wild

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability. CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile

CWECWE 502VNDSitecoreTYPVulnerabilitySTAitw exploited
9.8
CVSS v3.1
100
Edit Score
2021-11-04
2021-11-04 11:15Z
CRIT

CVE-2020-25368 — Dlink Dir-823g_firmware: A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-25368

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the PrivateLogin field to Login. CVSSv3.1 9.8 (CRITICAL) · EPSS 96th percentile

CWECWE 78VNDDlinkTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-11-04
2021-11-04 11:15Z
CRIT

CVE-2020-25366 — Dlink Dir-823g_firmware: An issue in the component /cgi-bin/upload_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-25366

An issue in the component /cgi-bin/upload_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows attackers to cause a denial of service (DoS) via unspecified vectors. CVSSv3.1 9.1 (CRITICAL) · EPSS 87th percentile

CWECWE 862VNDDlinkTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2021-11-04
2021-11-04 10:15Z
CRIT

CVE-2020-25367 — Dlink Dir-823g_firmware: A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-25367

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the Captcha field to Login. CVSSv3.1 9.8 (CRITICAL) · EPSS 96th percentile

CWECWE 78VNDDlinkTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-11-03
2021-11-03 01:15Z
HIGH

CVE-2021-29993 — Mozilla Firefox_mobile: Firefox for Android allowed navigations through the `intent://` protocol, which could be used to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-29993

Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 92. CVSSv3.1 8.1 (HIGH) · EPSS 50th percentile

VNDMozillaVNDFirefoxTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2021-10-31
2021-10-31 19:15Z
CRIT

CVE-2020-25912 — Getsymphony Symphony: A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.10 which

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-25912

A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.10 which can lead to an information disclosure or denial of service (DOS). CVSSv3.1 9.1 (CRITICAL) · EPSS 69th percentile

CWECWE 611VNDGetsymphonyTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2021-10-29
2021-10-29 18:15Z
CRIT

CVE-2021-41646 — Janobe Online_reviewer_system: Remote Code Execution (RCE) vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-41646

Remote Code Execution (RCE) vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters.. CVSSv3.1 9.8 (CRITICAL) · EPSS 88th percentile

CWECWE 434VNDJanobeVNDCodeTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-10-29
2021-10-29 11:15Z
HIGH

CVE-2021-31627 — Tendacn Ac9_firmware: Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-31627

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the index parameter. CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile

CWECWE 120VNDBufferVNDTendacnTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-10-29
2021-10-29 11:15Z
HIGH

CVE-2021-31624 — Tendacn Ac9_firmware: Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-31624

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the urls parameter. CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile

CWECWE 120VNDBufferVNDTendacnTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-10-27
2021-10-27 19:15Z
HIGH

CVE-2021-40118 — Cisco Adaptive_security_appliance: A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-40118

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS requests. An attacker could exploit this vulnerability by sending a malicious HTTPS request to an affected device. A successful exploit could allow the attacker t CVSSv3.1 8.6 (HIGH) · EPSS 68th percentile

CWECWE 787CWECWE 121VNDCiscoTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2021-10-27
2021-10-27 19:15Z
HIGH

CVE-2021-40117 — Cisco Adaptive_security_appliance: A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-40117

A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because incoming SSL/TLS packets are not properly processed. An attacker could exploit this vulnerability by sending a crafted SSL/TLS packet to an affected device. A successful exploit could CVSSv3.1 8.6 (HIGH) · EPSS 71th percentile

CWECWE 119CWECWE 400VNDCiscoTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2021-10-27
2021-10-27 19:15Z
HIGH

CVE-2021-40116 — Cisco Secure_firewall_management_center: Multiple Cisco products are affected by a vulnerability in Snort rules that could allow

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-40116

Multiple Cisco products are affected by a vulnerability in Snort rules that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.The vulnerability is due to improper handling of the Block with Reset or Interactive Block with Reset actions if a rule is configured without proper constraints. An attacker could exploit this vulnerability by sending a crafted IP packet to the affected device. A successful exploit could CVSSv3.1 8.6 (HIGH) · EPSS 69th percentile

CWECWE 241VNDCiscoTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2021-10-27
2021-10-27 19:15Z
HIGH

CVE-2021-34793 — Cisco Adaptive_security_appliance: A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34793

A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service (DoS) vulnerability. This vulnerability is due to incorrect handling of certain TCP segments when the affected device is operating in transparent mode. An attacker could exploit this vulnerability by sendi CVSSv3.1 8.6 (HIGH) · EPSS 48th percentile

CWECWE 924VNDCiscoVNDTcpTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2021-10-27
2021-10-27 19:15Z
HIGH

CVE-2021-34792 — Cisco Secure_firewall_threat_defense: A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34792

A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper resource management when connection rates are high. An attacker could exploit this vulnerability by opening a significant number of connections on an affected device. A successful exploit c CVSSv3.1 8.6 (HIGH) · EPSS 70th percentile

CWECWE 400CWECWE 401VNDCiscoTYPVulnerability
8.6
CVSS v3.1
93
Edit Score