Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-27 10:13Z
2021-10-27
2021-10-27 19:15Z
HIGH

CVE-2021-34793 — Cisco Adaptive_security_appliance: A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34793

A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service (DoS) vulnerability. This vulnerability is due to incorrect handling of certain TCP segments when the affected device is operating in transparent mode. An attacker could exploit this vulnerability by sendi CVSSv3.1 8.6 (HIGH) · EPSS 48th percentile

CWECWE 924VNDCiscoVNDTcpTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2021-10-27
2021-10-27 19:15Z
HIGH

CVE-2021-34792 — Cisco Secure_firewall_threat_defense: A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34792

A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper resource management when connection rates are high. An attacker could exploit this vulnerability by opening a significant number of connections on an affected device. A successful exploit c CVSSv3.1 8.6 (HIGH) · EPSS 70th percentile

CWECWE 400CWECWE 401VNDCiscoTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2021-10-27
2021-10-27 19:15Z
HIGH

CVE-2021-34783 — Cisco Secure_firewall_threat_defense: A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34783

A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient validation of SSL/TLS messages when the device performs software-based SSL/TLS decryption. An attacker could exploit this vulnerability by send CVSSv3.1 8.6 (HIGH) · EPSS 73th percentile

CWECWE 20CWECWE 119VNDCiscoTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2021-10-27
2021-10-27 19:15Z
HIGH

CVE-2021-34781 — Cisco Firepower_management_center_virtual_appliance: A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34781

A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to a lack of proper error handling when an SSH session fails to be established. An attacker could exploit this vulnerability by sending a high rate of crafted SSH connections to the instance. A successful CVSSv3.1 8.6 (HIGH) · EPSS 69th percentile

CWECWE 119CWECWE 755VNDCiscoTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2021-10-27
2021-10-27 19:15Z
HIGH

CVE-2021-34762 — Cisco Firepower_management_center_virtual_appliance: A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34762

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The attacker would require valid device credentials. The vulnerability is due to insufficient input validation of the HTTPS URL by the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTPS request that contains dire CVSSv3.1 8.1 (HIGH) · EPSS 78th percentile

CWECWE 22CWECWE 26VNDCiscoTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2021-10-26
2021-10-26 15:15Z
MED

CVE-2021-41184 — Jqueryui Jquery_ui: jQuery-UI is the official jQuery user interface library.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-41184

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A workaround is to not accept the value of the `of` option from untrusted sources. CVSSv3.1 6.5 (MEDIUM) · EPSS 99th percentile

CWECWE 79VNDFedoraprojectVNDJqueryuiTYPVulnerability
6.5
CVSS v3.1
95
Edit Score
2021-10-26
2021-10-26 15:15Z
MED

CVE-2021-41182 — Jqueryui Jquery_ui: jQuery-UI is the official jQuery user interface library.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-41182

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources. CVSSv3.1 6.5 (MEDIUM) · EPSS 98th percentile

CWECWE 79VNDFedoraprojectVNDJqueryuiTYPVulnerability
6.5
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2021-10-11
2021-10-11 13:15Z
HIGH

CVE-2021-29005 — Rconfig Rconfig: Insecure permission of chmod command on rConfig server 3.9.6 exists.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-29005

Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute chmod as root without password which may let an attacker with low privilege to gain root access on server. CVSSv3.1 8.8 (HIGH) · EPSS 76th percentile

CWECWE 276VNDRconfigTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-10-11
2021-10-11 12:15Z
HIGH

CVE-2021-29004 — Rconfig Rconfig: 3.9.6 is affected by SQL Injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-29004

rConfig 3.9.6 is affected by SQL Injection. A user must be authenticated to exploit the vulnerability. If --secure-file-priv in MySQL server is not set and the Mysql server is the same as rConfig, an attacker may successfully upload a webshell to the server and access it remotely. CVSSv3.1 8.8 (HIGH) · EPSS 79th percentile

CWECWE 89VNDRconfigTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-10-01
2021-10-01 19:15Z
CRIT

CVE-2020-21012 — Nikhil-bhalerao Hotel_and_lodge_management_system: Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21012

Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details. CVSSv3.1 9.8 (CRITICAL) · EPSS 89th percentile

CWECWE 89VNDSourcecodesterVNDNikhil BhaleraoTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-09-23
2021-09-23 13:15Z
CRIT

CVE-2021-22945 — Haxx Libcurl: When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-22945

When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*. CVSSv3.1 9.1 (CRITICAL) · EPSS 94th percentile

CWECWE 415VNDFedoraprojectVNDNetappVNDHaxxTYPVulnerability
9.1
CVSS v3.1
98
Edit Score
2021-09-20
2021-09-20 16:15Z
HIGH

CVE-2021-39537 — Invisible-island Ncurses: _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-39537

An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow. CVSSv3.1 8.8 (HIGH) · EPSS 87th percentile

CWECWE 787VNDAppleVNDInvisible IslandTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-09-17
2021-09-17 21:15Z
HIGH

CVE-2020-21548 — Saitoha Libsixel: 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in tosixel.c.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21548

Libsixel 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in tosixel.c. CVSSv3.1 8.8 (HIGH)

CWECWE 787VNDLibsixelVNDSaitohaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-09-17
2021-09-17 21:15Z
HIGH

CVE-2020-21547 — Saitoha Libsixel: 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21547

Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c. CVSSv3.1 8.8 (HIGH)

CWECWE 787VNDLibsixelVNDSaitohaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-09-17
2021-09-17 18:15Z
CRIT

CVE-2021-41326 — Misp-project Misp: In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shell_exec

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-41326

In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shell_exec call. CVSSv3.1 9.8 (CRITICAL)

VNDMispVNDMisp ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2021-09-16
2021-09-16 15:15Z
CRIT

CVE-2021-40438 — Resf Rocky_linux: A crafted request uri-path can cause mod_proxy to forward the request to an origin

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-40438in the wild

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. CVSSv3.1 9.0 (CRITICAL) · EPSS 100th percentile

CWECWE 918VNDResfTYPVulnerabilitySTAitw exploited
9.0
CVSS v3.1
100
Edit Score
2021-09-15
2021-09-15 12:15Z
HIGH

CVE-2021-40444 — Microsoft Windows_10_1507: is investigating reports of a remote code execution vulnerability in MSHTML that affects

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-40444in the wild

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering engine. The attacker would then have to convince the user to open the malicious document. Users wh CVSSv3.1 8.8 (HIGH) · EPSS 100th percentile

CWECWE 22VNDMicrosoftTYPVulnerabilitySTAitw exploited
8.8
CVSS v3.1
100
Edit Score
2021-09-15
2021-09-15 12:15Z
HIGH

CVE-2021-38649 — Microsoft Azure_automation_state_configuration: Open Management Infrastructure Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-38649in the wild

Open Management Infrastructure Elevation of Privilege Vulnerability CVSSv3.1 7.0 (HIGH) · EPSS 79th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.0
CVSS v3.1
86
Edit Score
2021-09-15
2021-09-15 12:15Z
HIGH

CVE-2021-38648 — Microsoft Azure_automation_state_configuration: Open Management Infrastructure Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-38648in the wild

Open Management Infrastructure Elevation of Privilege Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 96th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
92
Edit Score
2021-09-15
2021-09-15 12:15Z
CRIT

CVE-2021-38647 — Microsoft Azure_automation_state_configuration: Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-38647in the wild

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
9.8
CVSS v3.1
100
Edit Score
2021-09-15
2021-09-15 12:15Z
HIGH

CVE-2021-38646 — Microsoft 365_apps: Office Access Connectivity Engine Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-38646in the wild

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 90th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
90
Edit Score
2021-09-15
2021-09-15 12:15Z
HIGH

CVE-2021-38645 — Microsoft Azure_automation_state_configuration: Open Management Infrastructure Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-38645in the wild

Open Management Infrastructure Elevation of Privilege Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 78th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
90
Edit Score
2021-09-15
2021-09-15 12:15Z
HIGH

CVE-2021-36967 — Microsoft Windows_10: Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-36967

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability CVSSv3.1 8.0 (HIGH) · EPSS 52th percentile

CWECWE 269VNDMicrosoftTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2021-09-15
2021-09-15 12:15Z
HIGH

CVE-2021-36965 — Microsoft Windows_10: Windows WLAN AutoConfig Service Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-36965

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 90th percentile

VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-09-15
2021-09-15 12:15Z
HIGH

CVE-2021-36955 — Microsoft Windows_10_1507: Windows Common Log File System Driver Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-36955in the wild

Windows Common Log File System Driver Elevation of Privilege Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 87th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
90
Edit Score