Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-27 20:19Z
2021-07-14
2021-07-14 18:15Z
CRIT

CVE-2021-34473 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34473in the wild

Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 9.1 (CRITICAL) · EPSS 100th percentile

CWECWE 918VNDMicrosoftTYPVulnerabilitySTAitw exploited
9.1
CVSS v3.1
100
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-34470 — Microsoft Exchange_server: Exchange Server Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34470

Microsoft Exchange Server Elevation of Privilege Vulnerability CVSSv3.1 8.0 (HIGH) · EPSS 87th percentile

VNDMicrosoftTYPVulnerability
8.0
CVSS v3.1
91
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-34469 — Microsoft 365_apps: Office Security Feature Bypass Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34469

Microsoft Office Security Feature Bypass Vulnerability CVSSv3.1 8.2 (HIGH) · EPSS 87th percentile

VNDMicrosoftTYPVulnerability
8.2
CVSS v3.1
92
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33786 — Microsoft Windows_server_2008: Windows LSA Security Feature Bypass Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33786

Windows LSA Security Feature Bypass Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 78th percentile

VNDMicrosoftTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33781 — Microsoft Windows_10: Azure AD Security Feature Bypass Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33781

Azure AD Security Feature Bypass Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 81th percentile

VNDMicrosoftVNDAzureTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33780 — Microsoft Windows_server_2008: Windows DNS Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33780

Windows DNS Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 83th percentile

VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33779 — Microsoft Windows_server_2016: Windows AD FS Security Feature Bypass Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33779

Windows AD FS Security Feature Bypass Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 81th percentile

VNDMicrosoftTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
728 × 90 / responsive · programmatic ad slot
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33771 — Microsoft Windows_10_1507: Windows Kernel Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33771in the wild

Windows Kernel Elevation of Privilege Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 93th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
91
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33768 — Microsoft Exchange_server: Exchange Server Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33768

Microsoft Exchange Server Elevation of Privilege Vulnerability CVSSv3.1 8.0 (HIGH) · EPSS 64th percentile

VNDMicrosoftTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33767 — Microsoft Open_enclave_software_development_kit: Open Enclave SDK Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33767

Open Enclave SDK Elevation of Privilege Vulnerability CVSSv3.1 8.2 (HIGH) · EPSS 53th percentile

VNDMicrosoftTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33766 — Microsoft Exchange_server: Exchange Server Information Disclosure Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33766in the wild

Microsoft Exchange Server Information Disclosure Vulnerability CVSSv3.1 7.3 (HIGH) · EPSS 100th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.3
CVSS v3.1
100
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33756 — Microsoft Windows_10: Windows DNS Snap-in Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33756

Windows DNS Snap-in Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 81th percentile

VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33754 — Microsoft Windows_server_2008: Windows DNS Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33754

Windows DNS Server Remote Code Execution Vulnerability CVSSv3.1 8.0 (HIGH) · EPSS 77th percentile

VNDMicrosoftTYPVulnerability
8.0
CVSS v3.1
91
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33752 — Microsoft Windows_10: Windows DNS Snap-in Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33752

Windows DNS Snap-in Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 81th percentile

VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33750 — Microsoft Windows_10: Windows DNS Snap-in Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33750

Windows DNS Snap-in Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 81th percentile

VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33749 — Microsoft Windows_10: Windows DNS Snap-in Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33749

Windows DNS Snap-in Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 81th percentile

VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-33746 — Microsoft Windows_server_2008: Windows DNS Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33746

Windows DNS Server Remote Code Execution Vulnerability CVSSv3.1 8.0 (HIGH) · EPSS 77th percentile

VNDMicrosoftTYPVulnerability
8.0
CVSS v3.1
91
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-31979 — Microsoft Windows_10_1507: Windows Kernel Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-31979in the wild

Windows Kernel Elevation of Privilege Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 84th percentile

CWECWE 119VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
90
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-31206 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-31206

Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 7.6 (HIGH) · EPSS 95th percentile

VNDMicrosoftTYPVulnerability
7.6
CVSS v3.1
91
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-31196 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-31196in the wild

Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 7.2 (HIGH) · EPSS 99th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.2
CVSS v3.1
100
Edit Score
2021-07-14
2021-07-14 15:15Z
CRIT

CVE-2021-22779 — Schneider-electric Ecostruxure_control_expert: Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-22779

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), SCADAPack RemoteConnect for x70 (all versions), Modicon M580 CPU (all versions - part numbers BMEP* and BMEH*), Modicon M340 CPU (all versions - part numbers BMXP34*), that could cause unautho CVSSv3.1 9.1 (CRITICAL) · EPSS 41th percentile

CWECWE 290VNDSchneider ElectricTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2021-07-13
2021-07-13 08:15Z
HIGH

CVE-2021-36090 — Apache Commons_compress: When reading a specially crafted ZIP archive, Compress can be made to allocate large

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-36090

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package. CVSSv3.1 7.5 (HIGH) · EPSS 96th percentile

CWECWE 130VNDApacheVNDOracleTYPVulnerability
7.5
CVSS v3.1
91
Edit Score
2021-07-13
2021-07-13 08:15Z
HIGH

CVE-2021-35517 — Apache Commons_compress: When reading a specially crafted TAR archive, Compress can be made to allocate large

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-35517

When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package. CVSSv3.1 7.5 (HIGH) · EPSS 96th percentile

CWECWE 770CWECWE 130VNDApacheVNDNetappTYPVulnerability
7.5
CVSS v3.1
91
Edit Score
2021-07-12
2021-07-12 15:15Z
MED

CVE-2021-33037 — Apache Tomcat: 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33037

Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding header if the client declared it would only accept an HTTP/1.0 response; - Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if present, the chunked e CVSSv3.1 5.3 (MEDIUM) · EPSS 99th percentile

CWECWE 444VNDApacheTYPVulnerability
5.3
CVSS v3.1
99
Edit Score
2021-07-12
2021-07-12 15:15Z
MED

CVE-2021-30640 — Apache Tomcat: A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-30640

A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65. CVSSv3.1 6.5 (MEDIUM) · EPSS 95th percentile

CWECWE 116VNDApacheVNDOracleTYPVulnerability
6.5
CVSS v3.1
85
Edit Score