Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-27 20:57Z
2021-07-09
2021-07-09 15:15Z
HIGH

CVE-2021-33012 — Rockwellautomation Micrologix_1100_firmware: Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33012

Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when the controller is switched to RUN mode, which results in a denial-of-service condition. If successfully exploited, this vulnerability will cause the controller to fault whenever the controller is switched to RUN mode. CVSSv3.1 8.6 (HIGH) · EPSS 86th percentile

CWECWE 20VNDRockwellautomationVNDRockwellTYPVulnerability
8.6
CVSS v3.1
94
Edit Score
2021-07-07
2021-07-07 12:15Z
HIGH

CVE-2021-22555 — Netapp C400_firmware: A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-22555in the wild

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space CVSSv3.1 8.3 (HIGH) · EPSS 100th percentile

CWECWE 787VNDNetappTYPVulnerabilitySTAitw exploited
8.3
CVSS v3.1
100
Edit Score
2021-07-02
2021-07-02 22:15Z
HIGH

CVE-2021-34527 — Microsoft Windows_10_1507: A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34527in the wild

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. UPDATE July 7, 2021: The security update for Windows Server 2012, Windows Server 2016 and Windows 10, Version 1607 have been CVSSv3.1 8.8 (HIGH) · EPSS 100th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
8.8
CVSS v3.1
100
Edit Score
2021-06-25
2021-06-25 21:15Z
CRIT

CVE-2021-35502 — Misp-project Misp: app/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp in MISP 2.4.144 does not sanitize certain data related to generic-template:index.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-35502

app/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp in MISP 2.4.144 does not sanitize certain data related to generic-template:index. CVSSv3.1 9.8 (CRITICAL) · EPSS 61th percentile

VNDMispVNDMisp ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2021-06-16
2021-06-16 20:15Z
HIGH

CVE-2021-34203 — Dlink Dir-2640-us_firmware: D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34203

D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 (dir-2640-us), when setting PPPoE, will start quagga process in the way of whole network monitoring, and this function uses the original default password and port. An attacker can easily use telnet to log in, modify routing information, monitor the traffic of all devices under the router, hijack DNS and phishing attacks. In addition, this interface is likely to be questioned by customers as a CVSSv3.1 8.1 (HIGH) · EPSS 73th percentile

CWECWE 1188VNDDlinkVNDLinkTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2021-06-16
2021-06-16 08:15Z
CRIT

CVE-2020-9493 — Apache Chainsaw: A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-9493

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution. CVSSv3.1 9.8 (CRITICAL) · EPSS 91th percentile

CWECWE 502VNDApacheVNDQosTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-06-11
2021-06-11 16:15Z
HIGH

CVE-2021-22901 — Haxx Curl: 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-22901

curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote code execution in the client. When libcurl at run-time sets up support for TLS 1.3 session tickets on a connection using OpenSSL, it stores pointers to the transfer in-memory object for later retrieval when a sess CVSSv3.1 8.1 (HIGH) · EPSS 99th percentile

CWECWE 416VNDOracleVNDHaxxTYPVulnerability
8.1
CVSS v3.1
100
Edit Score
728 × 90 / responsive · programmatic ad slot
2021-06-11
2021-06-11 16:15Z
CRIT

CVE-2021-22768 — Schneider-electric Powerlogic_egx100_firmware: A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-22768

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767 CVSSv3.1 9.8 (CRITICAL) · EPSS 74th percentile

CWECWE 20VNDSchneider ElectricVNDCweTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2021-06-11
2021-06-11 16:15Z
CRIT

CVE-2021-22767 — Schneider-electric Powerlogic_egx100_firmware: A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-22767

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-2276 CVSSv3.1 9.8 (CRITICAL) · EPSS 74th percentile

CWECWE 20VNDSchneider ElectricVNDCweTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2021-06-11
2021-06-11 16:15Z
CRIT

CVE-2021-22765 — Schneider-electric Powerlogic_egx100_firmware: A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-22765

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet CVSSv3.1 9.8 (CRITICAL) · EPSS 70th percentile

CWECWE 20VNDSchneider ElectricVNDCweTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2021-06-11
2021-06-11 16:15Z
CRIT

CVE-2021-22763 — Schneider-electric Powerlogic_pm5560_firmware: A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-22763

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device. CVSSv3.1 9.8 (CRITICAL) · EPSS 50th percentile

CWECWE 640VNDSchneider ElectricVNDCweTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2021-06-11
2021-06-11 16:15Z
MED

CVE-2021-22175 — Gitlab Gitlab: When requests to the internal network for webhooks are enabled, a server-side request forgery

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-22175in the wild

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is disabled CVSSv3.1 6.8 (MEDIUM) · EPSS 99th percentile

CWECWE 918VNDGitlabTYPVulnerabilitySTAitw exploited
6.8
CVSS v3.1
100
Edit Score
2021-06-10
2021-06-10 15:15Z
HIGH

CVE-2021-31659 — Tp-link Tl-sg2005_firmware: 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF).

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-31659

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF). All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the password of the switch to be modified and the configuration file to be tampered with. CVSSv3.1 8.8 (HIGH) · EPSS 44th percentile

CWECWE 352VNDTp LinkVNDLinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-06-10
2021-06-10 15:15Z
HIGH

CVE-2021-31658 — Tp-link Tl-sg2005_firmware: TL-SG2005, TL-SG2008, etc.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-31658

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface that provides the "device description" function only judges the length of the received data, and does not filter special characters. This vulnerability will cause the application to crash, and all device configuration information will be erased. CVSSv3.1 8.1 (HIGH) · EPSS 60th percentile

CWECWE 129VNDTp LinkVNDLinkTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2021-06-09
2021-06-09 20:15Z
HIGH

CVE-2020-24489 — Intel Atom_x5-e3930: Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-24489

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access. CVSSv3.1 8.8 (HIGH) · EPSS 27th percentile

CWECWE 459VNDIntelVNDIncompleteTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-06-08
2021-06-08 23:15Z
HIGH

CVE-2021-1675 — Microsoft Windows_10_1507: Windows Print Spooler Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-1675in the wild

Windows Print Spooler Remote Code Execution Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 100th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
100
Edit Score
2021-06-02
2021-06-02 13:15Z
CRIT

CVE-2021-3520 — Lz4_project Lz4: An attacker who submits a crafted file to an application linked with lz4 may

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-3520

There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well. CVSSv3.1 9.8 (CRITICAL) · EPSS 88th percentile

CWECWE 787CWECWE 190VNDNetappVNDLz4 ProjectTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-05-28
2021-05-28 21:15Z
HIGH

CVE-2021-29505 — Xstream Xstream: A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-29505

XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17. CVSSv3.1 7.5 (HIGH) · EPSS 100th percentile

CWECWE 94CWECWE 502VNDXstreamTYPVulnerability
7.5
CVSS v3.1
100
Edit Score
2021-05-28
2021-05-28 16:15Z
CRIT

CVE-2020-15782 — Siemens Simatic_driver_controller_firmware: Affected devices are vulnerable to a memory protection bypass through a specific operation.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-15782

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software C CVSSv3.1 9.8 (CRITICAL) · EPSS 53th percentile

CWECWE 119VNDSiemensTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2021-05-26
2021-05-26 19:15Z
CRIT

CVE-2019-25029 — Versa-networks Versa_director: In Versa Director, the command injection is an attack in which the goal is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-25029

In Versa Director, the command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerable application. Command injection attacks are possible when an application passes unsafe user supplied data (forms, cookies, HTTP headers etc.) to a system shell. In this attack, the attacker-supplied operating system commands are usually executed with the privileges of the vulnerable application. Command injection attacks are p CVSSv3.1 9.8 (CRITICAL) · EPSS 85th percentile

CWECWE 77VNDVersaVNDVersa NetworksTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-05-26
2021-05-26 15:15Z
CRIT

CVE-2021-21985 — Vmware Vcenter_server: The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21985in the wild

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile

CWECWE 918CWECWE 20CWECWE 470VNDVmwareTYPVulnerabilitySTAitw exploited
9.8
CVSS v3.1
100
Edit Score
2021-05-26
2021-05-26 12:15Z
HIGH

CVE-2020-26678 — Vfairs Vfairs: 3.3 is affected by Remote Code Execution.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-26678

vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP file on the server and gain code execution. CVSSv3.1 8.8 (HIGH) · EPSS 80th percentile

CWECWE 434VNDVfairsTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-05-26
2021-05-26 12:15Z
HIGH

CVE-2020-26677 — Vfairs Vfairs: Any user logged in to a vFairs 3.3 virtual conference or event can perform

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-26677

Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a malicious query to the API. CVSSv3.1 8.8 (HIGH) · EPSS 60th percentile

CWECWE 89VNDVfairsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-25
2021-05-25 22:15Z
CRIT

CVE-2021-33574 — Gnu Glibc: The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33574

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact. CVSSv3.1 9.8 (CRITICAL)

CWECWE 416VNDGnuVNDFedoraprojectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2021-05-25
2021-05-25 19:15Z
MED

CVE-2021-27562 — Trustedfirmware Trusted_firmware-m: In Arm Trusted Firmware M through 1.2, the NS world may trigger a system

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-27562in the wild

In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode. CVSSv3.1 5.5 (MEDIUM) · EPSS 98th percentile

CWECWE 787VNDArmVNDTrustedfirmwareTYPVulnerabilitySTAitw exploited
5.5
CVSS v3.1
93
Edit Score