Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-27 23:58Z
2021-03-11
2021-03-11 16:15Z
CRIT

CVE-2021-26897 — Microsoft Windows_server_2008: Windows DNS Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26897

Windows DNS Server Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 96th percentile

VNDMicrosoftTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-03-11
2021-03-11 16:15Z
CRIT

CVE-2021-26895 — Microsoft Windows_server_2008: Windows DNS Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26895

Windows DNS Server Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 93th percentile

VNDMicrosoftTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-03-11
2021-03-11 16:15Z
CRIT

CVE-2021-26894 — Microsoft Windows_server_2008: Windows DNS Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26894

Windows DNS Server Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 93th percentile

VNDMicrosoftTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-03-11
2021-03-11 16:15Z
CRIT

CVE-2021-26893 — Microsoft Windows_server_2008: Windows DNS Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26893

Windows DNS Server Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 93th percentile

VNDMicrosoftTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-03-11
2021-03-11 16:15Z
CRIT

CVE-2021-26877 — Microsoft Windows_server_2008: Windows DNS Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26877

Windows DNS Server Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 97th percentile

VNDMicrosoftTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-03-11
2021-03-11 16:15Z
HIGH

CVE-2021-26876 — Microsoft Windows_10: OpenType Font Parsing Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26876

OpenType Font Parsing Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 84th percentile

VNDMicrosoftVNDOpentypeTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-03-11
2021-03-11 16:15Z
CRIT

CVE-2021-26867 — Microsoft Windows_10: Windows Hyper-V Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26867

Windows Hyper-V Remote Code Execution Vulnerability CVSSv3.1 9.9 (CRITICAL) · EPSS 84th percentile

VNDMicrosoftTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
728 × 90 / responsive · programmatic ad slot
2021-03-11
2021-03-11 16:15Z
HIGH

CVE-2021-26865 — Microsoft Windows_10: Windows Container Execution Agent Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26865

Windows Container Execution Agent Elevation of Privilege Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 58th percentile

VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-03-11
2021-03-11 16:15Z
HIGH

CVE-2021-26864 — Microsoft Windows_10: Windows Virtual Registry Provider Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26864

Windows Virtual Registry Provider Elevation of Privilege Vulnerability CVSSv3.1 8.4 (HIGH) · EPSS 47th percentile

VNDMicrosoftTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2021-03-11
2021-03-11 16:15Z
HIGH

CVE-2021-26863 — Microsoft Windows_10: Windows Win32k Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26863

Windows Win32k Elevation of Privilege Vulnerability CVSSv3.1 7.0 (HIGH) · EPSS 96th percentile

CWECWE 269VNDMicrosoftTYPVulnerability
7.0
CVSS v3.1
89
Edit Score
2021-03-11
2021-03-11 16:15Z
HIGH

CVE-2021-26411 — Microsoft Edge: Internet Explorer Memory Corruption Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26411in the wild

Internet Explorer Memory Corruption Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 100th percentile

CWECWE 416VNDMicrosoftVNDInternetTYPVulnerabilitySTAitw exploited
8.8
CVSS v3.1
100
Edit Score
2021-03-10
2021-03-10 03:15Z
HIGH

CVE-2020-29238 — Expressvpn Expressvpn: An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-29238

An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensitive information when the server running as reverse proxy via specially crafted request. CVSSv3.1 7.5 (HIGH) · EPSS 97th percentile

CWECWE 190VNDExpressvpnTYPVulnerability
7.5
CVSS v3.1
92
Edit Score
2021-03-09
2021-03-09 19:15Z
MED

CVE-2021-21295 — Netty Netty: In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that enables request smuggling.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21295

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that enables request smuggling. If a Content-Length header is present in the original HTTP/2 request, the field is not validated by `Http2MultiplexHandler` as it is propagated up. This is fine as long as the request is not pr CVSSv3.1 5.9 (MEDIUM) · EPSS 97th percentile

CWECWE 444VNDNetappVNDNettyTYPVulnerability
5.9
CVSS v3.1
85
Edit Score
2021-03-08
2021-03-08 22:15Z
HIGH

CVE-2020-27575 — Maxum Rumpus: 8.2.13 and 8.2.14 is affected by a command injection vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-27575

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation. CVSSv3.1 8.8 (HIGH) · EPSS 91th percentile

CWECWE 78VNDMaxumTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-03-08
2021-03-08 21:15Z
HIGH

CVE-2020-27574 — Maxum Rumpus: 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF).

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-27574

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF). If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user. CVSSv3.1 8.8 (HIGH) · EPSS 51th percentile

CWECWE 352VNDMaxumTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-03-04
2021-03-04 13:15Z
CRIT

CVE-2020-24914 — Qcubed Qcubed: A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-24914

A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable "strProfileData" and allows an unauthenticated attacker to execute code via a crafted POST request. CVSSv3.1 9.8 (CRITICAL) · EPSS 92th percentile

CWECWE 502VNDQcubedTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-03-04
2021-03-04 13:15Z
CRIT

CVE-2020-24913 — Qcubed Qcubed: A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-24913

A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request. CVSSv3.1 9.8 (CRITICAL) · EPSS 99th percentile

CWECWE 89VNDQcubedTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-03-04
2021-03-04 13:15Z
HIGH

CVE-2020-24036 — Fork-cms Fork_cms: PHP object injection in the Ajax endpoint of the backend in ForkCMS below version

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-24036

PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote user to execute malicious code. CVSSv3.1 8.8 (HIGH) · EPSS 85th percentile

CWECWE 502VNDFork CmsTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-03-03
2021-03-03 00:15Z
CRIT

CVE-2021-27078 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-27078

Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 9.1 (CRITICAL) · EPSS 97th percentile

VNDMicrosoftTYPVulnerability
9.1
CVSS v3.1
100
Edit Score
2021-03-03
2021-03-03 00:15Z
HIGH

CVE-2021-27065 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-27065in the wild

Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 100th percentile

CWECWE 22VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
100
Edit Score
2021-03-03
2021-03-03 00:15Z
HIGH

CVE-2021-26858 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26858in the wild

Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 100th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
100
Edit Score
2021-03-03
2021-03-03 00:15Z
HIGH

CVE-2021-26857 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26857in the wild

Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 100th percentile

CWECWE 502VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
100
Edit Score
2021-03-03
2021-03-03 00:15Z
CRIT

CVE-2021-26855 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26855in the wild

Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 9.1 (CRITICAL) · EPSS 100th percentile

CWECWE 918VNDMicrosoftTYPVulnerabilitySTAitw exploited
9.1
CVSS v3.1
100
Edit Score
2021-03-03
2021-03-03 00:15Z
MED

CVE-2021-26854 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26854

Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 6.6 (MEDIUM) · EPSS 97th percentile

VNDMicrosoftTYPVulnerability
6.6
CVSS v3.1
89
Edit Score
2021-03-03
2021-03-03 00:15Z
CRIT

CVE-2021-26412 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26412

Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 9.1 (CRITICAL) · EPSS 98th percentile

VNDMicrosoftTYPVulnerability
9.1
CVSS v3.1
100
Edit Score