BaselineWatch
9369 unread
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in
Register Tracker canaries (EasyPrivacy) 202610271409: first version Tue 27 Oct·Ad canaries (EasyList) 202610271405: 2 changed Tue 27 Oct·NIST SP 800-171 Rev 3 (CUI; CMMC Level 2) OSCAL 1.1.0: first version 22 Oct·the register

News · CISA Known Exploited Vulnerabilities

All News Vendor advisories Known exploited Notable CVEs Releases Unread only
  • CISA Known Exploited Vulnerabilities

    Progress Kemp LoadMaster: Progress Kemp LoadMaster OS Command Injection Vulnerability

    Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-12-09)

    KEV · due 2024-12-09
  • CISA Known Exploited Vulnerabilities

    Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

    Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet. (due 2024-12-09)

    KEV · due 2024-12-09ransomware
  • CISA Known Exploited Vulnerabilities

    Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

    Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet. (due 2024-12-09)

    KEV · due 2024-12-09ransomware
  • CISA Known Exploited Vulnerabilities

    Palo Alto Networks Expedition: Palo Alto Networks Expedition OS Command Injection Vulnerability

    Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-12-05)

    KEV · due 2024-12-05
  • CISA Known Exploited Vulnerabilities

    Palo Alto Networks Expedition: Palo Alto Networks Expedition SQL Injection Vulnerability

    Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-12-05)

    KEV · due 2024-12-05
  • CISA Known Exploited Vulnerabilities

    Microsoft Windows: Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

    Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-12-03)

    KEV · due 2024-12-03ransomware
  • CISA Known Exploited Vulnerabilities

    Microsoft Windows: Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

    Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-12-03)

    KEV · due 2024-12-03
  • CISA Known Exploited Vulnerabilities

    Metabase Metabase: Metabase GeoJSON API Local File Inclusion Vulnerability

    Metabase contains a local file inclusion vulnerability in the custom map support in the API to read GeoJSON formatted data. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: 12 public exploits · CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-12-03) · 4 patch or advisory references on NVD Fix panel

    KEV · due 2024-12-03
  • CISA Known Exploited Vulnerabilities

    Cisco Adaptive Security Appliance (ASA): Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

    Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-12-03)

    KEV · due 2024-12-03
  • CISA Known Exploited Vulnerabilities

    Atlassian Jira Server and Data Center: Atlassian Jira Server and Data Center Path Traversal Vulnerability

    Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /WEB-INF/web.xml endpoint. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-12-03)

    KEV · due 2024-12-03
  • CISA Known Exploited Vulnerabilities

    Palo Alto Networks Expedition: Palo Alto Networks Expedition Missing Authentication Vulnerability

    Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-28)

    KEV · due 2024-11-28
  • CISA Known Exploited Vulnerabilities

    Android Framework: Android Framework Privilege Escalation Vulnerability

    Android Framework contains an unspecified vulnerability that allows for privilege escalation. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-28)

    KEV · due 2024-11-28
  • CISA Known Exploited Vulnerabilities

    CyberPersons CyberPanel: CyberPanel Incorrect Default Permissions Vulnerability

    CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as root. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-28)

    KEV · due 2024-11-28ransomware
  • CISA Known Exploited Vulnerabilities

    Nostromo nhttpd: Nostromo nhttpd Directory Traversal Vulnerability

    Nostromo nhttpd contains a directory traversal vulnerability in the http_verify() function in a non-chrooted nhttpd server allowing for remote code execution. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-28)

    KEV · due 2024-11-28
  • CISA Known Exploited Vulnerabilities

    PTZOptics PT30X-SDI/NDI Cameras: PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

    PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI script. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-25)

    KEV · due 2024-11-25
  • CISA Known Exploited Vulnerabilities

    PTZOptics PT30X-SDI/NDI Cameras: PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

    PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass authentication for the /cgi-bin/param.cgi CGI script. If combined with CVE-2024-8957, this can lead to remote code execution as root. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-25)

    KEV · due 2024-11-25
  • CISA Known Exploited Vulnerabilities

    Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD): Cisco ASA and FTD Denial-of-Service Vulnerability

    Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource after effective lifetime vulnerability that could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) of the RAVPN service. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-14)

    KEV · due 2024-11-14
  • CISA Known Exploited Vulnerabilities

    Roundcube Webmail: RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

    RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that allows a remote attacker to run malicious JavaScript code. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-14)

    KEV · due 2024-11-14
  • CISA Known Exploited Vulnerabilities

    Fortinet FortiManager: Fortinet FortiManager Missing Authentication Vulnerability

    Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-13)

    KEV · due 2024-11-13
  • CISA Known Exploited Vulnerabilities

    Microsoft SharePoint: Microsoft SharePoint Deserialization Vulnerability

    Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-12)

    KEV · due 2024-11-12ransomware
  • CISA Known Exploited Vulnerabilities

    ScienceLogic SL1: ScienceLogic SL1 Unspecified Vulnerability

    ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-11)

    KEV · due 2024-11-11
  • CISA Known Exploited Vulnerabilities

    Veeam Backup & Replication: Veeam Backup and Replication Deserialization Vulnerability

    Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-07)

    KEV · due 2024-11-07ransomware
  • CISA Known Exploited Vulnerabilities

    Microsoft Windows : Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

    Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-05)

    KEV · due 2024-11-05ransomware
  • CISA Known Exploited Vulnerabilities

    Mozilla Firefox: Mozilla Firefox Use-After-Free Vulnerability

    Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-05)

    KEV · due 2024-11-05ransomware
  • CISA Known Exploited Vulnerabilities

    SolarWinds Web Help Desk: SolarWinds Web Help Desk Hardcoded Credential Vulnerability

    SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-11-05)

    KEV · due 2024-11-05
  • CISA Known Exploited Vulnerabilities

    Fortinet Multiple Products: Fortinet Multiple Products Format String Vulnerability

    Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-30)

    KEV · due 2024-10-30
  • CISA Known Exploited Vulnerabilities

    Ivanti Cloud Services Appliance (CSA): Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

    Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements. Required action: As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.

    Fix: CISA: As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution. (due 2024-10-30)

    KEV · due 2024-10-30
  • CISA Known Exploited Vulnerabilities

    Ivanti Cloud Services Appliance (CSA): Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

    Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS. Required action: As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.

    Fix: CISA: As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution. (due 2024-10-30)

    KEV · due 2024-10-30
  • CISA Known Exploited Vulnerabilities

    Qualcomm Multiple Chipsets : Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory. Required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

    Fix: CISA: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable. (due 2024-10-29)

    KEV · due 2024-10-29
  • CISA Known Exploited Vulnerabilities

    Microsoft Windows: Microsoft Windows Management Console Remote Code Execution Vulnerability

    Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-29)

    KEV · due 2024-10-29
  • CISA Known Exploited Vulnerabilities

    Microsoft Windows: Microsoft Windows MSHTML Platform Spoofing Vulnerability

    Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-29)

    KEV · due 2024-10-29
  • CISA Known Exploited Vulnerabilities

    Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

    Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-24)

    KEV · due 2024-10-24
  • CISA Known Exploited Vulnerabilities

    Ivanti Endpoint Manager (EPM): Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

    Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-23)

    KEV · due 2024-10-23
  • CISA Known Exploited Vulnerabilities

    D-Link DIR-820 Router: D-Link DIR-820 Router OS Command Injection Vulnerability

    D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp. Required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

    Fix: CISA: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product. (due 2024-10-21)

    KEV · due 2024-10-21
  • CISA Known Exploited Vulnerabilities

    DrayTek Multiple Vigor Routers: DrayTek Multiple Vigor Routers OS Command Injection Vulnerability

    DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfunction.cgi/cvmcfgupload that allows for remote code execution via shell metacharacters in a filename when the text/x-python-script content type is used. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-21)

    KEV · due 2024-10-21
  • CISA Known Exploited Vulnerabilities

    SAP Commerce Cloud: SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

    SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-21)

    KEV · due 2024-10-21
  • CISA Known Exploited Vulnerabilities

    Ivanti Virtual Traffic Manager: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

    Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, unauthenticated attacker to create a chosen administrator account. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-15)

    KEV · due 2024-10-15
  • CISA Known Exploited Vulnerabilities

    Ivanti Cloud Services Appliance (CSA): Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

    Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote, unauthenticated attacker to access restricted functionality. If CVE-2024-8963 is used in conjunction with CVE-2024-8190, an attacker could bypass admin authentication and execute arbitrary commands on the appliance. Required action: As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive security updates.

    Fix: CISA: As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive security updates. (due 2024-10-10)

    KEV · due 2024-10-10
  • CISA Known Exploited Vulnerabilities

    Apache HugeGraph-Server: Apache HugeGraph-Server Improper Access Control Vulnerability

    Apache HugeGraph-Server contains an improper access control vulnerability that could allow a remote attacker to execute arbitrary code. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-09)

    KEV · due 2024-10-09
  • CISA Known Exploited Vulnerabilities

    Microsoft SQL Server: Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

    Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-09)

    KEV · due 2024-10-09ransomware
  • CISA Known Exploited Vulnerabilities

    Oracle ADF Faces: Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

    Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading to unauthenticated remote code execution. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-09)

    KEV · due 2024-10-09
  • CISA Known Exploited Vulnerabilities

    Oracle WebLogic Server: Oracle WebLogic Server Remote Code Execution Vulnerability

    Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-09)

    KEV · due 2024-10-09
  • CISA Known Exploited Vulnerabilities

    Adobe Flash Player: Adobe Flash Player Integer Underflow Vulnerablity

    Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. Required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

    Fix: CISA: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product. (due 2024-10-08)

    KEV · due 2024-10-08
  • CISA Known Exploited Vulnerabilities

    Adobe Flash Player: Adobe Flash Player Incorrect Default Permissions Vulnerability

    Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. Required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

    Fix: CISA: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product. (due 2024-10-08)

    KEV · due 2024-10-08
  • CISA Known Exploited Vulnerabilities

    Adobe Flash Player: Adobe Flash Player Code Execution Vulnerability

    Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content. Required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

    Fix: CISA: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product. (due 2024-10-08)

    KEV · due 2024-10-08
  • CISA Known Exploited Vulnerabilities

    Adobe Flash Player: Adobe Flash Player Double Free Vulnerablity

    Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code. Required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

    Fix: CISA: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product. (due 2024-10-08)

    KEV · due 2024-10-08
  • CISA Known Exploited Vulnerabilities

    Microsoft Windows: Microsoft Windows MSHTML Platform Spoofing Vulnerability

    Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-07)

    KEV · due 2024-10-07
  • CISA Known Exploited Vulnerabilities

    Progress WhatsUp Gold: Progress WhatsUp Gold SQL Injection Vulnerability

    Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-07)

    KEV · due 2024-10-07ransomware
  • CISA Known Exploited Vulnerabilities

    Ivanti Cloud Services Appliance: Ivanti Cloud Services Appliance OS Command Injection Vulnerability

    Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS. Required action: As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive future security updates.

    Fix: CISA: As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive future security updates. (due 2024-10-04)

    KEV · due 2024-10-04
  • CISA Known Exploited Vulnerabilities

    Microsoft Publisher: Microsoft Publisher Protection Mechanism Failure Vulnerability

    Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Fix: CISA: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. (due 2024-10-01)

    KEV · due 2024-10-01

Older