---
title: "Known Exploited Vulnerabilities - Identifiable by Cynergy"
canonical: "https://kb.cynergy.app/space/MD/904069123/Known%20Exploited%20Vulnerabilities%20-%20Identifiable%20by%20Cynergy"
format: markdown
---
Cynergy can detect the following CVEs as part of its' active Vulnerability Assessment and Automated Exploitation scans.

It should be mentioned that the remediation for all the CVEs below is to update the product based on vendors' recommendations. 

| CVE ID | Vendor Project | Product | Description | Date Added | Image Search |
| --- | --- | --- | --- | --- | --- |
| CVE-2021-27104 | [Accellion](https://www.msspalert.com/cybersecurity-breaches-and-attacks/hackers-exploit-accellion-fta-for-data-theft-extortion/) | FTA | Accellion FTA OS Command Injection Vulnerability | 11/3/2021 | ![image](media://26a531de-7fd5-4cbe-8f8c-3e60984e5ff1) |
| CVE-2021-27102 | [Accellion](https://www.msspalert.com/cybersecurity-breaches-and-attacks/hackers-exploit-accellion-fta-for-data-theft-extortion/) | FTA | Accellion FTA OS Command Injection Vulnerability | 11/3/2021 | ![image](media://b4027812-5fc0-49d4-9bbe-f8f585650a5a) |
| CVE-2021-27101 | Accellion | FTA | Accellion FTA SQL Injection Vulnerability | 11/3/2021 | ![image](media://4114aef1-7a68-4c88-9ee0-665b05d31700) |
| CVE-2021-27103 | Accellion | FTA | Accellion FTA SSRF Vulnerability | 11/3/2021 | ![image](media://fd7f75e2-9f76-4814-8324-11605ab9eb54) |
| CVE-2021-21017 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 11/3/2021 | ![image](media://7100757c-e3d4-4085-9e4f-c2c70247b508) |
| CVE-2021-28550 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Use-After-Free Vulnerability | 11/3/2021 | ![image](media://91f62b4e-30a1-4ed5-a07f-f4927ca1974d) |
| CVE-2018-4939 | Adobe | ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data vulnerability | 11/3/2021 | ![image](media://7bfb2cef-9225-487f-a739-6e43343cec72) |
| CVE-2018-15961 | Adobe | ColdFusion | Adobe ColdFusion Remote Code Execution | 11/3/2021 | ![image](media://793c95cf-d8dd-47ab-a40e-953b48ce09ae) |
| CVE-2018-4878 | Adobe | Flash Player | Adobe Flash Player Use-After-Free Vulnerability | 11/3/2021 | ![image](media://15348e17-b7da-408f-8e35-ebdcfd4f0ed9) |
| CVE-2020-5735 | Amcrest | Cameras and Network Video Recorder (NVR) | Amcrest Camera and NVR Buffer Overflow Vulnerability | 11/3/2021 | ![image](media://78162870-231a-4306-92d4-c95888c6d348) |
| CVE-2019-2215 | Android | Android OS | Android "AbstractEmu" Root Access Vulnerabilities | 11/3/2021 | ![image](media://19f4363d-b34c-45c8-8096-1081d373afed) |
| CVE-2020-0041 | Android | Android OS | Android "AbstractEmu" Root Access Vulnerabilities | 11/3/2021 | ![image](media://2fd2fd37-5e0a-42ee-862b-3badd623975a) |
| CVE-2020-0069 | Android | Android OS | Android "AbstractEmu" Root Access Vulnerabilities | 11/3/2021 | ![image](media://8d7b9e93-9f61-4d0b-9784-9341f5288b9d) |
| CVE-2017-9805 | Apache | Struts | Apache Struts Multiple Versions Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://a13c4672-e4e4-44a7-9ba6-7258f3893f01) |
| CVE-2021-42013 | Apache | HTTP Server | Apache HTTP Server 2.4.49 and 2.4.50 Path Traversal | 11/3/2021 | ![image](media://7505b603-6589-40b1-bcab-c76f2cbc1615) |
| CVE-2021-41773 | Apache | HTTP Server | Apache HTTP Server Path Traversal Vulnerability | 11/3/2021 | ![image](media://bffbbb76-709b-4a12-8a9e-add991ce541b) |
| CVE-2019-0211 | Apache | HTTP Server | Apache HTTP Server scoreboard vulnerability | 11/3/2021 | ![image](media://1111c8cb-3a8a-4367-ba63-6eaddc470436) |
| CVE-2016-4437 | Apache | Shiro | Apache Shiro 1.2.4 Cookie RememberME Deserial Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://f8df2960-acf9-4942-ab52-3df33db3d194) |
| CVE-2019-17558 | Apache | Solr | Apache Solr 5.0.0-8.3.1 Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://c699f146-9f81-413b-bdc7-ca792ea3bf48) |
| CVE-2020-17530 | Apache | Struts | Apache Struts Forced OGNL Double Evaluation Remote Code Execution | 11/3/2021 | ![image](media://da41d2ee-0ee8-420e-acef-830e42a737a6) |
| CVE-2017-5638 | Apache | Struts | Apache Struts Jakarta Multipart parser exception handling vulnerability | 11/3/2021 | ![image](media://174a9178-6fc9-4a69-be58-48da9cf1d913) |
| CVE-2018-11776 | Apache | Struts | Apache Struts 2.3 to 2.3.34 and 2.5 to 2.5.16 Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://4a467794-adb2-4b94-ad27-77f90b83d752) |
| CVE-2021-30858 | Apple | iOS and iPadOS | Apple Apple iOS and iPadOS Use-After-Free Vulnerability | 11/3/2021 | ![image](media://0624fa02-72f8-471e-9799-f196d2033e4b) |
| CVE-2019-6223 | Apple | FaceTime | Apple FaceTime Vulnerability | 11/3/2021 | ![image](media://49ceb74c-e3fd-40df-a497-28951fc32991) |
| CVE-2021-30860 | Apple | iOS | Apple iOS "FORCEDENTRY" Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://040b9660-4851-4ff0-b560-e794fed04786) |
| CVE-2020-27930 | Apple | iOS and macOS | Apple iOS and macOS FontParser Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://d3eff39f-3aa7-4e9d-ae8a-90b1f0a1997d) |
| CVE-2021-30807 | Apple | iOS and macOS | Apple iOS and macOS Memory Corruption Vulnerability | 11/3/2021 | ![image](media://c59ad839-bade-46d0-b8e5-9cd31af4c03a) |
| CVE-2020-27950 | Apple | iOS and macOS | Apple iOS and macOS Kernel Memory Initialization Vulnerability | 11/3/2021 | ![image](media://6bfd0776-9c61-46ca-993c-0732518815f9) |
| CVE-2020-27932 | Apple | iOS and macOS | Apple iOS and macOS Kernel Type Confusion Vulnerability | 11/3/2021 | ![image](media://f5a3bff7-b002-4d66-b2b8-a4135986931c) |
| CVE-2020-9818 | Apple | iOS Mail | Apple iOS Mail OOB Vulnerability | 11/3/2021 | ![image](media://6cee54fc-96c6-47cc-adeb-04f6c130af76) |
| CVE-2020-9819 | Apple | iOS Mail | Apple iOS Mail Heap Overflow Vulnerability | 11/3/2021 | ![image](media://2f362cae-f3f9-4fe3-8918-48fb20af3ba3) |
| CVE-2021-30762 | Apple | iOS | Apple WebKit Browser Engine Use-After-Free Vulnerability | 11/3/2021 | ![image](media://3da86d1e-db45-45d0-8528-f5ab7f156ddf) |
| CVE-2021-1782 | Apple | iOS | Apple iOS Privilege Escalation and Code Execution Chain | 11/3/2021 | ![image](media://2f362cae-f3f9-4fe3-8918-48fb20af3ba3) |
| CVE-2021-1870 | Apple | iOS | Apple iOS Privilege Escalation and Code Execution Chain | 11/3/2021 | ![image](media://2f362cae-f3f9-4fe3-8918-48fb20af3ba3) |
| CVE-2021-1871 | Apple | iOS | Apple iOS Privilege Escalation and Code Execution Chain | 11/3/2021 | ![image](media://2f362cae-f3f9-4fe3-8918-48fb20af3ba3) |
| CVE-2021-1879 | Apple | iOS | Apple iOS Webkit Browser Engine XSS | 11/3/2021 | ![image](media://3da86d1e-db45-45d0-8528-f5ab7f156ddf) |
| CVE-2021-30661 | Apple | iOS | Apple iOS Webkit Storage Use-After-Free Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://3da86d1e-db45-45d0-8528-f5ab7f156ddf) |
| CVE-2021-30666 | Apple | iOS | Apple iOS12.x Buffer Overflow | 11/3/2021 | ![image](media://2f362cae-f3f9-4fe3-8918-48fb20af3ba3) |
| CVE-2021-30713 | Apple | macOS | Apple macOS Input Validation Error | 11/3/2021 | ![image](media://2c9c6f2b-a2c0-4eea-ba27-f6796ec54393) |
| CVE-2021-30657 | Apple | macOS | Apple macOS Policy Subsystem Gatekeeper Bypass | 11/3/2021 | ![image](media://e6f3839b-91fa-41ba-8abc-bce3225ff99b) |
| CVE-2021-30665 | Apple | Safari | Apple Safari Webkit Browser Engine Buffer Overflow Vulnerability | 11/3/2021 | ![image](media://884f28fd-7289-42d8-83c2-40ae139b83b8) |
| CVE-2021-30663 | Apple | Safari | Apple Safari Webkit Browser Engine Integer Overflow Vulnerability | 11/3/2021 | ![image](media://087bc333-cb8c-4598-9a30-44be3f2f944b) |
| CVE-2021-30761 | Apple | iOS | Apple WebKit Browser Engine Memory Corruption Vulnerability | 11/3/2021 | ![image](media://28d8b9b0-6fa1-436d-a23f-20b13541a064) |
| CVE-2021-30869 | Apple | iOS, macOS, and iPadOS | Apple XNU Kernel Type Confusion | 11/3/2021 | ![image](media://885271a1-7f3f-4f28-b722-6e993e268aee) |
| CVE-2020-9859 | Apple | iOS and iPadOS | Apple 11-13.5 XNU Kernel Vulnerability | 11/3/2021 | ![image](media://2a65cdd3-42fb-40c8-89aa-07738c4f3315) |
| CVE-2021-20090 | Arcadyan | Buffalo WSR-2533DHPL2 and WSR-2533DHP3 firmware | Arcadyan Buffalo Firmware Multiple Versions Path Traversal | 11/3/2021 | ![image](media://2a8032bf-5623-433b-a731-6b975f596d70) |
| CVE-2021-27562 | Arm | Arm Trusted Firmware | Arm Trusted Firmware M through 1.2 Denial-of-Service | 11/3/2021 | ![image](media://072200d6-8821-447b-9f50-7a093e39895f) |
| CVE-2021-28664 | Arm | Mali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Boundary Error Vulnerability | 11/3/2021 | ![image](media://89772dca-46f5-41f3-aba0-ce18bad488b5) |
| CVE-2021-28663 | Arm | Mali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Use-After-Free Vulnerability | 11/3/2021 | ![image](media://f609f0f7-1d63-4006-af9f-357b1c47105f) |
| CVE-2019-3398 | Atlassian | Confluence | Atlassian Confluence Path Traversal Vulnerability | 11/3/2021 | ![image](media://871974dd-ec1f-46be-9669-28ed7fc892b5) |
| CVE-2021-26084 | Atlassian | Confluence Server | Atlassian Confluence Server < 6.13.23, 6.14.0 - 7.12.5 Arbitrary Code Execution | 11/3/2021 | ![image](media://462d8aca-61d0-4538-930d-05d6f144ccf2) |
| CVE-2019-11580 | Atlassian | Crowd and Crowd Data Center | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://52dd2748-dbc5-4250-9d46-72f033660f55) |
| CVE-2019-3396 | Atlassian | Atlassian Confluence Server | Remote code execution via Widget Connector macro Vulnerability | 11/3/2021 | ![image](media://462d8aca-61d0-4538-930d-05d6f144ccf2) |
| CVE-2021-42258 | BQE | BillQuick Web Suite | BQE BillQuick Web Suite Versions Prior to 22.0.9.1 (from 2018 through 2021) Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://81bb8064-49a0-42d2-bcb7-96fff5475128) |
| CVE-2020-3452 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco Adaptive Security Appliance and Cisco Fire Power Threat Defense directory traversal sensitive file read | 11/3/2021 | ![image](media://82496bbb-7548-43f4-880d-78b3a24f7720) |
| CVE-2020-3580 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD XSS Vulnerabilities | 11/3/2021 | ![image](media://2ccd3c41-405b-4220-b641-f9bdc2be161a) |
| CVE-2021-1497 | Cisco | HyperFlex HX | Cisco HyperFlex HX Command Injection Vulnerabilities | 11/3/2021 | ![image](media://6936ec4b-8636-49bb-9eb2-11e31519b9c7) |
| CVE-2021-1498 | Cisco | HyperFlex HX | Cisco HyperFlex HX Command Injection Vulnerabilities | 11/3/2021 | ![image](media://8223688c-3643-4ec0-846c-f78f07c97ce0) |
| CVE-2018-0171 | Cisco | IOS and IOS XE | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://e1af801f-fba2-4665-b21d-6c48cba2601f) |
| CVE-2020-3118 | Cisco | IOS XR | Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability | 11/3/2021 | ![image](media://c7c1055f-bede-4e94-a102-889904394ef3) |
| CVE-2020-3566 | Cisco | IOS XR | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 11/3/2021 | ![image](media://48159ad8-852b-4cbd-90ac-c9c7db84b381) |
| CVE-2020-3569 | Cisco | IOS XR | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 11/3/2021 | ![image](media://6a280cf3-179b-4bc0-aea0-d29b96b5a836) |
| CVE-2020-3161 | Cisco | IP Phones | Cisco IP Phones Web Server DoS and Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://bc0ac027-63ff-458a-9beb-a72ca6e4100e) |
| CVE-2019-1653 | Cisco | RV320 and RV325 Routers | Cisco RV320 and RV325 Routers Improper Access Control Vulnerability (COVID-19-CTI list) | 11/3/2021 | ![image](media://395711d8-3d50-4949-9cae-42804bf5cbab) |
| CVE-2018-0296 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco Adaptive Security Appliance Firepower Threat Defense Denial-of-Service/Directory Traversal vulnerability | 11/3/2021 | ![image](media://82496bbb-7548-43f4-880d-78b3a24f7720) |
| CVE-2019-13608 | Citrix | StoreFront Server | Citrix StoreFront Server Multiple Versions XML External Entity (XXE) | 11/3/2021 | ![image](media://6196e62b-ec94-4f27-835b-7b71ca5f2207) |
| CVE-2020-8193 | Citrix | Application Delivery Controller (ADC), Gateway, and SDWAN WANOP | Citrix ADC, Citrix Gateway, Citrix SDWAN WANOP Unauthenticated Authorization Bypass | 11/3/2021 | ![image](media://7b32667d-b3a9-4be2-ba2e-6fe009cc40e0) |
| CVE-2020-8195 | Citrix | Application Delivery Controller (ADC), Gateway, and SDWAN WANOP | Citrix ADC, Citrix Gateway, Citrix SDWAN WANOP Unauthenticated Authorization Bypass | 11/3/2021 | ![image](media://279f7e25-3be7-473d-b75c-21d10e1d4347) |
| CVE-2020-8196 | Citrix | Application Delivery Controller (ADC), Gateway, and SDWAN WANOP | Citrix ADC, Citrix Gateway, Citrix SDWAN WANOP Unauthenticated Authorization Bypass | 11/3/2021 | ![image](media://4b4d4b2d-2010-4612-9b5f-2bc0e6cad65b) |
| CVE-2019-19781 | Citrix | Application Delivery Controller (ADC) and Gateway | Citrix Application Delivery Controller and Citrix Gateway Vulnerability | 11/3/2021 | ![image](media://585d3f6d-6f23-426d-8930-8390d2645ce1) |
| CVE-2019-11634 | Citrix | Workspace (for Windows) | Citrix Workspace (for Windows) Prior to 1904 Improper Access Control | 11/3/2021 | ![image](media://e5161e0c-3132-4639-a276-4bf18a095775) |
| CVE-2020-29557 | D-Link | DIR-825 R1 | D-Link DIR-825 R1 Through 3.0.1 Before 11/2020 Buffer Overflow | 11/3/2021 | ![image](media://ba6301df-e4d0-4e53-adfd-db806ee758e0) |
| CVE-2020-25506 | D-Link | DNS-320 | D-Link DNS-320 Command Injection Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://e01a1504-ca57-4dea-9f2a-47be15ade0fd) |
| CVE-2018-15811 | DNN | DotNetNuke (DNN) | DotNetNuke 9.2-9.2.2 Encryption Algorithm Vulnerability | 11/3/2021 | ![image](media://eab5294c-2b85-4b67-a47d-8011db80c8f1) |
| CVE-2020-8657 | EyesOfNetwork | EyesOfNetwork | EyesOfNetwork 5.3 Insufficient Credential Protection | 11/3/2021 | ![image](media://316d6284-4396-41a6-acfe-cfd9750db11e) |
| CVE-2020-12812 | Fortinet | FortiOS | Fortinet FortiOS SSL VPN 2FA Authentication Vulnerability | 11/3/2021 | ![image](media://2933a4df-8d5e-4bc4-9eb6-0195fe631680) |
| CVE-2018-13379 | Fortinet | FortiOS | Fortinet FortiOS SSL VPN credential exposure vulnerability | 11/3/2021 | ![image](media://e2a28289-eccb-4a00-9144-52ce2ef68302) |
| CVE-2020-16010 | Google | Chrome for Android | Google Chrome for Android Heap Overflow Vulnerability | 11/3/2021 | ![image](media://b6dafebf-7c69-4031-9f7b-b146c8c2aa5d) |
| CVE-2020-16017 | Google | Chrome | Google Chrome Site Isolation Component Use-After-Free Remote Code Execution vulnerability | 11/3/2021 | ![image](media://033f99e9-29a3-4bb5-9a5b-beb9512a3674) |
| CVE-2021-37976 | Google | Chrome | Google Chrome Information Leakage | 11/3/2021 | ![image](media://a2e07b64-82de-4f74-9514-f459a15e3e55) |
| CVE-2020-16009 | Google | Chromium V8 Engine | Chromium V8 Implementation Vulnerability | 11/3/2021 | ![image](media://f6e7ee34-9044-4f36-847f-cd8a8592e177) |
| CVE-2021-30632 | Google | Chrome | Google Chrome Out-of-bounds write | 11/3/2021 | ![image](media://a2e07b64-82de-4f74-9514-f459a15e3e55) |
| CVE-2020-7961 | LifeRay | Liferay Portal | Liferay Portal prior to 7.2.1 CE GA2 Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://7404d78c-860b-41df-9016-cdbf82182853) |
| CVE-2021-38647 | Microsoft | Microsoft Azure Open Management Infrastructure (OMI) | Microsoft Azure Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://11ee5104-6fb5-4aaf-8969-bc233a5ffcf5) |
| CVE-2016-0167 | Microsoft | Windows | Microsoft Windows Kernel 'Win32k.sys' Local Privilege Escalation Vulnerability | 11/3/2021 | ![image](media://73bf1c0c-f7de-44bf-a7e3-d64a9e61c283) |
| CVE-2020-0878 | Microsoft | Microsoft Edge, Internet Explorer | Microsoft Browser Memory Corruption Vulnerability | 11/3/2021 | ![image](media://0ae8bfeb-7a95-4c64-94f0-329e0d47bf9a) |
| CVE-2021-31955 | Microsoft | Windows | Microsoft Windows Kernel Information Disclosure Vulnerability | 11/3/2021 | ![image](media://73bf1c0c-f7de-44bf-a7e3-d64a9e61c283) |
| CVE-2021-1647 | Microsoft | Microsoft Defender | Microsoft Defender Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://40271211-4223-4e1b-8695-91be26371e93) |
| CVE-2021-31956 | Microsoft | Windows | Microsoft Windows NTFS Privilege Escalation Vulnerability | 11/3/2021 | ![image](media://e3886d86-1ac6-40f1-ab8a-51f6924ad63c) |
| CVE-2020-0938 | Microsoft | Windows, Windows Adobe Type Manager Library | Microsoft Windows Type 1 Font Parsing Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://5cf6fc0f-3eb8-4fd9-83f0-dc5bdd42aabf) |
| CVE-2020-1020 | Microsoft | Windows, Windows Adobe Type Manager Library | Microsoft Windows Type 1 Font Parsing Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://42b7d530-6d0a-4cd0-a34c-84fb3d1e1d2c) |
| CVE-2021-34523 | Microsoft | Microsoft Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | 11/3/2021 | ![image](media://fdfa985e-3a24-4118-81cf-1091dfa1e2c4) |
| CVE-2017-7269 | Microsoft | Internet Information Services (IIS) | Microsft Windows Server 2003 R2 IIS WEBDAV buffer overflow Remote Code Execution vulnerability (COVID-19-CTI list) | 11/3/2021 | ![image](media://832afd5d-328c-43f4-b378-9307a1bf33fd) |
| CVE-2017-0143 | Microsoft | SMBv1 server | Microsoft Windows SMBv1 Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://81f85b01-0d00-4642-a2bb-4941e72c29b7) |
| CVE-2017-0199 | Microsoft | Windows, Windows Server, Office | Microsoft Office/WordPad Remote Code Execution Vulnerability with Windows API | 11/3/2021 | ![image](media://007e203f-b545-49ea-9324-d8e5c4da9f4d) |
| CVE-2020-1380 | Microsoft | Internet Explorer | Scripting Engine Memory Corruption Vulnerability | 11/3/2021 | ![image](media://7e42dfa4-233f-4826-86a6-f8acb0d94ed8) |
| CVE-2020-0968 | Microsoft | Internet Explorer Scripting Engine | Internet Explorer Scripting Engine Memory Corruption Vulnerability | 11/3/2021 | ![image](media://a9c5c707-95f3-4ea6-8b54-d180c1c703e7) |
| CVE-2019-16256 | SIMalliance | SIMalliance Toolbox (S@T) Browser | SIMalliance Toolbox (S@T) Browser Command and Control Vulnerability | 11/3/2021 | ![image](media://95d9b798-9e99-4d62-b972-95b2616b1a45) |
| CVE-2020-8467 | Trend Micro | Trend Micro Apex One and OfficeScan XG | Trend Micro Apex One (2019) and OfficeScan XG migration tool remote code execution vulnerability | 11/3/2021 | ![image](media://94cd3e1c-1277-4d07-a26f-04cd96c3c72b) |
| CVE-2021-36742 | Trend Micro | Trend Micro Multiple Products | Trend Micro Systems Multiple Products Buffer Overflow - Arbitrary File Upload | 11/3/2021 | ![image](media://3070a2c4-5809-4b9e-b732-e834b7612d6e) |
| CVE-2021-36741 | Trend Micro | Trend Micro Multiple Products | Trend Micro Systems Multiple Products Buffer Overflow - Arbitrary File Upload | 11/3/2021 | ![image](media://266458e7-7a0a-48d1-847f-061f2d44d96a) |
| CVE-2020-25213 | WordPress | File Manager | WordPress File Manager Remote Code Execution Vulnerability | 11/3/2021 | ![image](media://40c06c28-b532-4337-ab2d-61f005670019) |
| CVE-2019-8394 | Zoho | ManageEngine ServiceDesk Plus (SDP) | Zoho ManageEngine ServiceDesk Plus Arbitrary File Upload Vulnerability | 11/3/2021 | ![image](media://3cd94ddb-4876-4bbd-bf26-c808418e21fd) |
| CVE-2020-11261 | Qualcomm | Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | Qualcomm Multiple Chipsets Improper Input Validation Vulnerability | 12/1/2021 | ![image](media://d9ac5681-4f68-4962-bd20-80622e210aa1) |
| CVE-2017-17562 | Embedthis | GoAhead | Embedthis GoAhead Remote Code Execution Vulnerability | 12/10/2021 | ![image](media://b690ed59-48ca-4734-9285-749bf455ac2f) |
| CVE-2017-12149 | Red Hat | JBoss Application Server | Red Hat JBoss Application Server Remote Code Execution Vulnerability | 12/10/2021 | ![image](media://eea7b25b-5207-4bd6-8b06-4c8c69890af7) |
| CVE-2010-1871 | Red Hat | JBoss Seam 2 | Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability | 12/10/2021 | ![image](media://c0ffcce7-b097-42f1-bf21-d12f76a339e0) |
| CVE-2021-44228 | Apache | Log4j2 | Apache Log4j2 Remote Code Execution Vulnerability | 12/10/2021 | ![image](media://84149ca2-94cf-417b-8a7a-90f76d829882) |
| CVE-2021-22017 | VMware | vCenter Server | VMware vCenter Server Improper Access Control | 1/10/2022 | ![image](media://3427958d-7b3d-4387-80fd-221d0581fab4) |
| CVE-2021-36260 | Hikvision | Security cameras web server | Hikvision Improper Input Validation | 1/10/2022 | ![image](media://629c82d9-400d-4f4f-af7b-a67fa8f30e8c) |
| CVE-2020-6572 | Google | Chrome | Google Chrome Prior to 81.0.4044.92 Use-After-Free Vulnerability | 1/10/2022 | ![image](media://a2e07b64-82de-4f74-9514-f459a15e3e55) |
| CVE-2015-7450 | IBM | WebSphere Application Server and Server Hypervisor Edition | IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. | 1/10/2022 | ![image](media://03d477f8-07ff-4d2f-b3af-81537279cc99) |
| CVE-2017-1000486 | Primetek | Primefaces Application | Primetek Primefaces Remote Code Execution Vulnerability | 1/10/2022 | ![image](media://02462c54-97f0-413c-be99-bce25b36fbad) |
| CVE-2021-27860 | FatPipe | WARP, IPVPN, and MPVPN software | FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit | 1/10/2022 | ![image](media://b7f45320-fa0c-4aab-a389-451ea2cc6a84) |
| CVE-2021-21315 | Npm package | System Information Library for Node.JS | System Information Library for Node.JS Command Injection | 1/18/2022 | ![image](media://a8a89caa-f1dc-42a4-8b1d-5172b19177c3) |
| CVE-2020-13927 | Apache | Airflow's Experimental API | Apache Airflow's Experimental API Authentication Bypass | 1/18/2022 | ![image](media://3009e2c0-f875-4da7-9c24-9a86ace65ecc) |
| CVE-2006-1547 | Apache | Struts 1 | Apache Struts 1 ActionForm Denial-of-Service Vulnerability | 1/21/2022 | ![image](media://4269bcda-efbd-4357-8870-df47d6be50f0) |
| CVE-2012-0391 | Apache | Struts 2 | Apache Struts 2 Improper Input Validation Vulnerability | 1/21/2022 | ![image](media://0d58a0f0-88ca-49b0-82d4-68f4c575932a) |
| CVE-2020-0787 | Microsoft | Windows | Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability | 1/28/2022 | ![image](media://866e1d69-6905-475c-8694-670620356ce0) |
| CVE-2014-7169 | GNU | Bourne-Again Shell (Bash) | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | 1/28/2022 | ![image](media://028046d4-0ba8-45da-b872-0966dad0dc1f) |
| CVE-2017-9791 | Apache | Struts 1 | Apache Struts 1 Improper Input Validation Vulnerability | 2/10/2022 | ![image](media://0d58a0f0-88ca-49b0-82d4-68f4c575932a) |
| CVE-2017-8464 | Microsoft | Windows | Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability | 2/10/2022 | ![image](media://1a532bfb-6e69-4e35-9947-2381a2367544) |
| CVE-2016-3088 | Apache | ActiveMQ | Apache ActiveMQ Improper Input Validation Vulnerability | 2/10/2022 | ![image](media://80044401-067c-456b-84dd-04250ea9a0ac) |
| CVE-2017-9841 | PHPUnit | PHPUnit | PHPUnit Command Injection Vulnerability | 2/15/2022 | ![image](media://24c4c5db-5da9-4584-afa1-2ed530aba9c8) |
| CVE-2022-23131 | Zabbix | Frontend | Zabbix Frontend Authentication Bypass Vulnerability | 2/22/2022 | ![image](media://74bf3e90-b359-4ab6-8574-7aa2883889d9) |
| CVE-2022-23134 | Zabbix | Frontend | Zabbix Frontend Improper Access Control Vulnerability | 2/22/2022 | ![image](media://e6cbfff4-2eea-4bce-b31e-f9ec5ce54265) |
| CVE-2020-1938 | Apache | Tomcat | Apache Tomcat Improper Privilege Management Vulnerability | 3/3/2022 | ![image](media://3d271b7e-63c5-4080-98ca-933757bd239f) |
| CVE-2021-21973 | VMware | vCenter Server and Cloud Foundation | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability | 3/7/2022 | ![image](media://7380e330-b3c3-4dd2-b205-e1f555d225ae) |
| CVE-2019-11581 | Atlassian | Jira Server and Data Center | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | 3/7/2022 | ![image](media://ca61acea-dfea-4b19-9ea5-9915df1c25a6) |
| CVE-2016-6277 | NETGEAR | Multiple Routers | NETGEAR Multiple Routers Remote Code Execution Vulnerability | 3/7/2022 | ![image](media://99e5bb42-73cd-4436-876c-80279aa58f4c) |
| CVE-2021-42237 | Sitecore | XP | Sitecore XP Remote Command Execution Vulnerability | 3/25/2022 | ![image](media://a2ab7273-5df5-43e7-82ca-f255acafeb33) |
| CVE-2020-9054 | Zyxel | Multiple Network-Attached Storage (NAS) Devices | Zyxel Multiple NAS Devices OS Command Injection Vulnerability | 3/25/2022 | ![image](media://970cb167-7c61-41b0-bb0d-d07eb885b92f) |
| CVE-2020-7247 | OpenBSD | OpenSMTPD | OpenSMTPD Remote Code Execution Vulnerability | 3/25/2022 | ![image](media://9dc215d4-7897-48e7-aaa2-1931ce4311ba) |
| CVE-2020-5410 | VMware Tanzu | Spring Cloud Configuration (Config) Server | VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability | 3/25/2022 | ![image](media://c3888782-0a84-4bd1-8341-d46fc404af6e) |
| CVE-2020-25223 | Sophos | SG UTM | Sophos SG UTM Remote Code Execution Vulnerability | 3/25/2022 | ![image](media://effb0714-9d4a-42c9-8a56-05234e5de90a) |
| CVE-2019-6340 | Drupal | Core | Drupal Core Remote Code Execution Vulnerability | 3/25/2022 | ![image](media://404846a4-59ab-4da9-8c3f-8a99aa5c5b0c) |
| CVE-2019-2616 | Oracle | BI Publisher (Formerly XML Publisher) | Oracle BI Publisher Unauthorized Access Vulnerability | 3/25/2022 | ![image](media://bb5f0bf1-839f-4810-a080-2595ffc07754) |
| CVE-2019-16920 | D-Link | Multiple Routers | D-Link Multiple Routers Command Injection Vulnerability | 3/25/2022 | ![image](media://da2bf343-5f3d-4e7c-ba9d-f03e32928657) |
| CVE-2019-15107 | Webmin | Webmin | Webmin Command Injection Vulnerability | 3/25/2022 | ![image](media://c3585d23-9ef4-4852-9923-a974a3fbb7f0) |
| CVE-2019-10068 | Kentico | Xperience | Kentico Xperience Deserialization of Untrusted Data Vulnerability | 3/25/2022 | ![image](media://3904c8de-7af2-47e7-ad44-97175079f0dc) |
| CVE-2018-1273 | VMware Tanzu | Spring Data Commons | VMware Tanzu Spring Data Commons Property Binder Vulnerability | 3/25/2022 | ![image](media://5f727e36-a83f-4f9c-ae15-17eb6ba80df5) |
| CVE-2017-3881 | Cisco | IOS and IOS XE | Cisco IOS and IOS XE Remote Code Execution Vulnerability | 3/25/2022 | ![image](media://f50ca52a-10c6-4ac3-84ce-128fb12ccbc8) |
| CVE-2017-12615 | Apache | Tomcat | Apache Tomcat on Windows Remote Code Execution Vulnerability | 3/25/2022 | ![image](media://68aca7e9-1d6b-4548-be0b-241ceceebf55) |
| CVE-2016-1555 | NETGEAR | Wireless Access Point (WAP) Devices | NETGEAR Multiple WAP Devices Command Injection Vulnerability | 3/25/2022 | ![image](media://58e3906a-6b86-4053-a496-2e9291320612) |
| CVE-2015-1427 | Elastic | Elasticsearch | Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability | 3/25/2022 | ![image](media://5954bb1b-5b74-4e44-a8d2-437fb56b32ff) |
| CVE-2014-3120 | Elastic | Elasticsearch | Elasticsearch Remote Code Execution Vulnerability | 3/25/2022 | ![image](media://39317203-4024-424c-9c3f-5bd802c94036) |
| CVE-2013-2251 | Apache | Struts | Apache Struts Improper Input Validation Vulnerability | 3/25/2022 | ![image](media://c65eb890-38cf-4995-9255-94391e1307e3) |
| CVE-2012-1823 | PHP | PHP | PHP-CGI Query String Parameter Vulnerability | 3/25/2022 | ![image](media://79478a1c-6fc6-4108-8d35-25656611ac52) |
| CVE-2010-2861 | Adobe | ColdFusion | Adobe ColdFusion Directory Traversal Vulnerability | 3/25/2022 | ![image](media://1225c779-9dca-4efe-86ec-4ac5df0de7d7) |
| CVE-2009-1151 | phpMyAdmin | phpMyAdmin | phpMyAdmin Remote Code Execution Vulnerability | 3/25/2022 | ![image](media://50951bcc-fb8c-4a87-8a84-379ebfe65439) |
| CVE-2022-0543 | Redis | Debian-specific Redis Servers | Debian-specific Redis Server Lua Sandbox Escape Vulnerability | 3/28/2022 | ![image](media://7e14dd81-11f5-4eb2-b95f-6cb56f11bb61) |
| CVE-2021-26085 | Atlassian | Confluence Server | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability | 3/28/2022 | ![image](media://e514c751-160a-4438-9270-5c46903fb386) |
| CVE-2022-1040 | Sophos | Firewall | Sophos Firewall Authentication Bypass Vulnerability | 3/31/2022 | ![image](media://69b22d20-0706-4c68-b10c-b158f536fa44) |
| CVE-2018-10562 | Dasan | Gigabit Passive Optical Network (GPON) Routers | Dasan GPON Routers Command Injection Vulnerability | 3/31/2022 | ![image](media://9da2bd91-2adc-497a-9237-4bc5f1810f46) |
| CVE-2022-22965 | VMware | Spring Framework | Spring Framework JDK 9+ Remote Code Execution Vulnerability | 4/4/2022 | ![image](media://5e947221-2751-4ccb-a4d7-ea9b37133447) |
| CVE-2018-7602 | Drupal | Core | Drupal Core Remote Code Execution Vulnerability | 4/13/2022 | ![image](media://cefd79ee-b698-46b9-9d0d-38578f200c15) |
| CVE-2022-22954 | VMware | Workspace ONE Access and Identity Manager | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability | 4/14/2022 | ![image](media://c87354c9-97e2-44dc-aeee-79ccfe9641c4) |
| CVE-2019-3929 | Crestron | Multiple Products | Crestron Multiple Products Command Injection Vulnerability | 4/15/2022 | ![image](media://2d312a91-e849-45ac-990e-53e99c5eadb4) |
| CVE-2022-29464 | WSO2 | Multiple Products | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability | 4/25/2022 | ![image](media://71d1a4d2-00c2-48f8-8524-0f7019d444b0) |
| CVE-2022-1388 | F5 | BIG-IP | F5 BIG-IP Missing Authentication Vulnerability | 5/10/2022 | ![image](media://807f1e1f-b404-42ee-9a1a-6945d2d72b45) |
| CVE-2022-30525 | Zyxel | Multiple Firewalls | Zyxel Multiple Firewalls OS Command Injection Vulnerability | 5/16/2022 | ![image](media://11cbfbb8-0e37-42ed-8a57-cc81373d691d) |
| CVE-2022-22947 | VMware | Spring Cloud Gateway | VMware Spring Cloud Gateway Code Injection Vulnerability | 5/16/2022 | ![image](media://ebc63508-6809-4acd-a768-9fe88b2a1d06) |