A management feature on certain network devices could let attackers take over the device and run their own programs if that feature was turned on and reachable…
Published Jun 11, 2018 EPSS 85.3% Act now
Known exploited vulnerabilities
Vulnerabilities CISA has confirmed are being exploited in the wild. These carry remediation deadlines for US federal agencies, and are a reasonable priority order for everyone else.
1533 in the catalogue · showing 1051–1100
A flaw in a device management system lets outsiders run any commands they want without logging in, giving them complete control that criminals have already…
Published May 31, 2018 EPSS 91.7% Act now
Attackers can seize complete control of systems that use certain older versions of a popular data-handling library simply by sending crafted web requests
Published Apr 11, 2018 EPSS 97.0% Act now
Attackers can remotely take complete control of an older Cisco network access system and use it to break into the rest of the network
Published Mar 8, 2018 EPSS 18.2% Act now
Certain older Cisco routers have a flaw that lets outsiders take full control or shut them down without any login, putting entire networks at risk
Published Feb 8, 2018 EPSS 55.2% Act now
A web server configuration allowed attackers to upload and run their own code on the system simply by sending specially formatted requests
Published Oct 4, 2017 EPSS 100.0% Act now
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp
Published Sep 21, 2017 EPSS 82.9%
Attackers could upload and run their own code on certain Windows web servers, giving them full control of the system and risking major data or operational…
Published Sep 19, 2017 EPSS 99.7% Act now
Attackers can seize full control of certain network devices simply by sending a specially crafted web cookie, allowing them to spy on or redirect traffic
Published Jul 20, 2017 EPSS 73.0% Act now
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2…
Published Apr 21, 2017 EPSS 98.3%
Attackers can remotely take over or crash many older Cisco network switches without any password by sending specially crafted commands over a common management…
Published Mar 17, 2017 EPSS 99.0% Act now
Attackers can take over old Windows computers and some medical machines over the network by sending bad messages, allowing them to install ransomware and…
Published Mar 17, 2017 EPSS 89.8% Act now
Attackers who already have the router password can run any commands they want on these old NETGEAR devices, giving them control of the network
Published Mar 6, 2017 EPSS 72.6% Act now
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer…
Published Jan 30, 2017 EPSS 83.3%
A flaw in old Adobe Flash software lets attackers take over computers when users view certain web content, and because criminals have already used it…
Published Dec 15, 2016 EPSS 18.8% Act now
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in…
Published Jun 16, 2016 EPSS 20.1%
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before…
Published Feb 16, 2016 EPSS 95.5%
Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via…
Published May 29, 2015 EPSS 63.6%
Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware…
Published Apr 22, 2015 EPSS 83.9%
A flaw in an older Cisco network management product lets attackers remotely read any file on the server without logging in, which could expose passwords and…
Published Apr 3, 2015 EPSS 40.4% Act now
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute…
Published Feb 17, 2015 EPSS 99.9%
A flaw in the Windows system that manages user logins allowed regular network users to give themselves complete administrator rights over the entire…
Published Nov 18, 2014 EPSS 87.3% Act now
A flaw in old Windows versions lets attackers take full control of a computer simply by getting the user to visit a malicious website
Published Nov 11, 2014 EPSS 94.9% Act now
An old file-sharing server lets outsiders run any program they choose on the computer by sending one specially crafted web request
Published Oct 7, 2014 EPSS 99.3% Act now
An old version of the search software let outsiders run their own commands on the server if it was not isolated from the internet
Published Jul 28, 2014 EPSS 88.6% Act now
Older versions of a popular web framework can let outsiders read private files on the server by sending tricky web requests, risking exposure of passwords and…
Published May 7, 2014 EPSS 53.7% Act now
Attackers who can log into the management page of certain old D-Link routers can trick the page into running harmful code that steals passwords or changes…
Published Nov 19, 2013 EPSS 50.8% Act now
Old HP network management tools contain a flaw that lets outsiders run any program they want on those systems without logging in
Published Sep 16, 2013 EPSS 79.5% Act now
A problem in certain web software lets attackers run any commands they choose on the server by sending a specially made web request
Published Jul 20, 2013 EPSS 100.0% Act now
Older PHP web setups can be tricked into running attacker commands simply by altering the web address, giving intruders complete control of the server
Published May 11, 2012 EPSS 100.0% Act now
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session…
Published Dec 14, 2010 EPSS 71.7%
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with…
Published Dec 14, 2010 EPSS 18.0%
Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a…
Published Aug 30, 2010 EPSS 5.7%
Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files…
Published Aug 11, 2010 EPSS 99.7%
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as…
Published Aug 19, 2009 EPSS 3.3%
Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP…
Published Mar 26, 2009 EPSS 96.6%
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary…
Published Mar 19, 2009 EPSS 96.6%
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to…
Published Sep 2, 2005 EPSS 74.6%
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a…
Published Oct 12, 2020 EPSS 26.9%
A flaw in Windows lets attackers who already have some access on a computer take complete control of it, which criminals have used to lock up files for ransom
Published Nov 12, 2019 EPSS 30.2% Act now
A flaw in Windows lets someone who already has limited access take full control of the computer and has been used to spread ransomware
Published Oct 10, 2019 EPSS 18.8% Act now
A bug in how Windows records errors let attackers who already had limited access take complete control of the machine and run ransomware or steal data
Published Oct 10, 2019 EPSS 3.5% Act now
A flaw in Windows allowed someone who already had some access to a computer to gain full control of it, and attackers have used this trick in ransomware attacks
Published Sep 11, 2019 EPSS 11.6% Act now
Older Windows computers have a flaw that lets someone who already has limited access take complete control of the machine
Published Jul 15, 2019 EPSS 9.9% Act now
A Windows flaw lets someone who already has limited access on a computer take full control, which criminals have used to install ransomware
Published Jul 15, 2019 EPSS 1.8% Act now
A flaw in Windows lets regular users gain complete control over the computer, which attackers have used to install ransomware
Published Jun 12, 2019 EPSS 6.9% Act now
A problem in how Windows schedules tasks lets attackers who already have some access on a computer take complete control, something ransomware gangs have…
Published Jun 12, 2019 EPSS 6.1% Act now
A flaw in Windows lets attackers who already have limited access on a computer gain full control, which can lead to ransomware or theft of data and credentials
Published Apr 9, 2019 EPSS 41.4% Act now
A problem with how Windows checks login requests lets someone who already has some access on the computer take full control, which attackers have used to…
Published Jan 8, 2019 EPSS 4.7% Act now
A flaw in older Windows versions lets someone who already has limited access on a computer secretly gain complete control, which criminals have used to spread…
Published May 9, 2018 EPSS 73.3% Act now