Cybersecurity Alerts

Actively Exploited Vulnerabilities

The vulnerabilities listed below are sourced from the CISA Known Exploited Vulnerabilities catalog and represent security flaws that are actively being exploited in the wild. This list is updated daily. If you are unsure whether your systems are affected, contact us and we will help you assess your exposure.

CVE-2019-9670
Synacor | Zimbra Collaboration Suite (ZCS)
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.
Added 2022-01-10
Remediation Deadline 2022-07-10
CVE-2019-7609
Elastic | Kibana
Kibana Arbitrary Code Execution
Kibana contain an arbitrary code execution flaw in the Timelion visualizer.
Added 2022-01-10
Remediation Deadline 2022-07-10
CVE-2019-2725Active Ransomware Campaign
Oracle | WebLogic Server
Oracle WebLogic Server, Injection
Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).
Added 2022-01-10
Remediation Deadline 2022-07-10
CVE-2019-1579Active Ransomware Campaign
Palo Alto Networks | PAN-OS
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.
Added 2022-01-10
Remediation Deadline 2022-07-10
CVE-2019-1458Active Ransomware Campaign
Microsoft | Win32k
Microsoft Win32k Privilege Escalation Vulnerability
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.
Added 2022-01-10
Remediation Deadline 2022-07-10
CVE-2019-10149
Exim | Mail Transfer Agent (MTA)
Exim Mail Transfer Agent (MTA) Improper Input Validation
Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
Added 2022-01-10
Remediation Deadline 2022-07-10
CVE-2018-13383Active Ransomware Campaign
Fortinet | FortiOS and FortiProxy
Fortinet FortiOS and FortiProxy Out-of-bounds Write
A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.
Added 2022-01-10
Remediation Deadline 2022-07-10
CVE-2018-13382Active Ransomware Campaign
Fortinet | FortiOS and FortiProxy
Fortinet FortiOS and FortiProxy Improper Authorization
An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.
Added 2022-01-10
Remediation Deadline 2022-07-10
CVE-2017-1000486
Primetek | Primefaces Application
Primetek Primefaces Remote Code Execution Vulnerability
Primetek Primefaces is vulnerable to a weak encryption flaw resulting in remote code execution
Added 2022-01-10
Remediation Deadline 2022-07-10
CVE-2015-7450
IBM | WebSphere Application Server and Server Hypervisor Edition
IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands
Added 2022-01-10
Remediation Deadline 2022-07-10
CVE-2013-3900
Microsoft | WinVerifyTrust function
Microsoft WinVerifyTrust function Remote Code Execution
A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.
Added 2022-01-10
Remediation Deadline 2022-07-10
CVE-2021-43890Active Ransomware Campaign
Microsoft | Windows
Microsoft Windows AppX Installer Spoofing Vulnerability
Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.
Added 2021-12-15
Remediation Deadline 2021-12-29
CVE-2021-4102
Google | Chromium V8
Google Chromium V8 Use-After-Free Vulnerability
Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Added 2021-12-15
Remediation Deadline 2021-12-29
CVE-2021-44515
Zoho | Desktop Central
Zoho Desktop Central Authentication Bypass Vulnerability
Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server.
Added 2021-12-10
Remediation Deadline 2021-12-24
CVE-2021-44228Active Ransomware Campaign
Apache | Log4j2
Apache Log4j2 Remote Code Execution Vulnerability
Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.
Added 2021-12-10
Remediation Deadline 2021-12-24
CVE-2021-44168
Fortinet | FortiOS
Fortinet FortiOS Arbitrary File Download
Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files.
Added 2021-12-10
Remediation Deadline 2021-12-24
CVE-2021-35394
Realtek | Jungle Software Development Kit (SDK)
Realtek Jungle SDK Remote Code Execution Vulnerability
RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.
Added 2021-12-10
Remediation Deadline 2021-12-24
CVE-2020-8816
Pi-hole | AdminLTE
Pi-Hole AdminLTE Remote Code Execution Vulnerability
Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.
Added 2021-12-10
Remediation Deadline 2022-06-10
CVE-2020-17463
Fuel CMS | Fuel CMS
Fuel CMS SQL Injection Vulnerability
FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.
Added 2021-12-10
Remediation Deadline 2022-06-10
CVE-2019-7238
Sonatype | Nexus Repository Manager
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.
Added 2021-12-10
Remediation Deadline 2022-06-10
CVE-2019-13272
Linux | Kernel
Linux Kernel Improper Privilege Management Vulnerability
Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.
Added 2021-12-10
Remediation Deadline 2022-06-10
CVE-2019-10758
MongoDB | mongo-express
MongoDB mongo-express Remote Code Execution Vulnerability
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method.
Added 2021-12-10
Remediation Deadline 2022-06-10
CVE-2019-0193
Apache | Solr
Apache Solr DataImportHandler Code Injection Vulnerability
The optional Apache Solr module DataImportHandler contains a code injection vulnerability.
Added 2021-12-10
Remediation Deadline 2022-06-10
CVE-2017-17562
Embedthis | GoAhead
Embedthis GoAhead Remote Code Execution Vulnerability
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.
Added 2021-12-10
Remediation Deadline 2022-06-10
CVE-2017-12149Active Ransomware Campaign
Red Hat | JBoss Application Server
Red Hat JBoss Application Server Remote Code Execution Vulnerability
The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.
Added 2021-12-10
Remediation Deadline 2022-06-10
CVE-2010-1871
Red Hat | JBoss Seam 2
Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.
Added 2021-12-10
Remediation Deadline 2022-06-10
CVE-2021-44077
Zoho | ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus
Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution
Added 2021-12-01
Remediation Deadline 2021-12-15
CVE-2021-40438
Apache | Apache
Apache HTTP Server-Side Request Forgery (SSRF)
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
Added 2021-12-01
Remediation Deadline 2021-12-15
CVE-2021-37415
Zoho | ManageEngine ServiceDesk Plus (SDP)
Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication
Added 2021-12-01
Remediation Deadline 2021-12-15
CVE-2020-11261
Qualcomm | Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Added 2021-12-01
Remediation Deadline 2022-06-01