CVE-2013-0631 — Adobe ColdFusion Information Disclosure Vulnerability
Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.
ColdFusion · Mar 7, 2022
CISA Known Exploited Vulnerabilities Directory
Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2013-0631 — Adobe ColdFusion Information Disclosure Vulnerability
Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.
|
Adobe | ColdFusion | Mar 7, 2022 | Sep 7, 2022 | |
|
CVE-2016-6277 — NETGEAR Multiple Routers Remote Code Execution Vulnerability
NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.
|
NETGEAR | Multiple Routers | Mar 7, 2022 | Sep 7, 2022 | |
|
CVE-2017-6077 — NETGEAR DGN2200 Remote Code Execution Vulnerability
NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.
|
NETGEAR | Wireless Router DGN2200 | Mar 7, 2022 | Sep 7, 2022 | |
|
CVE-2019-11581 — Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.
|
Atlassian | Jira Server and Data Center | Mar 7, 2022 | Sep 7, 2022 | |
|
CVE-2020-8218 — Pulse Connect Secure Code Injection Vulnerability
A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
|
Pulse Secure | Pulse Connect Secure | Mar 7, 2022 | Sep 7, 2022 | |
|
CVE-2021-21973 — VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.
|
VMware | vCenter Server and Cloud Foundation | Mar 7, 2022 | Mar 21, 2022 | |
|
CVE-2022-26485 — Mozilla Firefox Use-After-Free Vulnerability
Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.
|
Mozilla | Firefox | Mar 7, 2022 | Mar 21, 2022 | |
|
CVE-2022-26486 — Mozilla Firefox Use-After-Free Vulnerability
Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.
|
Mozilla | Firefox | Mar 7, 2022 | Mar 21, 2022 | |
|
CVE-2002-0367 — Microsoft Windows Privilege Escalation Vulnerability
smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.
|
Microsoft | Windows | Mar 3, 2022 | Mar 24, 2022 | |
|
CVE-2004-0210 — Microsoft Windows Privilege Escalation Vulnerability
A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.
|
Microsoft | Windows | Mar 3, 2022 | Mar 24, 2022 |
CVE-2016-6277 — NETGEAR Multiple Routers Remote Code Execution Vulnerability
NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.
Multiple Routers · Mar 7, 2022
CVE-2017-6077 — NETGEAR DGN2200 Remote Code Execution Vulnerability
NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.
Wireless Router DGN2200 · Mar 7, 2022
CVE-2019-11581 — Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.
Jira Server and Data Center · Mar 7, 2022
CVE-2020-8218 — Pulse Connect Secure Code Injection Vulnerability
A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
Pulse Connect Secure · Mar 7, 2022
CVE-2021-21973 — VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.
vCenter Server and Cloud Foundation · Mar 7, 2022
CVE-2022-26485 — Mozilla Firefox Use-After-Free Vulnerability
Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.
Firefox · Mar 7, 2022
CVE-2022-26486 — Mozilla Firefox Use-After-Free Vulnerability
Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.
Firefox · Mar 7, 2022
CVE-2002-0367 — Microsoft Windows Privilege Escalation Vulnerability
smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.
Windows · Mar 3, 2022
CVE-2004-0210 — Microsoft Windows Privilege Escalation Vulnerability
A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.
Windows · Mar 3, 2022