CVE-2020-0646 | CRITICAL | 9.8 | 0.99222 | 59.73 | Yes | No | 2020-01-14 | 2025-10-21 | cisa.gov, euvd | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote …A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'. |
CVE-2018-7602 | CRITICAL | 9.8 | 0.99236 | 59.73 | Yes | No | 2018-07-19 | 2025-12-17 | cisa.gov, euvd | A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit …A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild. |
CVE-2017-0144 | HIGH | 8.8 | 0.9923 | 59.73 | Yes | No | 2017-03-17 | 2025-10-21 | cisa.gov, euvd | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an…The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148. |
CVE-2020-11978 | HIGH | 8.8 | 0.99189 | 59.72 | Yes | No | 2020-07-16 | 2025-10-21 | cisa.gov, euvd | An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the …An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting load_examples=False in the config then you are not vulnerable. |
CVE-2024-27348 | CRITICAL | 9.8 | 0.9921 | 59.72 | Yes | No | 2024-04-22 | 2025-10-21 | cisa.gov, euvd | RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in…RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11
Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue. |
CVE-2023-22515 | CRITICAL | 10.0 | 0.99156 | 59.7 | Yes | No | 2023-10-04 | 2026-03-25 | cisa.gov, euvd | Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknow…Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances.
Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue. |
CVE-2022-24086 | CRITICAL | 9.8 | 0.9911 | 59.69 | Yes | No | 2022-02-16 | 2025-10-21 | cisa.gov, euvd | Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during …Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution. |
CVE-2022-36804 | HIGH | 8.8 | 0.99077 | 59.68 | Yes | No | 2022-08-25 | 2025-10-21 | cisa.gov, euvd | Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10,…Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before version 8.2.2, and from version 8.3.0 before 8.3.1 allows remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request. This vulnerability was reported via our Bug Bounty Program by TheGrandPew. |
CVE-2020-10199 | HIGH | 8.8 | 0.99064 | 59.67 | Yes | No | 2020-04-01 | 2025-10-21 | cisa.gov, euvd | Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). |
CVE-2019-16278 | CRITICAL | 9.8 | 0.99033 | 59.66 | Yes | No | 2019-10-14 | 2025-10-21 | cisa.gov, euvd | Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a c…Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request. |
CVE-2020-0618 | CRITICAL | 9.8 | 0.99022 | 59.66 | Yes | No | 2020-02-11 | 2026-01-12 | cisa.gov, euvd | A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Micr…A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'. |
CVE-2017-3881 | CRITICAL | 9.8 | 0.98975 | 59.64 | Yes | No | 2017-03-17 | 2026-01-12 | cisa.gov, euvd | A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthe…A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: (1) the failure to restrict the use of CMP-specific Telnet options only to internal, local communications between cluster members and instead accept and process such options over any Telnet connection to an affected device; and (2) the incorrect processing of malformed CMP-specific Telnet options. An attacker could exploit this vulnerability by sending malformed CMP-specific Telnet options while establishing a Telnet session with an affected Cisco device configured to accept Telnet connections. An exploit could allow an attacker to execute arbitrary code and obtain full control of the device or cause a reload of the affected device. This affects Catalyst switches, Embedded Service 2020 switches, Enhanced Layer 2 EtherSwitch Service Module, Enhanced Layer 2/3 EtherSwitch Service Module, Gigabit Ethernet Switch Module (CGESM) for HP, IE Industrial Ethernet switches, ME 4924-10GE switch, RF Gateway 10, and SM-X Layer 2/3 EtherSwitch Service Module. Cisco Bug IDs: CSCvd48893. |
CVE-2021-40539 | CRITICAL | 9.8 | 0.9896 | 59.64 | Yes | No | 2021-09-07 | 2025-10-21 | cisa.gov, euvd | Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execu…Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution. |
CVE-2023-36884 | HIGH | 7.5 | 0.98932 | 59.63 | Yes | No | 2023-07-11 | 2025-10-21 | cisa.gov, euvd | Windows Search Remote Code Execution VulnerabilityWindows Search Remote Code Execution Vulnerability |
CVE-2019-3929 | CRITICAL | 9.8 | 0.98952 | 59.63 | Yes | No | 2019-04-30 | 2025-10-21 | cisa.gov, euvd | The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1…The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root. |
CVE-2020-7247 | CRITICAL | 9.8 | 0.98946 | 59.63 | Yes | No | 2020-01-29 | 2025-10-21 | cisa.gov, euvd | smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary co…smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The issue exists because of an incorrect return value upon failure of input validation. |
CVE-2022-3236 | CRITICAL | 9.8 | 0.98905 | 59.62 | Yes | No | 2022-09-23 | 2025-10-21 | cisa.gov, euvd | A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1…A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older. |
CVE-2017-9791 | CRITICAL | 9.8 | 0.98817 | 59.59 | Yes | No | 2017-07-10 | 2025-10-21 | cisa.gov, euvd | The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message t…The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage. |
CVE-2026-41091 | HIGH | 7.8 | 0.09641 | 59.57 | Yes | Yes | 2026-05-20 | 2026-06-19 | cisa.gov, euvd, nvd, packetstorm | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges loc…Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. |
CVE-2022-24816 | CRITICAL | 10.0 | 0.98739 | 59.56 | Yes | No | 2022-04-13 | 2025-10-21 | cisa.gov, euvd | JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided v…JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects the downstream GeoServer project. Version 1.2.22 will contain a patch that disables the ability to inject malicious code into the resulting script. Users unable to upgrade may negate the ability to compile Jiffle scripts from the final application, by removing janino-x.y.z.jar from the classpath. |
CVE-2008-4250 | CRITICAL | 9.8 | 0.98751 | 59.56 | Yes | No | 2008-10-23 | 2026-05-21 | cisa.gov, euvd | The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta a…The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability." |
CVE-2013-2465 | CRITICAL | 9.8 | 0.98704 | 59.55 | Yes | No | 2013-06-18 | 2025-10-22 | cisa.gov, euvd | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier…Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D. |
CVE-2012-3152 | CRITICAL | 9.1 | 0.98695 | 59.54 | Yes | No | 2012-10-16 | 2025-10-22 | cisa.gov, euvd | Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remo…Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component. NOTE: the previous information is from the October 2012 CPU. Oracle has not commented on claims from the original researcher that the URLPARAMETER functionality allows remote attackers to read and upload arbitrary files to reports/rwservlet, and that this issue occurs in earlier versions. NOTE: this can be leveraged with CVE-2012-3153 to execute arbitrary code by uploading a .jsp file. |
CVE-2019-11539 | HIGH | 8.0 | 0.98617 | 59.52 | Yes | No | 2019-04-26 | 2025-10-21 | cisa.gov, euvd | In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 an…In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands. |
CVE-2024-29059 | HIGH | 7.5 | 0.98624 | 59.52 | Yes | No | 2024-03-22 | 2025-10-21 | cisa.gov, euvd | .NET Framework Information Disclosure Vulnerability.NET Framework Information Disclosure Vulnerability |
CVE-2025-32433 | CRITICAL | 10.0 | 0.98594 | 59.51 | Yes | No | 2025-04-16 | 2026-02-26 | cisa.gov, euvd | Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH …Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules. |
CVE-2024-8963 | CRITICAL | 9.4 | 0.98607 | 59.51 | Yes | No | 2024-09-19 | 2025-10-21 | cisa.gov, euvd | Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality. |
CVE-2026-54420 | HIGH | 8.5 | 0.01439 | 59.5 | Yes | No | 2026-06-14 | 2026-06-16 | cisa.gov, euvd, nvd | LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP…LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026. |
CVE-2019-17558 | HIGH | 7.5 | 0.98567 | 59.5 | Yes | No | 2019-12-30 | 2025-10-21 | cisa.gov, euvd | Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can…Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configset could contain renderable, potentially malicious, templates. Parameter provided templates are disabled by default, but can be enabled by setting `params.resource.loader.enabled` by defining a response writer with that setting set to `true`. Defining a response writer requires configuration API access. Solr 8.4 removed the params resource loader entirely, and only enables the configset-provided template rendering when the configset is `trusted` (has been uploaded by an authenticated user). |
CVE-2024-50603 | CRITICAL | 10.0 | 0.98545 | 59.49 | Yes | No | 2025-01-08 | 2025-10-21 | cisa.gov, euvd | An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elem…An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or src_cloud_type for flightpath_connection_test. |
CVE-2019-5418 | HIGH | 7.5 | 0.98507 | 59.48 | Yes | No | 2019-03-27 | 2025-10-21 | cisa.gov, euvd | There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accep…There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed. |
CVE-2024-20767 | HIGH | 7.4 | 0.98514 | 59.48 | Yes | No | 2024-03-18 | 2025-10-21 | cisa.gov, euvd | ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file…ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this issue does not require user interaction. Exploitation of this issue requires the admin panel be exposed to the internet. |
CVE-2016-3088 | CRITICAL | 9.8 | 0.98518 | 59.48 | Yes | No | 2016-06-01 | 2025-10-21 | cisa.gov, euvd | The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTT…The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. |
CVE-2008-2992 | HIGH | 7.8 | 0.98482 | 59.47 | Yes | No | 2008-11-04 | 2025-10-22 | cisa.gov, euvd | Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file t…Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104. |
CVE-2024-9463 | CRITICAL | 9.9 | 0.98494 | 59.47 | Yes | No | 2024-10-09 | 2025-10-21 | cisa.gov, euvd | An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as ro…An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. |
CVE-2025-0108 | HIGH | 8.8 | 0.98455 | 59.46 | Yes | No | 2025-02-12 | 2026-02-26 | cisa.gov, euvd | An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management…An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it can negatively impact integrity and confidentiality of PAN-OS.
You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
This issue does not affect Cloud NGFW or Prisma Access software. |
CVE-2017-15944 | CRITICAL | 9.8 | 0.9834 | 59.42 | Yes | No | 2017-12-11 | 2025-10-21 | cisa.gov, euvd | Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute…Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface. |
CVE-2022-21587 | CRITICAL | 9.8 | 0.98342 | 59.42 | Yes | No | 2022-10-18 | 2025-10-21 | cisa.gov, euvd | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions t…Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). |
CVE-2018-1000861 | CRITICAL | 9.8 | 0.98326 | 59.41 | Yes | No | 2018-12-10 | 2025-10-21 | cisa.gov, euvd | A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/cor…A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way. |
CVE-2016-1555 | CRITICAL | 9.8 | 0.98325 | 59.41 | Yes | No | 2017-04-21 | 2025-10-21 | cisa.gov, euvd | (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 …(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands. |
CVE-2023-20887 | CRITICAL | 9.8 | 0.98281 | 59.4 | Yes | No | 2023-06-07 | 2025-10-21 | cisa.gov, euvd | Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for…Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution. |
CVE-2022-22947 | CRITICAL | 10.0 | 0.98253 | 59.39 | Yes | No | 2022-03-03 | 2025-10-21 | cisa.gov, euvd | In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuat…In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host. |
CVE-2020-6207 | CRITICAL | 10.0 | 0.98266 | 59.39 | Yes | No | 2020-03-10 | 2025-10-21 | cisa.gov, euvd | SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for…SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager. |
CVE-2022-26138 | CRITICAL | 9.8 | 0.9817 | 59.36 | Yes | No | 2022-07-20 | 2026-01-12 | cisa.gov, euvd | The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users g…The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of the hardcoded password could exploit this to log into Confluence and access all content accessible to users in the confluence-users group. This user account is created when installing versions 2.7.34, 2.7.35, and 3.0.2 of the app. |
CVE-2015-2291 | HIGH | 7.8 | 0.09011 | 59.35 | Yes | No | 2017-08-09 | 2026-08-04 | cisa.gov, euvd, nvd | (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to c…(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call. |
CVE-2012-0507 | CRITICAL | 9.8 | 0.98113 | 59.34 | Yes | No | 2012-06-07 | 2025-10-22 | cisa.gov, euvd | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier,…Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue. |
CVE-2021-39144 | HIGH | 8.5 | 0.98124 | 59.34 | Yes | No | 2021-08-23 | 2025-10-21 | cisa.gov, euvd | XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker …XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose. |
CVE-2024-12987 | MEDIUM | 6.9 | 0.98084 | 59.33 | Yes | No | 2024-12-27 | 2025-10-21 | cisa.gov, euvd | A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of …A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argument session leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component. |
CVE-2023-25717 | CRITICAL | 9.8 | 0.98069 | 59.32 | Yes | No | 2023-02-13 | 2025-10-21 | cisa.gov, euvd | Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin…Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring. |
CVE-2022-29303 | CRITICAL | 9.8 | 0.98039 | 59.31 | Yes | No | 2022-05-12 | 2025-10-21 | cisa.gov, euvd | SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php. |