CVE Intelligence
Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

Severity
Clear

1.764 result(s)

Export this search: RSS · CSV · STIX
CVE-2021-44026 Critical · 9.8 KEV High · 69 Public exploit CWE-89 Nov 19, 2021
Roundcube Webmail SQL Injection Vulnerability
Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.
CVE-2021-41277 High · 7.5 KEV High · 69 Public exploit CWE-200 Nov 17, 2021
Metabase GeoJSON API Local File Inclusion Vulnerability
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->settings->maps->custom maps->add a map`) support and potential local file inclusion (including environment variables). URLs were not validated prior to being loaded. This issue is fixed in a new maintenance release (0.40.5 and 1.40.5), and any subsequent release after that. If you’re unable to upgrade immediately, you can mitigate this by including rules in your reverse proxy or load balancer or WAF to provide a validation filter before the application.
CVE-2021-42321 High · 8.8 KEV Urgent · 84 Public exploit Ransomware Nov 9, 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-42292 High · 7.8 KEV High · 62 Public exploit Nov 9, 2021
Microsoft Excel Security Feature Bypass
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2021-42287 High · 7.5 KEV Urgent · 72 Public exploit Ransomware Nov 9, 2021
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-42278 High · 7.5 KEV Urgent · 72 Public exploit Ransomware Nov 9, 2021
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-41379 Medium · 5.5 KEV High · 63 Ransomware CWE-59 Nov 9, 2021
Microsoft Windows Installer Privilege Escalation Vulnerability
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-42237 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-502 Nov 5, 2021
Sitecore XP Remote Command Execution Vulnerability
Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability.
CVE-2021-42258 Critical · 9.8 KEV Urgent · 89 Public exploit Ransomware CWE-89 Oct 22, 2021
BQE BillQuick Web Suite SQL Injection Vulnerability
BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. SQL injection can, for example, use the txtID (aka username) parameter. Successful exploitation can include the ability to execute arbitrary code as MSSQLSERVER$ via xp_cmdshell.
CVE-2021-30807 High · 7.8 KEV High · 62 Public exploit CWE-787 Oct 19, 2021
Apple Multiple Products Memory Corruption Vulnerability
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.
CVE-2021-27561 Critical · 9.8 KEV High · 67 Public exploit CWE-78 Oct 15, 2021
Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication.
CVE-2021-20123 High · 7.5 KEV High · 63 Public exploit CWE-22 Oct 13, 2021
Draytek VigorConnect Path Traversal Vulnerability
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
CVE-2021-20124 High · 7.5 KEV High · 63 Public exploit CWE-22 Oct 13, 2021
Draytek VigorConnect Path Traversal Vulnerability
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
CVE-2021-41357 High · 7.8 KEV High · 52 Oct 12, 2021
Microsoft Win32k Privilege Escalation Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2021-40449 High · 7.8 KEV Urgent · 84 Public exploit Ransomware CWE-416 Oct 12, 2021
Microsoft Windows Win32k Privilege Escalation Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2021-40450 High · 7.8 KEV High · 52 Oct 12, 2021
Microsoft Win32k Privilege Escalation Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2021-37975 High · 8.8 KEV High · 62 Public exploit CWE-416 Oct 8, 2021
Google Chromium V8 Use-After-Free Vulnerability
Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37973 Critical · 9.6 KEV High · 59 CWE-416 Oct 8, 2021
Google Chromium Portals Use-After-Free Vulnerability
Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-37976 Medium · 6.5 KEV High · 53 CWE-862 Oct 8, 2021
Google Chromium Information Disclosure Vulnerability
Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVE-2021-30633 Critical · 9.6 KEV High · 60 CWE-416 Oct 8, 2021
Google Chromium Indexed DB API Use-After-Free Vulnerability
Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-30632 High · 8.8 KEV High · 62 Public exploit CWE-787 Oct 8, 2021
Google Chromium V8 Out-of-Bounds Write Vulnerability
Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-42013 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-22 Oct 7, 2021
Apache HTTP Server Path Traversal Vulnerability
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions.
CVE-2021-25489 Medium · 5.5 KEV High · 45 CWE-134 Oct 6, 2021
Samsung Mobile Devices Improper Input Validation Vulnerability
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.
CVE-2021-25487 High · 7.8 KEV High · 49 CWE-125 Oct 6, 2021
Samsung Mobile Devices Out-of-Bounds Read Vulnerability
Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.
CVE-2021-39226 High · 7.3 KEV High · 63 Public exploit CWE-862 Oct 5, 2021
Grafana Authentication Bypass Vulnerability
Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If the snapshot "public_mode" configuration setting is set to true (vs default of false), unauthenticated users are able to delete the snapshot with the lowest database key by accessing the literal path: /api/snapshots-delete/:deleteKey. Regardless of the snapshot "public_mode" setting, authenticated users are able to delete the snapshot with the lowest database key by accessing the literal paths: /api/snapshots/:key, or /api/snapshots-delete/:deleteKey. The combination of deletion and viewing enables a complete walk through all snapshot data while resulting in complete snapshot data loss. This issue has been resolved in versions 8.1.6 and 7.5.11. If for some reason you cannot upgrade you can use a reverse proxy or similar to block access to the literal paths: /api/snapshots/:key, /api/snapshots-delete/:deleteKey, /dashboard/snapshot/:key, and /api/snapshots/:key. They have no normal function and can be disabled without side effects.