Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,756 results · page 26 of 36
Mar 25, 2022LG N1A1 NAS Remote Command Execution VulnerabilityCVE-2018-14839 · Other software · LGExploited
LG N1A1 NAS 3718.510 is affected by a remote code execution vulnerability.
- Product
- N1A1 NAS
- On CISA’s list since
- Mar 25, 2022 (federal fix deadline Apr 15, 2022)
- What to do
- Attackers are using this now. Install LG’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 25, 2022D-Link Multiple Routers Command Injection VulnerabilityCVE-2019-16920 · Network & remote access · D-LinkExploited
Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise.
- Product
- Multiple Routers
- On CISA’s list since
- Mar 25, 2022 (federal fix deadline Apr 15, 2022)
- What to do
- Attackers are using this now. Install D-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022SonicWall SonicOS Buffer Overflow VulnerabilityCVE-2020-5135 · Network & remote access · SonicWallExploitedRansomware
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.
- Product
- SonicOS
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install SonicWall’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation VulnerabilityCVE-2019-1405 · Computers, phones & browsers · MicrosoftExploitedRansomware
A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.
- Product
- Windows
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Windows Privilege Escalation VulnerabilityCVE-2019-1322 · Computers, phones & browsers · MicrosoftExploitedRansomware
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
- Product
- Windows
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Windows Error Reporting Manager Privilege Escalation VulnerabilityCVE-2019-1315 · Computers, phones & browsers · MicrosoftExploitedRansomware
A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.
- Product
- Windows
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Windows AppX Deployment Server Privilege Escalation VulnerabilityCVE-2019-1253 · Computers, phones & browsers · MicrosoftExploitedRansomware
A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.
- Product
- Windows
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Win32k Privilege Escalation VulnerabilityCVE-2019-1132 · Computers, phones & browsers · MicrosoftExploited
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
- Product
- Win32k
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityCVE-2019-1129 · Computers, phones & browsers · MicrosoftExploitedRansomware
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
- Product
- Windows
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Task Scheduler Privilege Escalation VulnerabilityCVE-2019-1069 · Computers, phones & browsers · MicrosoftExploitedRansomware
A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.
- Product
- Task Scheduler
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityCVE-2019-1064 · Computers, phones & browsers · MicrosoftExploitedRansomware
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
- Product
- Windows
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityCVE-2019-0841 · Computers, phones & browsers · MicrosoftExploitedRansomware
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
- Product
- Windows
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Windows Privilege Escalation VulnerabilityCVE-2019-0543 · Computers, phones & browsers · MicrosoftExploitedRansomware
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
- Product
- Windows
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Win32k Privilege Escalation VulnerabilityCVE-2018-8120 · Computers, phones & browsers · MicrosoftExploitedRansomware
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
- Product
- Win32k
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Windows Transaction Manager Privilege Escalation VulnerabilityCVE-2017-0101 · Computers, phones & browsers · MicrosoftExploitedRansomware
A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.
- Product
- Windows
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Windows Kernel Privilege Escalation VulnerabilityCVE-2016-3309 · Computers, phones & browsers · MicrosoftExploitedRansomware
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
- Product
- Windows
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 15, 2022Microsoft Win32k Memory Corruption VulnerabilityCVE-2015-2546 · Computers, phones & browsers · MicrosoftExploitedRansomware
The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.
- Product
- Win32k
- On CISA’s list since
- Mar 15, 2022 (federal fix deadline Apr 5, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 7, 2022Adobe BlazeDS Information Disclosure VulnerabilityCVE-2009-3960 · Other software · AdobeExploitedRansomware
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.
- Product
- BlazeDS
- On CISA’s list since
- Mar 7, 2022 (federal fix deadline Sep 7, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 7, 2022VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) VulnerabilityCVE-2021-21973 · Other software · VMwareExploited
VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.
- Product
- vCenter Server and Cloud Foundation
- On CISA’s list since
- Mar 7, 2022 (federal fix deadline Mar 21, 2022)
- What to do
- Attackers are using this now. Install VMware’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 7, 2022Pulse Connect Secure Code Injection VulnerabilityCVE-2020-8218 · Network & remote access · Pulse SecureExploited
A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
- Product
- Pulse Connect Secure
- On CISA’s list since
- Mar 7, 2022 (federal fix deadline Sep 7, 2022)
- What to do
- Attackers are using this now. Install Pulse Secure’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 7, 2022Atlassian Jira Server and Data Center Server-Side Template Injection VulnerabilityCVE-2019-11581 · Websites & servers · AtlassianExploited
Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.
- Product
- Jira Server and Data Center
- On CISA’s list since
- Mar 7, 2022 (federal fix deadline Sep 7, 2022)
- What to do
- Attackers are using this now. Install Atlassian’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 7, 2022NETGEAR DGN2200 Remote Code Execution VulnerabilityCVE-2017-6077 · Network & remote access · NETGEARExploited
NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.
- Product
- Wireless Router DGN2200
- On CISA’s list since
- Mar 7, 2022 (federal fix deadline Sep 7, 2022)
- What to do
- Attackers are using this now. Install NETGEAR’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 7, 2022NETGEAR Multiple Routers Remote Code Execution VulnerabilityCVE-2016-6277 · Network & remote access · NETGEARExploited
NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.
- Product
- Multiple Routers
- On CISA’s list since
- Mar 7, 2022 (federal fix deadline Sep 7, 2022)
- What to do
- Attackers are using this now. Install NETGEAR’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 7, 2022Adobe ColdFusion Information Disclosure VulnerabilityCVE-2013-0631 · Websites & servers · AdobeExploited
Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.
- Product
- ColdFusion
- On CISA’s list since
- Mar 7, 2022 (federal fix deadline Sep 7, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 7, 2022Adobe ColdFusion Directory Traversal VulnerabilityCVE-2013-0629 · Websites & servers · AdobeExploited
Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.
- Product
- ColdFusion
- On CISA’s list since
- Mar 7, 2022 (federal fix deadline Sep 7, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 7, 2022Adobe ColdFusion Authentication Bypass VulnerabilityCVE-2013-0625 · Websites & servers · AdobeExploited
Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.
- Product
- ColdFusion
- On CISA’s list since
- Mar 7, 2022 (federal fix deadline Sep 7, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 7, 2022Mozilla Firefox Use-After-Free VulnerabilityCVE-2022-26486 · Computers, phones & browsers · MozillaExploited
Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.
- Product
- Firefox
- On CISA’s list since
- Mar 7, 2022 (federal fix deadline Mar 21, 2022)
- What to do
- Attackers are using this now. Install Mozilla’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 7, 2022Mozilla Firefox Use-After-Free VulnerabilityCVE-2022-26485 · Computers, phones & browsers · MozillaExploited
Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.
- Product
- Firefox
- On CISA’s list since
- Mar 7, 2022 (federal fix deadline Mar 21, 2022)
- What to do
- Attackers are using this now. Install Mozilla’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Exim Out-of-bounds Write VulnerabilityCVE-2019-16928 · Other software · EximExploited
Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.
- Product
- Exim Internet Mailer
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Exim’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco IOS and XE Software Internet Key Exchange Memory Leak VulnerabilityCVE-2018-0158 · Network & remote access · CiscoExploited
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.
- Product
- IOS Software and Cisco IOS XE Software
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service VulnerabilityCVE-2017-12319 · Network & remote access · CiscoExploited
A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition, or potentially corrupt the BGP routing table, which could result in network instability.
- Product
- IOS XE Software
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Adobe Flash Player Type Confusion VulnerabilityCVE-2017-11292 · Other software · AdobeExploited
Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.
- Product
- Flash Player
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Microsoft Office Use-After-Free VulnerabilityCVE-2017-0261 · Email & office · MicrosoftExploited
Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.
- Product
- Office
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Adobe ColdFusion Authentication Bypass VulnerabilityCVE-2013-0632 · Websites & servers · AdobeExploited
An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access.
- Product
- ColdFusion
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityCVE-2022-20708 · Network & remote access · CiscoExploited
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
- Product
- Small Business RV160, RV260, RV340, and RV345 Series Routers
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityCVE-2022-20703 · Network & remote access · CiscoExploited
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
- Product
- Small Business RV160, RV260, RV340, and RV345 Series Routers
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityCVE-2022-20701 · Network & remote access · CiscoExploited
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
- Product
- Small Business RV160, RV260, RV340, and RV345 Series Routers
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityCVE-2022-20700 · Network & remote access · CiscoExploited
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
- Product
- Small Business RV160, RV260, RV340, and RV345 Series Routers
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityCVE-2022-20699 · Network & remote access · CiscoExploited
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
- Product
- Small Business RV160, RV260, RV340, and RV345 Series Routers
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Microsoft Windows Installer Privilege Escalation VulnerabilityCVE-2021-41379 · Computers, phones & browsers · MicrosoftExploitedRansomware
Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.
- Product
- Windows
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Apache Tomcat Improper Privilege Management VulnerabilityCVE-2020-1938 · Websites & servers · ApacheExploited
Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.
- Product
- Tomcat
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco Small Business Routers Improper Input Validation VulnerabilityCVE-2019-1652 · Network & remote access · CiscoExploited
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands.
- Product
- Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Microsoft Excel Remote Code Execution VulnerabilityCVE-2019-1297 · Email & office · MicrosoftExploited
A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.
- Product
- Excel
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Microsoft Exchange Server Privilege Escalation VulnerabilityCVE-2018-8581 · Email & office · MicrosoftExploitedRansomware
A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.
- Product
- Exchange Server
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022ChakraCore Scripting Engine Type Confusion VulnerabilityCVE-2018-8298 · Other software · ChakraCoreExploited
The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.
- Product
- ChakraCore scripting engine
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install ChakraCore’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco IOS Software Denial-of-Service VulnerabilityCVE-2018-0180 · Network & remote access · CiscoExploited
A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.
- Product
- IOS Software
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco IOS Software Denial-of-Service VulnerabilityCVE-2018-0179 · Network & remote access · CiscoExploited
A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.
- Product
- IOS Software
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco IOS, XR, and XE Software Buffer Overflow VulnerabilityCVE-2018-0175 · Network & remote access · CiscoExploited
Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device.
- Product
- IOS, XR, and XE Software
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco IOS Software and Cisco IOS XE Software Improper Input Validation VulnerabilityCVE-2018-0174 · Network & remote access · CiscoExploited
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).
- Product
- IOS XE Software
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityCVE-2018-0173 · Network & remote access · CiscoExploited
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets can allow for denial-of-service (DoS).
- Product
- IOS and IOS XE Software
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. The WordPress, CMS and hosting-panel entries come from the National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan and others); we show who. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, a booking system, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.