Updated 5 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,756exploited flaws on CISA’s list

35added in the last 30 days

316new WordPress flaws this week

13,949entries in the database

1,756 results · page 30 of 36

Dec 10, 2021Linux Kernel Improper Privilege Management VulnerabilityCVE-2019-13272 · Computers, phones & browsers · LinuxExploited
Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.
Product
Kernel
On CISA’s list since
Dec 10, 2021 (federal fix deadline Jun 10, 2022)
What to do
Attackers are using this now. Install Linux’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 10, 2021Realtek Jungle SDK Remote Code Execution VulnerabilityCVE-2021-35394 · Network & remote access · RealtekExploited
RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.
Product
Jungle Software Development Kit (SDK)
On CISA’s list since
Dec 10, 2021 (federal fix deadline Dec 24, 2021)
What to do
Attackers are using this now. Install Realtek’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 10, 2021Sonatype Nexus Repository Manager Incorrect Access Control VulnerabilityCVE-2019-7238 · Other software · SonatypeExploited
Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.
Product
Nexus Repository Manager
On CISA’s list since
Dec 10, 2021 (federal fix deadline Jun 10, 2022)
What to do
Attackers are using this now. Install Sonatype’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 10, 2021Apache Solr DataImportHandler Code Injection VulnerabilityCVE-2019-0193 · Websites & servers · ApacheExploited
The optional Apache Solr module DataImportHandler contains a code injection vulnerability.
Product
Solr
On CISA’s list since
Dec 10, 2021 (federal fix deadline Jun 10, 2022)
What to do
Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 10, 2021Fortinet FortiOS Arbitrary File DownloadCVE-2021-44168 · Network & remote access · FortinetExploited
Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files.
Product
FortiOS
On CISA’s list since
Dec 10, 2021 (federal fix deadline Dec 24, 2021)
What to do
Attackers are using this now. Install Fortinet’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 10, 2021Embedthis GoAhead Remote Code Execution VulnerabilityCVE-2017-17562 · Other software · EmbedthisExploited
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.
Product
GoAhead
On CISA’s list since
Dec 10, 2021 (federal fix deadline Jun 10, 2022)
What to do
Attackers are using this now. Install Embedthis’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 10, 2021Fuel CMS SQL Injection VulnerabilityCVE-2020-17463 · Other software · Fuel CMSExploited
FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.
Product
Fuel CMS
On CISA’s list since
Dec 10, 2021 (federal fix deadline Jun 10, 2022)
What to do
Attackers are using this now. Install Fuel CMS’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 10, 2021Pi-Hole AdminLTE Remote Code Execution VulnerabilityCVE-2020-8816 · Other software · Pi-holeExploited
Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.
Product
AdminLTE
On CISA’s list since
Dec 10, 2021 (federal fix deadline Jun 10, 2022)
What to do
Attackers are using this now. Install Pi-hole’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 10, 2021MongoDB mongo-express Remote Code Execution VulnerabilityCVE-2019-10758 · Other software · MongoDBExploited
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method.
Product
mongo-express
On CISA’s list since
Dec 10, 2021 (federal fix deadline Jun 10, 2022)
What to do
Attackers are using this now. Install MongoDB’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 10, 2021Apache Log4j2 Remote Code Execution VulnerabilityCVE-2021-44228 · Websites & servers · ApacheExploitedRansomware
Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.
Product
Log4j2
On CISA’s list since
Dec 10, 2021 (federal fix deadline Dec 24, 2021)
What to do
Attackers are using this now. Install Apache’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 1, 2021Qualcomm Multiple Chipsets Improper Input Validation VulnerabilityCVE-2020-11261 · Computers, phones & browsers · QualcommExploited
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Product
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
On CISA’s list since
Dec 1, 2021 (federal fix deadline Jun 1, 2022)
What to do
Attackers are using this now. Install Qualcomm’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 1, 2021MikroTik Router OS Directory Traversal VulnerabilityCVE-2018-14847 · Network & remote access · MikroTikExploited
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.
Product
RouterOS
On CISA’s list since
Dec 1, 2021 (federal fix deadline Jun 1, 2022)
What to do
Attackers are using this now. Install MikroTik’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 1, 2021Zoho ManageEngine ServiceDesk Authentication Bypass VulnerabilityCVE-2021-37415 · Email & office · ZohoExploited
Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication
Product
ManageEngine ServiceDesk Plus (SDP)
On CISA’s list since
Dec 1, 2021 (federal fix deadline Dec 15, 2021)
What to do
Attackers are using this now. Install Zoho’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 1, 2021Apache HTTP Server-Side Request Forgery (SSRF)CVE-2021-40438 · Websites & servers · ApacheExploitedRansomware
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
Product
Apache
On CISA’s list since
Dec 1, 2021 (federal fix deadline Dec 15, 2021)
What to do
Attackers are using this now. Install Apache’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Dec 1, 2021Zoho ManageEngine ServiceDesk Plus Remote Code Execution VulnerabilityCVE-2021-44077 · Email & office · ZohoExploited
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution
Product
ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus
On CISA’s list since
Dec 1, 2021 (federal fix deadline Dec 15, 2021)
What to do
Attackers are using this now. Install Zoho’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 17, 2021Microsoft Excel Security Feature BypassCVE-2021-42292 · Email & office · MicrosoftExploited
A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.
Product
Office
On CISA’s list since
Nov 17, 2021 (federal fix deadline Dec 1, 2021)
What to do
Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 17, 2021ExifTool Remote Code Execution VulnerabilityCVE-2021-22204 · Other software · PerlExploited
Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
Product
Exiftool
On CISA’s list since
Nov 17, 2021 (federal fix deadline Dec 1, 2021)
What to do
Attackers are using this now. Install Perl’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 17, 2021Microsoft Windows Win32k Privilege Escalation VulnerabilityCVE-2021-40449 · Computers, phones & browsers · MicrosoftExploitedRansomware
Unspecified vulnerability allows for an authenticated user to escalate privileges.
Product
Windows
On CISA’s list since
Nov 17, 2021 (federal fix deadline Dec 1, 2021)
What to do
Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 17, 2021Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-42321 · Email & office · MicrosoftExploitedRansomware
An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.
Product
Exchange
On CISA’s list since
Nov 17, 2021 (federal fix deadline Dec 1, 2021)
What to do
Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Accellion FTA SQL Injection VulnerabilityCVE-2021-27101 · Other software · AccellionExploitedRansomware
Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.
Product
FTA
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install Accellion’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021IBM Planning Analytics Remote Code Execution VulnerabilityCVE-2019-4716 · Other software · IBMExploited
IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.
Product
Planning Analytics
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install IBM’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Microsoft Windows Update Medic Service Privilege Escalation VulnerabilityCVE-2021-36948 · Computers, phones & browsers · MicrosoftExploited
Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation.
Product
Windows
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021VMware vCenter Server Improper Input Validation VulnerabilityCVE-2021-21985 · Other software · VMwareExploitedRansomware
VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution.
Product
vCenter Server
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install VMware’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Zoho ManageEngine Desktop Central File Upload VulnerabilityCVE-2020-10189 · Email & office · ZohoExploited
Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution.
Product
ManageEngine
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install Zoho’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Apple iOS WebKit Buffer Overflow VulnerabilityCVE-2021-30666 · Computers, phones & browsers · AppleExploited
Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Product
iOS
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install Apple’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Atlassian Crowd and Crowd Data Center Remote Code Execution VulnerabilityCVE-2019-11580 · Websites & servers · AtlassianExploitedRansomware
Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.
Product
Crowd and Crowd Data Center
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install Atlassian’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021SolarWinds Serv-U Remote Code Execution VulnerabilityCVE-2021-35211 · Other software · SolarWindsExploitedRansomware
SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.
Product
Serv-U
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install SolarWinds’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021ForgeRock Access Management (AM) Core Server Remote Code Execution VulnerabilityCVE-2021-35464 · Other software · ForgeRockExploitedRansomware
ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame) to execute code in the context of the current user (unless ForgeRock AM is running as root user, which the vendor does not recommend).
Product
Access Management (AM)
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install ForgeRock’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Apple iOS, iPadOS, and macOS WebKit Remote Code Execution VulnerabilityCVE-2021-1870 · Computers, phones & browsers · AppleExploited
Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Product
iOS, iPadOS, and macOS
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install Apple’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Apple Multiple Products WebKit Storage Use-After-Free VulnerabilityCVE-2021-30661 · Computers, phones & browsers · AppleExploited
Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Product
Multiple Products
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install Apple’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Apple macOS Unspecified VulnerabilityCVE-2021-30713 · Computers, phones & browsers · AppleExploited
Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to bypass privacy preferences.
Product
macOS
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install Apple’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Apache Shiro Code Execution VulnerabilityCVE-2016-4437 · Websites & servers · ApacheExploited
Apache Shiro contains a vulnerability which may allow remote attackers to execute code or bypass intended access restrictions via an unspecified request parameter when a cipher key has not been configured for the "remember me" feature.
Product
Shiro
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Apache Solr VelocityResponseWriter Plug-In Remote Code Execution VulnerabilityCVE-2019-17558 · Websites & servers · ApacheExploited
The Apache Solr VelocityResponseWriter plug-in contains an unspecified vulnerability which can allow for remote code execution.
Product
Solr
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Apache Struts Remote Code Execution VulnerabilityCVE-2020-17530 · Websites & servers · ApacheExploited
Forced Object-Graph Navigation Language (OGNL) evaluation in Apache Struts, when evaluated on raw user input in tag attributes, can lead to remote code execution.
Product
Struts
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Apache Struts Remote Code Execution VulnerabilityCVE-2017-5638 · Websites & servers · ApacheExploitedRansomware
Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.
Product
Struts
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install Apache’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Apple iOS WebKit Use-After-Free VulnerabilityCVE-2021-30762 · Computers, phones & browsers · AppleExploited
Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Product
iOS
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install Apple’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Apple Multiple Products Race Condition VulnerabilityCVE-2021-1782 · Computers, phones & browsers · AppleExploited
Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.
Product
Multiple Products
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install Apple’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Atlassian Confluence Server and Data Center Server-Side Template Injection VulnerabilityCVE-2019-3396 · Websites & servers · AtlassianExploitedRansomware
Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an attacker to achieve path traversal and remote code execution.
Product
Confluence Server and Data Server
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install Atlassian’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021DotNetNuke (DNN) Remote Code Execution VulnerabilityCVE-2017-9822 · Other software · DotNetNuke (DNN)ExploitedRansomware
DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization.
Product
DotNetNuke (DNN)
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install DotNetNuke (DNN)’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Microsoft Defender Remote Code Execution VulnerabilityCVE-2021-1647 · Computers, phones & browsers · MicrosoftExploited
Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.
Product
Defender
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Microsoft Windows Kernel Privilege Escalation VulnerabilityCVE-2020-0986 · Computers, phones & browsers · MicrosoftExploited
Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode.
Product
Windows
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021PlaySMS Server-Side Template Injection VulnerabilityCVE-2020-8644 · Other software · PlaySMSExploited
PlaySMS contains a server-side template injection vulnerability that allows for remote code execution.
Product
PlaySMS
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install PlaySMS’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021SonicWall SMA100 SQL Injection VulnerabilityCVE-2019-7481 · Network & remote access · SonicWallExploitedRansomware
SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources.
Product
SMA100
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install SonicWall’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Trend Micro Multiple Products Improper Input Validation VulnerabilityCVE-2021-36741 · Other software · Trend MicroExploited
Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.
Product
Apex One, Apex One as a Service, and Worry-Free Business Security
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install Trend Micro’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Accellion FTA OS Command Injection VulnerabilityCVE-2021-27104 · Other software · AccellionExploitedRansomware
Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.
Product
FTA
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install Accellion’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Apache HTTP Server Path Traversal VulnerabilityCVE-2021-41773 · Websites & servers · ApacheExploitedRansomware
Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default �require all denied� or if CGI scripts are enabled. The original patch issued under this CVE ID is insufficient, please review remediation information under CVE-2021-42013.
Product
HTTP Server
On CISA’s list since
Nov 3, 2021 (federal fix deadline Nov 17, 2021)
What to do
Attackers are using this now. Install Apache’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Nagios XI Remote Code Execution VulnerabilityCVE-2019-15949 · Other software · NagiosExploited
Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and insert malicious commands to execute as root.
Product
Nagios XI
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install Nagios’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Ivanti Pulse Connect Secure Arbitrary File Read VulnerabilityCVE-2019-11510 · Network & remote access · IvantiExploitedRansomware
Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.
Product
Pulse Connect Secure
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install Ivanti’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness VulnerabilityCVE-2017-9248 · Other software · ProgressExploited
Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI.dll that can be exploited to disclose encryption keys (Telerik.Web.UI.DialogParametersEncryptionKey and/or the MachineKey), perform cross-site-scripting (XSS) attacks, compromise the ASP.NET ViewState, and/or upload and download files.
Product
ASP.NET AJAX and Sitefinity
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install Progress’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog
Nov 3, 2021TVT NVMS-1000 Directory Traversal VulnerabilityCVE-2019-20085 · Other software · TVTExploited
TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests.
Product
NVMS-1000
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install TVT’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
NVD record CISA catalog

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. The WordPress, CMS and hosting-panel entries come from the National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan and others); we show who. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Start a project

Tell us what you're building.

A website, a booking system, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll build it writes back

02A planning call, then a written plan with the price and the date

03A preview on your phone while it's being built

04Launch night handled: redirects, email, Google

843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.