Skip to content
VulniPulse

Complete feed

Exploited / KEV

Known exploitation or KEV-listed

Home overview

Android app · Google Play

Take your CVE monitoring with you.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

High8.8MS Server Exploited CISA KEV

High [CVE-2022-41128] Windows Scripting Languages Remote Code Execution Vulnerability

Windows Scripting Languages Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2008 R2 Service Pack 1; Windows Server 2012; Windows Server 2012 R2; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2019; Windows Server 2022.

CVE-2022-41128
Windows Server
Nov 9, 2022
High7.8MS Server Exploited CISA KEV

High [CVE-2022-41073] Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2008 Service Pack 2; Windows Server 2008 R2 Service Pack 1; Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2008 Service Pack 2 (Server Core installation); and 9 more. Affected products named by the advisory: Windows Server 2012 (Server Core installation); Windows Server 2012 R2 (Server Core installation); Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); and 1 more.

CVE-2022-41073
Windows Server
Nov 9, 2022
High7.8MS Server Exploited CISA KEV

High [CVE-2022-41125] Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2012; Windows Server 2012 (Server Core installation); Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation); and 5 more. Affected products named by the advisory: Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); Windows Server 2022.

CVE-2022-41125
Windows Server
Nov 9, 2022
Medium5.4MS Server Exploited CISA KEV

Medium [CVE-2022-41091] Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2016 (Server Core installation); Windows Server 2019; Windows Server 2019 (Server Core installation); and 1 more. Affected products named by the advisory: Windows Server 2022.

CVE-2022-41091
Windows Server
Nov 9, 2022
Critical9.6Fortinet Exploited CISA KEV

Critical [CVE-2022-40684] Fortinet FortiOS, FortiProxy, FortiSwitchManager: authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests. Affected product named by the advisory: Fortinet FortiOS, FortiProxy, FortiSwitchManager.

CVE-2022-40684
FortiGateFirewallFortiOSFortiProxy
Oct 18, 2022
Critical9.8Sophos Exploited CISA KEV

Critical [CVE-2022-3236] Sophos Firewall: code injection vulnerability in the User Portal and Webadmin

A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.

CVE-2022-3236
Sophos Firewall (XGS/SFOS)
Sep 23, 2022
Critical10.0QNAP Exploited CISA KEV

Critical [CVE-2022-27593] QTS: externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later

CVE-2022-27593
QTSApplications
Sep 8, 2022
High8.8Atlassian Exploited CISA KEV

High [CVE-2022-36804] Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before…

Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before version 8.2.2, and from version 8.3.0 before 8.3.1 allows remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request. This vulnerability was reported via our Bug Bounty Program by TheGrandPew.

CVE-2022-36804
Bitbucket
Aug 25, 2022
Critical9.8Atlassian Exploited CISA KEV

Critical [CVE-2022-26138] The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the…

The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of the hardcoded password could exploit this to log into Confluence and access all content accessible to users in the confluence-users group. This user account is created when installing versions 2.7.34, 2.7.35, and 3.0.2 of the app.

CVE-2022-26138
Confluence
Jul 20, 2022
Critical9.8Atlassian Exploited CISA KEV

Critical [CVE-2022-26134] In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.

CVE-2022-26134
Confluence
Jun 3, 2022
High7.8MS Server Exploited CISA KEV

High [CVE-2022-30190] Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability. Affected products named by the advisory: Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server 2022; Windows Server version 20H2; and 8 more. Affected products named by the advisory: Windows Server 2016 (Server Core installation); Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2012 (Server Core installation); Windows Server 2012 R2 (Server Core installation).

CVE-2022-30190
Windows Server
Jun 1, 2022
Critical9.8F5 Exploited CISA KEV

Critical [CVE-2022-1388] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x…

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

CVE-2022-1388
BIG-IP
May 5, 2022
Critical9.8Sophos Exploited CISA KEV

Critical [CVE-2022-1040] Sophos Firewall: authentication bypass vulnerability in the User Portal and Webadmin

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.

CVE-2022-1040
Sophos Firewall (XGS/SFOS)
Mar 25, 2022
CriticalCommvault Exploited CISA KEV

Critical [CVE-2021-4104 +4] Vulnerability in Apache Log4j Logging Libraries Impacting Commvault Products

Vulnerability in Apache Log4j Logging Libraries Impacting Commvault Products

CVE-2021-4104CVE-2021-44228CVE-2021-44832+2
Unclassified
Feb 1, 2022
HighCommvault Exploited CISA KEV

High [CVE-2021-4034] Local Privilege Escalation Vulnerability in Polkit's pkexec Utility

Local Privilege Escalation Vulnerability in Polkit's pkexec Utility

CVE-2021-4034
Unclassified
Jan 29, 2022
High7.0MS Server Exploited CISA KEV

High [CVE-2022-21882] Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server 2022; Windows Server version 20H2.

CVE-2022-21882
Windows Server
Jan 11, 2022
High7.8MS Server Exploited CISA KEV

High [CVE-2021-43226] Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server 2022; Windows Server version 2004; and 11 more. Affected products named by the advisory: Windows Server version 20H2; Windows Server 2016 (Server Core installation); Windows Server 2008 Service Pack 2 (Server Core installation); Windows Server 2008 Service Pack 2; and 3 more.

CVE-2021-43226
Windows Server
Dec 15, 2021
UnratedIvanti Exploited CISA KEV

Advisory [CVE-2021-44529] code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody)

A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody). Affected products named by the advisory: endpoint_manager_cloud_services_appliance.

CVE-2021-44529
Endpoint Manager
Dec 8, 2021
High8.8MS Server Exploited CISA KEV

High [CVE-2021-42321] Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability Affected products named by the advisory: Microsoft Exchange Server 2016 Cumulative Update 21; Microsoft Exchange Server 2016 Cumulative Update 22; Microsoft Exchange Server 2019 Cumulative Update 10; Microsoft Exchange Server 2019 Cumulative Update 11.

CVE-2021-42321
Exchange Server
Nov 10, 2021
High7.5MS Server Exploited CISA KEV

High [CVE-2021-42287] Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server 2022; Windows Server version 2004; and 11 more. Affected products named by the advisory: Windows Server version 20H2; Windows Server 2016 (Server Core installation); Windows Server 2008 Service Pack 2 (Server Core installation); Windows Server 2008 Service Pack 2; and 3 more.

CVE-2021-42287
Windows Server
Nov 10, 2021