CyberSigur / Security Intelligence
Browse CISA's Known Exploited Vulnerabilities catalog. Search by CVE, vendor, or product. Information is published by the US Cybersecurity and Infrastructure Security Agency.
1,766 vulnerabilities · Page 64 of 89
A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system.
Apply updates per vendor instructions.
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code.
Apply updates per vendor instructions.
The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.
Apply updates per vendor instructions.
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.
Apply updates per vendor instructions.
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.
Apply updates per vendor instructions.
Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.
Apply updates per vendor instructions.
Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.
Apply updates per vendor instructions.