CVEs used in ransomware attacks, newest first, page 3
Filter
The CVEs CISA's Known Exploited Vulnerabilities catalog marks as used in ransomware campaigns, newest first, with CVSS, EPSS and fixes for each. Narrow it: in CISA KEV · critical. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, New CVEs today, This week, Patch Tuesday
- 9.8CVE-2023-35078KEVExploitEPSS >99.9%
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.
- 9.8CVE-2023-38203KEVExploitEPSS 97%
Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does…
- 9.8CVE-2023-3519KEVExploitEPSS 99.7%
Unauthenticated remote code execution
- 9.8CVE-2023-29300KEVExploitEPSS >99.9%
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this i…
- 7.5CVE-2023-36884KEVEPSS 99.4%
Windows Search Remote Code Execution Vulnerability
- 9.8CVE-2023-29357KEVExploitEPSS >99.9%
Microsoft SharePoint Server Elevation of Privilege Vulnerability
- 9.8CVE-2023-27997KEVEPSS 87%
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version …
- 9.8CVE-2023-34362KEVExploitEPSS >99.9%
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an u…
- 7.2CVE-2023-24955KEVExploitEPSS 85%
Microsoft SharePoint Server Remote Code Execution Vulnerability
- 7.5CVE-2023-27351KEVExploitEPSS 78%
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRe…
- 9.8CVE-2023-27350KEVExploitEPSS >99.9%
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompl…
- 7.8CVE-2023-28252KEVExploitEPSS 49%
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 9.8CVE-2023-28461KEVEPSS 68%
Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header without authentication. The product could t…
- 4.4CVE-2023-24880KEVEPSS 78%
Windows SmartScreen Security Feature Bypass Vulnerability
- 7.5CVE-2023-27532KEVEPSS 81%
Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.
- 9.8CVE-2022-47986KEVExploitEPSS >99.9%
IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit thi…
- 7.8CVE-2023-23376KEVEPSS 11%
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 8.8CVE-2023-21529KEVEPSS 59%
Microsoft Exchange Server Remote Code Execution Vulnerability
- 7.5CVE-2022-24990KEVExploitEPSS 83%
TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response.
- 7.2CVE-2023-0669KEVExploitEPSS >99.9%
Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version…
- 9.8CVE-2022-47966KEVExploitEPSS 99.7%
Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in tha…
- 9.8CVE-2022-42475KEVEPSS 99.4%
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier…
- 5.4CVE-2022-44698KEVEPSS 75%
Windows SmartScreen Security Feature Bypass Vulnerability
- 6.8CVE-2022-41223KEVEPSS 11%
The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.
- 6.8CVE-2022-40765KEVEPSS 11%
A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of…
- 5.4CVE-2022-41091KEVEPSS 2.3%
Windows Mark of the Web Security Feature Bypass Vulnerability
- 8.8CVE-2022-41080KEVEPSS 77%
Microsoft Exchange Server Elevation of Privilege Vulnerability
- 7.8CVE-2022-41073KEVEPSS 2.6%
Windows Print Spooler Elevation of Privilege Vulnerability
- 9.8CVE-2022-31199KEVEPSS 36%
Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist…
- 9.8CVE-2022-21587KEVExploitEPSS 98%
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attack…
- 9.8CVE-2022-40684KEVExploitEPSS >99.9%
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 an…
- 8.0CVE-2022-41082KEVExploitEPSS >99.9%
Microsoft Exchange Server Remote Code Execution Vulnerability
- 8.8CVE-2022-41040KEVExploitEPSS >99.9%
Microsoft Exchange Server Elevation of Privilege Vulnerability
- 9.8CVE-2022-41352KEVExploitEPSS 95%
An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to an…
- 7.8CVE-2022-37969KEVEPSS 28%
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 9.1CVE-2022-27593KEVExploitEPSS 88%
An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the fo…
- 7.5CVE-2022-36537KEVExploitEPSS 96%
ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader.
- 9.8CVE-2022-37042KEVExploitEPSS 92%
Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication (i.e., not having an authtoken), an attacker can upload arbitrary files to the…
- 8.8CVE-2022-2294KEVEPSS 71%
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- 9.8CVE-2022-26352KEVExploitEPSS 91%
An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form request to post a file whose filename is not initially sanitized. This allows directory traversal, in which the file is sa…
- 9.8CVE-2022-26134KEVExploitEPSS >99.9%
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions …
- 7.8CVE-2022-30190KEVExploitEPSS 98%
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the cal…
- 7.5CVE-2022-30333KEVExploitEPSS 99.2%
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
- 9.8CVE-2022-1388KEVExploitEPSS >99.9%
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authen…
- 9.8CVE-2022-29499KEVEPSS 55%
The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.
- 7.2CVE-2022-27925KEVExploitEPSS 99%
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, lea…
- 7.5CVE-2022-27924KEVExploitEPSS 94%
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.
- 9.8CVE-2022-29464KEVExploitEPSS >99.9%
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such a…
- 7.8CVE-2022-24521KEVEPSS 7.1%
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 9.8CVE-2022-22954KEVExploitEPSS >99.9%
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in rem…