CVEs used in ransomware attacks, newest first, page 4

The CVEs CISA's Known Exploited Vulnerabilities catalog marks as used in ransomware campaigns, newest first, with CVSS, EPSS and fixes for each. Narrow it: in CISA KEV · critical. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, New CVEs today, This week, Patch Tuesday

1. 9.8CVE-2022-26501KEVEPSS 4.1%2022-03-17

   Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).

2. 8.8CVE-2022-26500KEVEPSS 5.8%2022-03-17

   Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code.

3. 7.8CVE-2022-21999KEVExploitEPSS 41%2022-02-09

   Windows Print Spooler Elevation of Privilege Vulnerability

4. 6.1CVE-2022-24682KEVExploitEPSS 31%2022-02-09

   An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside…

5. 7.8CVE-2021-4034KEVExploitEPSS 95%2022-01-28

   A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current ve…

6. 7.8CVE-2022-21882KEVExploitEPSS 59%2022-01-11

   Win32k Elevation of Privilege Vulnerability

7. 7.1CVE-2021-43890KEVEPSS 11%2021-12-15

   We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malwar…

8. 7.8CVE-2021-43226KEVEPSS 3.3%2021-12-15

   Windows Common Log File System Driver Elevation of Privilege Vulnerability

9. 9.0CVE-2021-45046KEVExploitEPSS >99.9%2021-12-14

   It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configurati…

10. 10.0CVE-2021-44228KEVExploitEPSS >99.9%2021-12-10

    Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoin…

11. 9.8CVE-2021-44529KEVExploitEPSS 99.1%2021-12-08

    A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).

12. 9.8CVE-2021-20038KEVExploitEPSS >99.9%2021-12-08

    A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability a…

13. 8.8CVE-2021-42321KEVExploitEPSS 92%2021-11-10

    Microsoft Exchange Server Remote Code Execution Vulnerability

14. 7.5CVE-2021-42287KEVEPSS 77%2021-11-10

    Active Directory Domain Services Elevation of Privilege Vulnerability

15. 7.5CVE-2021-42278KEVEPSS 73%2021-11-10

    Active Directory Domain Services Elevation of Privilege Vulnerability

16. 5.5CVE-2021-41379KEVEPSS 19%2021-11-10

    Windows Installer Elevation of Privilege Vulnerability

17. 9.8CVE-2021-42237KEVExploitEPSS 97%2021-11-05

    Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required…

18. 9.8CVE-2021-42258KEVExploitEPSS 75%2021-10-22

    BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. SQL injection can, for example, use the txtID (…

19. 7.8CVE-2021-40449KEVExploitEPSS 82%2021-10-13

    Win32k Elevation of Privilege Vulnerability

20. 9.8CVE-2021-42013KEVExploitEPSS >99.9%2021-10-07

    It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of…

21. 9.8CVE-2021-41773KEVExploitEPSS >99.9%2021-10-05

    A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these…

22. 9.8CVE-2021-22941KEVEPSS 54%2021-09-23

    Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.

23. 9.8CVE-2021-22005KEVExploitEPSS >99.9%2021-09-23

    The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specia…

24. 9.0CVE-2021-40438KEVExploitEPSS >99.9%2021-09-16

    A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

25. 8.8CVE-2021-40444KEVExploitEPSS 98%2021-09-15

    Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Of…

26. 9.8CVE-2021-38647KEVExploitEPSS >99.9%2021-09-15

    Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

27. 7.8CVE-2021-38646KEVEPSS 8.0%2021-09-15

    Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

28. 7.8CVE-2021-36955KEVEPSS 4.1%2021-09-15

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

29. 9.8CVE-2021-40539KEVExploitEPSS 99%2021-09-07

    Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution.

30. 9.8CVE-2021-26084KEVExploitEPSS >99.9%2021-08-30

    In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions …

31. 7.5CVE-2021-36942KEVExploitEPSS 66%2021-08-12

    Windows LSA Spoofing Vulnerability

32. 9.8CVE-2021-20028KEVEPSS 30%2021-08-04

    Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier

33. 5.3CVE-2021-26085KEVExploitEPSS >99.9%2021-08-03

    Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from v…

34. 9.8CVE-2021-35464KEVExploitEPSS >99.9%2021-07-22

    ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single c…

35. 10.0CVE-2021-35211KEVExploitEPSS 91%2021-07-14

    Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Ser…

36. 9.0CVE-2021-34523KEVExploitEPSS >99.9%2021-07-14

    Microsoft Exchange Server Elevation of Privilege Vulnerability

37. 9.1CVE-2021-34473KEVExploitEPSS >99.9%2021-07-14

    Microsoft Exchange Server Remote Code Execution Vulnerability

38. 9.8CVE-2021-30116KEVExploitEPSS 86%2021-07-09

    Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is…

39. 8.8CVE-2021-34527KEVExploitEPSS 99.7%2021-07-02

    A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. …

40. 7.8CVE-2021-1675KEVExploitEPSS 85%2021-06-08

    Windows Print Spooler Remote Code Execution Vulnerability

41. 9.8CVE-2021-21985KEVExploitEPSS >99.9%2021-05-26

    The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port …

42. 9.8CVE-2021-28799KEVExploitEPSS 78%2021-05-13

    An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 ve…

43. 6.6CVE-2021-31207KEVExploitEPSS 99.7%2021-05-11

    Microsoft Exchange Server Security Feature Bypass Vulnerability

44. 10.0CVE-2021-22205KEVExploitEPSS 99.7%2021-04-23

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

45. 10.0CVE-2021-22893KEVEPSS 48%2021-04-23

    Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated…

46. 4.9CVE-2021-20023KEVEPSS 52%2021-04-20

    SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.

47. 7.2CVE-2021-20022KEVEPSS 17%2021-04-09

    SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.

48. 9.8CVE-2021-20021KEVExploitEPSS 89%2021-04-09

    A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.

49. 7.5CVE-2021-21975KEVExploitEPSS 78%2021-03-31

    Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal a…

50. 9.8CVE-2021-22986KEVExploitEPSS 99.8%2021-03-31

    On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.0.0.x before 7.0.0.2, the iControl REST interface has an un…