{"schema_version":1,"title":"Vulnerabilities exploited in the wild","summary":"Junglewise Threat Intelligence tracks 1,779 vulnerabilities known to be exploited in the wild, from the CISA Known Exploited Vulnerabilities catalogue and vendor advisories: 11 newly exploited in the last 7 days, 38 in the last 30 days and 320 in the last year. The most recent, CVE-2026-125350, was first recorded as exploited on 10 November 2026. The technology hit most in the last 30 days was Plex Media Server, with 4 vulnerabilities.","url":"https://junglewise.ai/threats/exploited","json_url":"https://junglewise.ai/threats/exploited.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","all":[{"cve":"CVE-2026-125350","slug":"cve-2026-125350-use-after-free-in-xml-in-google-chrome-prior-to-157-0-8103-50","title":"Google Chrome use after free in XML","severity":"critical","exploited":true,"published_at":"2026-11-10T18:17:35.237+00:00","exploited_since":"2026-11-10T19:57:35.562031+00:00","url":"https://junglewise.ai/threats/cve-2026-125350-use-after-free-in-xml-in-google-chrome-prior-to-157-0-8103-50"},{"cve":"CVE-2026-116606","slug":"cve-2026-116606-an-authentication-bypass-in-barracuda-email-security-gateway","title":"Barracuda Email Security Gateway authentication bypass","severity":"critical","exploited":true,"published_at":"2026-11-02T13:17:37.017+00:00","exploited_since":"2026-11-10T19:57:32.012873+00:00","url":"https://junglewise.ai/threats/cve-2026-116606-an-authentication-bypass-in-barracuda-email-security-gateway"},{"cve":"CVE-2026-20320","slug":"cve-2026-20320-cisco-broadworks-xxe-injection-in-oci-xml-parser","title":"Cisco BroadWorks XXE injection in OCI XML parser","severity":"critical","exploited":true,"published_at":"2026-08-19T17:18:40.433+00:00","exploited_since":"2026-11-10T19:57:25.775122+00:00","url":"https://junglewise.ai/threats/cve-2026-20320-cisco-broadworks-xxe-injection-in-oci-xml-parser"},{"cve":"CVE-2026-111560","slug":"cve-2026-111560-improper-neutralization-of-shell-metacharacters-in-the-timezone","title":"Barracuda appliance OS command injection in timezone field","severity":"critical","exploited":true,"published_at":"2026-11-02T13:17:35.19+00:00","exploited_since":"2026-11-10T19:57:25.569036+00:00","url":"https://junglewise.ai/threats/cve-2026-111560-improper-neutralization-of-shell-metacharacters-in-the-timezone"},{"cve":"CVE-2026-111793","slug":"cve-2026-111793-openwave-webtop-media-transcoder-does-not-enforce-administrator","title":"Openwave Webtop Media Transcoder file type restriction bypass","severity":"critical","exploited":true,"published_at":"2026-10-16T19:17:05.68+00:00","exploited_since":"2026-11-10T19:57:22.143548+00:00","url":"https://junglewise.ai/threats/cve-2026-111793-openwave-webtop-media-transcoder-does-not-enforce-administrator"},{"cve":"CVE-2026-124194","slug":"cve-2026-124194-microsoft-office-outlook-missing-user-interaction-for","title":"Microsoft Office Outlook user warning spoofing vulnerability","severity":"critical","exploited":true,"published_at":"2026-11-10T19:20:48.18+00:00","exploited_since":"2026-11-10T19:57:19.482833+00:00","url":"https://junglewise.ai/threats/cve-2026-124194-microsoft-office-outlook-missing-user-interaction-for"},{"cve":"CVE-2026-123218","slug":"cve-2026-123218-ibm-aspera-faspex-5-0-0-through-5-0-19-could-allow-an-authorized","title":"IBM Aspera Faspex authorization bypass","severity":"critical","exploited":true,"published_at":"2026-11-07T04:17:28.9+00:00","exploited_since":"2026-11-09T20:16:04.230552+00:00","url":"https://junglewise.ai/threats/cve-2026-123218-ibm-aspera-faspex-5-0-0-through-5-0-19-could-allow-an-authorized"},{"cve":"CVE-2026-102895","slug":"cve-2026-102895-gpustack-is-an-open-source-gpu-cluster-manager-for-ai-model","title":"GPUStack authentication bypass via localhost spoofing","severity":"critical","exploited":true,"published_at":"2026-11-04T22:17:44.613+00:00","exploited_since":"2026-11-09T17:46:05.53205+00:00","url":"https://junglewise.ai/threats/cve-2026-102895-gpustack-is-an-open-source-gpu-cluster-manager-for-ai-model"},{"cve":"CVE-2026-123158","slug":"cve-2026-123158-sshd-in-openssh-before-10-6p2-on-linux-when-musl-libc-is-used","title":"OpenSSH password authentication bypass on musl libc without PAM","severity":"critical","exploited":true,"published_at":"2026-11-05T16:17:47.11+00:00","exploited_since":"2026-11-09T17:46:05.392048+00:00","url":"https://junglewise.ai/threats/cve-2026-123158-sshd-in-openssh-before-10-6p2-on-linux-when-musl-libc-is-used"},{"cve":"CVE-2026-116779","slug":"cve-2026-116779-freeswitch-is-a-software-defined-telecom-stack-enabling-the","title":"FreeSWITCH command injection via SIP MESSAGE chat protocol","severity":"critical","exploited":true,"published_at":"2026-11-05T20:17:44.79+00:00","exploited_since":"2026-11-09T17:46:05.315063+00:00","url":"https://junglewise.ai/threats/cve-2026-116779-freeswitch-is-a-software-defined-telecom-stack-enabling-the"},{"cve":"CVE-2026-19868","slug":"cve-2026-19868-an-authentication-enforcement-vulnerability-in-sonicos-sslvpn","title":"SonicWall SonicOS SSLVPN SAML authentication bypass","severity":"critical","exploited":true,"published_at":"2026-11-06T19:17:48.437+00:00","exploited_since":"2026-11-06T21:11:03.253458+00:00","url":"https://junglewise.ai/threats/cve-2026-19868-an-authentication-enforcement-vulnerability-in-sonicos-sslvpn"},{"cve":"CVE-2024-27834","slug":"cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability","title":"Apple iOS, iPadOS, macOS, Safari, tvOS, watchOS pointer authentication bypass","severity":"critical","exploited":true,"published_at":"2026-11-04T00:00:00+00:00","exploited_since":"2026-11-04T20:26:03.753837+00:00","url":"https://junglewise.ai/threats/cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability"},{"cve":"CVE-2026-119977","slug":"cve-2026-119977-wordpress-core-is-vulnerable-to-remote-code-execution-in","title":"WordPress Core remote code execution in upgrade path","severity":"critical","exploited":true,"published_at":"2026-10-31T06:16:34.55+00:00","exploited_since":"2026-11-03T21:50:17.885017+00:00","url":"https://junglewise.ai/threats/cve-2026-119977-wordpress-core-is-vulnerable-to-remote-code-execution-in"},{"cve":"CVE-2026-118527","slug":"cve-2026-118527-ivanti-connect-secure-generation-of-predictable-numbers-or","title":"Ivanti Connect Secure predictable identifier generation","severity":"critical","exploited":true,"published_at":"2026-11-03T15:17:24.92+00:00","exploited_since":"2026-10-30T18:16:06.796877+00:00","url":"https://junglewise.ai/threats/cve-2026-118527-ivanti-connect-secure-generation-of-predictable-numbers-or"},{"cve":"CVE-2026-111357","slug":"cve-2026-111357-ivanti-connect-secure-22-8r2-4-mishandles-the-manner-in-which","title":"Ivanti Connect Secure privilege escalation via DSCache configuration","severity":"critical","exploited":true,"published_at":"2026-10-15T21:17:13.19+00:00","exploited_since":"2026-10-30T18:16:04.487685+00:00","url":"https://junglewise.ai/threats/cve-2026-111357-ivanti-connect-secure-22-8r2-4-mishandles-the-manner-in-which"},{"cve":"CVE-2026-76418","slug":"cve-2026-76418-a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco","title":"Cisco Secure Firewall ASA and FTD SSL VPN denial of service","severity":"critical","exploited":true,"published_at":"2026-10-28T20:18:47.063+00:00","exploited_since":"2026-10-29T20:56:02.712602+00:00","url":"https://junglewise.ai/threats/cve-2026-76418-a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco"},{"cve":"CVE-2026-97229","slug":"cve-2026-97229-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all","title":"GitLab CE/EE integer overflow in CI/CD regular expression compiler","severity":"critical","exploited":true,"published_at":"2026-10-13T02:17:00.84+00:00","exploited_since":"2026-10-29T20:56:02.670046+00:00","url":"https://junglewise.ai/threats/cve-2026-97229-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all"},{"cve":"CVE-2026-46300","slug":"cve-2026-46300-linux-kernel-out-of-bounds-write-in-skbuff-coalescing","title":"Linux Kernel out-of-bounds write in skbuff coalescing","severity":"critical","exploited":true,"published_at":"2026-05-23T12:17:02.66+00:00","exploited_since":"2026-10-28T20:36:03.885024+00:00","url":"https://junglewise.ai/threats/cve-2026-46300-linux-kernel-out-of-bounds-write-in-skbuff-coalescing"},{"cve":"CVE-2026-41709","slug":"cve-2026-41709-vmware-esx-insufficient-logging-vulnerability","title":"VMware ESX insufficient logging vulnerability","severity":"critical","exploited":true,"published_at":"2026-07-30T14:16:57.42+00:00","exploited_since":"2026-10-28T20:36:03.864826+00:00","url":"https://junglewise.ai/threats/cve-2026-41709-vmware-esx-insufficient-logging-vulnerability"},{"cve":"CVE-2026-111497","slug":"cve-2026-111497-a-buffer-overflow-vulnerability-in-the-brotli-decoder-c-dec","title":"Google Brotli buffer overflow in decoder","severity":"critical","exploited":true,"published_at":"2026-10-22T14:17:37.19+00:00","exploited_since":"2026-10-27T20:21:03.02653+00:00","url":"https://junglewise.ai/threats/cve-2026-111497-a-buffer-overflow-vulnerability-in-the-brotli-decoder-c-dec"},{"cve":"CVE-2026-48356","slug":"cve-2026-48356-adobe-commerce-unrestricted-file-upload-in-multiple-components","title":"Adobe Commerce unrestricted file upload in multiple components","severity":"critical","exploited":true,"published_at":"2026-07-14T20:17:08.437+00:00","exploited_since":"2026-10-27T20:21:02.977172+00:00","url":"https://junglewise.ai/threats/cve-2026-48356-adobe-commerce-unrestricted-file-upload-in-multiple-components"},{"cve":"CVE-2026-109619","slug":"cve-2026-109619-php-has-various-global-state-that-temporarily-points-into","title":"PHP use-after-free in global state handling","severity":"critical","exploited":true,"published_at":"2026-10-21T14:17:09.823+00:00","exploited_since":"2026-10-26T23:41:03.70627+00:00","url":"https://junglewise.ai/threats/cve-2026-109619-php-has-various-global-state-that-temporarily-points-into"},{"cve":"CVE-2026-109618","slug":"cve-2026-109618-gcp-2026-070","title":"PHP Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-21T14:17:09.357+00:00","exploited_since":"2026-10-26T23:41:03.585412+00:00","url":"https://junglewise.ai/threats/cve-2026-109618-gcp-2026-070"},{"cve":"CVE-2026-110447","slug":"cve-2026-110447-collabora-online-built-in-code-server-before-26-4-303","title":"Collabora Online CODE Server OS command injection in proxy.php","severity":"critical","exploited":true,"published_at":"2026-10-14T03:17:20.683+00:00","exploited_since":"2026-10-23T20:16:03.153854+00:00","url":"https://junglewise.ai/threats/cve-2026-110447-collabora-online-built-in-code-server-before-26-4-303"},{"cve":"CVE-2026-114625","slug":"cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where","title":"Arista VeloCloud Orchestrator privilege escalation","severity":"critical","exploited":true,"published_at":"2026-10-22T21:17:16.87+00:00","exploited_since":"2026-10-23T17:51:03.688829+00:00","url":"https://junglewise.ai/threats/cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where"},{"cve":"CVE-2026-110936","slug":"cve-2026-110936-a-vulnerability-has-been-identified-in-siemens-software-center","title":"Siemens Software Center DLL sideloading vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-15T15:17:30.383+00:00","exploited_since":"2026-10-20T20:01:09.876749+00:00","url":"https://junglewise.ai/threats/cve-2026-110936-a-vulnerability-has-been-identified-in-siemens-software-center"},{"cve":"CVE-2026-96655","slug":"cve-2026-96655-plex-media-server-before-1-43-3-10861-allows-an-authenticated","title":"Plex Media Server SSRF via transcode endpoint","severity":"critical","exploited":true,"published_at":"2026-09-23T17:17:23.677+00:00","exploited_since":"2026-10-20T20:01:06.9595+00:00","url":"https://junglewise.ai/threats/cve-2026-96655-plex-media-server-before-1-43-3-10861-allows-an-authenticated"},{"cve":"CVE-2026-106931","slug":"cve-2026-106931-siteguard-server-edition-contains-an-os-command-injection","title":"EG Secure Solutions SiteGuard Server Edition OS command injection","severity":"critical","exploited":true,"published_at":"2026-10-14T05:16:42.633+00:00","exploited_since":"2026-10-20T20:01:06.904136+00:00","url":"https://junglewise.ai/threats/cve-2026-106931-siteguard-server-edition-contains-an-os-command-injection"},{"cve":"CVE-2026-96652","slug":"cve-2026-96652-plex-media-server-before-1-43-3-10861-allows-ssrf-via-player","title":"Plex Media Server SSRF via /player/timeline","severity":"critical","exploited":true,"published_at":"2026-09-23T17:17:23.363+00:00","exploited_since":"2026-10-20T20:01:06.869259+00:00","url":"https://junglewise.ai/threats/cve-2026-96652-plex-media-server-before-1-43-3-10861-allows-ssrf-via-player"},{"cve":"CVE-2026-96654","slug":"cve-2026-96654-plex-media-server-before-1-43-3-10861-does-not-correctly","title":"Plex Media Server unsafe URL neutralization in searchOne","severity":"critical","exploited":true,"published_at":"2026-09-23T17:17:23.517+00:00","exploited_since":"2026-10-20T20:01:06.677505+00:00","url":"https://junglewise.ai/threats/cve-2026-96654-plex-media-server-before-1-43-3-10861-does-not-correctly"},{"cve":"CVE-2026-96656","slug":"cve-2026-96656-plex-media-server-before-1-43-3-10861-allows-an-admin-user-to","title":"Plex Media Server arbitrary file write in transcoder options","severity":"critical","exploited":true,"published_at":"2026-09-23T17:17:23.84+00:00","exploited_since":"2026-10-20T20:01:06.626134+00:00","url":"https://junglewise.ai/threats/cve-2026-96656-plex-media-server-before-1-43-3-10861-allows-an-admin-user-to"},{"cve":"CVE-2026-102764","slug":"cve-2026-102764-beyondtrust-remote-support-authentication-bypass-by-spoofing","title":"BeyondTrust Remote Support authentication bypass by spoofing","severity":"critical","exploited":true,"published_at":"2026-10-15T21:17:00.117+00:00","exploited_since":"2026-10-16T18:26:05.237023+00:00","url":"https://junglewise.ai/threats/cve-2026-102764-beyondtrust-remote-support-authentication-bypass-by-spoofing"},{"cve":"CVE-2025-61624","slug":"cve-2025-61624-fortinet-multiple-products-path-traversal-in-cli","title":"Fortinet multiple products path traversal in CLI","severity":"critical","exploited":true,"published_at":"2026-04-14T16:16:31.3+00:00","exploited_since":"2026-10-16T18:26:04.501573+00:00","url":"https://junglewise.ai/threats/cve-2025-61624-fortinet-multiple-products-path-traversal-in-cli"},{"cve":"CVE-2026-21589","slug":"cve-2026-21589-h3-summary-this-is-a-vulnerability-in-bitbucket-data-center","title":"Atlassian Data Center arbitrary file access without authentication","severity":"critical","exploited":true,"published_at":"2026-10-05T22:16:58.423+00:00","exploited_since":"2026-10-15T17:56:03.217157+00:00","url":"https://junglewise.ai/threats/cve-2026-21589-h3-summary-this-is-a-vulnerability-in-bitbucket-data-center"},{"cve":"CVE-2026-76519","slug":"cve-2026-76519-cisco-secure-email-gateway-relative-path-traversal-vulnerability","title":"Cisco Secure Email Gateway relative path traversal","severity":"critical","exploited":true,"published_at":"2026-10-14T00:00:00+00:00","exploited_since":"2026-10-14T20:11:06.395451+00:00","url":"https://junglewise.ai/threats/cve-2026-76519-cisco-secure-email-gateway-relative-path-traversal-vulnerability"},{"cve":"CVE-2026-0322","slug":"cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability","title":"Palo Alto Networks PAN-OS code injection vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-14T18:17:07.743+00:00","exploited_since":"2026-10-14T20:11:06.135095+00:00","url":"https://junglewise.ai/threats/cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability"},{"cve":"CVE-2026-105133","slug":"cve-2026-105133-a-vulnerability-was-detected-in-ahsay-ahsaycbs-up-to-10-3-2-this","title":"Ahsay AhsayCBS authentication bypass in API","severity":"critical","exploited":true,"published_at":"2026-10-04T07:16:33.087+00:00","exploited_since":"2026-10-14T20:11:05.112315+00:00","url":"https://junglewise.ai/threats/cve-2026-105133-a-vulnerability-was-detected-in-ahsay-ahsaycbs-up-to-10-3-2-this"},{"cve":"CVE-2026-105134","slug":"cve-2026-105134-a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-10-3-2-this","title":"Ahsay AhsayCBS OS command injection in UpdateReceivers","severity":"critical","exploited":true,"published_at":"2026-10-04T07:16:33.48+00:00","exploited_since":"2026-10-14T20:11:04.823032+00:00","url":"https://junglewise.ai/threats/cve-2026-105134-a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-10-3-2-this"},{"cve":"CVE-2026-96951","slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","exploited_since":"2026-10-13T19:31:09.085024+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-104935","slug":"cve-2026-104935-ivanti-connect-secure-authentication-bypass-by-spoofing","title":"Ivanti Connect Secure authentication bypass by spoofing","severity":"critical","exploited":true,"published_at":"2026-10-13T16:17:11.64+00:00","exploited_since":"2026-10-13T15:46:04.459009+00:00","url":"https://junglewise.ai/threats/cve-2026-104935-ivanti-connect-secure-authentication-bypass-by-spoofing"},{"cve":"CVE-2015-3306","slug":"cve-2015-3306-proftpd-improper-access-control-vulnerability","title":"ProFTPD improper access control in SITE commands","severity":"critical","exploited":true,"published_at":"2026-10-08T00:00:00+00:00","exploited_since":"2026-10-08T18:06:10.050173+00:00","url":"https://junglewise.ai/threats/cve-2015-3306-proftpd-improper-access-control-vulnerability"},{"cve":"CVE-2021-3199","slug":"cve-2021-3199-onlyoffice-docs-server-path-traversal-vulnerability","title":"ONLYOFFICE Docs Server path traversal in image upload","severity":"critical","exploited":true,"published_at":"2026-10-08T00:00:00+00:00","exploited_since":"2026-10-08T18:06:09.455177+00:00","url":"https://junglewise.ai/threats/cve-2021-3199-onlyoffice-docs-server-path-traversal-vulnerability"},{"cve":"CVE-2016-3081","slug":"cve-2016-3081-apache-struts-rce-vulnerability","title":"Apache Struts command injection in Dynamic Method Invocation","severity":"critical","exploited":true,"published_at":"2022-05-14T00:54:14+00:00","exploited_since":"2026-10-08T18:06:09.085479+00:00","url":"https://junglewise.ai/threats/cve-2016-3081-apache-struts-rce-vulnerability"},{"cve":"CVE-2015-5477","slug":"cve-2015-5477-isc-bind-data-processing-errors-vulnerability","title":"ISC BIND denial of service via TKEY queries","severity":"critical","exploited":true,"published_at":"2026-10-08T00:00:00+00:00","exploited_since":"2026-10-08T18:06:08.939383+00:00","url":"https://junglewise.ai/threats/cve-2015-5477-isc-bind-data-processing-errors-vulnerability"},{"cve":"CVE-2023-22894","slug":"cve-2023-22894-strapi-information-disclosure-via-private-field-filtering","title":"Strapi information disclosure via private field filtering","severity":"critical","exploited":true,"published_at":"2023-04-19T21:41:26+00:00","exploited_since":"2026-10-08T18:06:07.776873+00:00","url":"https://junglewise.ai/threats/cve-2023-22894-strapi-information-disclosure-via-private-field-filtering"},{"cve":"CVE-2026-88779","slug":"cve-2026-88779-cisa-adds-one-known-exploited-vulnerability-to-catalog","title":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-04T04:16:43.68+00:00","exploited_since":"2026-10-04T20:31:03.513791+00:00","url":"https://junglewise.ai/threats/cve-2026-88779-cisa-adds-one-known-exploited-vulnerability-to-catalog"},{"cve":"CVE-2026-102490","slug":"cve-2026-102490-all-versions-of-zammad-including-the-latest-alpha-enable-the","title":"Zammad privilege escalation to root","severity":"critical","exploited":true,"published_at":"2026-09-30T17:16:40.707+00:00","exploited_since":"2026-10-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-102490-all-versions-of-zammad-including-the-latest-alpha-enable-the"},{"cve":"CVE-2026-102489","slug":"cve-2026-102489-zammad-versions-6-3-0-to-6-5-4-are-vulnerable-a-session-hijack","title":"Zammad session hijack leading to remote code execution","severity":"critical","exploited":true,"published_at":"2026-09-30T17:16:40.55+00:00","exploited_since":"2026-10-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-102489-zammad-versions-6-3-0-to-6-5-4-are-vulnerable-a-session-hijack"},{"cve":"CVE-2026-104286","slug":"cve-2026-104286-fortinet-fortimail-path-traversal-vulnerability","title":"Fortinet FortiMail path traversal vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-01T20:17:24.01+00:00","exploited_since":"2026-10-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-104286-fortinet-fortimail-path-traversal-vulnerability"},{"cve":"CVE-2026-76504","slug":"cve-2026-76504-a-vulnerability-in-the-api-session-based-authentication","title":"Cisco Catalyst SD-WAN Manager API authentication bypass","severity":"critical","exploited":true,"published_at":"2026-09-30T13:17:20.247+00:00","exploited_since":"2026-09-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-76504-a-vulnerability-in-the-api-session-based-authentication"},{"cve":"CVE-2026-86950","slug":"cve-2026-86950-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds","title":"Apple CoreGraphics out-of-bounds write in file processing","severity":"critical","exploited":true,"published_at":"2026-09-28T20:17:11.193+00:00","exploited_since":"2026-09-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-86950-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds"},{"cve":"CVE-2026-88772","slug":"cve-2026-88772-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler","title":"Citrix NetScaler ADC and Gateway remote code execution and denial of service","severity":"critical","exploited":true,"published_at":"2026-09-27T17:16:56.39+00:00","exploited_since":"2026-09-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-88772-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler"},{"cve":"CVE-2026-88771","slug":"cve-2026-88771-improper-input-validation-vulnerability-in-citrix-netscaler-adc","title":"Citrix NetScaler ADC and Gateway improper input validation","severity":"critical","exploited":true,"published_at":"2026-09-27T17:16:56.26+00:00","exploited_since":"2026-09-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-88771-improper-input-validation-vulnerability-in-citrix-netscaler-adc"},{"cve":"CVE-2026-87902","slug":"cve-2026-87902-wordpress-core-remote-file-inclusion","title":"WordPress Core remote file inclusion","severity":"critical","exploited":true,"published_at":"2026-09-22T17:17:28.31+00:00","exploited_since":"2026-09-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-87902-wordpress-core-remote-file-inclusion"},{"cve":"CVE-2026-67279","slug":"cve-2026-67279-mikrotik-routeros-improper-behavioral-workflow-enforcement","title":"Mikrotik RouterOS improper behavioral workflow enforcement","severity":"critical","exploited":true,"published_at":"2026-09-05T20:17:18.39+00:00","exploited_since":"2026-09-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-67279-mikrotik-routeros-improper-behavioral-workflow-enforcement"},{"cve":"CVE-2026-65660","slug":"cve-2026-65660-microsoft-sharepoint-code-injection","title":"Microsoft SharePoint code injection","severity":"critical","exploited":true,"published_at":"2026-08-11T17:18:54.08+00:00","exploited_since":"2026-09-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-65660-microsoft-sharepoint-code-injection"},{"cve":"CVE-2026-71362","slug":"cve-2026-71362-adobe-commerce-and-magento-incorrect-authorization","title":"Adobe Commerce and Magento incorrect authorization","severity":"critical","exploited":true,"published_at":"2026-08-11T18:18:21.61+00:00","exploited_since":"2026-09-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-71362-adobe-commerce-and-magento-incorrect-authorization"},{"cve":"CVE-2026-5430","slug":"cve-2026-5430-wso2-api-control-plane-path-traversal-vulnerability","title":"WSO2 API Control Plane path traversal vulnerability","severity":"critical","exploited":true,"published_at":"2026-08-06T08:16:33.24+00:00","exploited_since":"2026-09-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-5430-wso2-api-control-plane-path-traversal-vulnerability"},{"cve":"CVE-2026-94127","slug":"cve-2026-94127-f5-big-ip-apm-heap-based-buffer-overflow","title":"F5 BIG-IP APM heap-based buffer overflow","severity":"critical","exploited":true,"published_at":"2026-09-22T15:17:24.313+00:00","exploited_since":"2026-09-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-94127-f5-big-ip-apm-heap-based-buffer-overflow"},{"cve":"CVE-2026-93616","slug":"cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability","title":"Check Point Multiple Products path traversal vulnerability","severity":"critical","exploited":true,"published_at":"2026-09-22T13:17:11.963+00:00","exploited_since":"2026-09-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability"},{"cve":"CVE-2026-93952","slug":"cve-2026-93952-arista-velocloud-orchestrator-improper-input-validation","title":"Arista VeloCloud Orchestrator improper input validation","severity":"critical","exploited":true,"published_at":"2026-09-22T08:16:43.047+00:00","exploited_since":"2026-09-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-93952-arista-velocloud-orchestrator-improper-input-validation"},{"cve":"CVE-2026-85102","slug":"cve-2026-85102-check-point-security-gateway-and-spark-firewall-improper","title":"Check Point Security Gateway and Spark Firewall improper certificate validation in VPN","severity":"critical","exploited":true,"published_at":"2026-09-09T13:20:43.793+00:00","exploited_since":"2026-09-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-85102-check-point-security-gateway-and-spark-firewall-improper"},{"cve":"CVE-2026-7273","slug":"cve-2026-7273-zyxel-gs1900-series-stack-based-buffer-overflow-in-cgi-program","title":"Zyxel GS1900 Series stack-based buffer overflow in CGI program","severity":"critical","exploited":true,"published_at":"2026-06-16T03:16:13.557+00:00","exploited_since":"2026-09-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-7273-zyxel-gs1900-series-stack-based-buffer-overflow-in-cgi-program"},{"cve":"CVE-2026-53266","slug":"cve-2026-53266-linux-kernel-netfilter-improper-memory-write-in-ebt-snat-arp","title":"Linux Kernel netfilter improper memory write in ebt_snat ARP rewrite","severity":"critical","exploited":true,"published_at":"2026-06-25T09:16:44.643+00:00","exploited_since":"2026-09-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-53266-linux-kernel-netfilter-improper-memory-write-in-ebt-snat-arp"},{"cve":"CVE-2025-39964","slug":"cve-2025-39964-linux-kernel-race-condition-in-af-alg-sendmsg","title":"Linux Kernel race condition in af_alg_sendmsg","severity":"critical","exploited":true,"published_at":"2025-10-13T14:15:34.737+00:00","exploited_since":"2026-09-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-39964-linux-kernel-race-condition-in-af-alg-sendmsg"},{"cve":"CVE-2025-39682","slug":"cve-2025-39682-linux-kernel-memory-corruption-in-tls-zero-length-record-handling","title":"Linux Kernel memory corruption in TLS zero-length record handling","severity":"critical","exploited":true,"published_at":"2025-09-05T18:15:44.67+00:00","exploited_since":"2026-09-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-39682-linux-kernel-memory-corruption-in-tls-zero-length-record-handling"},{"cve":"CVE-2026-87886","slug":"cve-2026-87886-acronis-backup-privilege-escalation-in-cpanel-whm-and-plesk","title":"Acronis Backup privilege escalation in cPanel/WHM and Plesk plugins","severity":"critical","exploited":true,"published_at":"2026-09-17T23:18:53.763+00:00","exploited_since":"2026-09-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-87886-acronis-backup-privilege-escalation-in-cpanel-whm-and-plesk"},{"cve":"CVE-2026-76460","slug":"cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use","title":"A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.","severity":"critical","exploited":true,"published_at":"2026-09-16T21:17:21.43+00:00","exploited_since":"2026-09-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use"},{"cve":"CVE-2026-58704","slug":"cve-2026-58704-google-pixel-improper-authorization-in-cellular-modem","title":"Google Pixel improper authorization in cellular modem","severity":"critical","exploited":true,"published_at":"2026-09-15T19:17:32.297+00:00","exploited_since":"2026-09-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-58704-google-pixel-improper-authorization-in-cellular-modem"},{"cve":"CVE-2026-76461","slug":"cve-2026-76461-cisco-secure-email-gateway-sql-injection","title":"Cisco Secure Email Gateway SQL injection","severity":"critical","exploited":true,"published_at":"2026-09-14T17:17:51.113+00:00","exploited_since":"2026-09-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-76461-cisco-secure-email-gateway-sql-injection"},{"cve":"CVE-2026-85706","slug":"cve-2026-85706-gitlab-community-and-enterprise-edition-path-traversal-in-commits","title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.","severity":"critical","exploited":true,"published_at":"2026-09-12T03:16:30.473+00:00","exploited_since":"2026-09-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-85706-gitlab-community-and-enterprise-edition-path-traversal-in-commits"},{"cve":"CVE-2026-84869","slug":"cve-2026-84869-connectwise-screenconnect-unauthorized-file-transfer-and","title":"ConnectWise ScreenConnect unauthorized file transfer and execution","severity":"critical","exploited":true,"published_at":"2026-09-08T20:18:51.147+00:00","exploited_since":"2026-09-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-84869-connectwise-screenconnect-unauthorized-file-transfer-and"},{"cve":"CVE-2026-42018","slug":"cve-2026-42018-jfrog-artifactory-improper-authentication-vulnerability","title":"JFrog Artifactory improper authentication vulnerability","severity":"critical","exploited":true,"published_at":"2026-08-12T18:17:29.473+00:00","exploited_since":"2026-09-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-42018-jfrog-artifactory-improper-authentication-vulnerability"},{"cve":"CVE-2026-42016","slug":"cve-2026-42016-jfrog-artifactory-privilege-escalation-via-improper-token-scope","title":"JFrog Artifactory privilege escalation via improper token scope validation","severity":"critical","exploited":true,"published_at":"2026-07-27T20:16:39.613+00:00","exploited_since":"2026-09-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-42016-jfrog-artifactory-privilege-escalation-via-improper-token-scope"},{"cve":"CVE-2026-86060","slug":"cve-2026-86060-mikrotik-routeros-argument-delimiter-neutralization-privilege","title":"MikroTik RouterOS argument delimiter neutralization privilege escalation","severity":"critical","exploited":true,"published_at":"2026-09-05T20:17:18.703+00:00","exploited_since":"2026-09-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-86060-mikrotik-routeros-argument-delimiter-neutralization-privilege"},{"cve":"CVE-2026-67277","slug":"cve-2026-67277-mikrotik-routeros-missing-authentication-in-btest-service","title":"MikroTik RouterOS missing authentication in btest service","severity":"critical","exploited":true,"published_at":"2026-09-05T20:17:18.12+00:00","exploited_since":"2026-09-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-67277-mikrotik-routeros-missing-authentication-in-btest-service"},{"cve":"CVE-2026-87491","slug":"cve-2026-87491-google-chromium-v8-out-of-bounds-write-in-javascript-engine","title":"Google Chromium V8 out-of-bounds write in JavaScript engine","severity":"critical","exploited":true,"published_at":"2026-09-09T01:17:05.887+00:00","exploited_since":"2026-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-87491-google-chromium-v8-out-of-bounds-write-in-javascript-engine"},{"cve":"CVE-2026-19490","slug":"cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path","title":"Citrix NetScaler authentication bypass via alternate path","severity":"critical","exploited":true,"published_at":"2026-08-19T13:17:45+00:00","exploited_since":"2026-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path"},{"cve":"CVE-2026-20079","slug":"cve-2026-20079-cisco-secure-firewall-management-center-auth-bypass-in-web","title":"Cisco Secure Firewall Management Center auth bypass in web interface","severity":"critical","exploited":true,"published_at":"2026-03-04T18:16:24.23+00:00","exploited_since":"2026-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20079-cisco-secure-firewall-management-center-auth-bypass-in-web"},{"cve":"CVE-2025-25249","slug":"cve-2025-25249-fortinet-fortios-heap-overflow-in-cw-acd-daemon","title":"Fortinet FortiOS heap overflow in cw_acd daemon","severity":"critical","exploited":true,"published_at":"2026-01-13T17:15:56.91+00:00","exploited_since":"2026-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-25249-fortinet-fortios-heap-overflow-in-cw-acd-daemon"},{"cve":"CVE-2026-85880","slug":"cve-2026-85880-microsoft-windows-heap-based-buffer-overflow-in-advanced-local","title":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","severity":"critical","exploited":true,"published_at":"2026-09-08T18:21:14.087+00:00","exploited_since":"2026-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-85880-microsoft-windows-heap-based-buffer-overflow-in-advanced-local"},{"cve":"CVE-2026-81963","slug":"cve-2026-81963-microsoft-windows-privilege-escalation-via-link-following-in","title":"Microsoft Windows privilege escalation via link following in Update Stack","severity":"critical","exploited":true,"published_at":"2026-09-08T18:21:00.09+00:00","exploited_since":"2026-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-81963-microsoft-windows-privilege-escalation-via-link-following-in"},{"cve":"CVE-2026-75650","slug":"cve-2026-75650-adobe-commerce-and-magento-improper-neutralization-in-template","title":"Adobe Commerce and Magento improper neutralization in template engine","severity":"critical","exploited":true,"published_at":"2026-09-07T21:17:30.863+00:00","exploited_since":"2026-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-75650-adobe-commerce-and-magento-improper-neutralization-in-template"},{"cve":"CVE-2026-86218","slug":"cve-2026-86218-n-able-n-central-static-code-injection-vulnerability","title":"N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.","severity":"critical","exploited":true,"published_at":"2026-09-06T03:17:17.373+00:00","exploited_since":"2026-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-86218-n-able-n-central-static-code-injection-vulnerability"},{"cve":"CVE-2026-85046","slug":"cve-2026-85046-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 type confusion vulnerability","severity":"critical","exploited":true,"published_at":"2026-09-03T20:17:24.21+00:00","exploited_since":"2026-09-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-85046-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2026-83549","slug":"cve-2026-83549-sonicwall-sma1000-os-command-injection","title":"SonicWall SMA1000 OS command injection","severity":"critical","exploited":true,"published_at":"2026-09-01T22:17:13.29+00:00","exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-83549-sonicwall-sma1000-os-command-injection"},{"cve":"CVE-2026-83548","slug":"cve-2026-83548-sonicwall-sma1000-server-side-request-forgery","title":"SonicWall SMA1000 server-side request forgery","severity":"critical","exploited":true,"published_at":"2026-09-01T22:17:13.17+00:00","exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-83548-sonicwall-sma1000-server-side-request-forgery"},{"cve":"CVE-2026-82329","slug":"cve-2026-82329-jfrog-artifactory-improper-authentication-vulnerability","title":"JFrog Artifactory improper authentication vulnerability","severity":"critical","exploited":true,"published_at":"2026-08-28T20:20:21.293+00:00","exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-82329-jfrog-artifactory-improper-authentication-vulnerability"},{"cve":"CVE-2026-9586","slug":"cve-2026-9586-sangoma-switchvox-smb-sql-injection-in-pa-endpoint","title":"Sangoma Switchvox SMB SQL injection in /pa endpoint","severity":"critical","exploited":true,"published_at":"2026-07-17T17:17:18.15+00:00","exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-9586-sangoma-switchvox-smb-sql-injection-in-pa-endpoint"},{"cve":"CVE-2026-59822","slug":"cve-2026-59822-berriai-litellm-authentication-bypass-in-mcp-endpoint","title":"BerriAI LiteLLM authentication bypass in MCP endpoint","severity":"critical","exploited":true,"published_at":"2026-07-08T20:16:57.683+00:00","exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-59822-berriai-litellm-authentication-bypass-in-mcp-endpoint"},{"cve":"CVE-2026-49869","slug":"cve-2026-49869-kestra-oss-authentication-bypass-in-authenticationfilter","title":"Kestra OSS authentication bypass in AuthenticationFilter","severity":"critical","exploited":true,"published_at":"2026-06-26T22:16:32.113+00:00","exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-49869-kestra-oss-authentication-bypass-in-authenticationfilter"},{"cve":"CVE-2026-48710","slug":"cve-2026-48710-starlette-auth-bypass-via-malformed-host-header","title":"Starlette auth bypass via malformed Host header","severity":"critical","exploited":true,"published_at":"2026-05-26T22:16:44.02+00:00","exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-48710-starlette-auth-bypass-via-malformed-host-header"},{"cve":"CVE-2026-82078","slug":"cve-2026-82078-papercut-ng-mf-unsafe-reflection-vulnerability","title":"PaperCut NG/MF unsafe reflection vulnerability","severity":"critical","exploited":true,"published_at":"2026-08-28T16:18:31.24+00:00","exploited_since":"2026-08-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-82078-papercut-ng-mf-unsafe-reflection-vulnerability"},{"cve":"CVE-2026-81578","slug":"cve-2026-81578-papercut-ng-mf-missing-authentication-for-critical-function","title":"PaperCut NG/MF missing authentication for critical function","severity":"critical","exploited":true,"published_at":"2026-08-28T16:18:29.6+00:00","exploited_since":"2026-08-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-81578-papercut-ng-mf-missing-authentication-for-critical-function"},{"cve":"CVE-2023-49105","slug":"cve-2023-49105-owncloud-improper-authentication-vulnerability","title":"ownCloud improper authentication vulnerability","severity":"critical","exploited":true,"published_at":"2026-08-27T00:00:00+00:00","exploited_since":"2026-08-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-49105-owncloud-improper-authentication-vulnerability"},{"cve":"CVE-2026-66384","slug":"cve-2026-66384-jfrog-artifactory-path-traversal-in-docker-cache","title":"An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.","severity":"critical","exploited":true,"published_at":"2026-08-12T16:17:14.52+00:00","exploited_since":"2026-08-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-66384-jfrog-artifactory-path-traversal-in-docker-cache"},{"cve":"CVE-2026-53362","slug":"cve-2026-53362-linux-kernel-buffer-overflow-in-ipv6-paged-allocation","title":"Linux Kernel buffer overflow in IPv6 paged allocation","severity":"critical","exploited":true,"published_at":"2026-07-04T12:17:02.113+00:00","exploited_since":"2026-08-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-53362-linux-kernel-buffer-overflow-in-ipv6-paged-allocation"},{"cve":"CVE-2015-3246","slug":"cve-2015-3246-red-hat-libuser-race-condition-in-passwd-file-handling","title":"Red Hat Libuser race condition in passwd file handling","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","exploited_since":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-3246-red-hat-libuser-race-condition-in-passwd-file-handling"},{"cve":"CVE-2015-5287","slug":"cve-2015-5287-red-hat-abrt-privilege-escalation-via-symlink-attack","title":"Red Hat ABRT privilege escalation via symlink attack","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","exploited_since":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-5287-red-hat-abrt-privilege-escalation-via-symlink-attack"},{"cve":"CVE-2022-0995","slug":"cve-2022-0995-linux-kernel-out-of-bounds-write-vulnerability","title":"Linux Kernel out-of-bounds write vulnerability","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","exploited_since":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-0995-linux-kernel-out-of-bounds-write-vulnerability"},{"cve":"CVE-2019-1068","slug":"cve-2019-1068-microsoft-sql-server-remote-code-execution","title":"Microsoft SQL Server remote code execution","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","exploited_since":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1068-microsoft-sql-server-remote-code-execution"},{"cve":"CVE-2026-8452","slug":"cve-2026-8452-netscaler-adc-and-gateway-memory-overflow-in-gateway-or-aaa","title":"NetScaler ADC and Gateway memory overflow in Gateway or AAA virtual server","severity":"critical","exploited":true,"published_at":"2026-06-30T13:19:33.45+00:00","exploited_since":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-8452-netscaler-adc-and-gateway-memory-overflow-in-gateway-or-aaa"},{"cve":"CVE-2021-23758","slug":"cve-2021-23758-ajax-net-professional-unsafe-deserialization-of-untrusted-data","title":"Remote Code Execution in AjaxNetProfessional","severity":"critical","exploited":true,"published_at":"2021-12-07T21:21:49+00:00","exploited_since":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-23758-ajax-net-professional-unsafe-deserialization-of-untrusted-data"},{"cve":"CVE-2026-60004","slug":"cve-2026-60004-gitea-code-injection-in-diffpatch-api","title":"Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.","severity":"critical","exploited":true,"published_at":"2026-08-26T20:17:56.01+00:00","exploited_since":"2026-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-60004-gitea-code-injection-in-diffpatch-api"},{"cve":"CVE-2026-21962","slug":"cve-2026-21962-oracle-http-server-and-oracle-weblogic-server-proxy-plug-in","title":"Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in improper access control","severity":"critical","exploited":true,"published_at":"2026-01-20T22:15:59.11+00:00","exploited_since":"2026-08-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21962-oracle-http-server-and-oracle-weblogic-server-proxy-plug-in"},{"cve":"CVE-2026-73570","slug":"cve-2026-73570-zimbra-collaboration-suite-os-command-injection-in-smtp","title":"Zimbra Collaboration Suite OS command injection in SMTP","severity":"critical","exploited":true,"published_at":"2026-08-21T00:00:00+00:00","exploited_since":"2026-08-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-73570-zimbra-collaboration-suite-os-command-injection-in-smtp"},{"cve":"CVE-2026-72530","slug":"cve-2026-72530-trueconf-server-code-injection-vulnerability","title":"TrueConf Server code injection vulnerability","severity":"critical","exploited":true,"published_at":"2026-08-19T17:21:01.13+00:00","exploited_since":"2026-08-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-72530-trueconf-server-code-injection-vulnerability"},{"cve":"CVE-2026-72529","slug":"cve-2026-72529-trueconf-server-missing-authentication-for-critical-function","title":"TrueConf Server missing authentication for critical function","severity":"critical","exploited":true,"published_at":"2026-08-19T17:21:00.99+00:00","exploited_since":"2026-08-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-72529-trueconf-server-missing-authentication-for-critical-function"},{"cve":"CVE-2026-64849","slug":"cve-2026-64849-mlflow-server-side-request-forgery","title":"MLflow unauthenticated SSRF via unvalidated webhook redirects","severity":"critical","exploited":true,"published_at":"2026-08-17T22:17:23.58+00:00","exploited_since":"2026-08-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-64849-mlflow-server-side-request-forgery"},{"cve":"CVE-2026-65400","slug":"cve-2026-65400-apple-macos-screen-sharing-authentication-bypass","title":"Apple macOS Screen Sharing authentication bypass","severity":"critical","exploited":true,"published_at":"2026-08-06T22:18:14.533+00:00","exploited_since":"2026-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-65400-apple-macos-screen-sharing-authentication-bypass"},{"cve":"CVE-2026-59310","slug":"cve-2026-59310-vmware-vcenter-directory-traversal-in-syslog-server","title":"VMware vCenter directory traversal in Syslog server","severity":"critical","exploited":true,"published_at":"2026-07-30T13:16:53.993+00:00","exploited_since":"2026-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-59310-vmware-vcenter-directory-traversal-in-syslog-server"},{"cve":"CVE-2026-55040","slug":"cve-2026-55040-microsoft-sharepoint-weak-authentication-security-feature-bypass","title":"Microsoft SharePoint weak authentication security feature bypass","severity":"critical","exploited":true,"published_at":"2026-07-14T18:18:15.413+00:00","exploited_since":"2026-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-55040-microsoft-sharepoint-weak-authentication-security-feature-bypass"},{"cve":"CVE-2026-33824","slug":"cve-2026-33824-microsoft-windows-double-free-in-ike-extension","title":"Microsoft Windows double free in IKE Extension","severity":"critical","exploited":true,"published_at":"2026-04-14T18:17:34.767+00:00","exploited_since":"2026-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-33824-microsoft-windows-double-free-in-ike-extension"},{"cve":"CVE-2025-62593","slug":"cve-2025-62593-ray-project-ray-code-injection-vulnerability","title":"PYSEC-2026-520 - Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack","severity":"critical","exploited":true,"published_at":"2025-11-26T23:15:47.927+00:00","exploited_since":"2026-08-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-62593-ray-project-ray-code-injection-vulnerability"},{"cve":"CVE-2026-68820","slug":"cve-2026-68820-microsoft-windows-ancillary-function-driver-for-winsock-use-after","title":"Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.","severity":"critical","exploited":true,"published_at":"2026-08-11T17:19:06.357+00:00","exploited_since":"2026-08-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-68820-microsoft-windows-ancillary-function-driver-for-winsock-use-after"},{"cve":"CVE-2026-20349","slug":"cve-2026-20349-cisco-secure-firewall-asa-and-ftd-denial-of-service-in-ssl-vpn","title":"Cisco Secure Firewall ASA and FTD denial of service in SSL VPN","severity":"critical","exploited":true,"published_at":"2026-08-11T17:17:48.833+00:00","exploited_since":"2026-08-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20349-cisco-secure-firewall-asa-and-ftd-denial-of-service-in-ssl-vpn"},{"cve":"CVE-2026-72898","slug":"cve-2026-72898-metabase-sql-injection-in-password-reset-endpoint","title":"Metabase SQL injection in password reset endpoint","severity":"critical","exploited":true,"published_at":"2026-08-10T18:18:53.3+00:00","exploited_since":"2026-08-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-72898-metabase-sql-injection-in-password-reset-endpoint"},{"cve":"CVE-2026-8037","slug":"cve-2026-8037-progress-loadmaster-os-command-injection-in-api","title":"Progress LoadMaster OS command injection in API","severity":"critical","exploited":true,"published_at":"2026-06-04T14:16:45.177+00:00","exploited_since":"2026-08-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-8037-progress-loadmaster-os-command-injection-in-api"},{"cve":"CVE-2026-63077","slug":"cve-2026-63077-jetbrains-teamcity-remote-code-execution-in-agent-polling","title":"JetBrains TeamCity remote code execution in agent polling protocol","severity":"critical","exploited":true,"published_at":"2026-07-27T17:16:38.83+00:00","exploited_since":"2026-08-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-63077-jetbrains-teamcity-remote-code-execution-in-agent-polling"},{"cve":"CVE-2026-18556","slug":"cve-2026-18556-n-able-n-central-authentication-bypass-via-alternate-path","title":"N-able N-central authentication bypass via alternate path","severity":"critical","exploited":true,"published_at":"2026-08-01T20:16:37.157+00:00","exploited_since":"2026-08-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-18556-n-able-n-central-authentication-bypass-via-alternate-path"},{"cve":"CVE-2026-9198","slug":"cve-2026-9198-ibm-langflow-oss-remote-code-execution-via-auto-login-bypass","title":"IBM Langflow OSS remote code execution via auto-login bypass","severity":"critical","exploited":true,"published_at":"2026-07-17T18:17:17.34+00:00","exploited_since":"2026-08-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-9198-ibm-langflow-oss-remote-code-execution-via-auto-login-bypass"},{"cve":"CVE-2026-34486","slug":"cve-2026-34486-apache-tomcat-encryption-bypass-in-encryptinterceptor","title":"Apache Tomcat encryption bypass in EncryptInterceptor","severity":"critical","exploited":true,"published_at":"2026-04-09T20:16:25.063+00:00","exploited_since":"2026-08-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34486-apache-tomcat-encryption-bypass-in-encryptinterceptor"},{"cve":"CVE-2026-18577","slug":"cve-2026-18577-n-able-n-central-authentication-bypass-and-account-takeover","title":"An incomplete patch for allows for authentication bypass and account takeover in N-central Versions through 2026.3.1","severity":"critical","exploited":true,"published_at":"2026-08-02T23:16:26.21+00:00","exploited_since":"2026-08-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-18577-n-able-n-central-authentication-bypass-and-account-takeover"},{"cve":"CVE-2026-20316","slug":"cve-2026-20316-cisco-secure-firewall-management-center-static-credentials-in-web","title":"Cisco Secure Firewall Management Center static credentials in web interface","severity":"critical","exploited":true,"published_at":"2026-07-29T17:16:51.84+00:00","exploited_since":"2026-07-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20316-cisco-secure-firewall-management-center-static-credentials-in-web"},{"cve":"CVE-2026-16812","slug":"cve-2026-16812-arista-velocloud-orchestrator-os-command-injection-in-on-prem","title":"Arista VeloCloud Orchestrator OS command injection in on-prem host","severity":"critical","exploited":true,"published_at":"2026-07-27T16:17:03.64+00:00","exploited_since":"2026-07-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-16812-arista-velocloud-orchestrator-os-command-injection-in-on-prem"},{"cve":"CVE-2025-68686","slug":"cve-2025-68686-fortinet-fortios-information-disclosure-in-ssl-vpn","title":"Fortinet FortiOS information disclosure in SSL-VPN","severity":"critical","exploited":true,"published_at":"2026-02-10T16:16:09.63+00:00","exploited_since":"2026-07-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-68686-fortinet-fortios-information-disclosure-in-ssl-vpn"},{"cve":"CVE-2026-16232","slug":"cve-2026-16232-check-point-smartconsole-authentication-bypass-in-login-process","title":"Check Point SmartConsole authentication bypass in login process","severity":"critical","exploited":true,"published_at":"2026-07-22T14:17:15.513+00:00","exploited_since":"2026-07-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-16232-check-point-smartconsole-authentication-bypass-in-login-process"},{"cve":"CVE-2026-50522","slug":"cve-2026-50522-microsoft-sharepoint-remote-code-execution-via-unsafe","title":"Microsoft SharePoint remote code execution via unsafe deserialization","severity":"critical","exploited":true,"published_at":"2026-07-14T17:17:01.547+00:00","exploited_since":"2026-07-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-50522-microsoft-sharepoint-remote-code-execution-via-unsafe"},{"cve":"CVE-2026-63030","slug":"cve-2026-63030-wordpress-rest-api-route-confusion-and-sql-injection-leading-to","title":"WordPress REST API route confusion and SQL injection leading to RCE","severity":"critical","exploited":true,"published_at":"2026-07-17T20:17:28.49+00:00","exploited_since":"2026-07-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-63030-wordpress-rest-api-route-confusion-and-sql-injection-leading-to"},{"cve":"CVE-2026-60137","slug":"cve-2026-60137-wordpress-sql-injection-in-wp-query-author-not-in-parameter","title":"WordPress SQL injection in WP_Query author__not_in parameter","severity":"critical","exploited":true,"published_at":"2026-07-17T20:17:27.79+00:00","exploited_since":"2026-07-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-60137-wordpress-sql-injection-in-wp-query-author-not-in-parameter"},{"cve":"CVE-2021-27137","slug":"cve-2021-27137-dd-wrt-stack-buffer-overflow-in-upnp-ssdp-parser","title":"DD-WRT stack buffer overflow in UPnP SSDP parser","severity":"critical","exploited":true,"published_at":"2026-07-16T18:16:39.113+00:00","exploited_since":"2026-07-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27137-dd-wrt-stack-buffer-overflow-in-upnp-ssdp-parser"},{"cve":"CVE-2026-0770","slug":"cve-2026-0770-langflow-remote-code-execution-in-validate-endpoint","title":"Langflow remote code execution in validate endpoint","severity":"critical","exploited":true,"published_at":"2026-01-23T04:16:04.063+00:00","exploited_since":"2026-07-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-0770-langflow-remote-code-execution-in-validate-endpoint"},{"cve":"CVE-2026-58644","slug":"cve-2026-58644-microsoft-sharepoint-remote-code-execution-via-untrusted","title":"Microsoft SharePoint remote code execution via untrusted deserialization","severity":"critical","exploited":true,"published_at":"2026-07-14T17:17:14.257+00:00","exploited_since":"2026-07-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-58644-microsoft-sharepoint-remote-code-execution-via-untrusted"},{"cve":"CVE-2026-25089","slug":"cve-2026-25089-fortinet-fortisandbox-os-command-injection-in-web-ui","title":"Fortinet FortiSandbox OS command injection in Web UI","severity":"critical","exploited":true,"published_at":"2026-06-09T16:16:39.943+00:00","exploited_since":"2026-07-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-25089-fortinet-fortisandbox-os-command-injection-in-web-ui"},{"cve":"CVE-2026-39808","slug":"cve-2026-39808-fortinet-fortisandbox-os-command-injection-in-api-endpoint","title":"Fortinet FortiSandbox OS command injection in API endpoint","severity":"critical","exploited":true,"published_at":"2026-04-14T16:16:44.86+00:00","exploited_since":"2026-07-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-39808-fortinet-fortisandbox-os-command-injection-in-api-endpoint"},{"cve":"CVE-2023-4346","slug":"cve-2023-4346-knx-association-knx-protocol-account-lockout-in-connection","title":"KNX Association KNX Protocol account lockout in Connection Authorization Option 1","severity":"critical","exploited":true,"published_at":"2026-07-15T00:00:00+00:00","exploited_since":"2026-07-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-4346-knx-association-knx-protocol-account-lockout-in-connection"},{"cve":"CVE-2026-46817","slug":"cve-2026-46817-oracle-e-business-suite-remote-compromise-in-oracle-payments","title":"Oracle E-Business Suite remote compromise in Oracle Payments","severity":"critical","exploited":true,"published_at":"2026-05-28T21:16:31.503+00:00","exploited_since":"2026-07-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-46817-oracle-e-business-suite-remote-compromise-in-oracle-payments"},{"cve":"CVE-2026-15410","slug":"cve-2026-15410-sonicwall-sma1000-code-injection-in-appliance-management-console","title":"SonicWall SMA1000 code injection in Appliance Management Console","severity":"critical","exploited":true,"published_at":"2026-07-14T20:16:56.903+00:00","exploited_since":"2026-07-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-15410-sonicwall-sma1000-code-injection-in-appliance-management-console"},{"cve":"CVE-2026-15409","slug":"cve-2026-15409-sonicwall-sma1000-ssrf-in-work-place-interface","title":"SonicWall SMA1000 SSRF in Work Place interface","severity":"critical","exploited":true,"published_at":"2026-07-14T20:16:56.783+00:00","exploited_since":"2026-07-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-15409-sonicwall-sma1000-ssrf-in-work-place-interface"},{"cve":"CVE-2026-56164","slug":"cve-2026-56164-microsoft-sharepoint-missing-authentication-in-critical-function","title":"Microsoft SharePoint missing authentication in critical function","severity":"critical","exploited":true,"published_at":"2026-07-14T17:17:09.907+00:00","exploited_since":"2026-07-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-56164-microsoft-sharepoint-missing-authentication-in-critical-function"},{"cve":"CVE-2026-56155","slug":"cve-2026-56155-microsoft-ad-fs-privilege-escalation-via-insufficient-access","title":"Microsoft AD FS privilege escalation via insufficient access control granularity","severity":"critical","exploited":true,"published_at":"2026-07-14T17:17:09.763+00:00","exploited_since":"2026-07-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-56155-microsoft-ad-fs-privilege-escalation-via-insufficient-access"},{"cve":"CVE-2008-4128","slug":"cve-2008-4128-cisco-ios-csrf-in-http-administration-component","title":"Cisco IOS CSRF in HTTP Administration component","severity":"critical","exploited":true,"published_at":"2026-07-13T00:00:00+00:00","exploited_since":"2026-07-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2008-4128-cisco-ios-csrf-in-http-administration-component"},{"cve":"CVE-2026-56291","slug":"cve-2026-56291-balbooa-forms-for-joomla-unauthenticated-file-upload-rce","title":"Balbooa Forms for Joomla unauthenticated file upload RCE","severity":"critical","exploited":true,"published_at":"2026-07-09T11:16:40.99+00:00","exploited_since":"2026-07-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-56291-balbooa-forms-for-joomla-unauthenticated-file-upload-rce"},{"cve":"CVE-2026-48939","slug":"cve-2026-48939-joomla-icagenda-arbitrary-file-upload-in-file-attachment-feature","title":"Joomla iCagenda arbitrary file upload in file attachment feature","severity":"critical","exploited":true,"published_at":"2026-06-20T13:16:42.433+00:00","exploited_since":"2026-07-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-48939-joomla-icagenda-arbitrary-file-upload-in-file-attachment-feature"},{"cve":"CVE-2026-48282","slug":"cve-2026-48282-adobe-coldfusion-path-traversal-in-multiple-versions","title":"Adobe ColdFusion path traversal in multiple versions","severity":"critical","exploited":true,"published_at":"2026-06-30T16:16:54.533+00:00","exploited_since":"2026-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-48282-adobe-coldfusion-path-traversal-in-multiple-versions"},{"cve":"CVE-2026-56290","slug":"cve-2026-56290-joomlack-page-builder-ck-unauthenticated-arbitrary-file-upload","title":"Joomlack Page Builder CK unauthenticated arbitrary file upload","severity":"critical","exploited":true,"published_at":"2026-06-29T15:16:42.36+00:00","exploited_since":"2026-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-56290-joomlack-page-builder-ck-unauthenticated-arbitrary-file-upload"},{"cve":"CVE-2026-55255","slug":"cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow","title":"Langflow IDOR in responses endpoint allows cross-user flow execution","severity":"critical","exploited":true,"published_at":"2026-06-23T17:17:08.05+00:00","exploited_since":"2026-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow"},{"cve":"CVE-2026-48908","slug":"cve-2026-48908-joomshaper-sp-page-builder-arbitrary-file-upload-in-joomla","title":"JoomShaper SP Page Builder arbitrary file upload in Joomla","severity":"critical","exploited":true,"published_at":"2026-06-20T13:16:42.08+00:00","exploited_since":"2026-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-48908-joomshaper-sp-page-builder-arbitrary-file-upload-in-joomla"},{"cve":"CVE-2026-45659","slug":"cve-2026-45659-microsoft-office-sharepoint-deserialization-of-untrusted-data","title":"Microsoft Office SharePoint deserialization of untrusted data","severity":"critical","exploited":true,"published_at":"2026-05-22T23:16:56.273+00:00","exploited_since":"2026-07-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-45659-microsoft-office-sharepoint-deserialization-of-untrusted-data"},{"cve":"CVE-2026-48558","slug":"cve-2026-48558-simplehelp-authentication-bypass-in-oidc-authentication-flow","title":"SimpleHelp authentication bypass in OIDC authentication flow","severity":"critical","exploited":true,"published_at":"2026-06-12T18:16:35.317+00:00","exploited_since":"2026-06-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-48558-simplehelp-authentication-bypass-in-oidc-authentication-flow"},{"cve":"CVE-2026-12569","slug":"cve-2026-12569-ptc-windchill-and-flexplm-remote-code-execution-via","title":"PTC Windchill and FlexPLM remote code execution via deserialization","severity":"critical","exploited":true,"published_at":"2026-06-18T01:18:12.04+00:00","exploited_since":"2026-06-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-12569-ptc-windchill-and-flexplm-remote-code-execution-via"},{"cve":"CVE-2026-20230","slug":"cve-2026-20230-cisco-unified-communications-manager-ssrf-in-webdialer","title":"Cisco Unified Communications Manager SSRF in WebDialer","severity":"critical","exploited":true,"published_at":"2026-06-03T18:16:20.16+00:00","exploited_since":"2026-06-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20230-cisco-unified-communications-manager-ssrf-in-webdialer"},{"cve":"CVE-2026-34910","slug":"cve-2026-34910-ubiquiti-unifi-os-command-injection-via-improper-input-validation","title":"Ubiquiti UniFi OS command injection via improper input validation","severity":"critical","exploited":true,"published_at":"2026-05-22T02:16:34.527+00:00","exploited_since":"2026-06-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34910-ubiquiti-unifi-os-command-injection-via-improper-input-validation"},{"cve":"CVE-2026-34909","slug":"cve-2026-34909-ubiquiti-unifi-os-path-traversal-in-underlying-system-files","title":"Ubiquiti UniFi OS path traversal in underlying system files","severity":"critical","exploited":true,"published_at":"2026-05-22T02:16:34.39+00:00","exploited_since":"2026-06-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34909-ubiquiti-unifi-os-path-traversal-in-underlying-system-files"},{"cve":"CVE-2026-34908","slug":"cve-2026-34908-ubiquiti-unifi-os-improper-access-control","title":"Ubiquiti UniFi OS improper access control","severity":"critical","exploited":true,"published_at":"2026-05-22T02:16:34.24+00:00","exploited_since":"2026-06-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34908-ubiquiti-unifi-os-improper-access-control"},{"cve":"CVE-2025-67038","slug":"cve-2025-67038-lantronix-eds5000-os-command-injection-in-http-rpc-module","title":"Lantronix EDS5000 OS command injection in HTTP RPC module","severity":"critical","exploited":true,"published_at":"2026-03-11T17:16:52.01+00:00","exploited_since":"2026-06-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-67038-lantronix-eds5000-os-command-injection-in-http-rpc-module"},{"cve":"CVE-2026-20253","slug":"cve-2026-20253-splunk-enterprise-auth-bypass-in-postgresql-sidecar-service","title":"Splunk Enterprise auth bypass in PostgreSQL sidecar service","severity":"critical","exploited":true,"published_at":"2026-06-10T18:16:40.76+00:00","exploited_since":"2026-06-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20253-splunk-enterprise-auth-bypass-in-postgresql-sidecar-service"},{"cve":"CVE-2026-48907","slug":"cve-2026-48907-joomla-jce-editor-improper-access-control-leading-to-rce","title":"Joomla JCE Editor improper access control leading to RCE","severity":"critical","exploited":true,"published_at":"2026-06-05T08:16:30.797+00:00","exploited_since":"2026-06-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-48907-joomla-jce-editor-improper-access-control-leading-to-rce"},{"cve":"CVE-2026-20262","slug":"cve-2026-20262-cisco-catalyst-sd-wan-manager-arbitrary-file-write-in-web-ui","title":"Cisco Catalyst SD-WAN Manager arbitrary file write in web UI","severity":"critical","exploited":true,"published_at":"2026-06-15T18:16:34.82+00:00","exploited_since":"2026-06-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20262-cisco-catalyst-sd-wan-manager-arbitrary-file-write-in-web-ui"},{"cve":"CVE-2026-54420","slug":"cve-2026-54420-litespeed-cpanel-plugin-privilege-escalation-via-symlink","title":"LiteSpeed cPanel plugin privilege escalation via symlink following","severity":"critical","exploited":true,"published_at":"2026-06-14T04:16:28.63+00:00","exploited_since":"2026-06-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-54420-litespeed-cpanel-plugin-privilege-escalation-via-symlink"},{"cve":"CVE-2026-35273","slug":"cve-2026-35273-oracle-peoplesoft-peopletools-compromise-in-updates-environment","title":"Oracle PeopleSoft PeopleTools compromise in Updates Environment Management","severity":"critical","exploited":true,"published_at":"2026-06-11T04:16:53.68+00:00","exploited_since":"2026-06-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-35273-oracle-peoplesoft-peopletools-compromise-in-updates-environment"},{"cve":"CVE-2026-10520","slug":"cve-2026-10520-ivanti-sentry-os-command-injection-allows-remote-code-execution","title":"Ivanti Sentry OS command injection allows remote code execution","severity":"critical","exploited":true,"published_at":"2026-06-09T16:16:35.7+00:00","exploited_since":"2026-06-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-10520-ivanti-sentry-os-command-injection-allows-remote-code-execution"},{"cve":"CVE-2026-11645","slug":"cve-2026-11645-google-chrome-v8-out-of-bounds-read-and-write","title":"Google Chrome V8 out of bounds read and write","severity":"critical","exploited":true,"published_at":"2026-06-09T00:16:47.37+00:00","exploited_since":"2026-06-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-11645-google-chrome-v8-out-of-bounds-read-and-write"},{"cve":"CVE-2026-7473","slug":"cve-2026-7473-arista-eos-improper-tunnel-protocol-verification-in-decapsulation","title":"Arista EOS improper tunnel protocol verification in decapsulation","severity":"critical","exploited":true,"published_at":"2026-06-05T17:17:02.85+00:00","exploited_since":"2026-06-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-7473-arista-eos-improper-tunnel-protocol-verification-in-decapsulation"},{"cve":"CVE-2026-20245","slug":"cve-2026-20245-cisco-catalyst-sd-wan-manager-privilege-escalation-in-cli","title":"Cisco Catalyst SD-WAN Manager privilege escalation in CLI","severity":"critical","exploited":true,"published_at":"2026-06-04T23:17:31.763+00:00","exploited_since":"2026-06-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20245-cisco-catalyst-sd-wan-manager-privilege-escalation-in-cli"},{"cve":"CVE-2026-50751","slug":"cve-2026-50751-check-point-vpn-authentication-bypass-in-ikev1-key-exchange","title":"Check Point VPN authentication bypass in IKEv1 key exchange","severity":"critical","exploited":true,"published_at":"2026-06-08T12:16:32.367+00:00","exploited_since":"2026-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-50751-check-point-vpn-authentication-bypass-in-ikev1-key-exchange"},{"cve":"CVE-2026-42271","slug":"cve-2026-42271-berriai-litellm-os-command-injection-in-mcp-test-endpoints","title":"BerriAI LiteLLM OS command injection in MCP test endpoints","severity":"critical","exploited":true,"published_at":"2026-05-08T04:16:21.82+00:00","exploited_since":"2026-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-42271-berriai-litellm-os-command-injection-in-mcp-test-endpoints"},{"cve":"CVE-2026-28318","slug":"cve-2026-28318-solarwinds-serv-u-denial-of-service-via-crafted-post-request","title":"SolarWinds Serv-U denial of service via crafted POST request","severity":"critical","exploited":true,"published_at":"2026-06-04T15:16:50.407+00:00","exploited_since":"2026-06-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-28318-solarwinds-serv-u-denial-of-service-via-crafted-post-request"},{"cve":"CVE-2010-0249","slug":"cve-2010-0249-microsoft-internet-explorer-use-after-free-in-html-object-handling","title":"Microsoft Internet Explorer use-after-free in HTML object handling","severity":"critical","exploited":true,"published_at":"2026-06-03T00:00:00+00:00","exploited_since":"2026-06-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-0249-microsoft-internet-explorer-use-after-free-in-html-object-handling"},{"cve":"CVE-2026-45247","slug":"cve-2026-45247-mirasvit-full-page-cache-warmer-php-object-injection-in-cookie","title":"Mirasvit Full Page Cache Warmer PHP object injection in cookie","severity":"critical","exploited":true,"published_at":"2026-05-26T15:16:39.263+00:00","exploited_since":"2026-06-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-45247-mirasvit-full-page-cache-warmer-php-object-injection-in-cookie"},{"cve":"CVE-2022-0492","slug":"cve-2022-0492-linux-kernel-privilege-escalation-in-cgroups-v1-release-agent","title":"Linux Kernel privilege escalation in cgroups v1 release_agent","severity":"critical","exploited":true,"published_at":"2026-06-02T00:00:00+00:00","exploited_since":"2026-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-0492-linux-kernel-privilege-escalation-in-cgroups-v1-release-agent"},{"cve":"CVE-2025-48595","slug":"cve-2025-48595-google-android-framework-privilege-escalation-via-integer","title":"Google Android Framework privilege escalation via integer overflow","severity":"critical","exploited":true,"published_at":"2026-06-01T22:16:18.093+00:00","exploited_since":"2026-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-48595-google-android-framework-privilege-escalation-via-integer"},{"cve":"CVE-2024-21182","slug":"cve-2024-21182-oracle-weblogic-server-unspecified-vulnerability-in-core","title":"Oracle WebLogic Server unspecified vulnerability in Core component","severity":"critical","exploited":true,"published_at":"2026-06-01T00:00:00+00:00","exploited_since":"2026-06-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-21182-oracle-weblogic-server-unspecified-vulnerability-in-core"},{"cve":"CVE-2026-0257","slug":"cve-2026-0257-palo-alto-networks-pan-os-auth-bypass-in-globalprotect","title":"Palo Alto Networks PAN-OS auth bypass in GlobalProtect","severity":"critical","exploited":true,"published_at":"2026-05-13T19:17:01.04+00:00","exploited_since":"2026-05-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-0257-palo-alto-networks-pan-os-auth-bypass-in-globalprotect"},{"cve":"CVE-2026-48027","slug":"cve-2026-48027-nrwl-nx-console-malicious-code-injection-in-vscode-extension","title":"nrwl Nx Console Malicious Code Injection in VSCode Extension","severity":"critical","exploited":true,"published_at":"2026-05-27T17:16:41.787+00:00","exploited_since":"2026-05-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-48027-nrwl-nx-console-malicious-code-injection-in-vscode-extension"},{"cve":"CVE-2026-8398","slug":"cve-2026-8398-avb-disc-soft-daemon-tools-lite-supply-chain-compromise","title":"AVB Disc Soft DAEMON Tools Lite supply chain compromise","severity":"critical","exploited":true,"published_at":"2026-05-15T09:16:17.653+00:00","exploited_since":"2026-05-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-8398-avb-disc-soft-daemon-tools-lite-supply-chain-compromise"},{"cve":"CVE-2026-45321","slug":"cve-2026-45321-tanstack-npm-packages-supply-chain-compromise-via-github-actions","title":"TanStack npm packages supply chain compromise via GitHub Actions OIDC hijacking","severity":"critical","exploited":true,"published_at":"2026-05-12T01:16:46.82+00:00","exploited_since":"2026-05-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-45321-tanstack-npm-packages-supply-chain-compromise-via-github-actions"},{"cve":"CVE-2026-48172","slug":"cve-2026-48172-litespeed-user-end-cpanel-plugin-privilege-escalation-to-root","title":"LiteSpeed User-End cPanel Plugin privilege escalation to root","severity":"critical","exploited":true,"published_at":"2026-05-21T02:16:33.76+00:00","exploited_since":"2026-05-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-48172-litespeed-user-end-cpanel-plugin-privilege-escalation-to-root"},{"cve":"CVE-2026-9082","slug":"cve-2026-9082-drupal-drupal-core-sql-injection-in-database-abstraction-api","title":"Drupal Drupal core SQL injection in database abstraction API","severity":"critical","exploited":true,"published_at":"2026-05-20T20:16:41.23+00:00","exploited_since":"2026-05-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-9082-drupal-drupal-core-sql-injection-in-database-abstraction-api"},{"cve":"CVE-2026-34926","slug":"cve-2026-34926-trend-micro-apex-one-directory-traversal-in-on-premise-server","title":"Trend Micro Apex One directory traversal in on-premise server","severity":"critical","exploited":true,"published_at":"2026-05-21T14:16:45.213+00:00","exploited_since":"2026-05-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34926-trend-micro-apex-one-directory-traversal-in-on-premise-server"},{"cve":"CVE-2025-34291","slug":"cve-2025-34291-langflow-cors-misconfiguration-and-account-takeover-leading-to","title":"Langflow CORS misconfiguration enables Account Takeover and RCE","severity":"critical","exploited":true,"published_at":"2025-12-06T00:31:36+00:00","exploited_since":"2026-05-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-34291-langflow-cors-misconfiguration-and-account-takeover-leading-to"},{"cve":"CVE-2026-45498","slug":"cve-2026-45498-microsoft-defender-denial-of-service","title":"Microsoft Defender denial of service","severity":"critical","exploited":true,"published_at":"2026-05-20T13:16:36.78+00:00","exploited_since":"2026-05-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-45498-microsoft-defender-denial-of-service"},{"cve":"CVE-2026-41091","slug":"cve-2026-41091-microsoft-defender-privilege-escalation-via-improper-link","title":"Microsoft Defender privilege escalation via improper link resolution","severity":"critical","exploited":true,"published_at":"2026-05-20T13:16:29.173+00:00","exploited_since":"2026-05-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-41091-microsoft-defender-privilege-escalation-via-improper-link"},{"cve":"CVE-2008-4250","slug":"cve-2008-4250-microsoft-windows-buffer-overflow-in-server-service","title":"Microsoft Windows buffer overflow in Server service","severity":"critical","exploited":true,"published_at":"2026-05-20T00:00:00+00:00","exploited_since":"2026-05-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2008-4250-microsoft-windows-buffer-overflow-in-server-service"},{"cve":"CVE-2009-1537","slug":"cve-2009-1537-microsoft-directx-null-byte-overwrite-in-quicktime-movie-parser","title":"Microsoft DirectX NULL byte overwrite in QuickTime Movie Parser Filter","severity":"critical","exploited":true,"published_at":"2026-05-20T00:00:00+00:00","exploited_since":"2026-05-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-1537-microsoft-directx-null-byte-overwrite-in-quicktime-movie-parser"},{"cve":"CVE-2009-3459","slug":"cve-2009-3459-adobe-acrobat-and-reader-heap-overflow-in-pdf-parsing","title":"Adobe Acrobat and Reader heap overflow in PDF parsing","severity":"critical","exploited":true,"published_at":"2026-05-20T00:00:00+00:00","exploited_since":"2026-05-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-3459-adobe-acrobat-and-reader-heap-overflow-in-pdf-parsing"},{"cve":"CVE-2010-0806","slug":"cve-2010-0806-microsoft-internet-explorer-use-after-free-in-peer-objects","title":"Microsoft Internet Explorer use-after-free in Peer Objects","severity":"critical","exploited":true,"published_at":"2026-05-20T00:00:00+00:00","exploited_since":"2026-05-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-0806-microsoft-internet-explorer-use-after-free-in-peer-objects"},{"cve":"CVE-2026-42897","slug":"cve-2026-42897-microsoft-exchange-server-cross-site-scripting-in-outlook-web","title":"Microsoft Exchange Server cross-site scripting in Outlook Web Access","severity":"critical","exploited":true,"published_at":"2026-05-14T18:16:49.36+00:00","exploited_since":"2026-05-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-42897-microsoft-exchange-server-cross-site-scripting-in-outlook-web"},{"cve":"CVE-2026-20182","slug":"cve-2026-20182-cisco-catalyst-sd-wan-authentication-bypass-in-peering-mechanism","title":"Cisco Catalyst SD-WAN authentication bypass in peering mechanism","severity":"critical","exploited":true,"published_at":"2026-05-14T17:16:19.387+00:00","exploited_since":"2026-05-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20182-cisco-catalyst-sd-wan-authentication-bypass-in-peering-mechanism"},{"cve":"CVE-2026-42208","slug":"cve-2026-42208-berriai-litellm-sql-injection-in-proxy-api-key-verification","title":"BerriAI LiteLLM SQL injection in Proxy API key verification","severity":"critical","exploited":true,"published_at":"2026-05-08T04:16:19.923+00:00","exploited_since":"2026-05-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-42208-berriai-litellm-sql-injection-in-proxy-api-key-verification"},{"cve":"CVE-2026-6973","slug":"cve-2026-6973-ivanti-endpoint-manager-mobile-rce-via-apache-directive-injection","title":"Ivanti Endpoint Manager Mobile RCE via Apache directive injection","severity":"critical","exploited":true,"published_at":"2026-05-07T16:16:23.163+00:00","exploited_since":"2026-05-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-6973-ivanti-endpoint-manager-mobile-rce-via-apache-directive-injection"},{"cve":"CVE-2026-0300","slug":"cve-2026-0300-palo-alto-networks-pan-os-buffer-overflow-in-user-id","title":"Palo Alto Networks PAN-OS buffer overflow in User-ID Authentication Portal","severity":"critical","exploited":true,"published_at":"2026-05-06T19:16:35.73+00:00","exploited_since":"2026-05-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-0300-palo-alto-networks-pan-os-buffer-overflow-in-user-id"},{"cve":"CVE-2026-31431","slug":"cve-2026-31431-linux-kernel-crypto-algif-aead-improper-memory-handling","title":"Linux Kernel crypto algif_aead improper memory handling","severity":"critical","exploited":true,"published_at":"2026-04-22T09:16:21.27+00:00","exploited_since":"2026-05-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-31431-linux-kernel-crypto-algif-aead-improper-memory-handling"},{"cve":"CVE-2026-41940","slug":"cve-2026-41940-webpros-cpanel-whm-authentication-bypass-in-login-flow","title":"WebPros cPanel & WHM authentication bypass in login flow","severity":"critical","exploited":true,"published_at":"2026-04-29T16:16:25.037+00:00","exploited_since":"2026-04-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-41940-webpros-cpanel-whm-authentication-bypass-in-login-flow"},{"cve":"CVE-2024-1708","slug":"cve-2024-1708-connectwise-screenconnect-path-traversal","title":"ConnectWise ScreenConnect path traversal","severity":"critical","exploited":true,"published_at":"2026-04-28T00:00:00+00:00","exploited_since":"2026-04-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-1708-connectwise-screenconnect-path-traversal"},{"cve":"CVE-2026-32202","slug":"cve-2026-32202-microsoft-windows-shell-protection-mechanism-failure-spoofing","title":"Microsoft Windows Shell protection mechanism failure spoofing","severity":"critical","exploited":true,"published_at":"2026-04-14T18:17:27.36+00:00","exploited_since":"2026-04-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-32202-microsoft-windows-shell-protection-mechanism-failure-spoofing"},{"cve":"CVE-2024-7399","slug":"cve-2024-7399-samsung-magicinfo-9-server-path-traversal","title":"Samsung MagicINFO 9 Server path traversal","severity":"critical","exploited":true,"published_at":"2026-04-24T00:00:00+00:00","exploited_since":"2026-04-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-7399-samsung-magicinfo-9-server-path-traversal"},{"cve":"CVE-2025-29635","slug":"cve-2025-29635-d-link-dir-823x-command-injection-in-set-prohibiting","title":"D-Link DIR-823X command injection in set_prohibiting","severity":"critical","exploited":true,"published_at":"2026-04-24T00:00:00+00:00","exploited_since":"2026-04-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-29635-d-link-dir-823x-command-injection-in-set-prohibiting"},{"cve":"CVE-2024-57728","slug":"cve-2024-57728-simplehelp-path-traversal-in-zip-file-upload","title":"SimpleHelp path traversal in ZIP file upload","severity":"critical","exploited":true,"published_at":"2026-04-24T00:00:00+00:00","exploited_since":"2026-04-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-57728-simplehelp-path-traversal-in-zip-file-upload"},{"cve":"CVE-2024-57726","slug":"cve-2024-57726-simplehelp-privilege-escalation-via-missing-authorization-in-api","title":"SimpleHelp privilege escalation via missing authorization in API key creation","severity":"critical","exploited":true,"published_at":"2026-04-24T00:00:00+00:00","exploited_since":"2026-04-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-57726-simplehelp-privilege-escalation-via-missing-authorization-in-api"},{"cve":"CVE-2026-39987","slug":"cve-2026-39987-marimo-pre-auth-remote-code-execution-via-terminal-websocket","title":"Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass","severity":"critical","exploited":true,"published_at":"2026-04-08T21:50:58+00:00","exploited_since":"2026-04-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-39987-marimo-pre-auth-remote-code-execution-via-terminal-websocket"},{"cve":"CVE-2026-33825","slug":"cve-2026-33825-microsoft-defender-privilege-escalation-in-antimalware-platform","title":"Microsoft Defender privilege escalation in Antimalware Platform","severity":"critical","exploited":true,"published_at":"2026-04-14T18:17:35.1+00:00","exploited_since":"2026-04-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-33825-microsoft-defender-privilege-escalation-in-antimalware-platform"},{"cve":"CVE-2026-20133","slug":"cve-2026-20133-cisco-catalyst-sd-wan-manager-information-disclosure","title":"Cisco Catalyst SD-WAN Manager information disclosure","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20133-cisco-catalyst-sd-wan-manager-information-disclosure"},{"cve":"CVE-2026-20128","slug":"cve-2026-20128-cisco-catalyst-sd-wan-manager-recoverable-password-storage-in-dca","title":"Cisco Catalyst SD-WAN Manager recoverable password storage in DCA","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20128-cisco-catalyst-sd-wan-manager-recoverable-password-storage-in-dca"},{"cve":"CVE-2023-27351","slug":"cve-2023-27351-papercut-ng-mf-authentication-bypass-in-securityrequestfilter","title":"PaperCut NG/MF authentication bypass in SecurityRequestFilter","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-27351-papercut-ng-mf-authentication-bypass-in-securityrequestfilter"},{"cve":"CVE-2024-27199","slug":"cve-2024-27199-jetbrains-teamcity-relative-path-traversal-in-admin-interface","title":"JetBrains TeamCity relative path traversal in admin interface","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-27199-jetbrains-teamcity-relative-path-traversal-in-admin-interface"},{"cve":"CVE-2025-2749","slug":"cve-2025-2749-kentico-xperience-path-traversal-and-rce-in-staging-sync-server","title":"Kentico Xperience path traversal and RCE in Staging Sync Server","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-2749-kentico-xperience-path-traversal-and-rce-in-staging-sync-server"},{"cve":"CVE-2025-32975","slug":"cve-2025-32975-quest-kace-systems-management-appliance-authentication-bypass-in","title":"Quest KACE Systems Management Appliance authentication bypass in SSO","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-32975-quest-kace-systems-management-appliance-authentication-bypass-in"},{"cve":"CVE-2025-48700","slug":"cve-2025-48700-synacor-zimbra-collaboration-suite-xss-in-classic-ui","title":"Synacor Zimbra Collaboration Suite XSS in Classic UI","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-48700-synacor-zimbra-collaboration-suite-xss-in-classic-ui"},{"cve":"CVE-2026-20122","slug":"cve-2026-20122-cisco-catalyst-sd-wan-manager-arbitrary-file-overwrite-via-api","title":"Cisco Catalyst SD-WAN Manager arbitrary file overwrite via API","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20122-cisco-catalyst-sd-wan-manager-arbitrary-file-overwrite-via-api"},{"cve":"CVE-2026-34197","slug":"cve-2026-34197-apache-activemq-code-injection-in-jolokia-jmx-http-bridge","title":"Apache ActiveMQ code injection in Jolokia JMX-HTTP bridge","severity":"critical","exploited":true,"published_at":"2026-04-07T09:16:20.967+00:00","exploited_since":"2026-04-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34197-apache-activemq-code-injection-in-jolokia-jmx-http-bridge"},{"cve":"CVE-2026-32201","slug":"cve-2026-32201-microsoft-sharepoint-server-improper-input-validation-spoofing","title":"Microsoft SharePoint Server improper input validation spoofing vulnerability","severity":"critical","exploited":true,"published_at":"2026-04-14T18:17:27.16+00:00","exploited_since":"2026-04-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-32201-microsoft-sharepoint-server-improper-input-validation-spoofing"},{"cve":"CVE-2009-0238","slug":"cve-2009-0238-microsoft-excel-remote-code-execution-via-malformed-object","title":"Microsoft Excel remote code execution via malformed object","severity":"critical","exploited":true,"published_at":"2026-04-14T00:00:00+00:00","exploited_since":"2026-04-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-0238-microsoft-excel-remote-code-execution-via-malformed-object"},{"cve":"CVE-2023-21529","slug":"cve-2023-21529-microsoft-exchange-server-deserialization-remote-code-execution","title":"Microsoft Exchange Server deserialization remote code execution","severity":"critical","exploited":true,"published_at":"2026-04-13T00:00:00+00:00","exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-21529-microsoft-exchange-server-deserialization-remote-code-execution"},{"cve":"CVE-2023-36424","slug":"cve-2023-36424-microsoft-windows-privilege-escalation-in-common-log-file-system","title":"Microsoft Windows privilege escalation in Common Log File System Driver","severity":"critical","exploited":true,"published_at":"2026-04-13T00:00:00+00:00","exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36424-microsoft-windows-privilege-escalation-in-common-log-file-system"},{"cve":"CVE-2012-1854","slug":"cve-2012-1854-microsoft-visual-basic-for-applications-insecure-library-loading","title":"Microsoft Visual Basic for Applications insecure library loading in VBE6.dll","severity":"critical","exploited":true,"published_at":"2026-04-13T00:00:00+00:00","exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-1854-microsoft-visual-basic-for-applications-insecure-library-loading"},{"cve":"CVE-2020-9715","slug":"cve-2020-9715-adobe-acrobat-use-after-free-in-pdf-parsing","title":"Adobe Acrobat use-after-free in PDF parsing","severity":"critical","exploited":true,"published_at":"2026-04-13T00:00:00+00:00","exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-9715-adobe-acrobat-use-after-free-in-pdf-parsing"},{"cve":"CVE-2026-21643","slug":"cve-2026-21643-fortinet-forticlient-ems-sql-injection","title":"Fortinet FortiClient EMS SQL injection","severity":"critical","exploited":true,"published_at":"2026-04-13T00:00:00+00:00","exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21643-fortinet-forticlient-ems-sql-injection"},{"cve":"CVE-2026-34621","slug":"cve-2026-34621-adobe-acrobat-and-reader-prototype-pollution-in-javascript-engine","title":"Adobe Acrobat and Reader prototype pollution in JavaScript engine","severity":"critical","exploited":true,"published_at":"2026-04-11T07:16:03.633+00:00","exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34621-adobe-acrobat-and-reader-prototype-pollution-in-javascript-engine"},{"cve":"CVE-2025-60710","slug":"cve-2025-60710-microsoft-windows-privilege-escalation-in-host-process-for","title":"Microsoft Windows privilege escalation in Host Process for Windows Tasks","severity":"critical","exploited":true,"published_at":"2025-11-11T18:15:39.073+00:00","exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-60710-microsoft-windows-privilege-escalation-in-host-process-for"},{"cve":"CVE-2026-1340","slug":"cve-2026-1340-ivanti-endpoint-manager-mobile-code-injection","title":"Ivanti Endpoint Manager Mobile code injection","severity":"critical","exploited":true,"published_at":"2026-04-08T00:00:00+00:00","exploited_since":"2026-04-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-1340-ivanti-endpoint-manager-mobile-code-injection"},{"cve":"CVE-2026-35616","slug":"cve-2026-35616-fortinet-forticlientems-improper-access-control-in-api","title":"Fortinet FortiClientEMS improper access control in API","severity":"critical","exploited":true,"published_at":"2026-04-04T01:16:39.72+00:00","exploited_since":"2026-04-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-35616-fortinet-forticlientems-improper-access-control-in-api"},{"cve":"CVE-2026-3502","slug":"cve-2026-3502-trueconf-client-download-of-code-without-integrity-check","title":"TrueConf Client download of code without integrity check","severity":"critical","exploited":true,"published_at":"2026-04-02T00:00:00+00:00","exploited_since":"2026-04-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-3502-trueconf-client-download-of-code-without-integrity-check"},{"cve":"CVE-2026-5281","slug":"cve-2026-5281-google-chrome-use-after-free-in-dawn","title":"Google Chrome use after free in Dawn","severity":"critical","exploited":true,"published_at":"2026-04-01T05:16:01.44+00:00","exploited_since":"2026-04-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-5281-google-chrome-use-after-free-in-dawn"},{"cve":"CVE-2026-3055","slug":"cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp","title":"Citrix NetScaler out-of-bounds read in SAML IdP","severity":"critical","exploited":true,"published_at":"2026-03-30T00:00:00+00:00","exploited_since":"2026-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp"},{"cve":"CVE-2025-53521","slug":"cve-2025-53521-f5-big-ip-stack-based-buffer-overflow-in-apm","title":"F5 BIG-IP stack-based buffer overflow in APM","severity":"critical","exploited":true,"published_at":"2025-10-15T14:15:48.377+00:00","exploited_since":"2026-03-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-53521-f5-big-ip-stack-based-buffer-overflow-in-apm"},{"cve":"CVE-2026-33634","slug":"cve-2026-33634-aqua-security-trivy-supply-chain-compromise-via-malicious-code","title":"GO-2026-4919 - Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy","severity":"critical","exploited":true,"published_at":"2026-04-01T16:33:18+00:00","exploited_since":"2026-03-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-33634-aqua-security-trivy-supply-chain-compromise-via-malicious-code"},{"cve":"CVE-2026-33017","slug":"cve-2026-33017-langflow-unauthenticated-remote-code-execution-in-build-public","title":"Langflow unauthenticated remote code execution in build_public_tmp endpoint","severity":"critical","exploited":true,"published_at":"2026-03-20T05:16:15.55+00:00","exploited_since":"2026-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-33017-langflow-unauthenticated-remote-code-execution-in-build-public"},{"cve":"CVE-2025-43520","slug":"cve-2025-43520-apple-multiple-products-classic-buffer-overflow-in-kernel-memory","title":"Apple Multiple Products classic buffer overflow in kernel memory","severity":"critical","exploited":true,"published_at":"2025-12-12T21:15:56.83+00:00","exploited_since":"2026-03-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43520-apple-multiple-products-classic-buffer-overflow-in-kernel-memory"},{"cve":"CVE-2025-43510","slug":"cve-2025-43510-apple-multiple-products-improper-locking-in-shared-memory","title":"Apple Multiple Products improper locking in shared memory","severity":"critical","exploited":true,"published_at":"2025-12-12T21:15:55.843+00:00","exploited_since":"2026-03-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43510-apple-multiple-products-improper-locking-in-shared-memory"},{"cve":"CVE-2025-31277","slug":"cve-2025-31277-apple-multiple-products-memory-corruption-in-web-content","title":"Apple Multiple Products memory corruption in web content processing","severity":"critical","exploited":true,"published_at":"2025-07-30T00:15:30.83+00:00","exploited_since":"2026-03-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31277-apple-multiple-products-memory-corruption-in-web-content"},{"cve":"CVE-2025-54068","slug":"cve-2025-54068-laravel-livewire-code-injection-in-component-hydration","title":"Livewire is vulnerable to remote command execution during component property update hydration","severity":"critical","exploited":true,"published_at":"2025-07-17T20:26:45+00:00","exploited_since":"2026-03-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-54068-laravel-livewire-code-injection-in-component-hydration"},{"cve":"CVE-2025-32432","slug":"cve-2025-32432-craft-cms-remote-code-execution-via-code-injection","title":"Craft CMS Allows Remote Code Execution","severity":"critical","exploited":true,"published_at":"2025-04-25T15:02:53+00:00","exploited_since":"2026-03-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-32432-craft-cms-remote-code-execution-via-code-injection"},{"cve":"CVE-2026-20131","slug":"cve-2026-20131-cisco-secure-firewall-management-center-deserialization-rce","title":"Cisco Secure Firewall Management Center deserialization RCE","severity":"critical","exploited":true,"published_at":"2026-03-19T00:00:00+00:00","exploited_since":"2026-03-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20131-cisco-secure-firewall-management-center-deserialization-rce"},{"cve":"CVE-2026-20963","slug":"cve-2026-20963-microsoft-sharepoint-deserialization-of-untrusted-data","title":"Microsoft SharePoint deserialization of untrusted data","severity":"critical","exploited":true,"published_at":"2026-03-18T00:00:00+00:00","exploited_since":"2026-03-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20963-microsoft-sharepoint-deserialization-of-untrusted-data"},{"cve":"CVE-2025-66376","slug":"cve-2025-66376-synacor-zimbra-collaboration-suite-stored-xss-in-classic-ui","title":"Synacor Zimbra Collaboration Suite stored XSS in Classic UI","severity":"critical","exploited":true,"published_at":"2026-01-05T15:15:44.903+00:00","exploited_since":"2026-03-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-66376-synacor-zimbra-collaboration-suite-stored-xss-in-classic-ui"},{"cve":"CVE-2025-47813","slug":"cve-2025-47813-wing-ftp-server-information-disclosure-in-loginok-html","title":"Wing FTP Server information disclosure in loginok.html","severity":"critical","exploited":true,"published_at":"2026-03-16T00:00:00+00:00","exploited_since":"2026-03-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-47813-wing-ftp-server-information-disclosure-in-loginok-html"},{"cve":"CVE-2026-3910","slug":"cve-2026-3910-google-chromium-v8-memory-corruption-in-javascript-engine","title":"Google Chromium V8 memory corruption in JavaScript engine","severity":"critical","exploited":true,"published_at":"2026-03-13T00:00:00+00:00","exploited_since":"2026-03-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-3910-google-chromium-v8-memory-corruption-in-javascript-engine"},{"cve":"CVE-2026-3909","slug":"cve-2026-3909-google-skia-out-of-bounds-write-in-google-chrome","title":"Google Skia out-of-bounds write in Google Chrome","severity":"critical","exploited":true,"published_at":"2026-03-13T00:00:00+00:00","exploited_since":"2026-03-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-3909-google-skia-out-of-bounds-write-in-google-chrome"},{"cve":"CVE-2025-68613","slug":"cve-2025-68613-n8n-remote-code-execution-in-workflow-expression-evaluation","title":"n8n Vulnerable to Remote Code Execution via Expression Injection","severity":"critical","exploited":true,"published_at":"2025-12-19T23:15:52.083+00:00","exploited_since":"2026-03-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-68613-n8n-remote-code-execution-in-workflow-expression-evaluation"},{"cve":"CVE-2021-22054","slug":"cve-2021-22054-omnissa-workspace-one-uem-ssrf-in-management-console","title":"Omnissa Workspace ONE UEM SSRF in management console","severity":"critical","exploited":true,"published_at":"2026-03-09T00:00:00+00:00","exploited_since":"2026-03-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22054-omnissa-workspace-one-uem-ssrf-in-management-console"},{"cve":"CVE-2025-26399","slug":"cve-2025-26399-solarwinds-web-help-desk-deserialization-rce-in-ajaxproxy","title":"SolarWinds Web Help Desk deserialization RCE in AjaxProxy","severity":"critical","exploited":true,"published_at":"2026-03-09T00:00:00+00:00","exploited_since":"2026-03-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-26399-solarwinds-web-help-desk-deserialization-rce-in-ajaxproxy"},{"cve":"CVE-2026-1603","slug":"cve-2026-1603-ivanti-endpoint-manager-authentication-bypass-in-credential","title":"Ivanti Endpoint Manager authentication bypass in credential storage","severity":"critical","exploited":true,"published_at":"2026-03-09T00:00:00+00:00","exploited_since":"2026-03-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-1603-ivanti-endpoint-manager-authentication-bypass-in-credential"},{"cve":"CVE-2023-41974","slug":"cve-2023-41974-apple-ios-and-ipados-use-after-free-in-kernel","title":"Apple iOS and iPadOS use-after-free in kernel","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","exploited_since":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-41974-apple-ios-and-ipados-use-after-free-in-kernel"},{"cve":"CVE-2017-7921","slug":"cve-2017-7921-hikvision-ip-cameras-improper-authentication","title":"Hikvision IP Cameras improper authentication","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","exploited_since":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-7921-hikvision-ip-cameras-improper-authentication"},{"cve":"CVE-2021-22681","slug":"cve-2021-22681-rockwell-automation-logix-designer-authentication-bypass-in-logix","title":"Rockwell Automation Logix Designer authentication bypass in Logix Controllers","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","exploited_since":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22681-rockwell-automation-logix-designer-authentication-bypass-in-logix"},{"cve":"CVE-2021-30952","slug":"cve-2021-30952-apple-multiple-products-integer-overflow-in-webkit-content","title":"Apple Multiple Products integer overflow in WebKit content processing","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","exploited_since":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30952-apple-multiple-products-integer-overflow-in-webkit-content"},{"cve":"CVE-2023-43000","slug":"cve-2023-43000-apple-multiple-products-use-after-free-in-web-content-processing","title":"Apple Multiple Products use-after-free in Web Content processing","severity":"critical","exploited":true,"published_at":"2025-11-05T19:15:47.937+00:00","exploited_since":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-43000-apple-multiple-products-use-after-free-in-web-content-processing"},{"cve":"CVE-2026-21385","slug":"cve-2026-21385-qualcomm-multiple-chipsets-memory-corruption-in-memory-allocation","title":"Qualcomm Multiple Chipsets memory corruption in memory allocation","severity":"critical","exploited":true,"published_at":"2026-03-03T00:00:00+00:00","exploited_since":"2026-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21385-qualcomm-multiple-chipsets-memory-corruption-in-memory-allocation"},{"cve":"CVE-2026-22719","slug":"cve-2026-22719-broadcom-vmware-aria-operations-command-injection-during","title":"Broadcom VMware Aria Operations command injection during migration","severity":"critical","exploited":true,"published_at":"2026-03-03T00:00:00+00:00","exploited_since":"2026-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-22719-broadcom-vmware-aria-operations-command-injection-during"},{"cve":"CVE-2026-20127","slug":"cve-2026-20127-cisco-catalyst-sd-wan-auth-bypass-in-peering-authentication","title":"Cisco Catalyst SD-WAN auth bypass in peering authentication","severity":"critical","exploited":true,"published_at":"2026-02-25T17:25:29.477+00:00","exploited_since":"2026-02-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20127-cisco-catalyst-sd-wan-auth-bypass-in-peering-authentication"},{"cve":"CVE-2022-20775","slug":"cve-2022-20775-cisco-sd-wan-privilege-escalation-via-path-traversal-in-cli","title":"Cisco SD-WAN privilege escalation via path traversal in CLI","severity":"critical","exploited":true,"published_at":"2026-02-25T00:00:00+00:00","exploited_since":"2026-02-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-20775-cisco-sd-wan-privilege-escalation-via-path-traversal-in-cli"},{"cve":"CVE-2026-25108","slug":"cve-2026-25108-soliton-systems-filezen-os-command-injection-in-antivirus-check","title":"Soliton Systems FileZen OS command injection in Antivirus Check Option","severity":"critical","exploited":true,"published_at":"2026-02-24T00:00:00+00:00","exploited_since":"2026-02-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-25108-soliton-systems-filezen-os-command-injection-in-antivirus-check"},{"cve":"CVE-2025-68461","slug":"cve-2025-68461-roundcube-webmail-xss-in-svg-animate-tag","title":"Roundcube Webmail XSS in SVG animate tag","severity":"critical","exploited":true,"published_at":"2026-02-20T00:00:00+00:00","exploited_since":"2026-02-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-68461-roundcube-webmail-xss-in-svg-animate-tag"},{"cve":"CVE-2025-49113","slug":"cve-2025-49113-roundcube-webmail-php-deserialization-in-upload-php","title":"Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization","severity":"critical","exploited":true,"published_at":"2025-06-02T06:30:32+00:00","exploited_since":"2026-02-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-49113-roundcube-webmail-php-deserialization-in-upload-php"},{"cve":"CVE-2026-22769","slug":"cve-2026-22769-dell-recoverpoint-for-virtual-machines-hard-coded-credentials","title":"Dell RecoverPoint for Virtual Machines hard-coded credentials","severity":"critical","exploited":true,"published_at":"2026-02-18T00:00:00+00:00","exploited_since":"2026-02-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-22769-dell-recoverpoint-for-virtual-machines-hard-coded-credentials"},{"cve":"CVE-2021-22175","slug":"cve-2021-22175-gitlab-ssrf-in-internal-network-webhooks","title":"GitLab SSRF in internal network webhooks","severity":"critical","exploited":true,"published_at":"2026-02-18T00:00:00+00:00","exploited_since":"2026-02-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22175-gitlab-ssrf-in-internal-network-webhooks"},{"cve":"CVE-2024-7694","slug":"cve-2024-7694-teamt5-threatsonar-anti-ransomware-unrestricted-file-upload","title":"TeamT5 ThreatSonar Anti-Ransomware unrestricted file upload","severity":"critical","exploited":true,"published_at":"2026-02-17T00:00:00+00:00","exploited_since":"2026-02-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-7694-teamt5-threatsonar-anti-ransomware-unrestricted-file-upload"},{"cve":"CVE-2026-2441","slug":"cve-2026-2441-google-chromium-use-after-free-in-css","title":"Google Chromium use-after-free in CSS","severity":"critical","exploited":true,"published_at":"2026-02-17T00:00:00+00:00","exploited_since":"2026-02-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-2441-google-chromium-use-after-free-in-css"},{"cve":"CVE-2008-0015","slug":"cve-2008-0015-microsoft-windows-video-activex-control-stack-buffer-overflow-in","title":"Microsoft Windows Video ActiveX Control stack buffer overflow in DirectShow","severity":"critical","exploited":true,"published_at":"2026-02-17T00:00:00+00:00","exploited_since":"2026-02-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2008-0015-microsoft-windows-video-activex-control-stack-buffer-overflow-in"},{"cve":"CVE-2020-7796","slug":"cve-2020-7796-synacor-zimbra-collaboration-suite-ssrf-in-webex-zimlet","title":"Synacor Zimbra Collaboration Suite SSRF in WebEx zimlet","severity":"critical","exploited":true,"published_at":"2026-02-17T00:00:00+00:00","exploited_since":"2026-02-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-7796-synacor-zimbra-collaboration-suite-ssrf-in-webex-zimlet"},{"cve":"CVE-2026-1731","slug":"cve-2026-1731-beyondtrust-remote-support-and-pra-os-command-injection","title":"BeyondTrust Remote Support and PRA OS command injection","severity":"critical","exploited":true,"published_at":"2026-02-13T00:00:00+00:00","exploited_since":"2026-02-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-1731-beyondtrust-remote-support-and-pra-os-command-injection"},{"cve":"CVE-2024-43468","slug":"cve-2024-43468-microsoft-configuration-manager-sql-injection","title":"Microsoft Configuration Manager SQL injection","severity":"critical","exploited":true,"published_at":"2026-02-12T00:00:00+00:00","exploited_since":"2026-02-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-43468-microsoft-configuration-manager-sql-injection"},{"cve":"CVE-2025-15556","slug":"cve-2025-15556-notepad-code-execution-via-wingup-updater-integrity-failure","title":"Notepad++ code execution via WinGUp updater integrity failure","severity":"critical","exploited":true,"published_at":"2026-02-12T00:00:00+00:00","exploited_since":"2026-02-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-15556-notepad-code-execution-via-wingup-updater-integrity-failure"},{"cve":"CVE-2025-40536","slug":"cve-2025-40536-solarwinds-web-help-desk-security-control-bypass","title":"SolarWinds Web Help Desk security control bypass","severity":"critical","exploited":true,"published_at":"2026-02-12T00:00:00+00:00","exploited_since":"2026-02-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-40536-solarwinds-web-help-desk-security-control-bypass"},{"cve":"CVE-2026-20700","slug":"cve-2026-20700-apple-multiple-operating-systems-buffer-overflow","title":"Apple Multiple Operating Systems Buffer Overflow","severity":"critical","exploited":true,"published_at":"2026-02-12T00:00:00+00:00","exploited_since":"2026-02-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20700-apple-multiple-operating-systems-buffer-overflow"},{"cve":"CVE-2026-21519","slug":"cve-2026-21519-microsoft-windows-type-confusion-in-desktop-window-manager","title":"Microsoft Windows type confusion in Desktop Window Manager","severity":"critical","exploited":true,"published_at":"2026-02-10T00:00:00+00:00","exploited_since":"2026-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21519-microsoft-windows-type-confusion-in-desktop-window-manager"},{"cve":"CVE-2026-21510","slug":"cve-2026-21510-microsoft-windows-shell-protection-mechanism-failure","title":"Microsoft Windows Shell protection mechanism failure","severity":"critical","exploited":true,"published_at":"2026-02-10T00:00:00+00:00","exploited_since":"2026-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21510-microsoft-windows-shell-protection-mechanism-failure"},{"cve":"CVE-2026-21513","slug":"cve-2026-21513-microsoft-mshtml-framework-protection-mechanism-failure","title":"Microsoft MSHTML Framework protection mechanism failure","severity":"critical","exploited":true,"published_at":"2026-02-10T00:00:00+00:00","exploited_since":"2026-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21513-microsoft-mshtml-framework-protection-mechanism-failure"},{"cve":"CVE-2026-21514","slug":"cve-2026-21514-microsoft-office-word-reliance-on-untrusted-inputs-in-security","title":"Microsoft Office Word reliance on untrusted inputs in security decision","severity":"critical","exploited":true,"published_at":"2026-02-10T00:00:00+00:00","exploited_since":"2026-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21514-microsoft-office-word-reliance-on-untrusted-inputs-in-security"},{"cve":"CVE-2026-21525","slug":"cve-2026-21525-microsoft-windows-null-pointer-dereference-in-remote-access","title":"Microsoft Windows NULL pointer dereference in Remote Access Connection Manager","severity":"critical","exploited":true,"published_at":"2026-02-10T00:00:00+00:00","exploited_since":"2026-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21525-microsoft-windows-null-pointer-dereference-in-remote-access"},{"cve":"CVE-2026-21533","slug":"cve-2026-21533-microsoft-windows-privilege-escalation-in-remote-desktop-services","title":"Microsoft Windows privilege escalation in Remote Desktop Services","severity":"critical","exploited":true,"published_at":"2026-02-10T00:00:00+00:00","exploited_since":"2026-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21533-microsoft-windows-privilege-escalation-in-remote-desktop-services"},{"cve":"CVE-2026-24423","slug":"cve-2026-24423-smartertools-smartermail-auth-bypass-in-connecttohub-api","title":"SmarterTools SmarterMail auth bypass in ConnectToHub API","severity":"critical","exploited":true,"published_at":"2026-01-23T17:16:13.483+00:00","exploited_since":"2026-02-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-24423-smartertools-smartermail-auth-bypass-in-connecttohub-api"},{"cve":"CVE-2025-11953","slug":"cve-2025-11953-react-native-community-cli-os-command-injection-in-metro-dev","title":"React Native Community CLI arbitrary OS command injection","severity":"critical","exploited":true,"published_at":"2025-11-03T18:31:52+00:00","exploited_since":"2026-02-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-11953-react-native-community-cli-os-command-injection-in-metro-dev"},{"cve":"CVE-2019-19006","slug":"cve-2019-19006-sangoma-freepbx-improper-authentication-in-admin-interface","title":"Sangoma FreePBX improper authentication in admin interface","severity":"critical","exploited":true,"published_at":"2026-02-03T00:00:00+00:00","exploited_since":"2026-02-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-19006-sangoma-freepbx-improper-authentication-in-admin-interface"},{"cve":"CVE-2021-39935","slug":"cve-2021-39935-gitlab-ce-ee-ssrf-in-ci-lint-api","title":"GitLab CE/EE SSRF in CI Lint API","severity":"critical","exploited":true,"published_at":"2026-02-03T00:00:00+00:00","exploited_since":"2026-02-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-39935-gitlab-ce-ee-ssrf-in-ci-lint-api"},{"cve":"CVE-2025-40551","slug":"cve-2025-40551-solarwinds-web-help-desk-untrusted-data-deserialization","title":"SolarWinds Web Help Desk untrusted data deserialization","severity":"critical","exploited":true,"published_at":"2026-02-03T00:00:00+00:00","exploited_since":"2026-02-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-40551-solarwinds-web-help-desk-untrusted-data-deserialization"},{"cve":"CVE-2025-64328","slug":"cve-2025-64328-sangoma-freepbx-command-injection-in-filestore-module","title":"Sangoma FreePBX command injection in filestore module","severity":"critical","exploited":true,"published_at":"2025-11-07T04:15:47.397+00:00","exploited_since":"2026-02-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-64328-sangoma-freepbx-command-injection-in-filestore-module"},{"cve":"CVE-2026-1281","slug":"cve-2026-1281-ivanti-endpoint-manager-mobile-code-injection-remote-code","title":"Ivanti Endpoint Manager Mobile code injection remote code execution","severity":"critical","exploited":true,"published_at":"2026-01-29T00:00:00+00:00","exploited_since":"2026-01-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-1281-ivanti-endpoint-manager-mobile-code-injection-remote-code"},{"cve":"CVE-2026-24858","slug":"cve-2026-24858-fortinet-multiple-products-authentication-bypass-in-forticloud","title":"Fortinet Multiple Products authentication bypass in FortiCloud SSO","severity":"critical","exploited":true,"published_at":"2026-01-27T20:16:24.477+00:00","exploited_since":"2026-01-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-24858-fortinet-multiple-products-authentication-bypass-in-forticloud"},{"cve":"CVE-2026-21509","slug":"cve-2026-21509-microsoft-office-security-feature-bypass-via-untrusted-inputs","title":"Microsoft Office security feature bypass via untrusted inputs","severity":"critical","exploited":true,"published_at":"2026-01-26T18:16:38.54+00:00","exploited_since":"2026-01-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21509-microsoft-office-security-feature-bypass-via-untrusted-inputs"},{"cve":"CVE-2018-14634","slug":"cve-2018-14634-linux-kernel-integer-overflow-in-create-elf-tables","title":"Linux Kernel integer overflow in create_elf_tables","severity":"critical","exploited":true,"published_at":"2026-01-26T00:00:00+00:00","exploited_since":"2026-01-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-14634-linux-kernel-integer-overflow-in-create-elf-tables"},{"cve":"CVE-2026-23760","slug":"cve-2026-23760-smartertools-smartermail-authentication-bypass-in-password-reset","title":"SmarterTools SmarterMail authentication bypass in password reset API","severity":"critical","exploited":true,"published_at":"2026-01-22T15:16:55.12+00:00","exploited_since":"2026-01-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-23760-smartertools-smartermail-authentication-bypass-in-password-reset"},{"cve":"CVE-2026-24061","slug":"cve-2026-24061-gnu-inetutils-argument-injection-in-telnetd","title":"telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.","severity":"critical","exploited":true,"published_at":"2026-01-21T07:16:01.597+00:00","exploited_since":"2026-01-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-24061-gnu-inetutils-argument-injection-in-telnetd"},{"cve":"CVE-2025-52691","slug":"cve-2025-52691-smartertools-smartermail-unrestricted-file-upload-leading-to-rce","title":"SmarterTools SmarterMail unrestricted file upload leading to RCE","severity":"critical","exploited":true,"published_at":"2025-12-29T03:15:42.837+00:00","exploited_since":"2026-01-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-52691-smartertools-smartermail-unrestricted-file-upload-leading-to-rce"},{"cve":"CVE-2024-37079","slug":"cve-2024-37079-broadcom-vmware-vcenter-server-out-of-bounds-write-in-dcerpc","title":"Broadcom VMware vCenter Server out-of-bounds write in DCERPC protocol","severity":"critical","exploited":true,"published_at":"2026-01-23T00:00:00+00:00","exploited_since":"2026-01-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-37079-broadcom-vmware-vcenter-server-out-of-bounds-write-in-dcerpc"},{"cve":"CVE-2025-34026","slug":"cve-2025-34026-versa-networks-concerto-authentication-bypass-in-traefik","title":"Versa Networks Concerto authentication bypass in Traefik configuration","severity":"critical","exploited":true,"published_at":"2026-01-22T00:00:00+00:00","exploited_since":"2026-01-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-34026-versa-networks-concerto-authentication-bypass-in-traefik"},{"cve":"CVE-2025-68645","slug":"cve-2025-68645-synacor-zimbra-collaboration-suite-file-inclusion-in-restfilter","title":"Synacor Zimbra Collaboration Suite file inclusion in RestFilter servlet","severity":"critical","exploited":true,"published_at":"2025-12-22T18:16:17.07+00:00","exploited_since":"2026-01-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-68645-synacor-zimbra-collaboration-suite-file-inclusion-in-restfilter"},{"cve":"CVE-2025-54313","slug":"cve-2025-54313-prettier-eslint-config-prettier-embedded-malicious-code","title":"eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code","severity":"critical","exploited":true,"published_at":"2025-07-19T18:30:33+00:00","exploited_since":"2026-01-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-54313-prettier-eslint-config-prettier-embedded-malicious-code"},{"cve":"CVE-2025-31125","slug":"cve-2025-31125-vitejs-vite-improper-access-control-in-dev-server","title":"Vite server.fs.deny bypass with inline and raw query parameters","severity":"critical","exploited":true,"published_at":"2025-03-31T17:31:54+00:00","exploited_since":"2026-01-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31125-vitejs-vite-improper-access-control-in-dev-server"},{"cve":"CVE-2026-20045","slug":"cve-2026-20045-cisco-unified-communications-products-code-injection-in","title":"Cisco Unified Communications Products code injection in management interface","severity":"critical","exploited":true,"published_at":"2026-01-21T00:00:00+00:00","exploited_since":"2026-01-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20045-cisco-unified-communications-products-code-injection-in"},{"cve":"CVE-2026-20805","slug":"cve-2026-20805-microsoft-windows-desktop-window-manager-information-disclosure","title":"Microsoft Windows Desktop Window Manager information disclosure","severity":"critical","exploited":true,"published_at":"2026-01-13T18:16:07.023+00:00","exploited_since":"2026-01-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20805-microsoft-windows-desktop-window-manager-information-disclosure"},{"cve":"CVE-2025-8110","slug":"cve-2025-8110-gogs-path-traversal-and-code-execution-in-putcontents-api","title":"Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.","severity":"critical","exploited":true,"published_at":"2025-12-10T14:16:19.847+00:00","exploited_since":"2026-01-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-8110-gogs-path-traversal-and-code-execution-in-putcontents-api"},{"cve":"CVE-2009-0556","slug":"cve-2009-0556-microsoft-powerpoint-code-injection-in-outlinetextrefatom","title":"Microsoft PowerPoint code injection in OutlineTextRefAtom","severity":"critical","exploited":true,"published_at":"2026-01-07T00:00:00+00:00","exploited_since":"2026-01-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-0556-microsoft-powerpoint-code-injection-in-outlinetextrefatom"},{"cve":"CVE-2025-37164","slug":"cve-2025-37164-hpe-oneview-code-injection-remote-code-execution","title":"HPE OneView code injection remote code execution","severity":"critical","exploited":true,"published_at":"2026-01-07T00:00:00+00:00","exploited_since":"2026-01-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-37164-hpe-oneview-code-injection-remote-code-execution"},{"cve":"CVE-2025-14847","slug":"cve-2025-14847-mongodb-server-uninitialized-heap-memory-disclosure-in-zlib","title":"MongoDB Server uninitialized heap memory disclosure in Zlib headers","severity":"critical","exploited":true,"published_at":"2025-12-29T00:00:00+00:00","exploited_since":"2025-12-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-14847-mongodb-server-uninitialized-heap-memory-disclosure-in-zlib"},{"cve":"CVE-2023-52163","slug":"cve-2023-52163-digiever-ds-2105-pro-command-injection-in-time-tzsetup-cgi","title":"Digiever DS-2105 Pro command injection in time_tzsetup.cgi","severity":"critical","exploited":true,"published_at":"2025-12-22T00:00:00+00:00","exploited_since":"2025-12-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-52163-digiever-ds-2105-pro-command-injection-in-time-tzsetup-cgi"},{"cve":"CVE-2025-14733","slug":"cve-2025-14733-watchguard-fireware-os-out-of-bounds-write-in-iked-process","title":"WatchGuard Fireware OS out-of-bounds write in iked process","severity":"critical","exploited":true,"published_at":"2025-12-19T01:16:05.53+00:00","exploited_since":"2025-12-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-14733-watchguard-fireware-os-out-of-bounds-write-in-iked-process"},{"cve":"CVE-2025-59374","slug":"cve-2025-59374-asus-live-update-supply-chain-compromise-and-embedded-malicious","title":"ASUS Live Update supply chain compromise and embedded malicious code","severity":"critical","exploited":true,"published_at":"2025-12-17T05:16:13.08+00:00","exploited_since":"2025-12-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-59374-asus-live-update-supply-chain-compromise-and-embedded-malicious"},{"cve":"CVE-2025-20393","slug":"cve-2025-20393-cisco-secure-email-gateway-command-injection-in-spam-quarantine","title":"Cisco Secure Email Gateway command injection in Spam Quarantine","severity":"critical","exploited":true,"published_at":"2025-12-17T00:00:00+00:00","exploited_since":"2025-12-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-20393-cisco-secure-email-gateway-command-injection-in-spam-quarantine"},{"cve":"CVE-2025-40602","slug":"cve-2025-40602-sonicwall-sma1000-privilege-escalation-in-amc","title":"SonicWall SMA1000 privilege escalation in AMC","severity":"critical","exploited":true,"published_at":"2025-12-17T00:00:00+00:00","exploited_since":"2025-12-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-40602-sonicwall-sma1000-privilege-escalation-in-amc"},{"cve":"CVE-2025-59718","slug":"cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml","title":"Fortinet Multiple Products auth bypass via improper SAML signature verification","severity":"critical","exploited":true,"published_at":"2025-12-09T18:15:54.983+00:00","exploited_since":"2025-12-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml"},{"cve":"CVE-2025-43529","slug":"cve-2025-43529-apple-webkit-use-after-free-in-multiple-products","title":"Apple WebKit use-after-free in multiple products","severity":"critical","exploited":true,"published_at":"2025-12-17T21:16:11.57+00:00","exploited_since":"2025-12-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43529-apple-webkit-use-after-free-in-multiple-products"},{"cve":"CVE-2025-14611","slug":"cve-2025-14611-gladinet-centrestack-and-triofox-hardcoded-cryptographic-keys","title":"Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme.","severity":"critical","exploited":true,"published_at":"2025-12-12T21:15:53.107+00:00","exploited_since":"2025-12-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-14611-gladinet-centrestack-and-triofox-hardcoded-cryptographic-keys"},{"cve":"CVE-2025-14174","slug":"cve-2025-14174-google-chromium-out-of-bounds-memory-access-in-angle","title":"Google Chromium out of bounds memory access in ANGLE","severity":"critical","exploited":true,"published_at":"2025-12-12T20:15:39.663+00:00","exploited_since":"2025-12-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-14174-google-chromium-out-of-bounds-memory-access-in-angle"},{"cve":"CVE-2018-4063","slug":"cve-2018-4063-sierra-wireless-aleos-unrestricted-file-upload-in-upload-cgi","title":"Sierra Wireless ALEOS unrestricted file upload in upload.cgi","severity":"critical","exploited":true,"published_at":"2025-12-12T00:00:00+00:00","exploited_since":"2025-12-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-4063-sierra-wireless-aleos-unrestricted-file-upload-in-upload-cgi"},{"cve":"CVE-2025-58360","slug":"cve-2025-58360-osgeo-geoserver-xxe-in-wms-getmap-operation","title":"GeoServer is vulnerable to Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature","severity":"critical","exploited":true,"published_at":"2025-11-25T21:15:56.363+00:00","exploited_since":"2025-12-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-58360-osgeo-geoserver-xxe-in-wms-getmap-operation"},{"cve":"CVE-2025-62221","slug":"cve-2025-62221-microsoft-windows-use-after-free-in-cloud-files-mini-filter","title":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","severity":"critical","exploited":true,"published_at":"2025-12-09T18:15:56.517+00:00","exploited_since":"2025-12-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-62221-microsoft-windows-use-after-free-in-cloud-files-mini-filter"},{"cve":"CVE-2025-6218","slug":"cve-2025-6218-rarlab-winrar-path-traversal-and-remote-code-execution","title":"RARLAB WinRAR path traversal and remote code execution","severity":"critical","exploited":true,"published_at":"2025-12-09T00:00:00+00:00","exploited_since":"2025-12-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-6218-rarlab-winrar-path-traversal-and-remote-code-execution"},{"cve":"CVE-2022-37055","slug":"cve-2022-37055-d-link-go-rt-ac750-buffer-overflow-in-cgibin-and-hnap-main","title":"D-Link GO-RT-AC750 buffer overflow in cgibin and hnap_main","severity":"critical","exploited":true,"published_at":"2025-12-08T00:00:00+00:00","exploited_since":"2025-12-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-37055-d-link-go-rt-ac750-buffer-overflow-in-cgibin-and-hnap-main"},{"cve":"CVE-2025-66644","slug":"cve-2025-66644-array-networks-arrayos-ag-os-command-injection","title":"Array Networks ArrayOS AG OS command injection","severity":"critical","exploited":true,"published_at":"2025-12-08T00:00:00+00:00","exploited_since":"2025-12-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-66644-array-networks-arrayos-ag-os-command-injection"},{"cve":"CVE-2025-55182","slug":"cve-2025-55182-meta-react-server-components-remote-code-execution","title":"React Server Components are Vulnerable to RCE","severity":"critical","exploited":true,"published_at":"2025-12-03T16:15:56.463+00:00","exploited_since":"2025-12-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-55182-meta-react-server-components-remote-code-execution"},{"cve":"CVE-2021-26828","slug":"cve-2021-26828-openplc-scadabr-unrestricted-file-upload-in-view-edit-shtm","title":"OpenPLC ScadaBR unrestricted file upload in view_edit.shtm","severity":"critical","exploited":true,"published_at":"2025-12-03T00:00:00+00:00","exploited_since":"2025-12-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-26828-openplc-scadabr-unrestricted-file-upload-in-view-edit-shtm"},{"cve":"CVE-2025-48633","slug":"cve-2025-48633-google-android-privilege-escalation-in-devicepolicymanagerservice","title":"Google Android privilege escalation in DevicePolicyManagerService","severity":"critical","exploited":true,"published_at":"2025-12-08T17:16:19.61+00:00","exploited_since":"2025-12-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-48633-google-android-privilege-escalation-in-devicepolicymanagerservice"},{"cve":"CVE-2025-48572","slug":"cve-2025-48572-google-android-framework-privilege-escalation-via-background","title":"Google Android Framework privilege escalation via background activity launch","severity":"critical","exploited":true,"published_at":"2025-12-08T17:16:15.003+00:00","exploited_since":"2025-12-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-48572-google-android-framework-privilege-escalation-via-background"},{"cve":"CVE-2021-26829","slug":"cve-2021-26829-openplc-scadabr-stored-xss-in-system-settings-shtm","title":"OpenPLC ScadaBR stored XSS in system_settings.shtm","severity":"critical","exploited":true,"published_at":"2025-11-28T00:00:00+00:00","exploited_since":"2025-11-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-26829-openplc-scadabr-stored-xss-in-system-settings-shtm"},{"cve":"CVE-2025-61757","slug":"cve-2025-61757-oracle-identity-manager-missing-authentication-in-rest","title":"Oracle Identity Manager missing authentication in REST WebServices","severity":"critical","exploited":true,"published_at":"2025-10-21T20:20:52.117+00:00","exploited_since":"2025-11-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-61757-oracle-identity-manager-missing-authentication-in-rest"},{"cve":"CVE-2025-13223","slug":"cve-2025-13223-google-chrome-type-confusion-in-v8-engine","title":"Google Chrome type confusion in V8 engine","severity":"critical","exploited":true,"published_at":"2025-11-17T23:15:45.14+00:00","exploited_since":"2025-11-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-13223-google-chrome-type-confusion-in-v8-engine"},{"cve":"CVE-2025-58034","slug":"cve-2025-58034-fortinet-fortiweb-os-command-injection","title":"Fortinet FortiWeb OS command injection","severity":"critical","exploited":true,"published_at":"2025-11-18T17:16:05.057+00:00","exploited_since":"2025-11-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-58034-fortinet-fortiweb-os-command-injection"},{"cve":"CVE-2025-64446","slug":"cve-2025-64446-fortinet-fortiweb-path-traversal-and-command-execution","title":"Fortinet FortiWeb path traversal and command execution","severity":"critical","exploited":true,"published_at":"2025-11-14T16:15:58.567+00:00","exploited_since":"2025-11-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-64446-fortinet-fortiweb-path-traversal-and-command-execution"},{"cve":"CVE-2025-62215","slug":"cve-2025-62215-microsoft-windows-kernel-race-condition-privilege-escalation","title":"Microsoft Windows Kernel race condition privilege escalation","severity":"critical","exploited":true,"published_at":"2025-11-12T00:00:00+00:00","exploited_since":"2025-11-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-62215-microsoft-windows-kernel-race-condition-privilege-escalation"},{"cve":"CVE-2025-9242","slug":"cve-2025-9242-watchguard-fireware-os-out-of-bounds-write-in-iked-process","title":"WatchGuard Fireware OS out-of-bounds write in iked process","severity":"critical","exploited":true,"published_at":"2025-11-12T00:00:00+00:00","exploited_since":"2025-11-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-9242-watchguard-fireware-os-out-of-bounds-write-in-iked-process"},{"cve":"CVE-2025-12480","slug":"cve-2025-12480-gladinet-triofox-improper-access-control-in-setup-pages","title":"Gladinet Triofox improper access control in setup pages","severity":"critical","exploited":true,"published_at":"2025-11-10T15:15:36.527+00:00","exploited_since":"2025-11-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-12480-gladinet-triofox-improper-access-control-in-setup-pages"},{"cve":"CVE-2025-21042","slug":"cve-2025-21042-samsung-mobile-devices-out-of-bounds-write-in-libimagecodec-quram","title":"Samsung Mobile Devices out-of-bounds write in libimagecodec.quram.so","severity":"critical","exploited":true,"published_at":"2025-11-10T00:00:00+00:00","exploited_since":"2025-11-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-21042-samsung-mobile-devices-out-of-bounds-write-in-libimagecodec-quram"},{"cve":"CVE-2025-48703","slug":"cve-2025-48703-control-web-panel-os-command-injection-in-filemanager","title":"Control Web Panel OS command injection in filemanager","severity":"critical","exploited":true,"published_at":"2025-11-04T00:00:00+00:00","exploited_since":"2025-11-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-48703-control-web-panel-os-command-injection-in-filemanager"},{"cve":"CVE-2025-11371","slug":"cve-2025-11371-gladinet-centrestack-and-triofox-unauthenticated-local-file","title":"Gladinet CentreStack and Triofox unauthenticated local file inclusion","severity":"critical","exploited":true,"published_at":"2025-10-09T17:15:58.507+00:00","exploited_since":"2025-11-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-11371-gladinet-centrestack-and-triofox-unauthenticated-local-file"},{"cve":"CVE-2025-24893","slug":"cve-2025-24893-xwiki-platform-eval-injection-in-solrsearch","title":"XWiki Platform eval injection in SolrSearch","severity":"critical","exploited":true,"published_at":"2025-10-30T00:00:00+00:00","exploited_since":"2025-10-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24893-xwiki-platform-eval-injection-in-solrsearch"},{"cve":"CVE-2025-41244","slug":"cve-2025-41244-broadcom-vmware-aria-operations-and-vmware-tools-privilege","title":"Broadcom VMware Aria Operations and VMware Tools privilege escalation","severity":"critical","exploited":true,"published_at":"2025-10-30T00:00:00+00:00","exploited_since":"2025-10-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-41244-broadcom-vmware-aria-operations-and-vmware-tools-privilege"},{"cve":"CVE-2025-6204","slug":"cve-2025-6204-dassault-systemes-delmia-apriso-code-injection","title":"Dassault Systèmes DELMIA Apriso code injection","severity":"critical","exploited":true,"published_at":"2025-10-28T00:00:00+00:00","exploited_since":"2025-10-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-6204-dassault-systemes-delmia-apriso-code-injection"},{"cve":"CVE-2025-6205","slug":"cve-2025-6205-dassault-systemes-delmia-apriso-missing-authorization","title":"Dassault Systèmes DELMIA Apriso missing authorization","severity":"critical","exploited":true,"published_at":"2025-10-28T00:00:00+00:00","exploited_since":"2025-10-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-6205-dassault-systemes-delmia-apriso-missing-authorization"},{"cve":"CVE-2025-59287","slug":"cve-2025-59287-microsoft-windows-server-update-service-deserialization-rce","title":"Microsoft Windows Server Update Service deserialization RCE","severity":"critical","exploited":true,"published_at":"2025-10-24T00:00:00+00:00","exploited_since":"2025-10-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-59287-microsoft-windows-server-update-service-deserialization-rce"},{"cve":"CVE-2025-54236","slug":"cve-2025-54236-adobe-commerce-versions-2-4-9-alpha2-2-4-8-p2-2-4-7-p7-2-4-6-p12","title":"Magento Community Edition Improper Input Validation vulnerability","severity":"critical","exploited":true,"published_at":"2025-09-09T14:15:46.563+00:00","exploited_since":"2025-10-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-54236-adobe-commerce-versions-2-4-9-alpha2-2-4-8-p2-2-4-7-p7-2-4-6-p12"},{"cve":"CVE-2025-61932","slug":"cve-2025-61932-motex-lanscope-endpoint-manager-remote-code-execution","title":"Motex LANSCOPE Endpoint Manager remote code execution","severity":"critical","exploited":true,"published_at":"2025-10-20T08:15:33.303+00:00","exploited_since":"2025-10-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-61932-motex-lanscope-endpoint-manager-remote-code-execution"},{"cve":"CVE-2025-33073","slug":"cve-2025-33073-microsoft-windows-smb-client-improper-access-control-privilege","title":"Microsoft Windows SMB Client improper access control privilege escalation","severity":"critical","exploited":true,"published_at":"2025-10-20T00:00:00+00:00","exploited_since":"2025-10-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-33073-microsoft-windows-smb-client-improper-access-control-privilege"},{"cve":"CVE-2022-48503","slug":"cve-2022-48503-apple-multiple-products-code-execution-in-javascriptcore","title":"Apple Multiple Products code execution in JavaScriptCore","severity":"critical","exploited":true,"published_at":"2025-10-20T00:00:00+00:00","exploited_since":"2025-10-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-48503-apple-multiple-products-code-execution-in-javascriptcore"},{"cve":"CVE-2025-2746","slug":"cve-2025-2746-kentico-xperience-authentication-bypass-in-staging-sync-server","title":"Kentico Xperience authentication bypass in Staging Sync Server","severity":"critical","exploited":true,"published_at":"2025-10-20T00:00:00+00:00","exploited_since":"2025-10-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-2746-kentico-xperience-authentication-bypass-in-staging-sync-server"},{"cve":"CVE-2025-2747","slug":"cve-2025-2747-kentico-xperience-cms-authentication-bypass-in-staging-sync-server","title":"Kentico Xperience CMS authentication bypass in Staging Sync Server","severity":"critical","exploited":true,"published_at":"2025-10-20T00:00:00+00:00","exploited_since":"2025-10-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-2747-kentico-xperience-cms-authentication-bypass-in-staging-sync-server"},{"cve":"CVE-2025-61884","slug":"cve-2025-61884-oracle-e-business-suite-ssrf-in-configurator-runtime-ui","title":"Oracle E-Business Suite SSRF in Configurator Runtime UI","severity":"critical","exploited":true,"published_at":"2025-10-12T03:15:34.72+00:00","exploited_since":"2025-10-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-61884-oracle-e-business-suite-ssrf-in-configurator-runtime-ui"},{"cve":"CVE-2025-54253","slug":"cve-2025-54253-adobe-experience-manager-forms-remote-code-execution","title":"Adobe Experience Manager Forms remote code execution","severity":"critical","exploited":true,"published_at":"2025-10-15T00:00:00+00:00","exploited_since":"2025-10-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-54253-adobe-experience-manager-forms-remote-code-execution"},{"cve":"CVE-2016-7836","slug":"cve-2016-7836-sky-skysea-client-view-improper-authentication-in-management","title":"Sky SKYSEA Client View improper authentication in management console","severity":"critical","exploited":true,"published_at":"2025-10-14T00:00:00+00:00","exploited_since":"2025-10-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-7836-sky-skysea-client-view-improper-authentication-in-management"},{"cve":"CVE-2025-24990","slug":"cve-2025-24990-microsoft-windows-untrusted-pointer-dereference-in-agere-modem","title":"Microsoft Windows untrusted pointer dereference in Agere Modem Driver","severity":"critical","exploited":true,"published_at":"2025-10-14T00:00:00+00:00","exploited_since":"2025-10-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24990-microsoft-windows-untrusted-pointer-dereference-in-agere-modem"},{"cve":"CVE-2025-47827","slug":"cve-2025-47827-igel-os-secure-boot-bypass-in-igel-flash-driver","title":"IGEL OS Secure Boot bypass in igel-flash-driver","severity":"critical","exploited":true,"published_at":"2025-10-14T00:00:00+00:00","exploited_since":"2025-10-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-47827-igel-os-secure-boot-bypass-in-igel-flash-driver"},{"cve":"CVE-2025-59230","slug":"cve-2025-59230-microsoft-windows-privilege-escalation-in-remote-access","title":"Microsoft Windows privilege escalation in Remote Access Connection Manager","severity":"critical","exploited":true,"published_at":"2025-10-14T00:00:00+00:00","exploited_since":"2025-10-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-59230-microsoft-windows-privilege-escalation-in-remote-access"},{"cve":"CVE-2021-43798","slug":"cve-2021-43798-grafana-path-traversal-in-plugin-assets","title":"Grafana path traversal","severity":"critical","exploited":true,"published_at":"2024-02-01T00:16:10+00:00","exploited_since":"2025-10-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-43798-grafana-path-traversal-in-plugin-assets"},{"cve":"CVE-2025-27915","slug":"cve-2025-27915-synacor-zimbra-collaboration-suite-xss-in-classic-web-client","title":"Synacor Zimbra Collaboration Suite XSS in Classic Web Client","severity":"critical","exploited":true,"published_at":"2025-10-07T00:00:00+00:00","exploited_since":"2025-10-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-27915-synacor-zimbra-collaboration-suite-xss-in-classic-web-client"},{"cve":"CVE-2010-3765","slug":"cve-2010-3765-mozilla-multiple-products-memory-corruption-in","title":"Mozilla Multiple Products memory corruption in nsCSSFrameConstructor","severity":"critical","exploited":true,"published_at":"2025-10-06T00:00:00+00:00","exploited_since":"2025-10-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-3765-mozilla-multiple-products-memory-corruption-in"},{"cve":"CVE-2010-3962","slug":"cve-2010-3962-microsoft-internet-explorer-use-after-free-in-css-processing","title":"Microsoft Internet Explorer use-after-free in CSS processing","severity":"critical","exploited":true,"published_at":"2025-10-06T00:00:00+00:00","exploited_since":"2025-10-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-3962-microsoft-internet-explorer-use-after-free-in-css-processing"},{"cve":"CVE-2011-3402","slug":"cve-2011-3402-microsoft-windows-remote-code-execution-in-truetype-font-parsing","title":"Microsoft Windows remote code execution in TrueType font parsing engine","severity":"critical","exploited":true,"published_at":"2025-10-06T00:00:00+00:00","exploited_since":"2025-10-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2011-3402-microsoft-windows-remote-code-execution-in-truetype-font-parsing"},{"cve":"CVE-2013-3918","slug":"cve-2013-3918-microsoft-windows-out-of-bounds-write-in","title":"Microsoft Windows out-of-bounds write in InformationCardSigninHelper ActiveX","severity":"critical","exploited":true,"published_at":"2025-10-06T00:00:00+00:00","exploited_since":"2025-10-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-3918-microsoft-windows-out-of-bounds-write-in"},{"cve":"CVE-2021-22555","slug":"cve-2021-22555-linux-kernel-heap-out-of-bounds-write-in-netfilter-x-tables","title":"Linux Kernel heap out-of-bounds write in Netfilter x_tables","severity":"critical","exploited":true,"published_at":"2025-10-06T00:00:00+00:00","exploited_since":"2025-10-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22555-linux-kernel-heap-out-of-bounds-write-in-netfilter-x-tables"},{"cve":"CVE-2021-43226","slug":"cve-2021-43226-microsoft-windows-privilege-escalation-in-common-log-file-system","title":"Microsoft Windows privilege escalation in Common Log File System Driver","severity":"critical","exploited":true,"published_at":"2025-10-06T00:00:00+00:00","exploited_since":"2025-10-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-43226-microsoft-windows-privilege-escalation-in-common-log-file-system"},{"cve":"CVE-2025-61882","slug":"cve-2025-61882-oracle-e-business-suite-improper-authentication-in-bi-publisher","title":"Oracle E-Business Suite improper authentication in BI Publisher Integration","severity":"critical","exploited":true,"published_at":"2025-10-05T04:15:40.34+00:00","exploited_since":"2025-10-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-61882-oracle-e-business-suite-improper-authentication-in-bi-publisher"},{"cve":"CVE-2014-6278","slug":"cve-2014-6278-gnu-bash-os-command-injection-via-environment-variables","title":"GNU Bash OS command injection via environment variables","severity":"critical","exploited":true,"published_at":"2025-10-02T00:00:00+00:00","exploited_since":"2025-10-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-6278-gnu-bash-os-command-injection-via-environment-variables"},{"cve":"CVE-2015-7755","slug":"cve-2015-7755-juniper-screenos-improper-authentication-in-ssh-and-telnet","title":"Juniper ScreenOS improper authentication in SSH and Telnet","severity":"critical","exploited":true,"published_at":"2025-10-02T00:00:00+00:00","exploited_since":"2025-10-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-7755-juniper-screenos-improper-authentication-in-ssh-and-telnet"},{"cve":"CVE-2025-21043","slug":"cve-2025-21043-samsung-mobile-devices-out-of-bounds-write-in-libimagecodec-quram","title":"Samsung Mobile Devices out-of-bounds write in libimagecodec.quram.so","severity":"critical","exploited":true,"published_at":"2025-10-02T00:00:00+00:00","exploited_since":"2025-10-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-21043-samsung-mobile-devices-out-of-bounds-write-in-libimagecodec-quram"},{"cve":"CVE-2025-4008","slug":"cve-2025-4008-smartbedded-meteobridge-command-injection-in-web-interface","title":"Smartbedded Meteobridge command injection in web interface","severity":"critical","exploited":true,"published_at":"2025-10-02T00:00:00+00:00","exploited_since":"2025-10-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-4008-smartbedded-meteobridge-command-injection-in-web-interface"},{"cve":"CVE-2017-1000353","slug":"cve-2017-1000353-jenkins-remote-code-execution-via-cli-java-deserialization","title":"Deserialization of Untrusted Data in Jenkins","severity":"critical","exploited":true,"published_at":"2022-05-13T01:01:03+00:00","exploited_since":"2025-10-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-1000353-jenkins-remote-code-execution-via-cli-java-deserialization"},{"cve":"CVE-2025-10035","slug":"cve-2025-10035-fortra-goanywhere-mft-deserialization-in-license-servlet","title":"Fortra GoAnywhere MFT deserialization in License Servlet","severity":"critical","exploited":true,"published_at":"2025-09-29T00:00:00+00:00","exploited_since":"2025-09-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-10035-fortra-goanywhere-mft-deserialization-in-license-servlet"},{"cve":"CVE-2025-20352","slug":"cve-2025-20352-cisco-ios-and-ios-xe-stack-overflow-in-snmp-subsystem","title":"Cisco IOS and IOS XE stack overflow in SNMP subsystem","severity":"critical","exploited":true,"published_at":"2025-09-29T00:00:00+00:00","exploited_since":"2025-09-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-20352-cisco-ios-and-ios-xe-stack-overflow-in-snmp-subsystem"},{"cve":"CVE-2025-32463","slug":"cve-2025-32463-sudo-privilege-escalation-via-untrusted-chroot-configuration","title":"Sudo privilege escalation via untrusted chroot configuration","severity":"critical","exploited":true,"published_at":"2025-09-29T00:00:00+00:00","exploited_since":"2025-09-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-32463-sudo-privilege-escalation-via-untrusted-chroot-configuration"},{"cve":"CVE-2025-59689","slug":"cve-2025-59689-libraesva-email-security-gateway-command-injection-via-compressed","title":"Libraesva Email Security Gateway command injection via compressed attachment","severity":"critical","exploited":true,"published_at":"2025-09-29T00:00:00+00:00","exploited_since":"2025-09-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-59689-libraesva-email-security-gateway-command-injection-via-compressed"},{"cve":"CVE-2021-21311","slug":"cve-2021-21311-adminer-ssrf-in-database-driver-bundling","title":"SSRF in adminer","severity":"critical","exploited":true,"published_at":"2021-02-11T20:42:59+00:00","exploited_since":"2025-09-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21311-adminer-ssrf-in-database-driver-bundling"},{"cve":"CVE-2025-20362","slug":"cve-2025-20362-cisco-secure-firewall-asa-and-ftd-missing-authorization-in-vpn","title":"Cisco Secure Firewall ASA and FTD missing authorization in VPN web server","severity":"critical","exploited":true,"published_at":"2025-09-25T16:15:32.28+00:00","exploited_since":"2025-09-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-20362-cisco-secure-firewall-asa-and-ftd-missing-authorization-in-vpn"},{"cve":"CVE-2025-20333","slug":"cve-2025-20333-cisco-asa-and-ftd-buffer-overflow-in-vpn-web-server","title":"Cisco ASA and FTD buffer overflow in VPN web server","severity":"critical","exploited":true,"published_at":"2025-09-25T16:15:32.073+00:00","exploited_since":"2025-09-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-20333-cisco-asa-and-ftd-buffer-overflow-in-vpn-web-server"},{"cve":"CVE-2025-10585","slug":"cve-2025-10585-google-chrome-type-confusion-in-v8-engine","title":"Google Chrome type confusion in V8 engine","severity":"critical","exploited":true,"published_at":"2025-09-24T17:15:39.473+00:00","exploited_since":"2025-09-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-10585-google-chrome-type-confusion-in-v8-engine"},{"cve":"CVE-2025-5086","slug":"cve-2025-5086-dassault-systemes-delmia-apriso-deserialization-remote-code","title":"Dassault Systèmes DELMIA Apriso deserialization remote code execution","severity":"critical","exploited":true,"published_at":"2025-09-11T00:00:00+00:00","exploited_since":"2025-09-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-5086-dassault-systemes-delmia-apriso-deserialization-remote-code"},{"cve":"CVE-2025-38352","slug":"cve-2025-38352-linux-kernel-toctou-race-condition-in-posix-cpu-timers","title":"Linux Kernel TOCTOU race condition in POSIX CPU timers","severity":"critical","exploited":true,"published_at":"2025-09-04T00:00:00+00:00","exploited_since":"2025-09-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-38352-linux-kernel-toctou-race-condition-in-posix-cpu-timers"},{"cve":"CVE-2025-48543","slug":"cve-2025-48543-google-android-runtime-use-after-free-in-system-server","title":"Google Android Runtime use-after-free in system_server","severity":"critical","exploited":true,"published_at":"2025-09-04T00:00:00+00:00","exploited_since":"2025-09-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-48543-google-android-runtime-use-after-free-in-system-server"},{"cve":"CVE-2025-53690","slug":"cve-2025-53690-sitecore-multiple-products-deserialization-of-untrusted-data","title":"Sitecore Multiple Products deserialization of untrusted data","severity":"critical","exploited":true,"published_at":"2025-09-04T00:00:00+00:00","exploited_since":"2025-09-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-53690-sitecore-multiple-products-deserialization-of-untrusted-data"},{"cve":"CVE-2023-50224","slug":"cve-2023-50224-tp-link-tl-wr841n-authentication-bypass-in-httpd-service","title":"TP-Link TL-WR841N authentication bypass in httpd service","severity":"critical","exploited":true,"published_at":"2025-09-03T00:00:00+00:00","exploited_since":"2025-09-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-50224-tp-link-tl-wr841n-authentication-bypass-in-httpd-service"},{"cve":"CVE-2025-9377","slug":"cve-2025-9377-tp-link-archer-c7-and-tl-wr841n-os-command-injection-in-parental","title":"TP-Link Archer C7 and TL-WR841N OS command injection in Parental Control","severity":"critical","exploited":true,"published_at":"2025-09-03T00:00:00+00:00","exploited_since":"2025-09-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-9377-tp-link-archer-c7-and-tl-wr841n-os-command-injection-in-parental"},{"cve":"CVE-2020-24363","slug":"cve-2020-24363-tp-link-tl-wa855re-missing-authentication-for-factory-reset","title":"TP-Link TL-WA855RE missing authentication for factory reset","severity":"critical","exploited":true,"published_at":"2025-09-02T00:00:00+00:00","exploited_since":"2025-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-24363-tp-link-tl-wa855re-missing-authentication-for-factory-reset"},{"cve":"CVE-2025-55177","slug":"cve-2025-55177-meta-whatsapp-incorrect-authorization-in-linked-device","title":"Meta WhatsApp incorrect authorization in linked device synchronization","severity":"critical","exploited":true,"published_at":"2025-09-02T00:00:00+00:00","exploited_since":"2025-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-55177-meta-whatsapp-incorrect-authorization-in-linked-device"},{"cve":"CVE-2025-57819","slug":"cve-2025-57819-sangoma-freepbx-auth-bypass-and-rce-in-endpoint-module","title":"Sangoma FreePBX auth bypass and RCE in endpoint module","severity":"critical","exploited":true,"published_at":"2025-08-28T17:15:36.79+00:00","exploited_since":"2025-08-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-57819-sangoma-freepbx-auth-bypass-and-rce-in-endpoint-module"},{"cve":"CVE-2025-7775","slug":"cve-2025-7775-citrix-netscaler-memory-overflow-in-adc-and-gateway","title":"Citrix NetScaler memory overflow in ADC and Gateway","severity":"critical","exploited":true,"published_at":"2025-08-26T00:00:00+00:00","exploited_since":"2025-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-7775-citrix-netscaler-memory-overflow-in-adc-and-gateway"},{"cve":"CVE-2024-8068","slug":"cve-2024-8068-citrix-session-recording-privilege-escalation-in-networkservice","title":"Citrix Session Recording privilege escalation in NetworkService account","severity":"critical","exploited":true,"published_at":"2025-08-25T00:00:00+00:00","exploited_since":"2025-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-8068-citrix-session-recording-privilege-escalation-in-networkservice"},{"cve":"CVE-2024-8069","slug":"cve-2024-8069-citrix-session-recording-deserialization-of-untrusted-data","title":"Citrix Session Recording deserialization of untrusted data","severity":"critical","exploited":true,"published_at":"2025-08-25T00:00:00+00:00","exploited_since":"2025-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-8069-citrix-session-recording-deserialization-of-untrusted-data"},{"cve":"CVE-2025-48384","slug":"cve-2025-48384-git-link-following-vulnerability-in-submodule-handling","title":"Git link following vulnerability in submodule handling","severity":"critical","exploited":true,"published_at":"2025-08-25T00:00:00+00:00","exploited_since":"2025-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-48384-git-link-following-vulnerability-in-submodule-handling"},{"cve":"CVE-2025-43300","slug":"cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o","title":"Apple iOS, iPadOS, and macOS out-of-bounds write in Image I/O","severity":"critical","exploited":true,"published_at":"2025-08-21T00:00:00+00:00","exploited_since":"2025-08-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o"},{"cve":"CVE-2025-54948","slug":"cve-2025-54948-trend-micro-apex-one-os-command-injection-in-management-console","title":"Trend Micro Apex One OS command injection in management console","severity":"critical","exploited":true,"published_at":"2025-08-18T00:00:00+00:00","exploited_since":"2025-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-54948-trend-micro-apex-one-os-command-injection-in-management-console"},{"cve":"CVE-2025-8875","slug":"cve-2025-8875-n-able-n-central-insecure-deserialization","title":"N-able N-Central insecure deserialization","severity":"critical","exploited":true,"published_at":"2025-08-13T00:00:00+00:00","exploited_since":"2025-08-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-8875-n-able-n-central-insecure-deserialization"},{"cve":"CVE-2025-8876","slug":"cve-2025-8876-n-able-n-central-command-injection","title":"N-able N-central command injection","severity":"critical","exploited":true,"published_at":"2025-08-13T00:00:00+00:00","exploited_since":"2025-08-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-8876-n-able-n-central-command-injection"},{"cve":"CVE-2007-0671","slug":"cve-2007-0671-microsoft-office-excel-remote-code-execution-vulnerability","title":"Microsoft Office Excel remote code execution vulnerability","severity":"critical","exploited":true,"published_at":"2025-08-12T00:00:00+00:00","exploited_since":"2025-08-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2007-0671-microsoft-office-excel-remote-code-execution-vulnerability"},{"cve":"CVE-2013-3893","slug":"cve-2013-3893-microsoft-internet-explorer-use-after-free-in-mshtml-dll","title":"Microsoft Internet Explorer use after free in mshtml.dll","severity":"critical","exploited":true,"published_at":"2025-08-12T00:00:00+00:00","exploited_since":"2025-08-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-3893-microsoft-internet-explorer-use-after-free-in-mshtml-dll"},{"cve":"CVE-2025-8088","slug":"cve-2025-8088-rarlab-winrar-path-traversal","title":"RARLAB WinRAR path traversal","severity":"critical","exploited":true,"published_at":"2025-08-12T00:00:00+00:00","exploited_since":"2025-08-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-8088-rarlab-winrar-path-traversal"},{"cve":"CVE-2020-25078","slug":"cve-2020-25078-d-link-dcs-cameras-administrator-password-disclosure-in-config","title":"D-Link DCS Cameras administrator password disclosure in /config/getuser","severity":"critical","exploited":true,"published_at":"2025-08-05T00:00:00+00:00","exploited_since":"2025-08-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-25078-d-link-dcs-cameras-administrator-password-disclosure-in-config"},{"cve":"CVE-2020-25079","slug":"cve-2020-25079-d-link-multiple-cameras-command-injection-in-ddns-enc-cgi","title":"D-Link Multiple Cameras command injection in ddns_enc.cgi","severity":"critical","exploited":true,"published_at":"2025-08-05T00:00:00+00:00","exploited_since":"2025-08-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-25079-d-link-multiple-cameras-command-injection-in-ddns-enc-cgi"},{"cve":"CVE-2022-40799","slug":"cve-2022-40799-d-link-dnr-322l-command-execution-in-backup-config","title":"D-Link DNR-322L command execution in Backup Config","severity":"critical","exploited":true,"published_at":"2025-08-05T00:00:00+00:00","exploited_since":"2025-08-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-40799-d-link-dnr-322l-command-execution-in-backup-config"},{"cve":"CVE-2023-2533","slug":"cve-2023-2533-papercut-ng-mf-csrf-in-admin-interface","title":"PaperCut NG/MF CSRF in admin interface","severity":"critical","exploited":true,"published_at":"2025-07-28T00:00:00+00:00","exploited_since":"2025-07-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-2533-papercut-ng-mf-csrf-in-admin-interface"},{"cve":"CVE-2025-20281","slug":"cve-2025-20281-cisco-identity-services-engine-unauthenticated-rce-in-api","title":"Cisco Identity Services Engine unauthenticated RCE in API","severity":"critical","exploited":true,"published_at":"2025-07-28T00:00:00+00:00","exploited_since":"2025-07-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-20281-cisco-identity-services-engine-unauthenticated-rce-in-api"},{"cve":"CVE-2025-20337","slug":"cve-2025-20337-cisco-identity-services-engine-injection-vulnerability-in-api","title":"Cisco Identity Services Engine injection vulnerability in API","severity":"critical","exploited":true,"published_at":"2025-07-28T00:00:00+00:00","exploited_since":"2025-07-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-20337-cisco-identity-services-engine-injection-vulnerability-in-api"},{"cve":"CVE-2025-2775","slug":"cve-2025-2775-sysaid-on-prem-xxe-in-checkin-processing-functionality","title":"SysAid On-Prem XXE in Checkin processing functionality","severity":"critical","exploited":true,"published_at":"2025-07-22T00:00:00+00:00","exploited_since":"2025-07-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-2775-sysaid-on-prem-xxe-in-checkin-processing-functionality"},{"cve":"CVE-2025-2776","slug":"cve-2025-2776-sysaid-on-prem-xxe-in-server-url-processing","title":"SysAid On-Prem XXE in Server URL processing","severity":"critical","exploited":true,"published_at":"2025-07-22T00:00:00+00:00","exploited_since":"2025-07-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-2776-sysaid-on-prem-xxe-in-server-url-processing"},{"cve":"CVE-2025-49704","slug":"cve-2025-49704-microsoft-sharepoint-code-injection-vulnerability","title":"Microsoft SharePoint code injection vulnerability","severity":"critical","exploited":true,"published_at":"2025-07-22T00:00:00+00:00","exploited_since":"2025-07-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-49704-microsoft-sharepoint-code-injection-vulnerability"},{"cve":"CVE-2025-49706","slug":"cve-2025-49706-microsoft-sharepoint-improper-authentication-vulnerability","title":"Microsoft SharePoint improper authentication vulnerability","severity":"critical","exploited":true,"published_at":"2025-07-22T00:00:00+00:00","exploited_since":"2025-07-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-49706-microsoft-sharepoint-improper-authentication-vulnerability"},{"cve":"CVE-2025-54309","slug":"cve-2025-54309-crushftp-unprotected-alternate-channel-in-as2-validation","title":"CrushFTP unprotected alternate channel in AS2 validation","severity":"critical","exploited":true,"published_at":"2025-07-22T00:00:00+00:00","exploited_since":"2025-07-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-54309-crushftp-unprotected-alternate-channel-in-as2-validation"},{"cve":"CVE-2025-6558","slug":"cve-2025-6558-google-chromium-improper-input-validation-in-angle-and-gpu","title":"Google Chromium improper input validation in ANGLE and GPU","severity":"critical","exploited":true,"published_at":"2025-07-22T00:00:00+00:00","exploited_since":"2025-07-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-6558-google-chromium-improper-input-validation-in-angle-and-gpu"},{"cve":"CVE-2025-53770","slug":"cve-2025-53770-microsoft-sharepoint-server-deserialization-of-untrusted-data","title":"Microsoft SharePoint Server deserialization of untrusted data","severity":"critical","exploited":true,"published_at":"2025-07-20T00:00:00+00:00","exploited_since":"2025-07-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-53770-microsoft-sharepoint-server-deserialization-of-untrusted-data"},{"cve":"CVE-2025-25257","slug":"cve-2025-25257-fortinet-fortiweb-sql-injection","title":"Fortinet FortiWeb SQL injection","severity":"critical","exploited":true,"published_at":"2025-07-18T00:00:00+00:00","exploited_since":"2025-07-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-25257-fortinet-fortiweb-sql-injection"},{"cve":"CVE-2025-47812","slug":"cve-2025-47812-wing-ftp-server-remote-code-execution-via-null-byte-injection","title":"Wing FTP Server remote code execution via null byte injection","severity":"critical","exploited":true,"published_at":"2025-07-14T00:00:00+00:00","exploited_since":"2025-07-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-47812-wing-ftp-server-remote-code-execution-via-null-byte-injection"},{"cve":"CVE-2025-5777","slug":"cve-2025-5777-citrix-netscaler-adc-and-gateway-out-of-bounds-read","title":"Citrix NetScaler ADC and Gateway out-of-bounds read","severity":"critical","exploited":true,"published_at":"2025-07-10T00:00:00+00:00","exploited_since":"2025-07-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-5777-citrix-netscaler-adc-and-gateway-out-of-bounds-read"},{"cve":"CVE-2014-3931","slug":"cve-2014-3931-multi-router-looking-glass-buffer-overflow-in-fastping-c","title":"Multi-Router Looking Glass buffer overflow in fastping.c","severity":"critical","exploited":true,"published_at":"2025-07-07T00:00:00+00:00","exploited_since":"2025-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-3931-multi-router-looking-glass-buffer-overflow-in-fastping-c"},{"cve":"CVE-2019-9621","slug":"cve-2019-9621-synacor-zimbra-collaboration-suite-ssrf-in-proxyservlet","title":"Synacor Zimbra Collaboration Suite SSRF in ProxyServlet","severity":"critical","exploited":true,"published_at":"2025-07-07T00:00:00+00:00","exploited_since":"2025-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-9621-synacor-zimbra-collaboration-suite-ssrf-in-proxyservlet"},{"cve":"CVE-2016-10033","slug":"cve-2016-10033-phpmailer-command-injection-in-mailsend-function","title":"Remote code execution in PHPMailer","severity":"critical","exploited":true,"published_at":"2020-03-05T22:09:17+00:00","exploited_since":"2025-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-10033-phpmailer-command-injection-in-mailsend-function"},{"cve":"CVE-2019-5418","slug":"cve-2019-5418-ruby-on-rails-path-traversal-in-action-view","title":"Path Traversal in Action View","severity":"critical","exploited":true,"published_at":"2019-03-13T17:26:59+00:00","exploited_since":"2025-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-5418-ruby-on-rails-path-traversal-in-action-view"},{"cve":"CVE-2025-6554","slug":"cve-2025-6554-google-chromium-v8-type-confusion-in-javascript-engine","title":"Google Chromium V8 type confusion in JavaScript engine","severity":"critical","exploited":true,"published_at":"2025-07-02T00:00:00+00:00","exploited_since":"2025-07-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-6554-google-chromium-v8-type-confusion-in-javascript-engine"},{"cve":"CVE-2025-48927","slug":"cve-2025-48927-telemessage-tm-sgnl-insecure-default-configuration-in-spring-boot","title":"TeleMessage TM SGNL insecure default configuration in Spring Boot Actuator","severity":"critical","exploited":true,"published_at":"2025-07-01T00:00:00+00:00","exploited_since":"2025-07-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-48927-telemessage-tm-sgnl-insecure-default-configuration-in-spring-boot"},{"cve":"CVE-2025-48928","slug":"cve-2025-48928-telemessage-tm-sgnl-core-dump-exposure-in-jsp-application","title":"TeleMessage TM SGNL core dump exposure in JSP application","severity":"critical","exploited":true,"published_at":"2025-07-01T00:00:00+00:00","exploited_since":"2025-07-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-48928-telemessage-tm-sgnl-core-dump-exposure-in-jsp-application"},{"cve":"CVE-2025-6543","slug":"cve-2025-6543-citrix-netscaler-adc-and-gateway-buffer-overflow","title":"Citrix NetScaler ADC and Gateway buffer overflow","severity":"critical","exploited":true,"published_at":"2025-06-30T00:00:00+00:00","exploited_since":"2025-06-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-6543-citrix-netscaler-adc-and-gateway-buffer-overflow"},{"cve":"CVE-2019-6693","slug":"cve-2019-6693-fortinet-fortios-hard-coded-cryptographic-key-in-configuration","title":"Fortinet FortiOS hard-coded cryptographic key in configuration backups","severity":"critical","exploited":true,"published_at":"2025-06-25T00:00:00+00:00","exploited_since":"2025-06-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-6693-fortinet-fortios-hard-coded-cryptographic-key-in-configuration"},{"cve":"CVE-2024-0769","slug":"cve-2024-0769-d-link-dir-859-path-traversal-in-hedwig-cgi","title":"D-Link DIR-859 path traversal in hedwig.cgi","severity":"critical","exploited":true,"published_at":"2025-06-25T00:00:00+00:00","exploited_since":"2025-06-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-0769-d-link-dir-859-path-traversal-in-hedwig-cgi"},{"cve":"CVE-2024-54085","slug":"cve-2024-54085-ami-megarac-spx-authentication-bypass-in-redfish-host-interface","title":"AMI MegaRAC SPx authentication bypass in Redfish Host Interface","severity":"critical","exploited":true,"published_at":"2025-06-25T00:00:00+00:00","exploited_since":"2025-06-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-54085-ami-megarac-spx-authentication-bypass-in-redfish-host-interface"},{"cve":"CVE-2023-0386","slug":"cve-2023-0386-linux-kernel-privilege-escalation-in-overlayfs","title":"Linux Kernel privilege escalation in OverlayFS","severity":"critical","exploited":true,"published_at":"2025-06-17T00:00:00+00:00","exploited_since":"2025-06-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-0386-linux-kernel-privilege-escalation-in-overlayfs"},{"cve":"CVE-2023-33538","slug":"cve-2023-33538-tp-link-multiple-routers-command-injection-in-wlannetworkrpm","title":"TP-Link Multiple Routers command injection in WlanNetworkRpm","severity":"critical","exploited":true,"published_at":"2025-06-16T00:00:00+00:00","exploited_since":"2025-06-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-33538-tp-link-multiple-routers-command-injection-in-wlannetworkrpm"},{"cve":"CVE-2025-43200","slug":"cve-2025-43200-apple-multiple-products-logic-issue-in-icloud-link-media","title":"Apple Multiple Products logic issue in iCloud Link media processing","severity":"critical","exploited":true,"published_at":"2025-06-16T00:00:00+00:00","exploited_since":"2025-06-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43200-apple-multiple-products-logic-issue-in-icloud-link-media"},{"cve":"CVE-2025-33053","slug":"cve-2025-33053-microsoft-windows-remote-code-execution-in-internet-shortcut","title":"Microsoft Windows remote code execution in Internet Shortcut files","severity":"critical","exploited":true,"published_at":"2025-06-10T00:00:00+00:00","exploited_since":"2025-06-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-33053-microsoft-windows-remote-code-execution-in-internet-shortcut"},{"cve":"CVE-2025-24016","slug":"cve-2025-24016-wazuh-server-remote-code-execution-via-unsafe-deserialization","title":"GO-2025-3459 - Remote code execution in Wazuh server in github.com/wazuh/wazuh","severity":"critical","exploited":true,"published_at":"2025-03-03T19:22:09+00:00","exploited_since":"2025-06-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24016-wazuh-server-remote-code-execution-via-unsafe-deserialization"},{"cve":"CVE-2024-42009","slug":"cve-2024-42009-roundcube-webmail-xss-in-message-body-function","title":"Roundcube Webmail XSS in message_body function","severity":"critical","exploited":true,"published_at":"2025-06-09T00:00:00+00:00","exploited_since":"2025-06-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-42009-roundcube-webmail-xss-in-message-body-function"},{"cve":"CVE-2025-32433","slug":"cve-2025-32433-erlang-erlang-otp-authentication-bypass-in-ssh-server","title":"Erlang Erlang/OTP authentication bypass in SSH Server","severity":"critical","exploited":true,"published_at":"2025-06-09T00:00:00+00:00","exploited_since":"2025-06-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-32433-erlang-erlang-otp-authentication-bypass-in-ssh-server"},{"cve":"CVE-2025-5419","slug":"cve-2025-5419-google-chromium-v8-out-of-bounds-read-and-write","title":"Google Chromium V8 out-of-bounds read and write","severity":"critical","exploited":true,"published_at":"2025-06-05T00:00:00+00:00","exploited_since":"2025-06-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-5419-google-chromium-v8-out-of-bounds-read-and-write"},{"cve":"CVE-2025-21479","slug":"cve-2025-21479-qualcomm-multiple-chipsets-incorrect-authorization-in-gpu","title":"Qualcomm Multiple Chipsets incorrect authorization in GPU micronode","severity":"critical","exploited":true,"published_at":"2025-06-03T00:00:00+00:00","exploited_since":"2025-06-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-21479-qualcomm-multiple-chipsets-incorrect-authorization-in-gpu"},{"cve":"CVE-2025-21480","slug":"cve-2025-21480-qualcomm-multiple-chipsets-incorrect-authorization-in-gpu","title":"Qualcomm Multiple Chipsets incorrect authorization in GPU micronode","severity":"critical","exploited":true,"published_at":"2025-06-03T00:00:00+00:00","exploited_since":"2025-06-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-21480-qualcomm-multiple-chipsets-incorrect-authorization-in-gpu"},{"cve":"CVE-2025-27038","slug":"cve-2025-27038-qualcomm-adreno-gpu-driver-use-after-free-vulnerability","title":"Qualcomm Adreno GPU driver use-after-free vulnerability","severity":"critical","exploited":true,"published_at":"2025-06-03T00:00:00+00:00","exploited_since":"2025-06-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-27038-qualcomm-adreno-gpu-driver-use-after-free-vulnerability"},{"cve":"CVE-2023-39780","slug":"cve-2023-39780-asus-rt-ax55-os-command-injection-in-start-apply-htm","title":"ASUS RT-AX55 OS command injection in start_apply.htm","severity":"critical","exploited":true,"published_at":"2025-06-02T00:00:00+00:00","exploited_since":"2025-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-39780-asus-rt-ax55-os-command-injection-in-start-apply-htm"},{"cve":"CVE-2025-3935","slug":"cve-2025-3935-connectwise-screenconnect-remote-code-execution-via-viewstate","title":"ConnectWise ScreenConnect remote code execution via ViewState injection","severity":"critical","exploited":true,"published_at":"2025-06-02T00:00:00+00:00","exploited_since":"2025-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-3935-connectwise-screenconnect-remote-code-execution-via-viewstate"},{"cve":"CVE-2021-32030","slug":"cve-2021-32030-asus-routers-authentication-bypass-in-administrator-interface","title":"ASUS Routers authentication bypass in administrator interface","severity":"critical","exploited":true,"published_at":"2025-06-02T00:00:00+00:00","exploited_since":"2025-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-32030-asus-routers-authentication-bypass-in-administrator-interface"},{"cve":"CVE-2025-35939","slug":"cve-2025-35939-craft-cms-arbitrary-code-injection-in-session-files","title":"Craft CMS stores arbitrary content provided by unauthenticated users in session files","severity":"critical","exploited":true,"published_at":"2025-05-08T00:31:12+00:00","exploited_since":"2025-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-35939-craft-cms-arbitrary-code-injection-in-session-files"},{"cve":"CVE-2024-56145","slug":"cve-2024-56145-craft-cms-code-injection-in-php-register-argc-argv-configuration","title":"Craft CMS has potential RCE when PHP `register_argc_argv` config setting is enabled","severity":"critical","exploited":true,"published_at":"2024-12-18T19:47:26+00:00","exploited_since":"2025-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-56145-craft-cms-code-injection-in-php-register-argc-argv-configuration"},{"cve":"CVE-2025-4632","slug":"cve-2025-4632-samsung-magicinfo-9-server-path-traversal","title":"Samsung MagicINFO 9 Server path traversal","severity":"critical","exploited":true,"published_at":"2025-05-22T00:00:00+00:00","exploited_since":"2025-05-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-4632-samsung-magicinfo-9-server-path-traversal"},{"cve":"CVE-2025-4427","slug":"cve-2025-4427-ivanti-endpoint-manager-mobile-authentication-bypass-in-api","title":"Ivanti Endpoint Manager Mobile authentication bypass in API","severity":"critical","exploited":true,"published_at":"2025-05-19T00:00:00+00:00","exploited_since":"2025-05-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-4427-ivanti-endpoint-manager-mobile-authentication-bypass-in-api"},{"cve":"CVE-2023-38950","slug":"cve-2023-38950-zkteco-biotime-path-traversal-in-iclock-api","title":"ZKTeco BioTime path traversal in iclock API","severity":"critical","exploited":true,"published_at":"2025-05-19T00:00:00+00:00","exploited_since":"2025-05-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-38950-zkteco-biotime-path-traversal-in-iclock-api"},{"cve":"CVE-2024-11182","slug":"cve-2024-11182-mdaemon-email-server-xss-in-html-email-messages","title":"MDaemon Email Server XSS in HTML email messages","severity":"critical","exploited":true,"published_at":"2025-05-19T00:00:00+00:00","exploited_since":"2025-05-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-11182-mdaemon-email-server-xss-in-html-email-messages"},{"cve":"CVE-2024-27443","slug":"cve-2024-27443-synacor-zimbra-collaboration-suite-xss-in-calendarinvite","title":"Synacor Zimbra Collaboration Suite XSS in CalendarInvite","severity":"critical","exploited":true,"published_at":"2025-05-19T00:00:00+00:00","exploited_since":"2025-05-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-27443-synacor-zimbra-collaboration-suite-xss-in-calendarinvite"},{"cve":"CVE-2025-27920","slug":"cve-2025-27920-srimax-output-messenger-directory-traversal","title":"Srimax Output Messenger directory traversal","severity":"critical","exploited":true,"published_at":"2025-05-19T00:00:00+00:00","exploited_since":"2025-05-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-27920-srimax-output-messenger-directory-traversal"},{"cve":"CVE-2025-4428","slug":"cve-2025-4428-ivanti-endpoint-manager-mobile-code-injection-in-api-component","title":"Ivanti Endpoint Manager Mobile code injection in API component","severity":"critical","exploited":true,"published_at":"2025-05-19T00:00:00+00:00","exploited_since":"2025-05-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-4428-ivanti-endpoint-manager-mobile-code-injection-in-api-component"},{"cve":"CVE-2024-12987","slug":"cve-2024-12987-draytek-vigor-routers-os-command-injection-vulnerability","title":"DrayTek Vigor Routers OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-15T00:00:00+00:00","exploited_since":"2025-05-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-12987-draytek-vigor-routers-os-command-injection-vulnerability"},{"cve":"CVE-2025-42999","slug":"cve-2025-42999-sap-netweaver-deserialization-vulnerability","title":"SAP NetWeaver Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-15T00:00:00+00:00","exploited_since":"2025-05-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-42999-sap-netweaver-deserialization-vulnerability"},{"cve":"CVE-2025-32756","slug":"cve-2025-32756-fortinet-multiple-products-stack-based-buffer-overflow","title":"Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-14T00:00:00+00:00","exploited_since":"2025-05-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-32756-fortinet-multiple-products-stack-based-buffer-overflow"},{"cve":"CVE-2025-30397","slug":"cve-2025-30397-microsoft-windows-scripting-engine-type-confusion-vulnerability","title":"Microsoft Windows Scripting Engine Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-13T00:00:00+00:00","exploited_since":"2025-05-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-30397-microsoft-windows-scripting-engine-type-confusion-vulnerability"},{"cve":"CVE-2025-30400","slug":"cve-2025-30400-microsoft-windows-dwm-core-library-use-after-free-vulnerability","title":"Microsoft Windows DWM Core Library Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-13T00:00:00+00:00","exploited_since":"2025-05-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-30400-microsoft-windows-dwm-core-library-use-after-free-vulnerability"},{"cve":"CVE-2025-32701","slug":"cve-2025-32701-microsoft-windows-common-log-file-system-clfs-driver-use-after","title":"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-13T00:00:00+00:00","exploited_since":"2025-05-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-32701-microsoft-windows-common-log-file-system-clfs-driver-use-after"},{"cve":"CVE-2025-32706","slug":"cve-2025-32706-microsoft-windows-common-log-file-system-clfs-driver-heap-based","title":"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-13T00:00:00+00:00","exploited_since":"2025-05-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-32706-microsoft-windows-common-log-file-system-clfs-driver-heap-based"},{"cve":"CVE-2025-32709","slug":"cve-2025-32709-microsoft-windows-ancillary-function-driver-for-winsock-use-after","title":"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-13T00:00:00+00:00","exploited_since":"2025-05-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-32709-microsoft-windows-ancillary-function-driver-for-winsock-use-after"},{"cve":"CVE-2025-47729","slug":"cve-2025-47729-telemessage-tm-sgnl-hidden-functionality-vulnerability","title":"TeleMessage TM SGNL Hidden Functionality Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-12T00:00:00+00:00","exploited_since":"2025-05-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-47729-telemessage-tm-sgnl-hidden-functionality-vulnerability"},{"cve":"CVE-2024-11120","slug":"cve-2024-11120-geovision-devices-os-command-injection-vulnerability","title":"GeoVision Devices OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-07T00:00:00+00:00","exploited_since":"2025-05-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-11120-geovision-devices-os-command-injection-vulnerability"},{"cve":"CVE-2024-6047","slug":"cve-2024-6047-geovision-devices-os-command-injection-vulnerability","title":"GeoVision Devices OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-07T00:00:00+00:00","exploited_since":"2025-05-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-6047-geovision-devices-os-command-injection-vulnerability"},{"cve":"CVE-2025-27363","slug":"cve-2025-27363-freetype-out-of-bounds-write-vulnerability","title":"FreeType Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-06T00:00:00+00:00","exploited_since":"2025-05-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-27363-freetype-out-of-bounds-write-vulnerability"},{"cve":"CVE-2025-3248","slug":"cve-2025-3248-langflow-missing-authentication-vulnerability","title":"Langflow Unauth RCE","severity":"critical","exploited":true,"published_at":"2025-06-17T20:14:26+00:00","exploited_since":"2025-05-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-3248-langflow-missing-authentication-vulnerability"},{"cve":"CVE-2025-34028","slug":"cve-2025-34028-commvault-command-center-path-traversal-vulnerability","title":"Commvault Command Center Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-02T00:00:00+00:00","exploited_since":"2025-05-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-34028-commvault-command-center-path-traversal-vulnerability"},{"cve":"CVE-2024-58136","slug":"cve-2024-58136-yiiframework-yii-improper-protection-of-alternate-path","title":"yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key","severity":"critical","exploited":true,"published_at":"2025-04-10T03:31:32+00:00","exploited_since":"2025-05-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-58136-yiiframework-yii-improper-protection-of-alternate-path"},{"cve":"CVE-2023-44221","slug":"cve-2023-44221-sonicwall-sma100-appliances-os-command-injection-vulnerability","title":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-01T00:00:00+00:00","exploited_since":"2025-05-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-44221-sonicwall-sma100-appliances-os-command-injection-vulnerability"},{"cve":"CVE-2024-38475","slug":"cve-2024-38475-apache-http-server-improper-escaping-of-output-vulnerability","title":"Apache HTTP Server Improper Escaping of Output Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-01T00:00:00+00:00","exploited_since":"2025-05-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38475-apache-http-server-improper-escaping-of-output-vulnerability"},{"cve":"CVE-2025-31324","slug":"cve-2025-31324-sap-netweaver-unrestricted-file-upload-vulnerability","title":"SAP NetWeaver Unrestricted File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-29T00:00:00+00:00","exploited_since":"2025-04-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31324-sap-netweaver-unrestricted-file-upload-vulnerability"},{"cve":"CVE-2025-1976","slug":"cve-2025-1976-broadcom-brocade-fabric-os-code-injection-vulnerability","title":"Broadcom Brocade Fabric OS Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-28T00:00:00+00:00","exploited_since":"2025-04-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-1976-broadcom-brocade-fabric-os-code-injection-vulnerability"},{"cve":"CVE-2025-3928","slug":"cve-2025-3928-commvault-web-server-unspecified-vulnerability","title":"Commvault Web Server Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-28T00:00:00+00:00","exploited_since":"2025-04-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-3928-commvault-web-server-unspecified-vulnerability"},{"cve":"CVE-2025-42599","slug":"cve-2025-42599-qualitia-active-mail-stack-based-buffer-overflow-vulnerability","title":"Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-28T00:00:00+00:00","exploited_since":"2025-04-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-42599-qualitia-active-mail-stack-based-buffer-overflow-vulnerability"},{"cve":"CVE-2025-24054","slug":"cve-2025-24054-microsoft-windows-ntlm-hash-disclosure-spoofing-vulnerability","title":"Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-17T00:00:00+00:00","exploited_since":"2025-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24054-microsoft-windows-ntlm-hash-disclosure-spoofing-vulnerability"},{"cve":"CVE-2025-31200","slug":"cve-2025-31200-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-17T00:00:00+00:00","exploited_since":"2025-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31200-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2025-31201","slug":"cve-2025-31201-apple-multiple-products-arbitrary-read-and-write-vulnerability","title":"Apple Multiple Products Arbitrary Read and Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-17T00:00:00+00:00","exploited_since":"2025-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31201-apple-multiple-products-arbitrary-read-and-write-vulnerability"},{"cve":"CVE-2021-20035","slug":"cve-2021-20035-sonicwall-sma100-appliances-os-command-injection-vulnerability","title":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-16T00:00:00+00:00","exploited_since":"2025-04-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20035-sonicwall-sma100-appliances-os-command-injection-vulnerability"},{"cve":"CVE-2024-53150","slug":"cve-2024-53150-linux-kernel-out-of-bounds-read-vulnerability","title":"Linux Kernel Out-of-Bounds Read Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-09T00:00:00+00:00","exploited_since":"2025-04-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-53150-linux-kernel-out-of-bounds-read-vulnerability"},{"cve":"CVE-2024-53197","slug":"cve-2024-53197-linux-kernel-out-of-bounds-access-vulnerability","title":"Linux Kernel Out-of-Bounds Access Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-09T00:00:00+00:00","exploited_since":"2025-04-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-53197-linux-kernel-out-of-bounds-access-vulnerability"},{"cve":"CVE-2025-29824","slug":"cve-2025-29824-microsoft-windows-common-log-file-system-clfs-driver-use-after","title":"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-08T00:00:00+00:00","exploited_since":"2025-04-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-29824-microsoft-windows-common-log-file-system-clfs-driver-use-after"},{"cve":"CVE-2025-30406","slug":"cve-2025-30406-gladinet-centrestack-and-triofox-use-of-hard-coded-cryptographic","title":"Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-08T00:00:00+00:00","exploited_since":"2025-04-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-30406-gladinet-centrestack-and-triofox-use-of-hard-coded-cryptographic"},{"cve":"CVE-2025-31161","slug":"cve-2025-31161-crushftp-authentication-bypass-vulnerability","title":"CrushFTP Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-07T00:00:00+00:00","exploited_since":"2025-04-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31161-crushftp-authentication-bypass-vulnerability"},{"cve":"CVE-2025-22457","slug":"cve-2025-22457-ivanti-connect-secure-policy-secure-and-zta-gateways-stack-based","title":"Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-04T00:00:00+00:00","exploited_since":"2025-04-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-22457-ivanti-connect-secure-policy-secure-and-zta-gateways-stack-based"},{"cve":"CVE-2025-24813","slug":"cve-2025-24813-apache-tomcat-path-equivalence-vulnerability","title":"Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT","severity":"critical","exploited":true,"published_at":"2025-03-10T18:31:56+00:00","exploited_since":"2025-04-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24813-apache-tomcat-path-equivalence-vulnerability"},{"cve":"CVE-2024-20439","slug":"cve-2024-20439-cisco-smart-licensing-utility-static-credential-vulnerability","title":"Cisco Smart Licensing Utility Static Credential Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-31T00:00:00+00:00","exploited_since":"2025-03-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-20439-cisco-smart-licensing-utility-static-credential-vulnerability"},{"cve":"CVE-2025-2783","slug":"cve-2025-2783-google-chromium-mojo-sandbox-escape-vulnerability","title":"Google Chromium Mojo Sandbox Escape Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-27T00:00:00+00:00","exploited_since":"2025-03-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-2783-google-chromium-mojo-sandbox-escape-vulnerability"},{"cve":"CVE-2019-9874","slug":"cve-2019-9874-sitecore-cms-and-experience-platform-xp-deserialization","title":"Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-26T00:00:00+00:00","exploited_since":"2025-03-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-9874-sitecore-cms-and-experience-platform-xp-deserialization"},{"cve":"CVE-2019-9875","slug":"cve-2019-9875-sitecore-cms-and-experience-platform-xp-deserialization","title":"Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-26T00:00:00+00:00","exploited_since":"2025-03-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-9875-sitecore-cms-and-experience-platform-xp-deserialization"},{"cve":"CVE-2025-30154","slug":"cve-2025-30154-reviewdog-action-setup-github-action-embedded-malicious-code","title":"reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-24T00:00:00+00:00","exploited_since":"2025-03-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-30154-reviewdog-action-setup-github-action-embedded-malicious-code"},{"cve":"CVE-2024-48248","slug":"cve-2024-48248-nakivo-backup-and-replication-absolute-path-traversal","title":"NAKIVO Backup and Replication Absolute Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-19T00:00:00+00:00","exploited_since":"2025-03-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-48248-nakivo-backup-and-replication-absolute-path-traversal"},{"cve":"CVE-2017-12637","slug":"cve-2017-12637-sap-netweaver-directory-traversal-vulnerability","title":"SAP NetWeaver Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-19T00:00:00+00:00","exploited_since":"2025-03-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-12637-sap-netweaver-directory-traversal-vulnerability"},{"cve":"CVE-2025-1316","slug":"cve-2025-1316-edimax-ic-7100-ip-camera-os-command-injection-vulnerability","title":"Edimax IC-7100 IP Camera OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-19T00:00:00+00:00","exploited_since":"2025-03-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-1316-edimax-ic-7100-ip-camera-os-command-injection-vulnerability"},{"cve":"CVE-2025-24472","slug":"cve-2025-24472-fortinet-fortios-and-fortiproxy-authentication-bypass","title":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-18T00:00:00+00:00","exploited_since":"2025-03-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24472-fortinet-fortios-and-fortiproxy-authentication-bypass"},{"cve":"CVE-2025-30066","slug":"cve-2025-30066-tj-actions-changed-files-github-action-embedded-malicious-code","title":"tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-18T00:00:00+00:00","exploited_since":"2025-03-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-30066-tj-actions-changed-files-github-action-embedded-malicious-code"},{"cve":"CVE-2025-21590","slug":"cve-2025-21590-juniper-junos-os-improper-isolation-or-compartmentalization","title":"Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-13T00:00:00+00:00","exploited_since":"2025-03-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-21590-juniper-junos-os-improper-isolation-or-compartmentalization"},{"cve":"CVE-2025-24201","slug":"cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability","title":"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-13T00:00:00+00:00","exploited_since":"2025-03-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability"},{"cve":"CVE-2025-24991","slug":"cve-2025-24991-microsoft-windows-ntfs-out-of-bounds-read-vulnerability","title":"Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-11T00:00:00+00:00","exploited_since":"2025-03-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24991-microsoft-windows-ntfs-out-of-bounds-read-vulnerability"},{"cve":"CVE-2025-24993","slug":"cve-2025-24993-microsoft-windows-ntfs-heap-based-buffer-overflow-vulnerability","title":"Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-11T00:00:00+00:00","exploited_since":"2025-03-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24993-microsoft-windows-ntfs-heap-based-buffer-overflow-vulnerability"},{"cve":"CVE-2025-26633","slug":"cve-2025-26633-microsoft-windows-management-console-mmc-improper-neutralization","title":"Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-11T00:00:00+00:00","exploited_since":"2025-03-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-26633-microsoft-windows-management-console-mmc-improper-neutralization"},{"cve":"CVE-2025-24983","slug":"cve-2025-24983-microsoft-windows-win32k-use-after-free-vulnerability","title":"Microsoft Windows Win32k Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-11T00:00:00+00:00","exploited_since":"2025-03-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24983-microsoft-windows-win32k-use-after-free-vulnerability"},{"cve":"CVE-2025-24984","slug":"cve-2025-24984-microsoft-windows-ntfs-information-disclosure-vulnerability","title":"Microsoft Windows NTFS Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-11T00:00:00+00:00","exploited_since":"2025-03-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24984-microsoft-windows-ntfs-information-disclosure-vulnerability"},{"cve":"CVE-2025-24985","slug":"cve-2025-24985-microsoft-windows-fast-fat-file-system-driver-integer-overflow","title":"Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-11T00:00:00+00:00","exploited_since":"2025-03-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24985-microsoft-windows-fast-fat-file-system-driver-integer-overflow"},{"cve":"CVE-2024-57968","slug":"cve-2024-57968-advantive-veracore-unrestricted-file-upload-vulnerability","title":"Advantive VeraCore Unrestricted File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-10T00:00:00+00:00","exploited_since":"2025-03-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-57968-advantive-veracore-unrestricted-file-upload-vulnerability"},{"cve":"CVE-2024-13160","slug":"cve-2024-13160-ivanti-endpoint-manager-epm-absolute-path-traversal-vulnerability","title":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-10T00:00:00+00:00","exploited_since":"2025-03-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-13160-ivanti-endpoint-manager-epm-absolute-path-traversal-vulnerability"},{"cve":"CVE-2024-13159","slug":"cve-2024-13159-ivanti-endpoint-manager-epm-absolute-path-traversal-vulnerability","title":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-10T00:00:00+00:00","exploited_since":"2025-03-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-13159-ivanti-endpoint-manager-epm-absolute-path-traversal-vulnerability"},{"cve":"CVE-2024-13161","slug":"cve-2024-13161-ivanti-endpoint-manager-epm-absolute-path-traversal-vulnerability","title":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-10T00:00:00+00:00","exploited_since":"2025-03-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-13161-ivanti-endpoint-manager-epm-absolute-path-traversal-vulnerability"},{"cve":"CVE-2025-25181","slug":"cve-2025-25181-advantive-veracore-sql-injection-vulnerability","title":"Advantive VeraCore SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-10T00:00:00+00:00","exploited_since":"2025-03-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-25181-advantive-veracore-sql-injection-vulnerability"},{"cve":"CVE-2025-22225","slug":"cve-2025-22225-vmware-esxi-arbitrary-write-vulnerability","title":"VMware ESXi Arbitrary Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-04T00:00:00+00:00","exploited_since":"2025-03-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-22225-vmware-esxi-arbitrary-write-vulnerability"},{"cve":"CVE-2025-22226","slug":"cve-2025-22226-vmware-esxi-workstation-and-fusion-information-disclosure","title":"VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-04T00:00:00+00:00","exploited_since":"2025-03-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-22226-vmware-esxi-workstation-and-fusion-information-disclosure"},{"cve":"CVE-2025-22224","slug":"cve-2025-22224-vmware-esxi-and-workstation-toctou-race-condition-vulnerability","title":"VMware ESXi and Workstation TOCTOU Race Condition Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-04T00:00:00+00:00","exploited_since":"2025-03-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-22224-vmware-esxi-and-workstation-toctou-race-condition-vulnerability"},{"cve":"CVE-2024-50302","slug":"cve-2024-50302-linux-kernel-use-of-uninitialized-resource-vulnerability","title":"Linux Kernel Use of Uninitialized Resource Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-19T02:16:32.32+00:00","exploited_since":"2025-03-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-50302-linux-kernel-use-of-uninitialized-resource-vulnerability"},{"cve":"CVE-2024-4885","slug":"cve-2024-4885-progress-whatsup-gold-path-traversal-vulnerability","title":"Progress WhatsUp Gold Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-03T00:00:00+00:00","exploited_since":"2025-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-4885-progress-whatsup-gold-path-traversal-vulnerability"},{"cve":"CVE-2022-43769","slug":"cve-2022-43769-hitachi-vantara-pentaho-ba-server-special-element-injection","title":"Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-03T00:00:00+00:00","exploited_since":"2025-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-43769-hitachi-vantara-pentaho-ba-server-special-element-injection"},{"cve":"CVE-2018-8639","slug":"cve-2018-8639-microsoft-windows-win32k-improper-resource-shutdown-or-release","title":"Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-03T00:00:00+00:00","exploited_since":"2025-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8639-microsoft-windows-win32k-improper-resource-shutdown-or-release"},{"cve":"CVE-2022-43939","slug":"cve-2022-43939-hitachi-vantara-pentaho-ba-server-authorization-bypass","title":"Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-03T00:00:00+00:00","exploited_since":"2025-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-43939-hitachi-vantara-pentaho-ba-server-authorization-bypass"},{"cve":"CVE-2023-20118","slug":"cve-2023-20118-cisco-small-business-rv-series-routers-command-injection","title":"Cisco Small Business RV Series Routers Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-03T00:00:00+00:00","exploited_since":"2025-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-20118-cisco-small-business-rv-series-routers-command-injection"},{"cve":"CVE-2023-34192","slug":"cve-2023-34192-synacor-zimbra-collaboration-suite-zcs-cross-site-scripting-xss","title":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-25T00:00:00+00:00","exploited_since":"2025-02-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-34192-synacor-zimbra-collaboration-suite-zcs-cross-site-scripting-xss"},{"cve":"CVE-2024-49035","slug":"cve-2024-49035-microsoft-partner-center-improper-access-control-vulnerability","title":"Microsoft Partner Center Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-25T00:00:00+00:00","exploited_since":"2025-02-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-49035-microsoft-partner-center-improper-access-control-vulnerability"},{"cve":"CVE-2017-3066","slug":"cve-2017-3066-adobe-coldfusion-deserialization-vulnerability","title":"Adobe ColdFusion Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-24T00:00:00+00:00","exploited_since":"2025-02-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-3066-adobe-coldfusion-deserialization-vulnerability"},{"cve":"CVE-2024-20953","slug":"cve-2024-20953-oracle-agile-product-lifecycle-management-plm-deserialization","title":"Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-24T00:00:00+00:00","exploited_since":"2025-02-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-20953-oracle-agile-product-lifecycle-management-plm-deserialization"},{"cve":"CVE-2025-24989","slug":"cve-2025-24989-microsoft-power-pages-improper-access-control-vulnerability","title":"Microsoft Power Pages Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-21T00:00:00+00:00","exploited_since":"2025-02-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24989-microsoft-power-pages-improper-access-control-vulnerability"},{"cve":"CVE-2025-0111","slug":"cve-2025-0111-palo-alto-networks-pan-os-file-read-vulnerability","title":"Palo Alto Networks PAN-OS File Read Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-20T00:00:00+00:00","exploited_since":"2025-02-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-0111-palo-alto-networks-pan-os-file-read-vulnerability"},{"cve":"CVE-2025-23209","slug":"cve-2025-23209-craft-cms-code-injection-vulnerability","title":"Craft CMS has a potential RCE with a compromised security key","severity":"critical","exploited":true,"published_at":"2025-01-21T19:48:38+00:00","exploited_since":"2025-02-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-23209-craft-cms-code-injection-vulnerability"},{"cve":"CVE-2024-53704","slug":"cve-2024-53704-sonicwall-sonicos-sslvpn-improper-authentication-vulnerability","title":"SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-18T00:00:00+00:00","exploited_since":"2025-02-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-53704-sonicwall-sonicos-sslvpn-improper-authentication-vulnerability"},{"cve":"CVE-2025-0108","slug":"cve-2025-0108-palo-alto-networks-pan-os-authentication-bypass-vulnerability","title":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-18T00:00:00+00:00","exploited_since":"2025-02-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-0108-palo-alto-networks-pan-os-authentication-bypass-vulnerability"},{"cve":"CVE-2024-57727","slug":"cve-2024-57727-simplehelp-path-traversal-vulnerability","title":"SimpleHelp Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-13T00:00:00+00:00","exploited_since":"2025-02-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-57727-simplehelp-path-traversal-vulnerability"},{"cve":"CVE-2024-41710","slug":"cve-2024-41710-mitel-sip-phones-argument-injection-vulnerability","title":"Mitel SIP Phones Argument Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-12T00:00:00+00:00","exploited_since":"2025-02-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-41710-mitel-sip-phones-argument-injection-vulnerability"},{"cve":"CVE-2025-24200","slug":"cve-2025-24200-apple-ios-and-ipados-incorrect-authorization-vulnerability","title":"Apple iOS and iPadOS Incorrect Authorization Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-12T00:00:00+00:00","exploited_since":"2025-02-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24200-apple-ios-and-ipados-incorrect-authorization-vulnerability"},{"cve":"CVE-2024-40891","slug":"cve-2024-40891-zyxel-dsl-cpe-os-command-injection-vulnerability","title":"Zyxel DSL CPE OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-11T00:00:00+00:00","exploited_since":"2025-02-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-40891-zyxel-dsl-cpe-os-command-injection-vulnerability"},{"cve":"CVE-2024-40890","slug":"cve-2024-40890-zyxel-dsl-cpe-os-command-injection-vulnerability","title":"Zyxel DSL CPE OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-11T00:00:00+00:00","exploited_since":"2025-02-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-40890-zyxel-dsl-cpe-os-command-injection-vulnerability"},{"cve":"CVE-2025-21391","slug":"cve-2025-21391-microsoft-windows-storage-link-following-vulnerability","title":"Microsoft Windows Storage Link Following Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-11T00:00:00+00:00","exploited_since":"2025-02-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-21391-microsoft-windows-storage-link-following-vulnerability"},{"cve":"CVE-2025-21418","slug":"cve-2025-21418-microsoft-windows-ancillary-function-driver-for-winsock-heap","title":"Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-11T00:00:00+00:00","exploited_since":"2025-02-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-21418-microsoft-windows-ancillary-function-driver-for-winsock-heap"},{"cve":"CVE-2025-0994","slug":"cve-2025-0994-trimble-cityworks-deserialization-vulnerability","title":"Trimble Cityworks Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-07T00:00:00+00:00","exploited_since":"2025-02-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-0994-trimble-cityworks-deserialization-vulnerability"},{"cve":"CVE-2020-15069","slug":"cve-2020-15069-sophos-xg-firewall-buffer-overflow-vulnerability","title":"Sophos XG Firewall Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-06T00:00:00+00:00","exploited_since":"2025-02-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-15069-sophos-xg-firewall-buffer-overflow-vulnerability"},{"cve":"CVE-2020-29574","slug":"cve-2020-29574-cyberoamos-cros-sql-injection-vulnerability","title":"CyberoamOS (CROS) SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-06T00:00:00+00:00","exploited_since":"2025-02-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-29574-cyberoamos-cros-sql-injection-vulnerability"},{"cve":"CVE-2022-23748","slug":"cve-2022-23748-dante-discovery-process-control-vulnerability","title":"Dante Discovery Process Control Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-06T00:00:00+00:00","exploited_since":"2025-02-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-23748-dante-discovery-process-control-vulnerability"},{"cve":"CVE-2024-21413","slug":"cve-2024-21413-microsoft-outlook-improper-input-validation-vulnerability","title":"Microsoft Outlook Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-06T00:00:00+00:00","exploited_since":"2025-02-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-21413-microsoft-outlook-improper-input-validation-vulnerability"},{"cve":"CVE-2025-0411","slug":"cve-2025-0411-7-zip-mark-of-the-web-bypass-vulnerability","title":"7-Zip Mark of the Web Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-06T00:00:00+00:00","exploited_since":"2025-02-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-0411-7-zip-mark-of-the-web-bypass-vulnerability"},{"cve":"CVE-2024-53104","slug":"cve-2024-53104-linux-kernel-out-of-bounds-write-vulnerability","title":"Linux Kernel Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-05T00:00:00+00:00","exploited_since":"2025-02-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-53104-linux-kernel-out-of-bounds-write-vulnerability"},{"cve":"CVE-2018-19410","slug":"cve-2018-19410-paessler-prtg-network-monitor-local-file-inclusion-vulnerability","title":"Paessler PRTG Network Monitor Local File Inclusion Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-04T00:00:00+00:00","exploited_since":"2025-02-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-19410-paessler-prtg-network-monitor-local-file-inclusion-vulnerability"},{"cve":"CVE-2018-9276","slug":"cve-2018-9276-paessler-prtg-network-monitor-os-command-injection-vulnerability","title":"Paessler PRTG Network Monitor OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-04T00:00:00+00:00","exploited_since":"2025-02-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-9276-paessler-prtg-network-monitor-os-command-injection-vulnerability"},{"cve":"CVE-2024-29059","slug":"cve-2024-29059-microsoft-net-framework-information-disclosure-vulnerability","title":"Microsoft .NET Framework Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-04T00:00:00+00:00","exploited_since":"2025-02-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-29059-microsoft-net-framework-information-disclosure-vulnerability"},{"cve":"CVE-2024-45195","slug":"cve-2024-45195-apache-ofbiz-forced-browsing-vulnerability","title":"Apache OFBiz Forced Browsing Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-04T00:00:00+00:00","exploited_since":"2025-02-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-45195-apache-ofbiz-forced-browsing-vulnerability"},{"cve":"CVE-2025-24085","slug":"cve-2025-24085-apple-multiple-products-use-after-free-vulnerability","title":"Apple Multiple Products Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-29T00:00:00+00:00","exploited_since":"2025-01-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24085-apple-multiple-products-use-after-free-vulnerability"},{"cve":"CVE-2025-23006","slug":"cve-2025-23006-sonicwall-sma1000-appliances-deserialization-vulnerability","title":"SonicWall SMA1000 Appliances Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-24T00:00:00+00:00","exploited_since":"2025-01-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-23006-sonicwall-sma1000-appliances-deserialization-vulnerability"},{"cve":"CVE-2020-11023","slug":"cve-2020-11023-jquery-cross-site-scripting-xss-vulnerability","title":"jQuery DOM manipulation XSS via option elements","severity":"critical","exploited":true,"published_at":"2020-04-29T22:19:14+00:00","exploited_since":"2025-01-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-11023-jquery-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2024-50603","slug":"cve-2024-50603-aviatrix-controllers-os-command-injection-vulnerability","title":"Aviatrix Controllers OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-16T00:00:00+00:00","exploited_since":"2025-01-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-50603-aviatrix-controllers-os-command-injection-vulnerability"},{"cve":"CVE-2024-55591","slug":"cve-2024-55591-fortinet-fortios-and-fortiproxy-authentication-bypass","title":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-14T00:00:00+00:00","exploited_since":"2025-01-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-55591-fortinet-fortios-and-fortiproxy-authentication-bypass"},{"cve":"CVE-2025-21333","slug":"cve-2025-21333-microsoft-windows-hyper-v-nt-kernel-integration-vsp-heap-based","title":"Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-14T00:00:00+00:00","exploited_since":"2025-01-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-21333-microsoft-windows-hyper-v-nt-kernel-integration-vsp-heap-based"},{"cve":"CVE-2025-21334","slug":"cve-2025-21334-microsoft-windows-hyper-v-nt-kernel-integration-vsp-use-after","title":"Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-14T00:00:00+00:00","exploited_since":"2025-01-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-21334-microsoft-windows-hyper-v-nt-kernel-integration-vsp-use-after"},{"cve":"CVE-2025-21335","slug":"cve-2025-21335-microsoft-windows-hyper-v-nt-kernel-integration-vsp-use-after","title":"Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-14T00:00:00+00:00","exploited_since":"2025-01-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-21335-microsoft-windows-hyper-v-nt-kernel-integration-vsp-use-after"},{"cve":"CVE-2023-48365","slug":"cve-2023-48365-qlik-sense-http-tunneling-vulnerability","title":"Qlik Sense HTTP Tunneling Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-13T00:00:00+00:00","exploited_since":"2025-01-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-48365-qlik-sense-http-tunneling-vulnerability"},{"cve":"CVE-2024-12686","slug":"cve-2024-12686-beyondtrust-privileged-remote-access-pra-and-remote-support-rs-os","title":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-13T00:00:00+00:00","exploited_since":"2025-01-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-12686-beyondtrust-privileged-remote-access-pra-and-remote-support-rs-os"},{"cve":"CVE-2025-0282","slug":"cve-2025-0282-ivanti-connect-secure-policy-secure-and-zta-gateways-stack-based","title":"Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-08T00:00:00+00:00","exploited_since":"2025-01-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-0282-ivanti-connect-secure-policy-secure-and-zta-gateways-stack-based"},{"cve":"CVE-2020-2883","slug":"cve-2020-2883-oracle-weblogic-server-unspecified-vulnerability","title":"Oracle WebLogic Server Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-07T00:00:00+00:00","exploited_since":"2025-01-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-2883-oracle-weblogic-server-unspecified-vulnerability"},{"cve":"CVE-2024-41713","slug":"cve-2024-41713-mitel-micollab-path-traversal-vulnerability","title":"Mitel MiCollab Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-07T00:00:00+00:00","exploited_since":"2025-01-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-41713-mitel-micollab-path-traversal-vulnerability"},{"cve":"CVE-2024-55550","slug":"cve-2024-55550-mitel-micollab-path-traversal-vulnerability","title":"Mitel MiCollab Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-07T00:00:00+00:00","exploited_since":"2025-01-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-55550-mitel-micollab-path-traversal-vulnerability"},{"cve":"CVE-2024-3393","slug":"cve-2024-3393-palo-alto-networks-pan-os-malicious-dns-packet-vulnerability","title":"Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-30T00:00:00+00:00","exploited_since":"2024-12-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-3393-palo-alto-networks-pan-os-malicious-dns-packet-vulnerability"},{"cve":"CVE-2021-44207","slug":"cve-2021-44207-acclaim-systems-usaherds-use-of-hard-coded-credentials","title":"Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-23T00:00:00+00:00","exploited_since":"2024-12-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-44207-acclaim-systems-usaherds-use-of-hard-coded-credentials"},{"cve":"CVE-2024-12356","slug":"cve-2024-12356-beyondtrust-privileged-remote-access-pra-and-remote-support-rs","title":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-19T00:00:00+00:00","exploited_since":"2024-12-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-12356-beyondtrust-privileged-remote-access-pra-and-remote-support-rs"},{"cve":"CVE-2018-14933","slug":"cve-2018-14933-nuuo-nvrmini-devices-os-command-injection-vulnerability","title":"NUUO NVRmini Devices OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-18T00:00:00+00:00","exploited_since":"2024-12-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-14933-nuuo-nvrmini-devices-os-command-injection-vulnerability"},{"cve":"CVE-2019-11001","slug":"cve-2019-11001-reolink-multiple-ip-cameras-os-command-injection-vulnerability","title":"Reolink Multiple IP Cameras OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-18T00:00:00+00:00","exploited_since":"2024-12-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-11001-reolink-multiple-ip-cameras-os-command-injection-vulnerability"},{"cve":"CVE-2021-40407","slug":"cve-2021-40407-reolink-rlc-410w-ip-camera-os-command-injection-vulnerability","title":"Reolink RLC-410W IP Camera OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-18T00:00:00+00:00","exploited_since":"2024-12-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-40407-reolink-rlc-410w-ip-camera-os-command-injection-vulnerability"},{"cve":"CVE-2022-23227","slug":"cve-2022-23227-nuuo-nvrmini2-devices-missing-authentication-vulnerability","title":"NUUO NVRmini2 Devices Missing Authentication Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-18T00:00:00+00:00","exploited_since":"2024-12-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-23227-nuuo-nvrmini2-devices-missing-authentication-vulnerability"},{"cve":"CVE-2024-55956","slug":"cve-2024-55956-cleo-multiple-products-unauthenticated-file-upload-vulnerability","title":"Cleo Multiple Products Unauthenticated File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-17T00:00:00+00:00","exploited_since":"2024-12-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-55956-cleo-multiple-products-unauthenticated-file-upload-vulnerability"},{"cve":"CVE-2024-20767","slug":"cve-2024-20767-adobe-coldfusion-improper-access-control-vulnerability","title":"Adobe ColdFusion Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-16T00:00:00+00:00","exploited_since":"2024-12-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-20767-adobe-coldfusion-improper-access-control-vulnerability"},{"cve":"CVE-2024-35250","slug":"cve-2024-35250-microsoft-windows-kernel-mode-driver-untrusted-pointer","title":"Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-16T00:00:00+00:00","exploited_since":"2024-12-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-35250-microsoft-windows-kernel-mode-driver-untrusted-pointer"},{"cve":"CVE-2024-50623","slug":"cve-2024-50623-cleo-multiple-products-unrestricted-file-upload-vulnerability","title":"Cleo Multiple Products Unrestricted File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-13T00:00:00+00:00","exploited_since":"2024-12-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-50623-cleo-multiple-products-unrestricted-file-upload-vulnerability"},{"cve":"CVE-2024-49138","slug":"cve-2024-49138-microsoft-windows-common-log-file-system-clfs-driver-heap-based","title":"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-10T00:00:00+00:00","exploited_since":"2024-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-49138-microsoft-windows-common-log-file-system-clfs-driver-heap-based"},{"cve":"CVE-2024-51378","slug":"cve-2024-51378-cyberpanel-incorrect-default-permissions-vulnerability","title":"CyberPanel Incorrect Default Permissions Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-04T00:00:00+00:00","exploited_since":"2024-12-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-51378-cyberpanel-incorrect-default-permissions-vulnerability"},{"cve":"CVE-2023-45727","slug":"cve-2023-45727-north-grid-proself-improper-restriction-of-xml-external-entity","title":"North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-03T00:00:00+00:00","exploited_since":"2024-12-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-45727-north-grid-proself-improper-restriction-of-xml-external-entity"},{"cve":"CVE-2024-11667","slug":"cve-2024-11667-zyxel-multiple-firewalls-path-traversal-vulnerability","title":"Zyxel Multiple Firewalls Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-03T00:00:00+00:00","exploited_since":"2024-12-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-11667-zyxel-multiple-firewalls-path-traversal-vulnerability"},{"cve":"CVE-2024-11680","slug":"cve-2024-11680-projectsend-improper-authentication-vulnerability","title":"ProjectSend Improper Authentication Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-03T00:00:00+00:00","exploited_since":"2024-12-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-11680-projectsend-improper-authentication-vulnerability"},{"cve":"CVE-2023-28461","slug":"cve-2023-28461-array-networks-ag-and-vxag-arrayos-missing-authentication-for","title":"Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-25T00:00:00+00:00","exploited_since":"2024-11-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-28461-array-networks-ag-and-vxag-arrayos-missing-authentication-for"},{"cve":"CVE-2024-21287","slug":"cve-2024-21287-oracle-agile-product-lifecycle-management-plm-incorrect","title":"Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-21T00:00:00+00:00","exploited_since":"2024-11-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-21287-oracle-agile-product-lifecycle-management-plm-incorrect"},{"cve":"CVE-2024-44308","slug":"cve-2024-44308-apple-multiple-products-code-execution-vulnerability","title":"Apple Multiple Products Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-21T00:00:00+00:00","exploited_since":"2024-11-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-44308-apple-multiple-products-code-execution-vulnerability"},{"cve":"CVE-2024-44309","slug":"cve-2024-44309-apple-multiple-products-cross-site-scripting-xss-vulnerability","title":"Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-21T00:00:00+00:00","exploited_since":"2024-11-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-44309-apple-multiple-products-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2024-38812","slug":"cve-2024-38812-vmware-vcenter-server-heap-based-buffer-overflow-vulnerability","title":"VMware vCenter Server Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-20T00:00:00+00:00","exploited_since":"2024-11-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38812-vmware-vcenter-server-heap-based-buffer-overflow-vulnerability"},{"cve":"CVE-2024-38813","slug":"cve-2024-38813-vmware-vcenter-server-privilege-escalation-vulnerability","title":"VMware vCenter Server Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-20T00:00:00+00:00","exploited_since":"2024-11-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38813-vmware-vcenter-server-privilege-escalation-vulnerability"},{"cve":"CVE-2024-0012","slug":"cve-2024-0012-palo-alto-networks-pan-os-management-interface-authentication","title":"Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-18T00:00:00+00:00","exploited_since":"2024-11-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-0012-palo-alto-networks-pan-os-management-interface-authentication"},{"cve":"CVE-2024-1212","slug":"cve-2024-1212-progress-kemp-loadmaster-os-command-injection-vulnerability","title":"Progress Kemp LoadMaster OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-18T00:00:00+00:00","exploited_since":"2024-11-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-1212-progress-kemp-loadmaster-os-command-injection-vulnerability"},{"cve":"CVE-2024-9474","slug":"cve-2024-9474-palo-alto-networks-pan-os-management-interface-os-command","title":"Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-18T00:00:00+00:00","exploited_since":"2024-11-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-9474-palo-alto-networks-pan-os-management-interface-os-command"},{"cve":"CVE-2024-9463","slug":"cve-2024-9463-palo-alto-networks-expedition-os-command-injection-vulnerability","title":"Palo Alto Networks Expedition OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-14T00:00:00+00:00","exploited_since":"2024-11-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-9463-palo-alto-networks-expedition-os-command-injection-vulnerability"},{"cve":"CVE-2024-9465","slug":"cve-2024-9465-palo-alto-networks-expedition-sql-injection-vulnerability","title":"Palo Alto Networks Expedition SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-14T00:00:00+00:00","exploited_since":"2024-11-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-9465-palo-alto-networks-expedition-sql-injection-vulnerability"},{"cve":"CVE-2014-2120","slug":"cve-2014-2120-cisco-adaptive-security-appliance-asa-cross-site-scripting-xss","title":"Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-12T00:00:00+00:00","exploited_since":"2024-11-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-2120-cisco-adaptive-security-appliance-asa-cross-site-scripting-xss"},{"cve":"CVE-2021-26086","slug":"cve-2021-26086-atlassian-jira-server-and-data-center-path-traversal","title":"Atlassian Jira Server and Data Center Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-12T00:00:00+00:00","exploited_since":"2024-11-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-26086-atlassian-jira-server-and-data-center-path-traversal"},{"cve":"CVE-2021-41277","slug":"cve-2021-41277-metabase-geojson-api-local-file-inclusion-vulnerability","title":"Metabase GeoJSON API Local File Inclusion Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-12T00:00:00+00:00","exploited_since":"2024-11-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-41277-metabase-geojson-api-local-file-inclusion-vulnerability"},{"cve":"CVE-2024-43451","slug":"cve-2024-43451-microsoft-windows-ntlmv2-hash-disclosure-spoofing-vulnerability","title":"Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-12T00:00:00+00:00","exploited_since":"2024-11-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-43451-microsoft-windows-ntlmv2-hash-disclosure-spoofing-vulnerability"},{"cve":"CVE-2024-49039","slug":"cve-2024-49039-microsoft-windows-task-scheduler-privilege-escalation","title":"Microsoft Windows Task Scheduler Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-12T00:00:00+00:00","exploited_since":"2024-11-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-49039-microsoft-windows-task-scheduler-privilege-escalation"},{"cve":"CVE-2019-16278","slug":"cve-2019-16278-nostromo-nhttpd-directory-traversal-vulnerability","title":"Nostromo nhttpd Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-07T00:00:00+00:00","exploited_since":"2024-11-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-16278-nostromo-nhttpd-directory-traversal-vulnerability"},{"cve":"CVE-2024-43093","slug":"cve-2024-43093-android-framework-privilege-escalation-vulnerability","title":"Android Framework Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-07T00:00:00+00:00","exploited_since":"2024-11-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-43093-android-framework-privilege-escalation-vulnerability"},{"cve":"CVE-2024-51567","slug":"cve-2024-51567-cyberpanel-incorrect-default-permissions-vulnerability","title":"CyberPanel Incorrect Default Permissions Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-07T00:00:00+00:00","exploited_since":"2024-11-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-51567-cyberpanel-incorrect-default-permissions-vulnerability"},{"cve":"CVE-2024-5910","slug":"cve-2024-5910-palo-alto-networks-expedition-missing-authentication-vulnerability","title":"Palo Alto Networks Expedition Missing Authentication Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-07T00:00:00+00:00","exploited_since":"2024-11-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-5910-palo-alto-networks-expedition-missing-authentication-vulnerability"},{"cve":"CVE-2024-8956","slug":"cve-2024-8956-ptzoptics-pt30x-sdi-ndi-cameras-authentication-bypass","title":"PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-04T00:00:00+00:00","exploited_since":"2024-11-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-8956-ptzoptics-pt30x-sdi-ndi-cameras-authentication-bypass"},{"cve":"CVE-2024-8957","slug":"cve-2024-8957-ptzoptics-pt30x-sdi-ndi-cameras-os-command-injection-vulnerability","title":"PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-04T00:00:00+00:00","exploited_since":"2024-11-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-8957-ptzoptics-pt30x-sdi-ndi-cameras-os-command-injection-vulnerability"},{"cve":"CVE-2024-20481","slug":"cve-2024-20481-cisco-asa-and-ftd-denial-of-service-vulnerability","title":"Cisco ASA and FTD Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-24T00:00:00+00:00","exploited_since":"2024-10-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-20481-cisco-asa-and-ftd-denial-of-service-vulnerability"},{"cve":"CVE-2024-37383","slug":"cve-2024-37383-roundcube-webmail-cross-site-scripting-xss-vulnerability","title":"RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-24T00:00:00+00:00","exploited_since":"2024-10-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-37383-roundcube-webmail-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2024-47575","slug":"cve-2024-47575-fortinet-fortimanager-missing-authentication-vulnerability","title":"Fortinet FortiManager Missing Authentication Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-23T00:00:00+00:00","exploited_since":"2024-10-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-47575-fortinet-fortimanager-missing-authentication-vulnerability"},{"cve":"CVE-2024-38094","slug":"cve-2024-38094-microsoft-sharepoint-deserialization-vulnerability","title":"Microsoft SharePoint Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-22T00:00:00+00:00","exploited_since":"2024-10-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38094-microsoft-sharepoint-deserialization-vulnerability"},{"cve":"CVE-2024-9537","slug":"cve-2024-9537-sciencelogic-sl1-unspecified-vulnerability","title":"ScienceLogic SL1 Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-21T00:00:00+00:00","exploited_since":"2024-10-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-9537-sciencelogic-sl1-unspecified-vulnerability"},{"cve":"CVE-2024-40711","slug":"cve-2024-40711-veeam-backup-and-replication-deserialization-vulnerability","title":"Veeam Backup and Replication Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-17T00:00:00+00:00","exploited_since":"2024-10-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-40711-veeam-backup-and-replication-deserialization-vulnerability"},{"cve":"CVE-2024-28987","slug":"cve-2024-28987-solarwinds-web-help-desk-hardcoded-credential-vulnerability","title":"SolarWinds Web Help Desk Hardcoded Credential Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-15T00:00:00+00:00","exploited_since":"2024-10-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-28987-solarwinds-web-help-desk-hardcoded-credential-vulnerability"},{"cve":"CVE-2024-30088","slug":"cve-2024-30088-microsoft-windows-kernel-toctou-race-condition-vulnerability","title":"Microsoft Windows Kernel TOCTOU Race Condition Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-15T00:00:00+00:00","exploited_since":"2024-10-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-30088-microsoft-windows-kernel-toctou-race-condition-vulnerability"},{"cve":"CVE-2024-9680","slug":"cve-2024-9680-mozilla-firefox-use-after-free-vulnerability","title":"Mozilla Firefox Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-15T00:00:00+00:00","exploited_since":"2024-10-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-9680-mozilla-firefox-use-after-free-vulnerability"},{"cve":"CVE-2024-23113","slug":"cve-2024-23113-fortinet-multiple-products-format-string-vulnerability","title":"Fortinet Multiple Products Format String Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-09T00:00:00+00:00","exploited_since":"2024-10-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-23113-fortinet-multiple-products-format-string-vulnerability"},{"cve":"CVE-2024-9379","slug":"cve-2024-9379-ivanti-cloud-services-appliance-csa-sql-injection-vulnerability","title":"Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-09T00:00:00+00:00","exploited_since":"2024-10-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-9379-ivanti-cloud-services-appliance-csa-sql-injection-vulnerability"},{"cve":"CVE-2024-9380","slug":"cve-2024-9380-ivanti-cloud-services-appliance-csa-os-command-injection","title":"Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-09T00:00:00+00:00","exploited_since":"2024-10-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-9380-ivanti-cloud-services-appliance-csa-os-command-injection"},{"cve":"CVE-2024-43047","slug":"cve-2024-43047-qualcomm-multiple-chipsets-use-after-free-vulnerability","title":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-08T00:00:00+00:00","exploited_since":"2024-10-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-43047-qualcomm-multiple-chipsets-use-after-free-vulnerability"},{"cve":"CVE-2024-43572","slug":"cve-2024-43572-microsoft-windows-management-console-remote-code-execution","title":"Microsoft Windows Management Console Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-08T00:00:00+00:00","exploited_since":"2024-10-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-43572-microsoft-windows-management-console-remote-code-execution"},{"cve":"CVE-2024-43573","slug":"cve-2024-43573-microsoft-windows-mshtml-platform-spoofing-vulnerability","title":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-08T00:00:00+00:00","exploited_since":"2024-10-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-43573-microsoft-windows-mshtml-platform-spoofing-vulnerability"},{"cve":"CVE-2024-45519","slug":"cve-2024-45519-synacor-zimbra-collaboration-suite-zcs-command-execution","title":"Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-03T00:00:00+00:00","exploited_since":"2024-10-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-45519-synacor-zimbra-collaboration-suite-zcs-command-execution"},{"cve":"CVE-2024-29824","slug":"cve-2024-29824-ivanti-endpoint-manager-epm-sql-injection-vulnerability","title":"Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-02T00:00:00+00:00","exploited_since":"2024-10-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-29824-ivanti-endpoint-manager-epm-sql-injection-vulnerability"},{"cve":"CVE-2019-0344","slug":"cve-2019-0344-sap-commerce-cloud-deserialization-of-untrusted-data-vulnerability","title":"SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-30T00:00:00+00:00","exploited_since":"2024-09-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0344-sap-commerce-cloud-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2020-15415","slug":"cve-2020-15415-draytek-multiple-vigor-routers-os-command-injection-vulnerability","title":"DrayTek Multiple Vigor Routers OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-30T00:00:00+00:00","exploited_since":"2024-09-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-15415-draytek-multiple-vigor-routers-os-command-injection-vulnerability"},{"cve":"CVE-2023-25280","slug":"cve-2023-25280-d-link-dir-820-router-os-command-injection-vulnerability","title":"D-Link DIR-820 Router OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-30T00:00:00+00:00","exploited_since":"2024-09-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-25280-d-link-dir-820-router-os-command-injection-vulnerability"},{"cve":"CVE-2024-7593","slug":"cve-2024-7593-ivanti-virtual-traffic-manager-authentication-bypass-vulnerability","title":"Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-24T00:00:00+00:00","exploited_since":"2024-09-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-7593-ivanti-virtual-traffic-manager-authentication-bypass-vulnerability"},{"cve":"CVE-2024-8963","slug":"cve-2024-8963-ivanti-cloud-services-appliance-csa-path-traversal-vulnerability","title":"Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-19T00:00:00+00:00","exploited_since":"2024-09-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-8963-ivanti-cloud-services-appliance-csa-path-traversal-vulnerability"},{"cve":"CVE-2020-0618","slug":"cve-2020-0618-microsoft-sql-server-reporting-services-remote-code-execution","title":"Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-18T00:00:00+00:00","exploited_since":"2024-09-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0618-microsoft-sql-server-reporting-services-remote-code-execution"},{"cve":"CVE-2020-14644","slug":"cve-2020-14644-oracle-weblogic-server-remote-code-execution-vulnerability","title":"Oracle WebLogic Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-18T00:00:00+00:00","exploited_since":"2024-09-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-14644-oracle-weblogic-server-remote-code-execution-vulnerability"},{"cve":"CVE-2022-21445","slug":"cve-2022-21445-oracle-adf-faces-deserialization-of-untrusted-data-vulnerability","title":"Oracle ADF Faces Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-18T00:00:00+00:00","exploited_since":"2024-09-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-21445-oracle-adf-faces-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2024-27348","slug":"cve-2024-27348-apache-hugegraph-server-improper-access-control-vulnerability","title":"Apache HugeGraph-Server: Command execution in gremlin","severity":"critical","exploited":true,"published_at":"2024-04-22T15:30:41+00:00","exploited_since":"2024-09-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-27348-apache-hugegraph-server-improper-access-control-vulnerability"},{"cve":"CVE-2013-0643","slug":"cve-2013-0643-adobe-flash-player-incorrect-default-permissions-vulnerability","title":"Adobe Flash Player Incorrect Default Permissions Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-17T00:00:00+00:00","exploited_since":"2024-09-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-0643-adobe-flash-player-incorrect-default-permissions-vulnerability"},{"cve":"CVE-2013-0648","slug":"cve-2013-0648-adobe-flash-player-code-execution-vulnerability","title":"Adobe Flash Player Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-17T00:00:00+00:00","exploited_since":"2024-09-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-0648-adobe-flash-player-code-execution-vulnerability"},{"cve":"CVE-2014-0497","slug":"cve-2014-0497-adobe-flash-player-integer-underflow-vulnerablity","title":"Adobe Flash Player Integer Underflow Vulnerablity","severity":"critical","exploited":true,"published_at":"2024-09-17T00:00:00+00:00","exploited_since":"2024-09-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-0497-adobe-flash-player-integer-underflow-vulnerablity"},{"cve":"CVE-2014-0502","slug":"cve-2014-0502-adobe-flash-player-double-free-vulnerablity","title":"Adobe Flash Player Double Free Vulnerablity","severity":"critical","exploited":true,"published_at":"2024-09-17T00:00:00+00:00","exploited_since":"2024-09-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-0502-adobe-flash-player-double-free-vulnerablity"},{"cve":"CVE-2024-43461","slug":"cve-2024-43461-microsoft-windows-mshtml-platform-spoofing-vulnerability","title":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-16T00:00:00+00:00","exploited_since":"2024-09-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-43461-microsoft-windows-mshtml-platform-spoofing-vulnerability"},{"cve":"CVE-2024-6670","slug":"cve-2024-6670-progress-whatsup-gold-sql-injection-vulnerability","title":"Progress WhatsUp Gold SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-16T00:00:00+00:00","exploited_since":"2024-09-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-6670-progress-whatsup-gold-sql-injection-vulnerability"},{"cve":"CVE-2024-8190","slug":"cve-2024-8190-ivanti-cloud-services-appliance-os-command-injection-vulnerability","title":"Ivanti Cloud Services Appliance OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-13T00:00:00+00:00","exploited_since":"2024-09-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-8190-ivanti-cloud-services-appliance-os-command-injection-vulnerability"},{"cve":"CVE-2024-38014","slug":"cve-2024-38014-microsoft-windows-installer-improper-privilege-management","title":"Microsoft Windows Installer Improper Privilege Management Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-10T00:00:00+00:00","exploited_since":"2024-09-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38014-microsoft-windows-installer-improper-privilege-management"},{"cve":"CVE-2024-38217","slug":"cve-2024-38217-microsoft-windows-mark-of-the-web-motw-protection-mechanism","title":"Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-10T00:00:00+00:00","exploited_since":"2024-09-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38217-microsoft-windows-mark-of-the-web-motw-protection-mechanism"},{"cve":"CVE-2024-38226","slug":"cve-2024-38226-microsoft-publisher-protection-mechanism-failure-vulnerability","title":"Microsoft Publisher Protection Mechanism Failure Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-10T00:00:00+00:00","exploited_since":"2024-09-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38226-microsoft-publisher-protection-mechanism-failure-vulnerability"},{"cve":"CVE-2016-3714","slug":"cve-2016-3714-imagemagick-improper-input-validation-vulnerability","title":"ImageMagick Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-09T00:00:00+00:00","exploited_since":"2024-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3714-imagemagick-improper-input-validation-vulnerability"},{"cve":"CVE-2017-1000253","slug":"cve-2017-1000253-linux-kernel-pie-stack-buffer-corruption-vulnerability","title":"Linux Kernel PIE Stack Buffer Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-09T00:00:00+00:00","exploited_since":"2024-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-1000253-linux-kernel-pie-stack-buffer-corruption-vulnerability"},{"cve":"CVE-2024-40766","slug":"cve-2024-40766-sonicwall-sonicos-improper-access-control-vulnerability","title":"SonicWall SonicOS Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-09T00:00:00+00:00","exploited_since":"2024-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-40766-sonicwall-sonicos-improper-access-control-vulnerability"},{"cve":"CVE-2021-20123","slug":"cve-2021-20123-draytek-vigorconnect-path-traversal-vulnerability","title":"Draytek VigorConnect Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-03T00:00:00+00:00","exploited_since":"2024-09-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20123-draytek-vigorconnect-path-traversal-vulnerability"},{"cve":"CVE-2021-20124","slug":"cve-2021-20124-draytek-vigorconnect-path-traversal-vulnerability","title":"Draytek VigorConnect Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-03T00:00:00+00:00","exploited_since":"2024-09-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20124-draytek-vigorconnect-path-traversal-vulnerability"},{"cve":"CVE-2024-7262","slug":"cve-2024-7262-kingsoft-wps-office-path-traversal-vulnerability","title":"Kingsoft WPS Office Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-03T00:00:00+00:00","exploited_since":"2024-09-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-7262-kingsoft-wps-office-path-traversal-vulnerability"},{"cve":"CVE-2024-7965","slug":"cve-2024-7965-google-chromium-v8-inappropriate-implementation-vulnerability","title":"Google Chromium V8 Inappropriate Implementation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-28T00:00:00+00:00","exploited_since":"2024-08-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-7965-google-chromium-v8-inappropriate-implementation-vulnerability"},{"cve":"CVE-2024-38856","slug":"cve-2024-38856-apache-ofbiz-incorrect-authorization-vulnerability","title":"Apache OFBiz Incorrect Authorization Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-27T00:00:00+00:00","exploited_since":"2024-08-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38856-apache-ofbiz-incorrect-authorization-vulnerability"},{"cve":"CVE-2024-7971","slug":"cve-2024-7971-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-26T00:00:00+00:00","exploited_since":"2024-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-7971-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2024-39717","slug":"cve-2024-39717-versa-director-dangerous-file-type-upload-vulnerability","title":"Versa Director Dangerous File Type Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-23T00:00:00+00:00","exploited_since":"2024-08-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-39717-versa-director-dangerous-file-type-upload-vulnerability"},{"cve":"CVE-2021-31196","slug":"cve-2021-31196-microsoft-exchange-server-information-disclosure-vulnerability","title":"Microsoft Exchange Server Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-21T00:00:00+00:00","exploited_since":"2024-08-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-31196-microsoft-exchange-server-information-disclosure-vulnerability"},{"cve":"CVE-2021-33044","slug":"cve-2021-33044-dahua-ip-camera-authentication-bypass-vulnerability","title":"Dahua IP Camera Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-21T00:00:00+00:00","exploited_since":"2024-08-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-33044-dahua-ip-camera-authentication-bypass-vulnerability"},{"cve":"CVE-2021-33045","slug":"cve-2021-33045-dahua-ip-camera-authentication-bypass-vulnerability","title":"Dahua IP Camera Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-21T00:00:00+00:00","exploited_since":"2024-08-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-33045-dahua-ip-camera-authentication-bypass-vulnerability"},{"cve":"CVE-2022-0185","slug":"cve-2022-0185-linux-kernel-heap-based-buffer-overflow-vulnerability","title":"Linux Kernel Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-21T00:00:00+00:00","exploited_since":"2024-08-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-0185-linux-kernel-heap-based-buffer-overflow-vulnerability"},{"cve":"CVE-2024-23897","slug":"cve-2024-23897-jenkins-command-line-interface-cli-path-traversal-vulnerability","title":"Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE","severity":"critical","exploited":true,"published_at":"2024-01-24T18:31:02+00:00","exploited_since":"2024-08-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-23897-jenkins-command-line-interface-cli-path-traversal-vulnerability"},{"cve":"CVE-2024-28986","slug":"cve-2024-28986-solarwinds-web-help-desk-deserialization-of-untrusted-data","title":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-15T00:00:00+00:00","exploited_since":"2024-08-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-28986-solarwinds-web-help-desk-deserialization-of-untrusted-data"},{"cve":"CVE-2024-38106","slug":"cve-2024-38106-microsoft-windows-kernel-privilege-escalation-vulnerability","title":"Microsoft Windows Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-13T00:00:00+00:00","exploited_since":"2024-08-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38106-microsoft-windows-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2024-38107","slug":"cve-2024-38107-microsoft-windows-power-dependency-coordinator-privilege","title":"Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-13T00:00:00+00:00","exploited_since":"2024-08-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38107-microsoft-windows-power-dependency-coordinator-privilege"},{"cve":"CVE-2024-38178","slug":"cve-2024-38178-microsoft-windows-scripting-engine-memory-corruption","title":"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-13T00:00:00+00:00","exploited_since":"2024-08-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38178-microsoft-windows-scripting-engine-memory-corruption"},{"cve":"CVE-2024-38189","slug":"cve-2024-38189-microsoft-project-remote-code-execution-vulnerability","title":"Microsoft Project Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-13T00:00:00+00:00","exploited_since":"2024-08-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38189-microsoft-project-remote-code-execution-vulnerability"},{"cve":"CVE-2024-38193","slug":"cve-2024-38193-microsoft-windows-ancillary-function-driver-for-winsock-privilege","title":"Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-13T00:00:00+00:00","exploited_since":"2024-08-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38193-microsoft-windows-ancillary-function-driver-for-winsock-privilege"},{"cve":"CVE-2024-38213","slug":"cve-2024-38213-microsoft-windows-smartscreen-security-feature-bypass","title":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-13T00:00:00+00:00","exploited_since":"2024-08-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38213-microsoft-windows-smartscreen-security-feature-bypass"},{"cve":"CVE-2024-32113","slug":"cve-2024-32113-apache-ofbiz-path-traversal-vulnerability","title":"Apache OFBiz Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-07T00:00:00+00:00","exploited_since":"2024-08-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-32113-apache-ofbiz-path-traversal-vulnerability"},{"cve":"CVE-2024-36971","slug":"cve-2024-36971-android-kernel-remote-code-execution-vulnerability","title":"Android Kernel Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-07T00:00:00+00:00","exploited_since":"2024-08-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-36971-android-kernel-remote-code-execution-vulnerability"},{"cve":"CVE-2018-0824","slug":"cve-2018-0824-microsoft-com-for-windows-deserialization-of-untrusted-data","title":"Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-05T00:00:00+00:00","exploited_since":"2024-08-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0824-microsoft-com-for-windows-deserialization-of-untrusted-data"},{"cve":"CVE-2024-37085","slug":"cve-2024-37085-vmware-esxi-authentication-bypass-vulnerability","title":"VMware ESXi Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-30T00:00:00+00:00","exploited_since":"2024-07-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-37085-vmware-esxi-authentication-bypass-vulnerability"},{"cve":"CVE-2023-45249","slug":"cve-2023-45249-acronis-cyber-infrastructure-aci-insecure-default-password","title":"Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-29T00:00:00+00:00","exploited_since":"2024-07-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-45249-acronis-cyber-infrastructure-aci-insecure-default-password"},{"cve":"CVE-2024-4879","slug":"cve-2024-4879-servicenow-improper-input-validation-vulnerability","title":"ServiceNow Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-29T00:00:00+00:00","exploited_since":"2024-07-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-4879-servicenow-improper-input-validation-vulnerability"},{"cve":"CVE-2024-5217","slug":"cve-2024-5217-servicenow-incomplete-list-of-disallowed-inputs-vulnerability","title":"ServiceNow Incomplete List of Disallowed Inputs Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-29T00:00:00+00:00","exploited_since":"2024-07-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-5217-servicenow-incomplete-list-of-disallowed-inputs-vulnerability"},{"cve":"CVE-2012-4792","slug":"cve-2012-4792-microsoft-internet-explorer-use-after-free-vulnerability","title":"Microsoft Internet Explorer Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-23T00:00:00+00:00","exploited_since":"2024-07-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-4792-microsoft-internet-explorer-use-after-free-vulnerability"},{"cve":"CVE-2024-39891","slug":"cve-2024-39891-twilio-authy-information-disclosure-vulnerability","title":"Twilio Authy Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-23T00:00:00+00:00","exploited_since":"2024-07-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-39891-twilio-authy-information-disclosure-vulnerability"},{"cve":"CVE-2022-22948","slug":"cve-2022-22948-vmware-vcenter-server-incorrect-default-file-permissions","title":"VMware vCenter Server Incorrect Default File Permissions Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-17T00:00:00+00:00","exploited_since":"2024-07-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22948-vmware-vcenter-server-incorrect-default-file-permissions"},{"cve":"CVE-2024-28995","slug":"cve-2024-28995-solarwinds-serv-u-path-traversal-vulnerability","title":"SolarWinds Serv-U Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-17T00:00:00+00:00","exploited_since":"2024-07-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-28995-solarwinds-serv-u-path-traversal-vulnerability"},{"cve":"CVE-2024-34102","slug":"cve-2024-34102-adobe-commerce-and-magento-open-source-improper-restriction-of","title":"Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability","severity":"critical","exploited":true,"published_at":"2024-06-13T09:31:00+00:00","exploited_since":"2024-07-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-34102-adobe-commerce-and-magento-open-source-improper-restriction-of"},{"cve":"CVE-2024-36401","slug":"cve-2024-36401-osgeo-geoserver-geotools-eval-injection-vulnerability","title":"Remote Code Execution (RCE) vulnerability in geoserver","severity":"critical","exploited":true,"published_at":"2024-07-01T20:34:50+00:00","exploited_since":"2024-07-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-36401-osgeo-geoserver-geotools-eval-injection-vulnerability"},{"cve":"CVE-2024-23692","slug":"cve-2024-23692-rejetto-http-file-server-improper-neutralization-of-special","title":"Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-09T00:00:00+00:00","exploited_since":"2024-07-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-23692-rejetto-http-file-server-improper-neutralization-of-special"},{"cve":"CVE-2024-38080","slug":"cve-2024-38080-microsoft-windows-hyper-v-privilege-escalation-vulnerability","title":"Microsoft Windows Hyper-V Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-09T00:00:00+00:00","exploited_since":"2024-07-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38080-microsoft-windows-hyper-v-privilege-escalation-vulnerability"},{"cve":"CVE-2024-38112","slug":"cve-2024-38112-microsoft-windows-mshtml-platform-spoofing-vulnerability","title":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-09T00:00:00+00:00","exploited_since":"2024-07-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-38112-microsoft-windows-mshtml-platform-spoofing-vulnerability"},{"cve":"CVE-2024-20399","slug":"cve-2024-20399-cisco-nx-os-command-injection-vulnerability","title":"Cisco NX-OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-02T00:00:00+00:00","exploited_since":"2024-07-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-20399-cisco-nx-os-command-injection-vulnerability"},{"cve":"CVE-2020-13965","slug":"cve-2020-13965-roundcube-webmail-cross-site-scripting-xss-vulnerability","title":"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2024-06-26T00:00:00+00:00","exploited_since":"2024-06-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-13965-roundcube-webmail-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2022-2586","slug":"cve-2022-2586-linux-kernel-use-after-free-vulnerability","title":"Linux Kernel Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2024-06-26T00:00:00+00:00","exploited_since":"2024-06-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-2586-linux-kernel-use-after-free-vulnerability"},{"cve":"CVE-2022-24816","slug":"cve-2022-24816-osgeo-geoserver-jai-ext-code-injection-vulnerability","title":"Improper Control of Generation of Code ('Code Injection') in jai-ext","severity":"critical","exploited":true,"published_at":"2023-09-19T20:35:16+00:00","exploited_since":"2024-06-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-24816-osgeo-geoserver-jai-ext-code-injection-vulnerability"},{"cve":"CVE-2024-26169","slug":"cve-2024-26169-microsoft-windows-error-reporting-service-improper-privilege","title":"Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","severity":"critical","exploited":true,"published_at":"2024-06-13T00:00:00+00:00","exploited_since":"2024-06-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-26169-microsoft-windows-error-reporting-service-improper-privilege"},{"cve":"CVE-2024-32896","slug":"cve-2024-32896-android-pixel-privilege-escalation-vulnerability","title":"Android Pixel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-06-13T00:00:00+00:00","exploited_since":"2024-06-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-32896-android-pixel-privilege-escalation-vulnerability"},{"cve":"CVE-2024-4358","slug":"cve-2024-4358-progress-telerik-report-server-authentication-bypass-by-spoofing","title":"Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability","severity":"critical","exploited":true,"published_at":"2024-06-13T00:00:00+00:00","exploited_since":"2024-06-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-4358-progress-telerik-report-server-authentication-bypass-by-spoofing"},{"cve":"CVE-2024-4577","slug":"cve-2024-4577-php-cgi-os-command-injection-vulnerability","title":"PHP-CGI OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-06-12T00:00:00+00:00","exploited_since":"2024-06-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-4577-php-cgi-os-command-injection-vulnerability"},{"cve":"CVE-2024-4610","slug":"cve-2024-4610-arm-mali-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2024-06-12T00:00:00+00:00","exploited_since":"2024-06-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-4610-arm-mali-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2017-3506","slug":"cve-2017-3506-oracle-weblogic-server-os-command-injection-vulnerability","title":"Oracle WebLogic Server OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-06-03T00:00:00+00:00","exploited_since":"2024-06-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-3506-oracle-weblogic-server-os-command-injection-vulnerability"},{"cve":"CVE-2024-1086","slug":"cve-2024-1086-linux-kernel-use-after-free-vulnerability","title":"Linux Kernel Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-30T00:00:00+00:00","exploited_since":"2024-05-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-1086-linux-kernel-use-after-free-vulnerability"},{"cve":"CVE-2024-24919","slug":"cve-2024-24919-check-point-quantum-security-gateways-information-disclosure","title":"Check Point Quantum Security Gateways Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-30T00:00:00+00:00","exploited_since":"2024-05-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-24919-check-point-quantum-security-gateways-information-disclosure"},{"cve":"CVE-2024-4978","slug":"cve-2024-4978-justice-av-solutions-javs-viewer-installer-embedded-malicious-code","title":"Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-29T00:00:00+00:00","exploited_since":"2024-05-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-4978-justice-av-solutions-javs-viewer-installer-embedded-malicious-code"},{"cve":"CVE-2024-5274","slug":"cve-2024-5274-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-28T00:00:00+00:00","exploited_since":"2024-05-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-5274-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2020-17519","slug":"cve-2020-17519-apache-flink-improper-access-control-vulnerability","title":"Path Traversal in Apache Flink","severity":"critical","exploited":true,"published_at":"2021-01-06T20:01:34+00:00","exploited_since":"2024-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-17519-apache-flink-improper-access-control-vulnerability"},{"cve":"CVE-2023-43208","slug":"cve-2023-43208-nextgen-healthcare-mirth-connect-deserialization-of-untrusted","title":"NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-20T00:00:00+00:00","exploited_since":"2024-05-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-43208-nextgen-healthcare-mirth-connect-deserialization-of-untrusted"},{"cve":"CVE-2024-4947","slug":"cve-2024-4947-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-20T00:00:00+00:00","exploited_since":"2024-05-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-4947-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2014-100005","slug":"cve-2014-100005-d-link-dir-600-router-cross-site-request-forgery-csrf","title":"D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-16T00:00:00+00:00","exploited_since":"2024-05-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-100005-d-link-dir-600-router-cross-site-request-forgery-csrf"},{"cve":"CVE-2021-40655","slug":"cve-2021-40655-d-link-dir-605-router-information-disclosure-vulnerability","title":"D-Link DIR-605 Router Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-16T00:00:00+00:00","exploited_since":"2024-05-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-40655-d-link-dir-605-router-information-disclosure-vulnerability"},{"cve":"CVE-2024-4761","slug":"cve-2024-4761-google-chromium-v8-out-of-bounds-memory-write-vulnerability","title":"Google Chromium V8 Out-of-Bounds Memory Write Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-16T00:00:00+00:00","exploited_since":"2024-05-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-4761-google-chromium-v8-out-of-bounds-memory-write-vulnerability"},{"cve":"CVE-2024-30040","slug":"cve-2024-30040-microsoft-windows-mshtml-platform-security-feature-bypass","title":"Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-14T00:00:00+00:00","exploited_since":"2024-05-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-30040-microsoft-windows-mshtml-platform-security-feature-bypass"},{"cve":"CVE-2024-30051","slug":"cve-2024-30051-microsoft-dwm-core-library-privilege-escalation-vulnerability","title":"Microsoft DWM Core Library Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-14T00:00:00+00:00","exploited_since":"2024-05-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-30051-microsoft-dwm-core-library-privilege-escalation-vulnerability"},{"cve":"CVE-2024-4671","slug":"cve-2024-4671-google-chromium-visuals-use-after-free-vulnerability","title":"Google Chromium Visuals Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-13T00:00:00+00:00","exploited_since":"2024-05-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-4671-google-chromium-visuals-use-after-free-vulnerability"},{"cve":"CVE-2023-7028","slug":"cve-2023-7028-gitlab-community-and-enterprise-editions-improper-access-control","title":"GitLab Community and Enterprise Editions Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-01T00:00:00+00:00","exploited_since":"2024-05-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-7028-gitlab-community-and-enterprise-editions-improper-access-control"},{"cve":"CVE-2024-29988","slug":"cve-2024-29988-microsoft-smartscreen-prompt-security-feature-bypass","title":"Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-04-30T00:00:00+00:00","exploited_since":"2024-04-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-29988-microsoft-smartscreen-prompt-security-feature-bypass"},{"cve":"CVE-2024-20353","slug":"cve-2024-20353-cisco-asa-and-ftd-denial-of-service-vulnerability","title":"Cisco ASA and FTD Denial of Service Vulnerability","severity":"critical","exploited":true,"published_at":"2024-04-24T00:00:00+00:00","exploited_since":"2024-04-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-20353-cisco-asa-and-ftd-denial-of-service-vulnerability"},{"cve":"CVE-2024-20359","slug":"cve-2024-20359-cisco-asa-and-ftd-privilege-escalation-vulnerability","title":"Cisco ASA and FTD Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-04-24T00:00:00+00:00","exploited_since":"2024-04-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-20359-cisco-asa-and-ftd-privilege-escalation-vulnerability"},{"cve":"CVE-2024-4040","slug":"cve-2024-4040-crushftp-vfs-sandbox-escape-vulnerability","title":"CrushFTP VFS Sandbox Escape Vulnerability","severity":"critical","exploited":true,"published_at":"2024-04-24T00:00:00+00:00","exploited_since":"2024-04-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-4040-crushftp-vfs-sandbox-escape-vulnerability"},{"cve":"CVE-2022-38028","slug":"cve-2022-38028-microsoft-windows-print-spooler-privilege-escalation","title":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-04-23T00:00:00+00:00","exploited_since":"2024-04-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-38028-microsoft-windows-print-spooler-privilege-escalation"},{"cve":"CVE-2024-3400","slug":"cve-2024-3400-palo-alto-networks-pan-os-command-injection-vulnerability","title":"Palo Alto Networks PAN-OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-04-12T00:00:00+00:00","exploited_since":"2024-04-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-3400-palo-alto-networks-pan-os-command-injection-vulnerability"},{"cve":"CVE-2024-3272","slug":"cve-2024-3272-d-link-multiple-nas-devices-use-of-hard-coded-credentials","title":"D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability","severity":"critical","exploited":true,"published_at":"2024-04-11T00:00:00+00:00","exploited_since":"2024-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-3272-d-link-multiple-nas-devices-use-of-hard-coded-credentials"},{"cve":"CVE-2024-3273","slug":"cve-2024-3273-d-link-multiple-nas-devices-command-injection-vulnerability","title":"D-Link Multiple NAS Devices Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-04-11T00:00:00+00:00","exploited_since":"2024-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-3273-d-link-multiple-nas-devices-command-injection-vulnerability"},{"cve":"CVE-2024-29745","slug":"cve-2024-29745-android-pixel-information-disclosure-vulnerability","title":"Android Pixel Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2024-04-04T00:00:00+00:00","exploited_since":"2024-04-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-29745-android-pixel-information-disclosure-vulnerability"},{"cve":"CVE-2024-29748","slug":"cve-2024-29748-android-pixel-privilege-escalation-vulnerability","title":"Android Pixel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-04-04T00:00:00+00:00","exploited_since":"2024-04-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-29748-android-pixel-privilege-escalation-vulnerability"},{"cve":"CVE-2023-24955","slug":"cve-2023-24955-microsoft-sharepoint-server-code-injection-vulnerability","title":"Microsoft SharePoint Server Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-03-26T00:00:00+00:00","exploited_since":"2024-03-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-24955-microsoft-sharepoint-server-code-injection-vulnerability"},{"cve":"CVE-2019-7256","slug":"cve-2019-7256-nice-linear-emerge-e3-series-os-command-injection-vulnerability","title":"Nice Linear eMerge E3-Series OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-03-25T00:00:00+00:00","exploited_since":"2024-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-7256-nice-linear-emerge-e3-series-os-command-injection-vulnerability"},{"cve":"CVE-2021-44529","slug":"cve-2021-44529-ivanti-endpoint-manager-cloud-service-appliance-epm-csa-code","title":"Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-03-25T00:00:00+00:00","exploited_since":"2024-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-44529-ivanti-endpoint-manager-cloud-service-appliance-epm-csa-code"},{"cve":"CVE-2023-48788","slug":"cve-2023-48788-fortinet-forticlient-ems-sql-injection-vulnerability","title":"Fortinet FortiClient EMS SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-03-25T00:00:00+00:00","exploited_since":"2024-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-48788-fortinet-forticlient-ems-sql-injection-vulnerability"},{"cve":"CVE-2024-27198","slug":"cve-2024-27198-jetbrains-teamcity-authentication-bypass-vulnerability","title":"JetBrains TeamCity Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-03-07T00:00:00+00:00","exploited_since":"2024-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-27198-jetbrains-teamcity-authentication-bypass-vulnerability"},{"cve":"CVE-2024-23225","slug":"cve-2024-23225-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2024-03-06T00:00:00+00:00","exploited_since":"2024-03-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-23225-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2024-23296","slug":"cve-2024-23296-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2024-03-06T00:00:00+00:00","exploited_since":"2024-03-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-23296-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2021-36380","slug":"cve-2021-36380-sunhillo-sureline-os-command-injection-vulnerablity","title":"Sunhillo SureLine OS Command Injection Vulnerablity","severity":"critical","exploited":true,"published_at":"2024-03-05T00:00:00+00:00","exploited_since":"2024-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-36380-sunhillo-sureline-os-command-injection-vulnerablity"},{"cve":"CVE-2023-21237","slug":"cve-2023-21237-android-pixel-information-disclosure-vulnerability","title":"Android Pixel Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2024-03-05T00:00:00+00:00","exploited_since":"2024-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-21237-android-pixel-information-disclosure-vulnerability"},{"cve":"CVE-2024-21338","slug":"cve-2024-21338-microsoft-windows-kernel-exposed-ioctl-with-insufficient-access","title":"Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2024-03-04T00:00:00+00:00","exploited_since":"2024-03-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-21338-microsoft-windows-kernel-exposed-ioctl-with-insufficient-access"},{"cve":"CVE-2023-29360","slug":"cve-2023-29360-microsoft-streaming-service-untrusted-pointer-dereference","title":"Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability","severity":"critical","exploited":true,"published_at":"2024-02-29T00:00:00+00:00","exploited_since":"2024-02-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-29360-microsoft-streaming-service-untrusted-pointer-dereference"},{"cve":"CVE-2024-1709","slug":"cve-2024-1709-connectwise-screenconnect-authentication-bypass-vulnerability","title":"ConnectWise ScreenConnect Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-02-22T00:00:00+00:00","exploited_since":"2024-02-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-1709-connectwise-screenconnect-authentication-bypass-vulnerability"},{"cve":"CVE-2020-3259","slug":"cve-2020-3259-cisco-asa-and-ftd-information-disclosure-vulnerability","title":"SafePay ransomware campaign","severity":"critical","exploited":true,"published_at":"2024-02-15T00:00:00+00:00","exploited_since":"2024-02-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-3259-cisco-asa-and-ftd-information-disclosure-vulnerability"},{"cve":"CVE-2024-21410","slug":"cve-2024-21410-microsoft-exchange-server-privilege-escalation-vulnerability","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-02-15T00:00:00+00:00","exploited_since":"2024-02-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-21410-microsoft-exchange-server-privilege-escalation-vulnerability"},{"cve":"CVE-2024-21351","slug":"cve-2024-21351-microsoft-windows-smartscreen-security-feature-bypass","title":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-02-13T00:00:00+00:00","exploited_since":"2024-02-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-21351-microsoft-windows-smartscreen-security-feature-bypass"},{"cve":"CVE-2024-21412","slug":"cve-2024-21412-microsoft-windows-internet-shortcut-files-security-feature-bypass","title":"Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-02-13T00:00:00+00:00","exploited_since":"2024-02-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-21412-microsoft-windows-internet-shortcut-files-security-feature-bypass"},{"cve":"CVE-2023-43770","slug":"cve-2023-43770-roundcube-webmail-persistent-cross-site-scripting-xss","title":"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2024-02-12T00:00:00+00:00","exploited_since":"2024-02-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-43770-roundcube-webmail-persistent-cross-site-scripting-xss"},{"cve":"CVE-2024-21762","slug":"cve-2024-21762-fortinet-fortios-out-of-bound-write-vulnerability","title":"Fortinet FortiOS Out-of-Bound Write Vulnerability","severity":"critical","exploited":true,"published_at":"2024-02-09T00:00:00+00:00","exploited_since":"2024-02-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-21762-fortinet-fortios-out-of-bound-write-vulnerability"},{"cve":"CVE-2023-4762","slug":"cve-2023-4762-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2024-02-06T00:00:00+00:00","exploited_since":"2024-02-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-4762-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2022-48618","slug":"cve-2022-48618-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-31T00:00:00+00:00","exploited_since":"2024-01-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-48618-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2024-21893","slug":"cve-2024-21893-ivanti-connect-secure-policy-secure-and-neurons-server-side","title":"Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-31T00:00:00+00:00","exploited_since":"2024-01-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-21893-ivanti-connect-secure-policy-secure-and-neurons-server-side"},{"cve":"CVE-2023-22527","slug":"cve-2023-22527-atlassian-confluence-data-center-and-server-template-injection","title":"Atlassian Confluence Data Center and Server Template Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-24T00:00:00+00:00","exploited_since":"2024-01-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-22527-atlassian-confluence-data-center-and-server-template-injection"},{"cve":"CVE-2024-23222","slug":"cve-2024-23222-apple-multiple-products-webkit-type-confusion-vulnerability","title":"Apple Multiple Products WebKit Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-23T00:00:00+00:00","exploited_since":"2024-01-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-23222-apple-multiple-products-webkit-type-confusion-vulnerability"},{"cve":"CVE-2023-34048","slug":"cve-2023-34048-vmware-vcenter-server-out-of-bounds-write-vulnerability","title":"VMware vCenter Server Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-22T00:00:00+00:00","exploited_since":"2024-01-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-34048-vmware-vcenter-server-out-of-bounds-write-vulnerability"},{"cve":"CVE-2023-35082","slug":"cve-2023-35082-ivanti-endpoint-manager-mobile-epmm-and-mobileiron-core","title":"Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-18T00:00:00+00:00","exploited_since":"2024-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-35082-ivanti-endpoint-manager-mobile-epmm-and-mobileiron-core"},{"cve":"CVE-2023-6549","slug":"cve-2023-6549-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow","title":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-17T00:00:00+00:00","exploited_since":"2024-01-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-6549-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow"},{"cve":"CVE-2024-0519","slug":"cve-2024-0519-google-chromium-v8-out-of-bounds-memory-access-vulnerability","title":"Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-17T00:00:00+00:00","exploited_since":"2024-01-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-0519-google-chromium-v8-out-of-bounds-memory-access-vulnerability"},{"cve":"CVE-2023-6548","slug":"cve-2023-6548-citrix-netscaler-adc-and-netscaler-gateway-code-injection","title":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-17T00:00:00+00:00","exploited_since":"2024-01-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-6548-citrix-netscaler-adc-and-netscaler-gateway-code-injection"},{"cve":"CVE-2018-15133","slug":"cve-2018-15133-laravel-deserialization-of-untrusted-data-vulnerability","title":"Laravel Framework RCE Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-14T00:56:30+00:00","exploited_since":"2024-01-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-15133-laravel-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2024-21887","slug":"cve-2024-21887-ivanti-connect-secure-and-policy-secure-command-injection","title":"Ivanti Connect Secure and Policy Secure Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-10T00:00:00+00:00","exploited_since":"2024-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-21887-ivanti-connect-secure-and-policy-secure-command-injection"},{"cve":"CVE-2023-29357","slug":"cve-2023-29357-microsoft-sharepoint-server-privilege-escalation-vulnerability","title":"Microsoft SharePoint Server Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-10T00:00:00+00:00","exploited_since":"2024-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-29357-microsoft-sharepoint-server-privilege-escalation-vulnerability"},{"cve":"CVE-2023-46805","slug":"cve-2023-46805-ivanti-connect-secure-and-policy-secure-authentication-bypass","title":"Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-10T00:00:00+00:00","exploited_since":"2024-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-46805-ivanti-connect-secure-and-policy-secure-authentication-bypass"},{"cve":"CVE-2023-27524","slug":"cve-2023-27524-apache-superset-insecure-default-initialization-of-resource","title":"PYSEC-2026-1161 - Apache superset missing check for default SECRET_KEY","severity":"critical","exploited":true,"published_at":"2026-07-07T11:45:18.61561+00:00","exploited_since":"2024-01-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-27524-apache-superset-insecure-default-initialization-of-resource"},{"cve":"CVE-2016-20017","slug":"cve-2016-20017-d-link-dsl-2750b-devices-command-injection-vulnerability","title":"D-Link DSL-2750B Devices Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-08T00:00:00+00:00","exploited_since":"2024-01-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-20017-d-link-dsl-2750b-devices-command-injection-vulnerability"},{"cve":"CVE-2023-23752","slug":"cve-2023-23752-joomla-improper-access-control-vulnerability","title":"Joomla! Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-08T00:00:00+00:00","exploited_since":"2024-01-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-23752-joomla-improper-access-control-vulnerability"},{"cve":"CVE-2023-29300","slug":"cve-2023-29300-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability","title":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-08T00:00:00+00:00","exploited_since":"2024-01-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-29300-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2023-38203","slug":"cve-2023-38203-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability","title":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-08T00:00:00+00:00","exploited_since":"2024-01-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-38203-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2023-41990","slug":"cve-2023-41990-apple-multiple-products-code-execution-vulnerability","title":"Apple Multiple Products Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-08T00:00:00+00:00","exploited_since":"2024-01-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-41990-apple-multiple-products-code-execution-vulnerability"},{"cve":"CVE-2023-7024","slug":"cve-2023-7024-google-chromium-webrtc-heap-buffer-overflow-vulnerability","title":"Google Chromium WebRTC Heap Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-02T00:00:00+00:00","exploited_since":"2024-01-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-7024-google-chromium-webrtc-heap-buffer-overflow-vulnerability"},{"cve":"CVE-2023-7101","slug":"cve-2023-7101-spreadsheet-parseexcel-remote-code-execution-vulnerability","title":"Spreadsheet::ParseExcel Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-02T00:00:00+00:00","exploited_since":"2024-01-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-7101-spreadsheet-parseexcel-remote-code-execution-vulnerability"},{"cve":"CVE-2023-47565","slug":"cve-2023-47565-qnap-viostor-nvr-os-command-injection-vulnerability","title":"QNAP VioStor NVR OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-12-21T00:00:00+00:00","exploited_since":"2023-12-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-47565-qnap-viostor-nvr-os-command-injection-vulnerability"},{"cve":"CVE-2023-49897","slug":"cve-2023-49897-fxc-ae1021-ae1021pe-os-command-injection-vulnerability","title":"FXC AE1021, AE1021PE OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-12-21T00:00:00+00:00","exploited_since":"2023-12-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-49897-fxc-ae1021-ae1021pe-os-command-injection-vulnerability"},{"cve":"CVE-2023-6448","slug":"cve-2023-6448-unitronics-vision-plc-and-hmi-insecure-default-password","title":"Unitronics Vision PLC and HMI Insecure Default Password Vulnerability","severity":"critical","exploited":true,"published_at":"2023-12-11T00:00:00+00:00","exploited_since":"2023-12-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-6448-unitronics-vision-plc-and-hmi-insecure-default-password"},{"cve":"CVE-2023-41265","slug":"cve-2023-41265-qlik-sense-http-tunneling-vulnerability","title":"Qlik Sense HTTP Tunneling Vulnerability","severity":"critical","exploited":true,"published_at":"2023-12-07T00:00:00+00:00","exploited_since":"2023-12-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-41265-qlik-sense-http-tunneling-vulnerability"},{"cve":"CVE-2023-41266","slug":"cve-2023-41266-qlik-sense-path-traversal-vulnerability","title":"Qlik Sense Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2023-12-07T00:00:00+00:00","exploited_since":"2023-12-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-41266-qlik-sense-path-traversal-vulnerability"},{"cve":"CVE-2022-22071","slug":"cve-2022-22071-qualcomm-multiple-chipsets-use-after-free-vulnerability","title":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-12-05T00:00:00+00:00","exploited_since":"2023-12-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22071-qualcomm-multiple-chipsets-use-after-free-vulnerability"},{"cve":"CVE-2023-33063","slug":"cve-2023-33063-qualcomm-multiple-chipsets-use-after-free-vulnerability","title":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-12-05T00:00:00+00:00","exploited_since":"2023-12-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-33063-qualcomm-multiple-chipsets-use-after-free-vulnerability"},{"cve":"CVE-2023-33106","slug":"cve-2023-33106-qualcomm-multiple-chipsets-use-of-out-of-range-pointer-offset","title":"Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability","severity":"critical","exploited":true,"published_at":"2023-12-05T00:00:00+00:00","exploited_since":"2023-12-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-33106-qualcomm-multiple-chipsets-use-of-out-of-range-pointer-offset"},{"cve":"CVE-2023-33107","slug":"cve-2023-33107-qualcomm-multiple-chipsets-integer-overflow-vulnerability","title":"Qualcomm Multiple Chipsets Integer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-12-05T00:00:00+00:00","exploited_since":"2023-12-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-33107-qualcomm-multiple-chipsets-integer-overflow-vulnerability"},{"cve":"CVE-2023-42916","slug":"cve-2023-42916-apple-multiple-products-webkit-out-of-bounds-read-vulnerability","title":"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","severity":"critical","exploited":true,"published_at":"2023-12-04T00:00:00+00:00","exploited_since":"2023-12-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-42916-apple-multiple-products-webkit-out-of-bounds-read-vulnerability"},{"cve":"CVE-2023-42917","slug":"cve-2023-42917-apple-multiple-products-webkit-memory-corruption-vulnerability","title":"Apple Multiple Products WebKit Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2023-12-04T00:00:00+00:00","exploited_since":"2023-12-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-42917-apple-multiple-products-webkit-memory-corruption-vulnerability"},{"cve":"CVE-2023-49103","slug":"cve-2023-49103-owncloud-graphapi-information-disclosure-vulnerability","title":"ownCloud graphapi Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-30T00:00:00+00:00","exploited_since":"2023-11-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-49103-owncloud-graphapi-information-disclosure-vulnerability"},{"cve":"CVE-2023-6345","slug":"cve-2023-6345-google-skia-integer-overflow-vulnerability","title":"Google Skia Integer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-30T00:00:00+00:00","exploited_since":"2023-11-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-6345-google-skia-integer-overflow-vulnerability"},{"cve":"CVE-2023-4911","slug":"cve-2023-4911-gnu-c-library-buffer-overflow-vulnerability","title":"GNU C Library Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-03T18:15:10.463+00:00","exploited_since":"2023-11-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-4911-gnu-c-library-buffer-overflow-vulnerability"},{"cve":"CVE-2020-2551","slug":"cve-2020-2551-oracle-fusion-middleware-unspecified-vulnerability","title":"Oracle Fusion Middleware Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-16T00:00:00+00:00","exploited_since":"2023-11-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-2551-oracle-fusion-middleware-unspecified-vulnerability"},{"cve":"CVE-2023-1671","slug":"cve-2023-1671-sophos-web-appliance-command-injection-vulnerability","title":"Sophos Web Appliance Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-16T00:00:00+00:00","exploited_since":"2023-11-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-1671-sophos-web-appliance-command-injection-vulnerability"},{"cve":"CVE-2023-36584","slug":"cve-2023-36584-microsoft-windows-mark-of-the-web-motw-security-feature-bypass","title":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-16T00:00:00+00:00","exploited_since":"2023-11-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36584-microsoft-windows-mark-of-the-web-motw-security-feature-bypass"},{"cve":"CVE-2023-36025","slug":"cve-2023-36025-microsoft-windows-smartscreen-security-feature-bypass","title":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-14T00:00:00+00:00","exploited_since":"2023-11-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36025-microsoft-windows-smartscreen-security-feature-bypass"},{"cve":"CVE-2023-36033","slug":"cve-2023-36033-microsoft-windows-desktop-window-manager-dwm-core-library","title":"Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-14T00:00:00+00:00","exploited_since":"2023-11-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36033-microsoft-windows-desktop-window-manager-dwm-core-library"},{"cve":"CVE-2023-36036","slug":"cve-2023-36036-microsoft-windows-cloud-files-mini-filter-driver-privilege","title":"Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-14T00:00:00+00:00","exploited_since":"2023-11-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36036-microsoft-windows-cloud-files-mini-filter-driver-privilege"},{"cve":"CVE-2023-36844","slug":"cve-2023-36844-juniper-junos-os-ex-series-php-external-variable-modification","title":"Juniper Junos OS EX Series PHP External Variable Modification Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-13T00:00:00+00:00","exploited_since":"2023-11-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36844-juniper-junos-os-ex-series-php-external-variable-modification"},{"cve":"CVE-2023-36845","slug":"cve-2023-36845-juniper-junos-os-ex-series-and-srx-series-php-external-variable","title":"Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-13T00:00:00+00:00","exploited_since":"2023-11-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36845-juniper-junos-os-ex-series-and-srx-series-php-external-variable"},{"cve":"CVE-2023-36846","slug":"cve-2023-36846-juniper-junos-os-srx-series-missing-authentication-for-critical","title":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-13T00:00:00+00:00","exploited_since":"2023-11-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36846-juniper-junos-os-srx-series-missing-authentication-for-critical"},{"cve":"CVE-2023-36847","slug":"cve-2023-36847-juniper-junos-os-ex-series-missing-authentication-for-critical","title":"Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-13T00:00:00+00:00","exploited_since":"2023-11-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36847-juniper-junos-os-ex-series-missing-authentication-for-critical"},{"cve":"CVE-2023-36851","slug":"cve-2023-36851-juniper-junos-os-srx-series-missing-authentication-for-critical","title":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-13T00:00:00+00:00","exploited_since":"2023-11-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36851-juniper-junos-os-srx-series-missing-authentication-for-critical"},{"cve":"CVE-2023-47246","slug":"cve-2023-47246-sysaid-server-path-traversal-vulnerability","title":"SysAid Server Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-13T00:00:00+00:00","exploited_since":"2023-11-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-47246-sysaid-server-path-traversal-vulnerability"},{"cve":"CVE-2023-29552","slug":"cve-2023-29552-service-location-protocol-slp-denial-of-service-vulnerability","title":"Service Location Protocol (SLP) Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-08T00:00:00+00:00","exploited_since":"2023-11-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-29552-service-location-protocol-slp-denial-of-service-vulnerability"},{"cve":"CVE-2023-22518","slug":"cve-2023-22518-atlassian-confluence-data-center-and-server-improper","title":"Atlassian Confluence Data Center and Server Improper Authorization Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-07T00:00:00+00:00","exploited_since":"2023-11-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-22518-atlassian-confluence-data-center-and-server-improper"},{"cve":"CVE-2023-46604","slug":"cve-2023-46604-apache-activemq-deserialization-of-untrusted-data-vulnerability","title":"Armatura One multiple vulnerabilities in access control system","severity":"critical","exploited":true,"published_at":"2023-10-27T15:30:20+00:00","exploited_since":"2023-11-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-46604-apache-activemq-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2023-46747","slug":"cve-2023-46747-f5-big-ip-configuration-utility-authentication-bypass","title":"F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-31T00:00:00+00:00","exploited_since":"2023-10-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-46747-f5-big-ip-configuration-utility-authentication-bypass"},{"cve":"CVE-2023-46748","slug":"cve-2023-46748-f5-big-ip-configuration-utility-sql-injection-vulnerability","title":"F5 BIG-IP Configuration Utility SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-31T00:00:00+00:00","exploited_since":"2023-10-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-46748-f5-big-ip-configuration-utility-sql-injection-vulnerability"},{"cve":"CVE-2023-5631","slug":"cve-2023-5631-roundcube-webmail-persistent-cross-site-scripting-xss","title":"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-26T00:00:00+00:00","exploited_since":"2023-10-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-5631-roundcube-webmail-persistent-cross-site-scripting-xss"},{"cve":"CVE-2023-20273","slug":"cve-2023-20273-cisco-ios-xe-web-ui-command-injection-vulnerability","title":"Cisco IOS XE Web UI Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-23T00:00:00+00:00","exploited_since":"2023-10-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-20273-cisco-ios-xe-web-ui-command-injection-vulnerability"},{"cve":"CVE-2023-4966","slug":"cve-2023-4966-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow","title":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-18T00:00:00+00:00","exploited_since":"2023-10-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-4966-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow"},{"cve":"CVE-2023-20198","slug":"cve-2023-20198-cisco-ios-xe-web-ui-privilege-escalation-vulnerability","title":"Cisco IOS XE Web UI Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-16T00:00:00+00:00","exploited_since":"2023-10-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-20198-cisco-ios-xe-web-ui-privilege-escalation-vulnerability"},{"cve":"CVE-2023-44487","slug":"cve-2023-44487-http-2-rapid-reset-attack-vulnerability","title":"Multiple Vendors HTTP/2 denial of service via Rapid Reset attack","severity":"critical","exploited":true,"published_at":"2023-10-10T21:28:24+00:00","exploited_since":"2023-10-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-44487-http-2-rapid-reset-attack-vulnerability"},{"cve":"CVE-2023-20109","slug":"cve-2023-20109-cisco-ios-and-ios-xe-group-encrypted-transport-vpn-out-of-bounds","title":"Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-10T00:00:00+00:00","exploited_since":"2023-10-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-20109-cisco-ios-and-ios-xe-group-encrypted-transport-vpn-out-of-bounds"},{"cve":"CVE-2023-21608","slug":"cve-2023-21608-adobe-acrobat-and-reader-use-after-free-vulnerability","title":"Adobe Acrobat and Reader Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-10T00:00:00+00:00","exploited_since":"2023-10-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-21608-adobe-acrobat-and-reader-use-after-free-vulnerability"},{"cve":"CVE-2023-36563","slug":"cve-2023-36563-microsoft-wordpad-information-disclosure-vulnerability","title":"Microsoft WordPad Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-10T00:00:00+00:00","exploited_since":"2023-10-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36563-microsoft-wordpad-information-disclosure-vulnerability"},{"cve":"CVE-2023-41763","slug":"cve-2023-41763-microsoft-skype-for-business-privilege-escalation-vulnerability","title":"Microsoft Skype for Business Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-10T00:00:00+00:00","exploited_since":"2023-10-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-41763-microsoft-skype-for-business-privilege-escalation-vulnerability"},{"cve":"CVE-2023-22515","slug":"cve-2023-22515-atlassian-confluence-data-center-and-server-broken-access-control","title":"Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-05T00:00:00+00:00","exploited_since":"2023-10-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-22515-atlassian-confluence-data-center-and-server-broken-access-control"},{"cve":"CVE-2023-40044","slug":"cve-2023-40044-progress-ws-ftp-server-deserialization-of-untrusted-data","title":"Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-05T00:00:00+00:00","exploited_since":"2023-10-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-40044-progress-ws-ftp-server-deserialization-of-untrusted-data"},{"cve":"CVE-2023-42824","slug":"cve-2023-42824-apple-ios-and-ipados-kernel-privilege-escalation-vulnerability","title":"Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-05T00:00:00+00:00","exploited_since":"2023-10-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-42824-apple-ios-and-ipados-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2023-28229","slug":"cve-2023-28229-microsoft-windows-cng-key-isolation-service-privilege-escalation","title":"Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-04T00:00:00+00:00","exploited_since":"2023-10-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-28229-microsoft-windows-cng-key-isolation-service-privilege-escalation"},{"cve":"CVE-2023-42793","slug":"cve-2023-42793-jetbrains-teamcity-authentication-bypass-vulnerability","title":"JetBrains TeamCity Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-04T00:00:00+00:00","exploited_since":"2023-10-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-42793-jetbrains-teamcity-authentication-bypass-vulnerability"},{"cve":"CVE-2023-4211","slug":"cve-2023-4211-arm-mali-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-03T00:00:00+00:00","exploited_since":"2023-10-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-4211-arm-mali-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2023-5217","slug":"cve-2023-5217-google-chromium-libvpx-heap-buffer-overflow-vulnerability","title":"Electron heap buffer overflow in libvpx vp8 encoding","severity":"critical","exploited":true,"published_at":"2023-09-28T18:30:45+00:00","exploited_since":"2023-10-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-5217-google-chromium-libvpx-heap-buffer-overflow-vulnerability"},{"cve":"CVE-2018-14667","slug":"cve-2018-14667-red-hat-jboss-richfaces-framework-expression-language-injection","title":"Richfaces vulnerable to arbitrary code execution","severity":"critical","exploited":true,"published_at":"2022-05-13T01:17:53+00:00","exploited_since":"2023-09-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-14667-red-hat-jboss-richfaces-framework-expression-language-injection"},{"cve":"CVE-2023-41991","slug":"cve-2023-41991-apple-multiple-products-improper-certificate-validation","title":"Apple Multiple Products Improper Certificate Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-25T00:00:00+00:00","exploited_since":"2023-09-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-41991-apple-multiple-products-improper-certificate-validation"},{"cve":"CVE-2023-41992","slug":"cve-2023-41992-apple-multiple-products-kernel-privilege-escalation-vulnerability","title":"Apple Multiple Products Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-25T00:00:00+00:00","exploited_since":"2023-09-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-41992-apple-multiple-products-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2023-41993","slug":"cve-2023-41993-apple-multiple-products-webkit-code-execution-vulnerability","title":"Apple Multiple Products WebKit Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-25T00:00:00+00:00","exploited_since":"2023-09-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-41993-apple-multiple-products-webkit-code-execution-vulnerability"},{"cve":"CVE-2023-41179","slug":"cve-2023-41179-trend-micro-apex-one-and-worry-free-business-security-remote-code","title":"Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-21T00:00:00+00:00","exploited_since":"2023-09-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-41179-trend-micro-apex-one-and-worry-free-business-security-remote-code"},{"cve":"CVE-2023-28434","slug":"cve-2023-28434-minio-security-feature-bypass-vulnerability","title":"Privilege Escalation on Linux/MacOS","severity":"critical","exploited":true,"published_at":"2023-09-05T15:45:10+00:00","exploited_since":"2023-09-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-28434-minio-security-feature-bypass-vulnerability"},{"cve":"CVE-2014-8361","slug":"cve-2014-8361-realtek-sdk-improper-input-validation-vulnerability","title":"Realtek SDK Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-18T00:00:00+00:00","exploited_since":"2023-09-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-8361-realtek-sdk-improper-input-validation-vulnerability"},{"cve":"CVE-2017-6884","slug":"cve-2017-6884-zyxel-emg2926-routers-command-injection-vulnerability","title":"Zyxel EMG2926 Routers Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-18T00:00:00+00:00","exploited_since":"2023-09-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6884-zyxel-emg2926-routers-command-injection-vulnerability"},{"cve":"CVE-2022-22265","slug":"cve-2022-22265-samsung-mobile-devices-use-after-free-vulnerability","title":"Samsung Mobile Devices Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-18T00:00:00+00:00","exploited_since":"2023-09-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22265-samsung-mobile-devices-use-after-free-vulnerability"},{"cve":"CVE-2021-3129","slug":"cve-2021-3129-laravel-ignition-file-upload-vulnerability","title":"Unauthenticated remote code execution in Ignition","severity":"critical","exploited":true,"published_at":"2021-03-29T20:23:46+00:00","exploited_since":"2023-09-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-3129-laravel-ignition-file-upload-vulnerability"},{"cve":"CVE-2023-26369","slug":"cve-2023-26369-adobe-acrobat-and-reader-out-of-bounds-write-vulnerability","title":"Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-14T00:00:00+00:00","exploited_since":"2023-09-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-26369-adobe-acrobat-and-reader-out-of-bounds-write-vulnerability"},{"cve":"CVE-2023-20269","slug":"cve-2023-20269-cisco-adaptive-security-appliance-and-firepower-threat-defense","title":"Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-13T00:00:00+00:00","exploited_since":"2023-09-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-20269-cisco-adaptive-security-appliance-and-firepower-threat-defense"},{"cve":"CVE-2023-35674","slug":"cve-2023-35674-android-framework-privilege-escalation-vulnerability","title":"Android Framework Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-13T00:00:00+00:00","exploited_since":"2023-09-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-35674-android-framework-privilege-escalation-vulnerability"},{"cve":"CVE-2023-4863","slug":"cve-2023-4863-google-chromium-webp-heap-based-buffer-overflow-vulnerability","title":"RUSTSEC-2023-0060 - libwebp: OOB write in BuildHuffmanTable","severity":"critical","exploited":true,"published_at":"2023-09-12T12:00:00+00:00","exploited_since":"2023-09-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-4863-google-chromium-webp-heap-based-buffer-overflow-vulnerability"},{"cve":"CVE-2023-36802","slug":"cve-2023-36802-microsoft-streaming-service-proxy-privilege-escalation","title":"Microsoft Streaming Service Proxy Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-12T00:00:00+00:00","exploited_since":"2023-09-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36802-microsoft-streaming-service-proxy-privilege-escalation"},{"cve":"CVE-2023-36761","slug":"cve-2023-36761-microsoft-word-information-disclosure-vulnerability","title":"Microsoft Word Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-12T00:00:00+00:00","exploited_since":"2023-09-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36761-microsoft-word-information-disclosure-vulnerability"},{"cve":"CVE-2023-41061","slug":"cve-2023-41061-apple-ios-ipados-and-watchos-wallet-code-execution-vulnerability","title":"Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-11T00:00:00+00:00","exploited_since":"2023-09-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-41061-apple-ios-ipados-and-watchos-wallet-code-execution-vulnerability"},{"cve":"CVE-2023-41064","slug":"cve-2023-41064-apple-ios-ipados-and-macos-imageio-buffer-overflow-vulnerability","title":"Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-11T00:00:00+00:00","exploited_since":"2023-09-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-41064-apple-ios-ipados-and-macos-imageio-buffer-overflow-vulnerability"},{"cve":"CVE-2023-33246","slug":"cve-2023-33246-apache-rocketmq-command-execution-vulnerability","title":"Apache RocketMQ may have remote code execution vulnerability when using update configuration function","severity":"critical","exploited":true,"published_at":"2023-07-06T21:15:04+00:00","exploited_since":"2023-09-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-33246-apache-rocketmq-command-execution-vulnerability"},{"cve":"CVE-2023-38831","slug":"cve-2023-38831-rarlab-winrar-code-execution-vulnerability","title":"RARLAB WinRAR Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-08-24T00:00:00+00:00","exploited_since":"2023-08-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-38831-rarlab-winrar-code-execution-vulnerability"},{"cve":"CVE-2023-32315","slug":"cve-2023-32315-ignite-realtime-openfire-path-traversal-vulnerability","title":"Administration Console authentication bypass in openfire xmppserver","severity":"critical","exploited":true,"published_at":"2023-05-23T19:54:30+00:00","exploited_since":"2023-08-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-32315-ignite-realtime-openfire-path-traversal-vulnerability"},{"cve":"CVE-2023-38035","slug":"cve-2023-38035-ivanti-sentry-authentication-bypass-vulnerability","title":"Ivanti Sentry Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2023-08-22T00:00:00+00:00","exploited_since":"2023-08-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-38035-ivanti-sentry-authentication-bypass-vulnerability"},{"cve":"CVE-2023-27532","slug":"cve-2023-27532-veeam-backup-replication-cloud-connect-missing-authentication-for","title":"Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability","severity":"critical","exploited":true,"published_at":"2023-08-22T00:00:00+00:00","exploited_since":"2023-08-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-27532-veeam-backup-replication-cloud-connect-missing-authentication-for"},{"cve":"CVE-2023-26359","slug":"cve-2023-26359-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability","title":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2023-08-21T00:00:00+00:00","exploited_since":"2023-08-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-26359-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2023-24489","slug":"cve-2023-24489-citrix-content-collaboration-sharefile-improper-access-control","title":"Citrix Content Collaboration ShareFile Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2023-08-16T00:00:00+00:00","exploited_since":"2023-08-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-24489-citrix-content-collaboration-sharefile-improper-access-control"},{"cve":"CVE-2023-38180","slug":"cve-2023-38180-microsoft-net-core-and-visual-studio-denial-of-service","title":".NET Denial of Service Vulnerability","severity":"critical","exploited":true,"published_at":"2023-08-09T12:56:43+00:00","exploited_since":"2023-08-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-38180-microsoft-net-core-and-visual-studio-denial-of-service"},{"cve":"CVE-2017-18368","slug":"cve-2017-18368-zyxel-p660hn-t1a-routers-command-injection-vulnerability","title":"Zyxel P660HN-T1A Routers Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-08-07T00:00:00+00:00","exploited_since":"2023-08-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-18368-zyxel-p660hn-t1a-routers-command-injection-vulnerability"},{"cve":"CVE-2023-35081","slug":"cve-2023-35081-ivanti-endpoint-manager-mobile-epmm-path-traversal-vulnerability","title":"Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-31T00:00:00+00:00","exploited_since":"2023-07-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-35081-ivanti-endpoint-manager-mobile-epmm-path-traversal-vulnerability"},{"cve":"CVE-2023-37580","slug":"cve-2023-37580-synacor-zimbra-collaboration-suite-zcs-cross-site-scripting-xss","title":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-27T00:00:00+00:00","exploited_since":"2023-07-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-37580-synacor-zimbra-collaboration-suite-zcs-cross-site-scripting-xss"},{"cve":"CVE-2023-38606","slug":"cve-2023-38606-apple-multiple-products-kernel-unspecified-vulnerability","title":"Apple Multiple Products Kernel Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-26T00:00:00+00:00","exploited_since":"2023-07-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-38606-apple-multiple-products-kernel-unspecified-vulnerability"},{"cve":"CVE-2023-35078","slug":"cve-2023-35078-ivanti-endpoint-manager-mobile-authentication-bypass","title":"Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-25T00:00:00+00:00","exploited_since":"2023-07-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-35078-ivanti-endpoint-manager-mobile-authentication-bypass"},{"cve":"CVE-2023-29298","slug":"cve-2023-29298-adobe-coldfusion-improper-access-control-vulnerability","title":"Adobe ColdFusion Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-20T00:00:00+00:00","exploited_since":"2023-07-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-29298-adobe-coldfusion-improper-access-control-vulnerability"},{"cve":"CVE-2023-38205","slug":"cve-2023-38205-adobe-coldfusion-improper-access-control-vulnerability","title":"Adobe ColdFusion Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-20T00:00:00+00:00","exploited_since":"2023-07-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-38205-adobe-coldfusion-improper-access-control-vulnerability"},{"cve":"CVE-2023-3519","slug":"cve-2023-3519-citrix-netscaler-adc-and-netscaler-gateway-code-injection","title":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-19T00:00:00+00:00","exploited_since":"2023-07-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-3519-citrix-netscaler-adc-and-netscaler-gateway-code-injection"},{"cve":"CVE-2023-36884","slug":"cve-2023-36884-microsoft-windows-search-remote-code-execution-vulnerability","title":"Microsoft Windows Search Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-17T00:00:00+00:00","exploited_since":"2023-07-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36884-microsoft-windows-search-remote-code-execution-vulnerability"},{"cve":"CVE-2022-29303","slug":"cve-2022-29303-solarview-compact-command-injection-vulnerability","title":"SolarView Compact Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-13T00:00:00+00:00","exploited_since":"2023-07-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-29303-solarview-compact-command-injection-vulnerability"},{"cve":"CVE-2023-37450","slug":"cve-2023-37450-apple-multiple-products-webkit-code-execution-vulnerability","title":"Apple Multiple Products WebKit Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-13T00:00:00+00:00","exploited_since":"2023-07-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-37450-apple-multiple-products-webkit-code-execution-vulnerability"},{"cve":"CVE-2022-31199","slug":"cve-2022-31199-netwrix-auditor-insecure-object-deserialization-vulnerability","title":"Netwrix Auditor Insecure Object Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-11T00:00:00+00:00","exploited_since":"2023-07-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-31199-netwrix-auditor-insecure-object-deserialization-vulnerability"},{"cve":"CVE-2023-32046","slug":"cve-2023-32046-microsoft-windows-mshtml-platform-privilege-escalation","title":"Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-11T00:00:00+00:00","exploited_since":"2023-07-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-32046-microsoft-windows-mshtml-platform-privilege-escalation"},{"cve":"CVE-2023-32049","slug":"cve-2023-32049-microsoft-windows-defender-smartscreen-security-feature-bypass","title":"Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-11T00:00:00+00:00","exploited_since":"2023-07-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-32049-microsoft-windows-defender-smartscreen-security-feature-bypass"},{"cve":"CVE-2023-35311","slug":"cve-2023-35311-microsoft-outlook-security-feature-bypass-vulnerability","title":"Microsoft Outlook Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-11T00:00:00+00:00","exploited_since":"2023-07-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-35311-microsoft-outlook-security-feature-bypass-vulnerability"},{"cve":"CVE-2023-36874","slug":"cve-2023-36874-microsoft-windows-error-reporting-service-privilege-escalation","title":"Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-11T00:00:00+00:00","exploited_since":"2023-07-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36874-microsoft-windows-error-reporting-service-privilege-escalation"},{"cve":"CVE-2021-29256","slug":"cve-2021-29256-arm-mali-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-07T00:00:00+00:00","exploited_since":"2023-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-29256-arm-mali-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2019-17621","slug":"cve-2019-17621-d-link-dir-859-router-command-execution-vulnerability","title":"D-Link DIR-859 Router Command Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-29T00:00:00+00:00","exploited_since":"2023-06-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-17621-d-link-dir-859-router-command-execution-vulnerability"},{"cve":"CVE-2019-20500","slug":"cve-2019-20500-d-link-dwl-2600ap-access-point-command-injection-vulnerability","title":"D-Link DWL-2600AP Access Point Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-29T00:00:00+00:00","exploited_since":"2023-06-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-20500-d-link-dwl-2600ap-access-point-command-injection-vulnerability"},{"cve":"CVE-2021-25395","slug":"cve-2021-25395-samsung-mobile-devices-race-condition-vulnerability","title":"Samsung Mobile Devices Race Condition Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-29T00:00:00+00:00","exploited_since":"2023-06-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-25395-samsung-mobile-devices-race-condition-vulnerability"},{"cve":"CVE-2021-25371","slug":"cve-2021-25371-samsung-mobile-devices-unspecified-vulnerability","title":"Samsung Mobile Devices Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-29T00:00:00+00:00","exploited_since":"2023-06-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-25371-samsung-mobile-devices-unspecified-vulnerability"},{"cve":"CVE-2021-25372","slug":"cve-2021-25372-samsung-mobile-devices-improper-boundary-check-vulnerability","title":"Samsung Mobile Devices Improper Boundary Check Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-29T00:00:00+00:00","exploited_since":"2023-06-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-25372-samsung-mobile-devices-improper-boundary-check-vulnerability"},{"cve":"CVE-2021-25394","slug":"cve-2021-25394-samsung-mobile-devices-race-condition-vulnerability","title":"Samsung Mobile Devices Race Condition Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-29T00:00:00+00:00","exploited_since":"2023-06-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-25394-samsung-mobile-devices-race-condition-vulnerability"},{"cve":"CVE-2021-25487","slug":"cve-2021-25487-samsung-mobile-devices-out-of-bounds-read-vulnerability","title":"Samsung Mobile Devices Out-of-Bounds Read Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-29T00:00:00+00:00","exploited_since":"2023-06-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-25487-samsung-mobile-devices-out-of-bounds-read-vulnerability"},{"cve":"CVE-2021-25489","slug":"cve-2021-25489-samsung-mobile-devices-improper-input-validation-vulnerability","title":"Samsung Mobile Devices Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-29T00:00:00+00:00","exploited_since":"2023-06-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-25489-samsung-mobile-devices-improper-input-validation-vulnerability"},{"cve":"CVE-2023-20867","slug":"cve-2023-20867-vmware-tools-authentication-bypass-vulnerability","title":"VMware Tools Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-23T00:00:00+00:00","exploited_since":"2023-06-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-20867-vmware-tools-authentication-bypass-vulnerability"},{"cve":"CVE-2023-27992","slug":"cve-2023-27992-zyxel-multiple-nas-devices-command-injection-vulnerability","title":"Zyxel Multiple NAS Devices Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-23T00:00:00+00:00","exploited_since":"2023-06-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-27992-zyxel-multiple-nas-devices-command-injection-vulnerability"},{"cve":"CVE-2023-32434","slug":"cve-2023-32434-apple-multiple-products-integer-overflow-vulnerability","title":"Apple Multiple Products Integer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-23T00:00:00+00:00","exploited_since":"2023-06-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-32434-apple-multiple-products-integer-overflow-vulnerability"},{"cve":"CVE-2023-32435","slug":"cve-2023-32435-apple-multiple-products-webkit-memory-corruption-vulnerability","title":"Apple Multiple Products WebKit Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-23T00:00:00+00:00","exploited_since":"2023-06-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-32435-apple-multiple-products-webkit-memory-corruption-vulnerability"},{"cve":"CVE-2023-32439","slug":"cve-2023-32439-apple-multiple-products-webkit-type-confusion-vulnerability","title":"Apple Multiple Products WebKit Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-23T00:00:00+00:00","exploited_since":"2023-06-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-32439-apple-multiple-products-webkit-type-confusion-vulnerability"},{"cve":"CVE-2016-0165","slug":"cve-2016-0165-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-22T00:00:00+00:00","exploited_since":"2023-06-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-0165-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2016-9079","slug":"cve-2016-9079-mozilla-firefox-firefox-esr-and-thunderbird-use-after-free","title":"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-22T00:00:00+00:00","exploited_since":"2023-06-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-9079-mozilla-firefox-firefox-esr-and-thunderbird-use-after-free"},{"cve":"CVE-2020-12641","slug":"cve-2020-12641-roundcube-webmail-remote-code-execution-vulnerability","title":"Roundcube Webmail Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-22T00:00:00+00:00","exploited_since":"2023-06-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-12641-roundcube-webmail-remote-code-execution-vulnerability"},{"cve":"CVE-2020-35730","slug":"cve-2020-35730-roundcube-webmail-cross-site-scripting-xss-vulnerability","title":"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-22T00:00:00+00:00","exploited_since":"2023-06-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-35730-roundcube-webmail-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2021-44026","slug":"cve-2021-44026-roundcube-webmail-sql-injection-vulnerability","title":"Roundcube Webmail SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-22T00:00:00+00:00","exploited_since":"2023-06-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-44026-roundcube-webmail-sql-injection-vulnerability"},{"cve":"CVE-2023-20887","slug":"cve-2023-20887-vmware-aria-operations-for-networks-command-injection","title":"Vmware Aria Operations for Networks Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-22T00:00:00+00:00","exploited_since":"2023-06-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-20887-vmware-aria-operations-for-networks-command-injection"},{"cve":"CVE-2023-27997","slug":"cve-2023-27997-fortinet-fortios-and-fortiproxy-ssl-vpn-heap-based-buffer","title":"Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-13T00:00:00+00:00","exploited_since":"2023-06-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-27997-fortinet-fortios-and-fortiproxy-ssl-vpn-heap-based-buffer"},{"cve":"CVE-2023-3079","slug":"cve-2023-3079-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-07T00:00:00+00:00","exploited_since":"2023-06-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-3079-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2023-33009","slug":"cve-2023-33009-zyxel-multiple-firewalls-buffer-overflow-vulnerability","title":"Zyxel Multiple Firewalls Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-05T00:00:00+00:00","exploited_since":"2023-06-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-33009-zyxel-multiple-firewalls-buffer-overflow-vulnerability"},{"cve":"CVE-2023-33010","slug":"cve-2023-33010-zyxel-multiple-firewalls-buffer-overflow-vulnerability","title":"Zyxel Multiple Firewalls Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-05T00:00:00+00:00","exploited_since":"2023-06-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-33010-zyxel-multiple-firewalls-buffer-overflow-vulnerability"},{"cve":"CVE-2023-34362","slug":"cve-2023-34362-progress-moveit-transfer-sql-injection-vulnerability","title":"Progress MOVEit Transfer SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-02T00:00:00+00:00","exploited_since":"2023-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-34362-progress-moveit-transfer-sql-injection-vulnerability"},{"cve":"CVE-2023-28771","slug":"cve-2023-28771-zyxel-multiple-firewalls-os-command-injection-vulnerability","title":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-31T00:00:00+00:00","exploited_since":"2023-05-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-28771-zyxel-multiple-firewalls-os-command-injection-vulnerability"},{"cve":"CVE-2023-2868","slug":"cve-2023-2868-barracuda-networks-esg-appliance-improper-input-validation","title":"Barracuda Networks ESG Appliance Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-26T00:00:00+00:00","exploited_since":"2023-05-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-2868-barracuda-networks-esg-appliance-improper-input-validation"},{"cve":"CVE-2023-28204","slug":"cve-2023-28204-apple-multiple-products-webkit-out-of-bounds-read-vulnerability","title":"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-22T00:00:00+00:00","exploited_since":"2023-05-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-28204-apple-multiple-products-webkit-out-of-bounds-read-vulnerability"},{"cve":"CVE-2023-32373","slug":"cve-2023-32373-apple-multiple-products-webkit-use-after-free-vulnerability","title":"Apple Multiple Products WebKit Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-22T00:00:00+00:00","exploited_since":"2023-05-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-32373-apple-multiple-products-webkit-use-after-free-vulnerability"},{"cve":"CVE-2023-32409","slug":"cve-2023-32409-apple-multiple-products-webkit-sandbox-escape-vulnerability","title":"Apple Multiple Products WebKit Sandbox Escape Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-22T00:00:00+00:00","exploited_since":"2023-05-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-32409-apple-multiple-products-webkit-sandbox-escape-vulnerability"},{"cve":"CVE-2004-1464","slug":"cve-2004-1464-cisco-ios-denial-of-service-vulnerability","title":"Cisco IOS Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-19T00:00:00+00:00","exploited_since":"2023-05-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2004-1464-cisco-ios-denial-of-service-vulnerability"},{"cve":"CVE-2016-6415","slug":"cve-2016-6415-cisco-ios-ios-xr-and-ios-xe-ikev1-information-disclosure","title":"Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-19T00:00:00+00:00","exploited_since":"2023-05-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-6415-cisco-ios-ios-xr-and-ios-xe-ikev1-information-disclosure"},{"cve":"CVE-2023-21492","slug":"cve-2023-21492-samsung-mobile-devices-insertion-of-sensitive-information-into","title":"Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-19T00:00:00+00:00","exploited_since":"2023-05-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-21492-samsung-mobile-devices-insertion-of-sensitive-information-into"},{"cve":"CVE-2014-0196","slug":"cve-2014-0196-linux-kernel-race-condition-vulnerability","title":"Linux Kernel Race Condition Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-12T00:00:00+00:00","exploited_since":"2023-05-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-0196-linux-kernel-race-condition-vulnerability"},{"cve":"CVE-2010-3904","slug":"cve-2010-3904-linux-kernel-improper-input-validation-vulnerability","title":"Linux Kernel Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-12T00:00:00+00:00","exploited_since":"2023-05-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-3904-linux-kernel-improper-input-validation-vulnerability"},{"cve":"CVE-2016-3427","slug":"cve-2016-3427-oracle-java-se-and-jrockit-unspecified-vulnerability","title":"Oracle Java SE and JRockit Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-12T00:00:00+00:00","exploited_since":"2023-05-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3427-oracle-java-se-and-jrockit-unspecified-vulnerability"},{"cve":"CVE-2021-3560","slug":"cve-2021-3560-red-hat-polkit-incorrect-authorization-vulnerability","title":"Red Hat Polkit Incorrect Authorization Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-12T00:00:00+00:00","exploited_since":"2023-05-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-3560-red-hat-polkit-incorrect-authorization-vulnerability"},{"cve":"CVE-2023-25717","slug":"cve-2023-25717-multiple-ruckus-wireless-products-csrf-and-rce-vulnerability","title":"Multiple Ruckus Wireless Products CSRF and RCE Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-12T00:00:00+00:00","exploited_since":"2023-05-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-25717-multiple-ruckus-wireless-products-csrf-and-rce-vulnerability"},{"cve":"CVE-2015-5317","slug":"cve-2015-5317-jenkins-user-interface-ui-information-disclosure-vulnerability","title":"Jenkins discloses project names via fingerprints","severity":"critical","exploited":true,"published_at":"2022-05-13T01:30:06+00:00","exploited_since":"2023-05-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-5317-jenkins-user-interface-ui-information-disclosure-vulnerability"},{"cve":"CVE-2016-8735","slug":"cve-2016-8735-apache-tomcat-remote-code-execution-vulnerability","title":"Apache Tomcat Improper Access Control vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-13T01:14:52+00:00","exploited_since":"2023-05-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-8735-apache-tomcat-remote-code-execution-vulnerability"},{"cve":"CVE-2023-29336","slug":"cve-2023-29336-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32K Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-09T00:00:00+00:00","exploited_since":"2023-05-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-29336-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2023-1389","slug":"cve-2023-1389-tp-link-archer-ax-21-command-injection-vulnerability","title":"TP-Link Archer AX-21 Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-01T00:00:00+00:00","exploited_since":"2023-05-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-1389-tp-link-archer-ax-21-command-injection-vulnerability"},{"cve":"CVE-2023-21839","slug":"cve-2023-21839-oracle-weblogic-server-unspecified-vulnerability","title":"Oracle WebLogic Server Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-01T00:00:00+00:00","exploited_since":"2023-05-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-21839-oracle-weblogic-server-unspecified-vulnerability"},{"cve":"CVE-2021-45046","slug":"cve-2021-45046-apache-log4j2-deserialization-of-untrusted-data-vulnerability","title":"Incomplete fix for Apache Log4j vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-14T18:01:28+00:00","exploited_since":"2023-05-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-45046-apache-log4j2-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2023-28432","slug":"cve-2023-28432-minio-information-disclosure-vulnerability","title":"MinIO Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-21T00:00:00+00:00","exploited_since":"2023-04-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-28432-minio-information-disclosure-vulnerability"},{"cve":"CVE-2023-2136","slug":"cve-2023-2136-google-chrome-skia-integer-overflow-vulnerability","title":"Google Chrome Skia Integer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-21T00:00:00+00:00","exploited_since":"2023-04-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-2136-google-chrome-skia-integer-overflow-vulnerability"},{"cve":"CVE-2023-27350","slug":"cve-2023-27350-papercut-mf-ng-improper-access-control-vulnerability","title":"PaperCut MF/NG Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-21T00:00:00+00:00","exploited_since":"2023-04-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-27350-papercut-mf-ng-improper-access-control-vulnerability"},{"cve":"CVE-2017-6742","slug":"cve-2017-6742-cisco-ios-and-ios-xe-software-snmp-remote-code-execution","title":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-19T00:00:00+00:00","exploited_since":"2023-04-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6742-cisco-ios-and-ios-xe-software-snmp-remote-code-execution"},{"cve":"CVE-2019-8526","slug":"cve-2019-8526-apple-macos-use-after-free-vulnerability","title":"Apple macOS Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-17T00:00:00+00:00","exploited_since":"2023-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-8526-apple-macos-use-after-free-vulnerability"},{"cve":"CVE-2023-2033","slug":"cve-2023-2033-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-17T00:00:00+00:00","exploited_since":"2023-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-2033-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2023-20963","slug":"cve-2023-20963-android-framework-privilege-escalation-vulnerability","title":"Android Framework Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-13T00:00:00+00:00","exploited_since":"2023-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-20963-android-framework-privilege-escalation-vulnerability"},{"cve":"CVE-2023-29492","slug":"cve-2023-29492-novi-survey-insecure-deserialization-vulnerability","title":"Novi Survey Insecure Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-13T00:00:00+00:00","exploited_since":"2023-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-29492-novi-survey-insecure-deserialization-vulnerability"},{"cve":"CVE-2023-28252","slug":"cve-2023-28252-microsoft-windows-common-log-file-system-clfs-driver-privilege","title":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-11T00:00:00+00:00","exploited_since":"2023-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-28252-microsoft-windows-common-log-file-system-clfs-driver-privilege"},{"cve":"CVE-2023-28205","slug":"cve-2023-28205-apple-multiple-products-webkit-use-after-free-vulnerability","title":"Apple Multiple Products WebKit Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-10T00:00:00+00:00","exploited_since":"2023-04-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-28205-apple-multiple-products-webkit-use-after-free-vulnerability"},{"cve":"CVE-2023-28206","slug":"cve-2023-28206-apple-ios-ipados-and-macos-iosurfaceaccelerator-out-of-bounds","title":"Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-10T00:00:00+00:00","exploited_since":"2023-04-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-28206-apple-ios-ipados-and-macos-iosurfaceaccelerator-out-of-bounds"},{"cve":"CVE-2019-1388","slug":"cve-2019-1388-microsoft-windows-certificate-dialog-privilege-escalation","title":"Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-07T00:00:00+00:00","exploited_since":"2023-04-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1388-microsoft-windows-certificate-dialog-privilege-escalation"},{"cve":"CVE-2021-27876","slug":"cve-2021-27876-veritas-backup-exec-agent-file-access-vulnerability","title":"Veritas Backup Exec Agent File Access Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-07T00:00:00+00:00","exploited_since":"2023-04-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27876-veritas-backup-exec-agent-file-access-vulnerability"},{"cve":"CVE-2021-27877","slug":"cve-2021-27877-veritas-backup-exec-agent-improper-authentication-vulnerability","title":"Veritas Backup Exec Agent Improper Authentication Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-07T00:00:00+00:00","exploited_since":"2023-04-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27877-veritas-backup-exec-agent-improper-authentication-vulnerability"},{"cve":"CVE-2021-27878","slug":"cve-2021-27878-veritas-backup-exec-agent-command-execution-vulnerability","title":"Veritas Backup Exec Agent Command Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-07T00:00:00+00:00","exploited_since":"2023-04-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27878-veritas-backup-exec-agent-command-execution-vulnerability"},{"cve":"CVE-2023-26083","slug":"cve-2023-26083-arm-mali-gpu-kernel-driver-information-disclosure-vulnerability","title":"Arm Mali GPU Kernel Driver Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-07T00:00:00+00:00","exploited_since":"2023-04-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-26083-arm-mali-gpu-kernel-driver-information-disclosure-vulnerability"},{"cve":"CVE-2022-27926","slug":"cve-2022-27926-synacor-zimbra-collaboration-suite-zcs-cross-site-scripting-xss","title":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-03T00:00:00+00:00","exploited_since":"2023-04-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-27926-synacor-zimbra-collaboration-suite-zcs-cross-site-scripting-xss"},{"cve":"CVE-2013-3163","slug":"cve-2013-3163-microsoft-internet-explorer-memory-corruption-vulnerability","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-30T00:00:00+00:00","exploited_since":"2023-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-3163-microsoft-internet-explorer-memory-corruption-vulnerability"},{"cve":"CVE-2017-7494","slug":"cve-2017-7494-samba-remote-code-execution-vulnerability","title":"Samba Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-30T00:00:00+00:00","exploited_since":"2023-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-7494-samba-remote-code-execution-vulnerability"},{"cve":"CVE-2021-30900","slug":"cve-2021-30900-apple-ios-ipados-and-macos-out-of-bounds-write-vulnerability","title":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-30T00:00:00+00:00","exploited_since":"2023-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30900-apple-ios-ipados-and-macos-out-of-bounds-write-vulnerability"},{"cve":"CVE-2022-22706","slug":"cve-2022-22706-arm-mali-gpu-kernel-driver-unspecified-vulnerability","title":"Arm Mali GPU Kernel Driver Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-30T00:00:00+00:00","exploited_since":"2023-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22706-arm-mali-gpu-kernel-driver-unspecified-vulnerability"},{"cve":"CVE-2022-3038","slug":"cve-2022-3038-google-chromium-network-service-use-after-free-vulnerability","title":"Google Chromium Network Service Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-30T00:00:00+00:00","exploited_since":"2023-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-3038-google-chromium-network-service-use-after-free-vulnerability"},{"cve":"CVE-2022-38181","slug":"cve-2022-38181-arm-mali-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-30T00:00:00+00:00","exploited_since":"2023-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-38181-arm-mali-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2022-39197","slug":"cve-2022-39197-fortra-cobalt-strike-teamserver-cross-site-scripting-xss","title":"Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-30T00:00:00+00:00","exploited_since":"2023-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-39197-fortra-cobalt-strike-teamserver-cross-site-scripting-xss"},{"cve":"CVE-2022-42948","slug":"cve-2022-42948-fortra-cobalt-strike-user-interface-remote-code-execution","title":"Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-30T00:00:00+00:00","exploited_since":"2023-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-42948-fortra-cobalt-strike-user-interface-remote-code-execution"},{"cve":"CVE-2023-0266","slug":"cve-2023-0266-linux-kernel-use-after-free-vulnerability","title":"Linux Kernel Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-30T00:00:00+00:00","exploited_since":"2023-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-0266-linux-kernel-use-after-free-vulnerability"},{"cve":"CVE-2023-26360","slug":"cve-2023-26360-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability","title":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-15T00:00:00+00:00","exploited_since":"2023-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-26360-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2022-41328","slug":"cve-2022-41328-fortinet-fortios-path-traversal-vulnerability","title":"Fortinet FortiOS Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-14T00:00:00+00:00","exploited_since":"2023-03-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-41328-fortinet-fortios-path-traversal-vulnerability"},{"cve":"CVE-2023-23397","slug":"cve-2023-23397-microsoft-office-outlook-privilege-escalation-vulnerability","title":"Microsoft Office Outlook Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-14T00:00:00+00:00","exploited_since":"2023-03-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-23397-microsoft-office-outlook-privilege-escalation-vulnerability"},{"cve":"CVE-2023-24880","slug":"cve-2023-24880-microsoft-windows-smartscreen-security-feature-bypass","title":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-14T00:00:00+00:00","exploited_since":"2023-03-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-24880-microsoft-windows-smartscreen-security-feature-bypass"},{"cve":"CVE-2020-5741","slug":"cve-2020-5741-plex-media-server-remote-code-execution-vulnerability","title":"Plex Media Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-10T00:00:00+00:00","exploited_since":"2023-03-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-5741-plex-media-server-remote-code-execution-vulnerability"},{"cve":"CVE-2021-39144","slug":"cve-2021-39144-xstream-remote-code-execution-vulnerability","title":"XStream is vulnerable to a Remote Command Execution attack","severity":"critical","exploited":true,"published_at":"2021-08-25T14:48:19+00:00","exploited_since":"2023-03-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-39144-xstream-remote-code-execution-vulnerability"},{"cve":"CVE-2022-28810","slug":"cve-2022-28810-zoho-manageengine-adselfservice-plus-remote-code-execution","title":"Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-07T00:00:00+00:00","exploited_since":"2023-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-28810-zoho-manageengine-adselfservice-plus-remote-code-execution"},{"cve":"CVE-2022-35914","slug":"cve-2022-35914-teclib-glpi-remote-code-execution-vulnerability","title":"Teclib GLPI Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-07T00:00:00+00:00","exploited_since":"2023-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-35914-teclib-glpi-remote-code-execution-vulnerability"},{"cve":"CVE-2022-33891","slug":"cve-2022-33891-apache-spark-os-command-injection-in-spark-ui-via-impersonation","title":"Apache Spark OS command injection in Spark UI via impersonation","severity":"critical","exploited":true,"published_at":"2022-07-19T00:00:29+00:00","exploited_since":"2023-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-33891-apache-spark-os-command-injection-in-spark-ui-via-impersonation"},{"cve":"CVE-2022-36537","slug":"cve-2022-36537-zk-framework-auuploader-unspecified-vulnerability","title":"ZK Framework vulnerable to malicious POST","severity":"critical","exploited":true,"published_at":"2022-08-27T00:00:43+00:00","exploited_since":"2023-02-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-36537-zk-framework-auuploader-unspecified-vulnerability"},{"cve":"CVE-2022-47986","slug":"cve-2022-47986-ibm-aspera-faspex-code-execution-vulnerability","title":"IBM Aspera Faspex Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-02-21T00:00:00+00:00","exploited_since":"2023-02-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-47986-ibm-aspera-faspex-code-execution-vulnerability"},{"cve":"CVE-2022-41223","slug":"cve-2022-41223-mitel-mivoice-connect-code-injection-vulnerability","title":"Mitel MiVoice Connect Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-02-21T00:00:00+00:00","exploited_since":"2023-02-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-41223-mitel-mivoice-connect-code-injection-vulnerability"},{"cve":"CVE-2022-40765","slug":"cve-2022-40765-mitel-mivoice-connect-command-injection-vulnerability","title":"Mitel MiVoice Connect Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-02-21T00:00:00+00:00","exploited_since":"2023-02-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-40765-mitel-mivoice-connect-command-injection-vulnerability"},{"cve":"CVE-2022-46169","slug":"cve-2022-46169-cacti-command-injection-vulnerability","title":"Cacti Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-02-16T00:00:00+00:00","exploited_since":"2023-02-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-46169-cacti-command-injection-vulnerability"},{"cve":"CVE-2023-23376","slug":"cve-2023-23376-microsoft-windows-common-log-file-system-clfs-driver-privilege","title":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-02-14T00:00:00+00:00","exploited_since":"2023-02-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-23376-microsoft-windows-common-log-file-system-clfs-driver-privilege"},{"cve":"CVE-2023-23529","slug":"cve-2023-23529-apple-multiple-products-webkit-type-confusion-vulnerability","title":"Apple Multiple Products WebKit Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2023-02-14T00:00:00+00:00","exploited_since":"2023-02-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-23529-apple-multiple-products-webkit-type-confusion-vulnerability"},{"cve":"CVE-2023-21823","slug":"cve-2023-21823-microsoft-windows-graphic-component-privilege-escalation","title":"Microsoft Windows Graphic Component Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-02-14T00:00:00+00:00","exploited_since":"2023-02-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-21823-microsoft-windows-graphic-component-privilege-escalation"},{"cve":"CVE-2023-21715","slug":"cve-2023-21715-microsoft-office-publisher-security-feature-bypass-vulnerability","title":"Microsoft Office Publisher Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2023-02-14T00:00:00+00:00","exploited_since":"2023-02-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-21715-microsoft-office-publisher-security-feature-bypass-vulnerability"},{"cve":"CVE-2015-2291","slug":"cve-2015-2291-intel-ethernet-diagnostics-driver-for-windows-denial-of-service","title":"Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2023-02-10T00:00:00+00:00","exploited_since":"2023-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-2291-intel-ethernet-diagnostics-driver-for-windows-denial-of-service"},{"cve":"CVE-2022-24990","slug":"cve-2022-24990-terramaster-os-remote-command-execution-vulnerability","title":"TerraMaster OS Remote Command Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-02-10T00:00:00+00:00","exploited_since":"2023-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-24990-terramaster-os-remote-command-execution-vulnerability"},{"cve":"CVE-2023-0669","slug":"cve-2023-0669-fortra-goanywhere-mft-remote-code-execution-vulnerability","title":"Withdrawn: Fortra GoAnywhere MFT Deserialization of Untrusted Data vulnerability affects metasploit-framework","severity":"critical","exploited":true,"published_at":"2023-02-06T21:30:29+00:00","exploited_since":"2023-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-0669-fortra-goanywhere-mft-remote-code-execution-vulnerability"},{"cve":"CVE-2023-22952","slug":"cve-2023-22952-multiple-sugarcrm-products-remote-code-execution-vulnerability","title":"Multiple SugarCRM Products Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-02-02T00:00:00+00:00","exploited_since":"2023-02-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-22952-multiple-sugarcrm-products-remote-code-execution-vulnerability"},{"cve":"CVE-2022-21587","slug":"cve-2022-21587-oracle-e-business-suite-unspecified-vulnerability","title":"Oracle E-Business Suite Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2023-02-02T00:00:00+00:00","exploited_since":"2023-02-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-21587-oracle-e-business-suite-unspecified-vulnerability"},{"cve":"CVE-2017-11357","slug":"cve-2017-11357-telerik-ui-for-asp-net-ajax-insecure-direct-object-reference","title":"Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability","severity":"critical","exploited":true,"published_at":"2023-01-26T00:00:00+00:00","exploited_since":"2023-01-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-11357-telerik-ui-for-asp-net-ajax-insecure-direct-object-reference"},{"cve":"CVE-2022-47966","slug":"cve-2022-47966-zoho-manageengine-multiple-products-remote-code-execution","title":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-01-23T00:00:00+00:00","exploited_since":"2023-01-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-47966-zoho-manageengine-multiple-products-remote-code-execution"},{"cve":"CVE-2022-44877","slug":"cve-2022-44877-cwp-control-web-panel-os-command-injection-vulnerability","title":"CWP Control Web Panel OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-01-17T00:00:00+00:00","exploited_since":"2023-01-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-44877-cwp-control-web-panel-os-command-injection-vulnerability"},{"cve":"CVE-2023-21674","slug":"cve-2023-21674-microsoft-windows-advanced-local-procedure-call-alpc-privilege","title":"Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-01-10T00:00:00+00:00","exploited_since":"2023-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-21674-microsoft-windows-advanced-local-procedure-call-alpc-privilege"},{"cve":"CVE-2022-41080","slug":"cve-2022-41080-microsoft-exchange-server-privilege-escalation-vulnerability","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2023-01-10T00:00:00+00:00","exploited_since":"2023-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-41080-microsoft-exchange-server-privilege-escalation-vulnerability"},{"cve":"CVE-2018-5430","slug":"cve-2018-5430-tibco-jasperreports-server-information-disclosure-vulnerability","title":"TIBCO JasperReports Server Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-12-29T00:00:00+00:00","exploited_since":"2022-12-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-5430-tibco-jasperreports-server-information-disclosure-vulnerability"},{"cve":"CVE-2018-18809","slug":"cve-2018-18809-tibco-jasperreports-library-directory-traversal-vulnerability","title":"TIBCO JasperReports Library Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-12-29T00:00:00+00:00","exploited_since":"2022-12-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-18809-tibco-jasperreports-library-directory-traversal-vulnerability"},{"cve":"CVE-2022-42856","slug":"cve-2022-42856-apple-ios-type-confusion-vulnerability","title":"Apple iOS Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-12-14T00:00:00+00:00","exploited_since":"2022-12-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-42856-apple-ios-type-confusion-vulnerability"},{"cve":"CVE-2022-27518","slug":"cve-2022-27518-citrix-application-delivery-controller-adc-and-gateway","title":"Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-12-13T00:00:00+00:00","exploited_since":"2022-12-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-27518-citrix-application-delivery-controller-adc-and-gateway"},{"cve":"CVE-2022-42475","slug":"cve-2022-42475-fortinet-fortios-heap-based-buffer-overflow-vulnerability","title":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-12-13T00:00:00+00:00","exploited_since":"2022-12-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-42475-fortinet-fortios-heap-based-buffer-overflow-vulnerability"},{"cve":"CVE-2022-44698","slug":"cve-2022-44698-microsoft-defender-smartscreen-security-feature-bypass","title":"Microsoft Defender SmartScreen Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-12-13T00:00:00+00:00","exploited_since":"2022-12-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-44698-microsoft-defender-smartscreen-security-feature-bypass"},{"cve":"CVE-2022-26501","slug":"cve-2022-26501-veeam-backup-replication-remote-code-execution-vulnerability","title":"Veeam Backup & Replication Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-12-13T00:00:00+00:00","exploited_since":"2022-12-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26501-veeam-backup-replication-remote-code-execution-vulnerability"},{"cve":"CVE-2022-26500","slug":"cve-2022-26500-veeam-backup-replication-remote-code-execution-vulnerability","title":"Veeam Backup & Replication Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-12-13T00:00:00+00:00","exploited_since":"2022-12-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26500-veeam-backup-replication-remote-code-execution-vulnerability"},{"cve":"CVE-2022-4262","slug":"cve-2022-4262-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-12-05T00:00:00+00:00","exploited_since":"2022-12-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-4262-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2021-35587","slug":"cve-2021-35587-oracle-fusion-middleware-unspecified-vulnerability","title":"Oracle Fusion Middleware Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2022-11-28T00:00:00+00:00","exploited_since":"2022-11-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-35587-oracle-fusion-middleware-unspecified-vulnerability"},{"cve":"CVE-2022-4135","slug":"cve-2022-4135-google-chromium-gpu-heap-buffer-overflow-vulnerability","title":"Google Chrome heap buffer overflow in GPU","severity":"critical","exploited":true,"published_at":"2022-11-25T03:30:19+00:00","exploited_since":"2022-11-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-4135-google-chromium-gpu-heap-buffer-overflow-vulnerability"},{"cve":"CVE-2022-41049","slug":"cve-2022-41049-microsoft-windows-mark-of-the-web-motw-security-feature-bypass","title":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-11-14T00:00:00+00:00","exploited_since":"2022-11-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-41049-microsoft-windows-mark-of-the-web-motw-security-feature-bypass"},{"cve":"CVE-2021-25370","slug":"cve-2021-25370-samsung-mobile-devices-memory-corruption-vulnerability","title":"Samsung Mobile Devices Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-11-08T00:00:00+00:00","exploited_since":"2022-11-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-25370-samsung-mobile-devices-memory-corruption-vulnerability"},{"cve":"CVE-2022-41073","slug":"cve-2022-41073-microsoft-windows-print-spooler-privilege-escalation","title":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-11-08T00:00:00+00:00","exploited_since":"2022-11-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-41073-microsoft-windows-print-spooler-privilege-escalation"},{"cve":"CVE-2022-41091","slug":"cve-2022-41091-microsoft-windows-mark-of-the-web-motw-security-feature-bypass","title":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-11-08T00:00:00+00:00","exploited_since":"2022-11-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-41091-microsoft-windows-mark-of-the-web-motw-security-feature-bypass"},{"cve":"CVE-2022-41125","slug":"cve-2022-41125-microsoft-windows-cng-key-isolation-service-privilege-escalation","title":"Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-11-08T00:00:00+00:00","exploited_since":"2022-11-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-41125-microsoft-windows-cng-key-isolation-service-privilege-escalation"},{"cve":"CVE-2022-41128","slug":"cve-2022-41128-microsoft-windows-scripting-languages-remote-code-execution","title":"Microsoft Windows Scripting Languages Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-11-08T00:00:00+00:00","exploited_since":"2022-11-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-41128-microsoft-windows-scripting-languages-remote-code-execution"},{"cve":"CVE-2021-25337","slug":"cve-2021-25337-samsung-mobile-devices-improper-access-control-vulnerability","title":"Samsung Mobile Devices Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2022-11-08T00:00:00+00:00","exploited_since":"2022-11-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-25337-samsung-mobile-devices-improper-access-control-vulnerability"},{"cve":"CVE-2021-25369","slug":"cve-2021-25369-samsung-mobile-devices-improper-access-control-vulnerability","title":"Samsung Mobile Devices Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2022-11-08T00:00:00+00:00","exploited_since":"2022-11-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-25369-samsung-mobile-devices-improper-access-control-vulnerability"},{"cve":"CVE-2022-3723","slug":"cve-2022-3723-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-10-28T00:00:00+00:00","exploited_since":"2022-10-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-3723-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2022-42827","slug":"cve-2022-42827-apple-ios-and-ipados-out-of-bounds-write-vulnerability","title":"Apple iOS and iPadOS Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2022-10-25T00:00:00+00:00","exploited_since":"2022-10-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-42827-apple-ios-and-ipados-out-of-bounds-write-vulnerability"},{"cve":"CVE-2018-19320","slug":"cve-2018-19320-gigabyte-multiple-products-unspecified-vulnerability","title":"GIGABYTE Multiple Products Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2022-10-24T00:00:00+00:00","exploited_since":"2022-10-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-19320-gigabyte-multiple-products-unspecified-vulnerability"},{"cve":"CVE-2018-19321","slug":"cve-2018-19321-gigabyte-multiple-products-privilege-escalation-vulnerability","title":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-10-24T00:00:00+00:00","exploited_since":"2022-10-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-19321-gigabyte-multiple-products-privilege-escalation-vulnerability"},{"cve":"CVE-2018-19322","slug":"cve-2018-19322-gigabyte-multiple-products-code-execution-vulnerability","title":"GIGABYTE Multiple Products Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-10-24T00:00:00+00:00","exploited_since":"2022-10-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-19322-gigabyte-multiple-products-code-execution-vulnerability"},{"cve":"CVE-2018-19323","slug":"cve-2018-19323-gigabyte-multiple-products-privilege-escalation-vulnerability","title":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-10-24T00:00:00+00:00","exploited_since":"2022-10-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-19323-gigabyte-multiple-products-privilege-escalation-vulnerability"},{"cve":"CVE-2020-3153","slug":"cve-2020-3153-cisco-anyconnect-secure-mobility-client-for-windows-uncontrolled","title":"Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability","severity":"critical","exploited":true,"published_at":"2022-10-24T00:00:00+00:00","exploited_since":"2022-10-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-3153-cisco-anyconnect-secure-mobility-client-for-windows-uncontrolled"},{"cve":"CVE-2020-3433","slug":"cve-2020-3433-cisco-anyconnect-secure-mobility-client-for-windows-dll-hijacking","title":"Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability","severity":"critical","exploited":true,"published_at":"2022-10-24T00:00:00+00:00","exploited_since":"2022-10-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-3433-cisco-anyconnect-secure-mobility-client-for-windows-dll-hijacking"},{"cve":"CVE-2021-3493","slug":"cve-2021-3493-linux-kernel-privilege-escalation-vulnerability","title":"Linux Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-10-20T00:00:00+00:00","exploited_since":"2022-10-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-3493-linux-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2022-41352","slug":"cve-2022-41352-synacor-zimbra-collaboration-suite-zcs-arbitrary-file-upload","title":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2022-10-20T00:00:00+00:00","exploited_since":"2022-10-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-41352-synacor-zimbra-collaboration-suite-zcs-arbitrary-file-upload"},{"cve":"CVE-2022-40684","slug":"cve-2022-40684-fortinet-multiple-products-authentication-bypass-vulnerability","title":"Fortinet Multiple Products Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-10-11T00:00:00+00:00","exploited_since":"2022-10-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-40684-fortinet-multiple-products-authentication-bypass-vulnerability"},{"cve":"CVE-2022-41033","slug":"cve-2022-41033-microsoft-windows-com-event-system-service-privilege-escalation","title":"Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-10-11T00:00:00+00:00","exploited_since":"2022-10-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-41033-microsoft-windows-com-event-system-service-privilege-escalation"},{"cve":"CVE-2022-41040","slug":"cve-2022-41040-microsoft-exchange-server-server-side-request-forgery","title":"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-30T00:00:00+00:00","exploited_since":"2022-09-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-41040-microsoft-exchange-server-server-side-request-forgery"},{"cve":"CVE-2022-36804","slug":"cve-2022-36804-atlassian-bitbucket-server-and-data-center-command-injection","title":"Atlassian Bitbucket Server and Data Center Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-30T00:00:00+00:00","exploited_since":"2022-09-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-36804-atlassian-bitbucket-server-and-data-center-command-injection"},{"cve":"CVE-2022-41082","slug":"cve-2022-41082-microsoft-exchange-server-remote-code-execution-vulnerability","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-30T00:00:00+00:00","exploited_since":"2022-09-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-41082-microsoft-exchange-server-remote-code-execution-vulnerability"},{"cve":"CVE-2022-3236","slug":"cve-2022-3236-sophos-firewall-code-injection-vulnerability","title":"Sophos Firewall Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-23T00:00:00+00:00","exploited_since":"2022-09-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-3236-sophos-firewall-code-injection-vulnerability"},{"cve":"CVE-2022-35405","slug":"cve-2022-35405-zoho-manageengine-multiple-products-remote-code-execution","title":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-22T00:00:00+00:00","exploited_since":"2022-09-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-35405-zoho-manageengine-multiple-products-remote-code-execution"},{"cve":"CVE-2013-2596","slug":"cve-2013-2596-linux-kernel-integer-overflow-vulnerability","title":"Linux Kernel Integer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-15T00:00:00+00:00","exploited_since":"2022-09-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-2596-linux-kernel-integer-overflow-vulnerability"},{"cve":"CVE-2013-2597","slug":"cve-2013-2597-code-aurora-acdb-audio-driver-stack-based-buffer-overflow","title":"Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-15T00:00:00+00:00","exploited_since":"2022-09-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-2597-code-aurora-acdb-audio-driver-stack-based-buffer-overflow"},{"cve":"CVE-2013-6282","slug":"cve-2013-6282-linux-kernel-improper-input-validation-vulnerability","title":"Linux Kernel Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-15T00:00:00+00:00","exploited_since":"2022-09-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-6282-linux-kernel-improper-input-validation-vulnerability"},{"cve":"CVE-2022-40139","slug":"cve-2022-40139-trend-micro-apex-one-and-apex-one-as-a-service-improper","title":"Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-15T00:00:00+00:00","exploited_since":"2022-09-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-40139-trend-micro-apex-one-and-apex-one-as-a-service-improper"},{"cve":"CVE-2010-2568","slug":"cve-2010-2568-microsoft-windows-remote-code-execution-vulnerability","title":"Microsoft Windows Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-15T00:00:00+00:00","exploited_since":"2022-09-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-2568-microsoft-windows-remote-code-execution-vulnerability"},{"cve":"CVE-2013-2094","slug":"cve-2013-2094-linux-kernel-privilege-escalation-vulnerability","title":"Linux Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-15T00:00:00+00:00","exploited_since":"2022-09-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-2094-linux-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2022-32917","slug":"cve-2022-32917-apple-ios-ipados-and-macos-remote-code-execution-vulnerability","title":"Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-14T00:00:00+00:00","exploited_since":"2022-09-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-32917-apple-ios-ipados-and-macos-remote-code-execution-vulnerability"},{"cve":"CVE-2022-37969","slug":"cve-2022-37969-microsoft-windows-common-log-file-system-clfs-driver-privilege","title":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-14T00:00:00+00:00","exploited_since":"2022-09-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-37969-microsoft-windows-common-log-file-system-clfs-driver-privilege"},{"cve":"CVE-2011-4723","slug":"cve-2011-4723-d-link-dir-300-router-cleartext-storage-of-a-password","title":"D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-08T00:00:00+00:00","exploited_since":"2022-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2011-4723-d-link-dir-300-router-cleartext-storage-of-a-password"},{"cve":"CVE-2017-5521","slug":"cve-2017-5521-netgear-multiple-devices-exposure-of-sensitive-information","title":"NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-08T00:00:00+00:00","exploited_since":"2022-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-5521-netgear-multiple-devices-exposure-of-sensitive-information"},{"cve":"CVE-2018-13374","slug":"cve-2018-13374-fortinet-fortios-and-fortiadc-improper-access-control","title":"Fortinet FortiOS and FortiADC Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-08T00:00:00+00:00","exploited_since":"2022-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-13374-fortinet-fortios-and-fortiadc-improper-access-control"},{"cve":"CVE-2018-2628","slug":"cve-2018-2628-oracle-weblogic-server-unspecified-vulnerability","title":"Oracle WebLogic Server Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-08T00:00:00+00:00","exploited_since":"2022-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-2628-oracle-weblogic-server-unspecified-vulnerability"},{"cve":"CVE-2018-6530","slug":"cve-2018-6530-d-link-multiple-routers-os-command-injection-vulnerability","title":"D-Link Multiple Routers OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-08T00:00:00+00:00","exploited_since":"2022-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-6530-d-link-multiple-routers-os-command-injection-vulnerability"},{"cve":"CVE-2018-7445","slug":"cve-2018-7445-mikrotik-routeros-stack-based-buffer-overflow-vulnerability","title":"MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-08T00:00:00+00:00","exploited_since":"2022-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-7445-mikrotik-routeros-stack-based-buffer-overflow-vulnerability"},{"cve":"CVE-2020-9934","slug":"cve-2020-9934-apple-ios-ipados-and-macos-input-validation-vulnerability","title":"Apple iOS, iPadOS, and macOS Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-08T00:00:00+00:00","exploited_since":"2022-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-9934-apple-ios-ipados-and-macos-input-validation-vulnerability"},{"cve":"CVE-2022-26258","slug":"cve-2022-26258-d-link-dir-820l-remote-code-execution-vulnerability","title":"D-Link DIR-820L Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-08T00:00:00+00:00","exploited_since":"2022-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26258-d-link-dir-820l-remote-code-execution-vulnerability"},{"cve":"CVE-2022-27593","slug":"cve-2022-27593-qnap-photo-station-externally-controlled-reference-vulnerability","title":"QNAP Photo Station Externally Controlled Reference Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-08T00:00:00+00:00","exploited_since":"2022-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-27593-qnap-photo-station-externally-controlled-reference-vulnerability"},{"cve":"CVE-2022-3075","slug":"cve-2022-3075-google-chromium-mojo-insufficient-data-validation-vulnerability","title":"Google Chromium Mojo Insufficient Data Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-08T00:00:00+00:00","exploited_since":"2022-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-3075-google-chromium-mojo-insufficient-data-validation-vulnerability"},{"cve":"CVE-2011-1823","slug":"cve-2011-1823-android-os-privilege-escalation-vulnerability","title":"Android OS Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-08T00:00:00+00:00","exploited_since":"2022-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2011-1823-android-os-privilege-escalation-vulnerability"},{"cve":"CVE-2021-31010","slug":"cve-2021-31010-apple-ios-macos-watchos-sandbox-bypass-vulnerability","title":"Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-25T00:00:00+00:00","exploited_since":"2022-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-31010-apple-ios-macos-watchos-sandbox-bypass-vulnerability"},{"cve":"CVE-2020-28949","slug":"cve-2020-28949-pear-archive-tar-deserialization-of-untrusted-data-vulnerability","title":"PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-25T00:00:00+00:00","exploited_since":"2022-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-28949-pear-archive-tar-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2021-38406","slug":"cve-2021-38406-delta-electronics-dopsoft-2-improper-input-validation","title":"Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-25T00:00:00+00:00","exploited_since":"2022-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-38406-delta-electronics-dopsoft-2-improper-input-validation"},{"cve":"CVE-2022-2294","slug":"cve-2022-2294-webrtc-heap-buffer-overflow-vulnerability","title":"WebRTC Heap Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-25T00:00:00+00:00","exploited_since":"2022-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-2294-webrtc-heap-buffer-overflow-vulnerability"},{"cve":"CVE-2022-24112","slug":"cve-2022-24112-apache-apisix-authentication-bypass-vulnerability","title":"Apache APISIX Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-25T00:00:00+00:00","exploited_since":"2022-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-24112-apache-apisix-authentication-bypass-vulnerability"},{"cve":"CVE-2022-24706","slug":"cve-2022-24706-apache-couchdb-insecure-default-initialization-of-resource","title":"Apache CouchDB Insecure Default Initialization of Resource Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-25T00:00:00+00:00","exploited_since":"2022-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-24706-apache-couchdb-insecure-default-initialization-of-resource"},{"cve":"CVE-2022-26352","slug":"cve-2022-26352-dotcms-unrestricted-upload-of-file-vulnerability","title":"dotCMS Unrestricted Upload of File Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-25T00:00:00+00:00","exploited_since":"2022-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26352-dotcms-unrestricted-upload-of-file-vulnerability"},{"cve":"CVE-2022-22963","slug":"cve-2022-22963-vmware-tanzu-spring-cloud-function-remote-code-execution","title":"Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression","severity":"critical","exploited":true,"published_at":"2022-04-03T00:00:59+00:00","exploited_since":"2022-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22963-vmware-tanzu-spring-cloud-function-remote-code-execution"},{"cve":"CVE-2021-39226","slug":"cve-2021-39226-grafana-authentication-bypass-vulnerability","title":"Authentication bypass for viewing and deletions of snapshots","severity":"critical","exploited":true,"published_at":"2021-10-05T20:24:02+00:00","exploited_since":"2022-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-39226-grafana-authentication-bypass-vulnerability"},{"cve":"CVE-2020-36193","slug":"cve-2020-36193-pear-archive-tar-improper-link-resolution-vulnerability","title":"Directory Traversal in Archive_Tar","severity":"critical","exploited":true,"published_at":"2021-04-22T16:20:36+00:00","exploited_since":"2022-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-36193-pear-archive-tar-improper-link-resolution-vulnerability"},{"cve":"CVE-2022-0028","slug":"cve-2022-0028-palo-alto-networks-pan-os-reflected-amplification-denial-of","title":"Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-22T00:00:00+00:00","exploited_since":"2022-08-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-0028-palo-alto-networks-pan-os-reflected-amplification-denial-of"},{"cve":"CVE-2022-22536","slug":"cve-2022-22536-sap-multiple-products-http-request-smuggling-vulnerability","title":"SAP Multiple Products HTTP Request Smuggling Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-18T00:00:00+00:00","exploited_since":"2022-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22536-sap-multiple-products-http-request-smuggling-vulnerability"},{"cve":"CVE-2022-26923","slug":"cve-2022-26923-microsoft-active-directory-domain-services-privilege-escalation","title":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-18T00:00:00+00:00","exploited_since":"2022-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26923-microsoft-active-directory-domain-services-privilege-escalation"},{"cve":"CVE-2022-32894","slug":"cve-2022-32894-apple-ios-and-macos-out-of-bounds-write-vulnerability","title":"Apple iOS and macOS Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-18T00:00:00+00:00","exploited_since":"2022-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-32894-apple-ios-and-macos-out-of-bounds-write-vulnerability"},{"cve":"CVE-2022-2856","slug":"cve-2022-2856-google-chromium-intents-insufficient-input-validation","title":"Google Chromium Intents Insufficient Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-18T00:00:00+00:00","exploited_since":"2022-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-2856-google-chromium-intents-insufficient-input-validation"},{"cve":"CVE-2017-15944","slug":"cve-2017-15944-palo-alto-networks-pan-os-remote-code-execution-vulnerability","title":"Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-18T00:00:00+00:00","exploited_since":"2022-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-15944-palo-alto-networks-pan-os-remote-code-execution-vulnerability"},{"cve":"CVE-2022-32893","slug":"cve-2022-32893-apple-ios-and-macos-out-of-bounds-write-vulnerability","title":"Apple iOS and macOS Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-18T00:00:00+00:00","exploited_since":"2022-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-32893-apple-ios-and-macos-out-of-bounds-write-vulnerability"},{"cve":"CVE-2022-21971","slug":"cve-2022-21971-microsoft-windows-runtime-remote-code-execution-vulnerability","title":"Microsoft Windows Runtime Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-18T00:00:00+00:00","exploited_since":"2022-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-21971-microsoft-windows-runtime-remote-code-execution-vulnerability"},{"cve":"CVE-2022-27925","slug":"cve-2022-27925-synacor-zimbra-collaboration-suite-zcs-arbitrary-file-upload","title":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-11T00:00:00+00:00","exploited_since":"2022-08-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-27925-synacor-zimbra-collaboration-suite-zcs-arbitrary-file-upload"},{"cve":"CVE-2022-37042","slug":"cve-2022-37042-synacor-zimbra-collaboration-suite-zcs-authentication-bypass","title":"Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-11T00:00:00+00:00","exploited_since":"2022-08-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-37042-synacor-zimbra-collaboration-suite-zcs-authentication-bypass"},{"cve":"CVE-2022-30333","slug":"cve-2022-30333-rarlab-unrar-directory-traversal-vulnerability","title":"RARLAB UnRAR Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-09T00:00:00+00:00","exploited_since":"2022-08-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-30333-rarlab-unrar-directory-traversal-vulnerability"},{"cve":"CVE-2022-34713","slug":"cve-2022-34713-microsoft-windows-support-diagnostic-tool-msdt-remote-code","title":"Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-09T00:00:00+00:00","exploited_since":"2022-08-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-34713-microsoft-windows-support-diagnostic-tool-msdt-remote-code"},{"cve":"CVE-2022-27924","slug":"cve-2022-27924-synacor-zimbra-collaboration-suite-zcs-command-injection","title":"Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-04T00:00:00+00:00","exploited_since":"2022-08-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-27924-synacor-zimbra-collaboration-suite-zcs-command-injection"},{"cve":"CVE-2022-26138","slug":"cve-2022-26138-atlassian-questions-for-confluence-app-hard-coded-credentials","title":"Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability","severity":"critical","exploited":true,"published_at":"2022-07-29T00:00:00+00:00","exploited_since":"2022-07-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26138-atlassian-questions-for-confluence-app-hard-coded-credentials"},{"cve":"CVE-2022-22047","slug":"cve-2022-22047-microsoft-windows-client-server-runtime-subsystem-csrss-privilege","title":"Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-07-12T00:00:00+00:00","exploited_since":"2022-07-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22047-microsoft-windows-client-server-runtime-subsystem-csrss-privilege"},{"cve":"CVE-2022-26925","slug":"cve-2022-26925-microsoft-windows-lsa-spoofing-vulnerability","title":"Microsoft Windows LSA Spoofing Vulnerability","severity":"critical","exploited":true,"published_at":"2022-07-01T00:00:00+00:00","exploited_since":"2022-07-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26925-microsoft-windows-lsa-spoofing-vulnerability"},{"cve":"CVE-2018-4344","slug":"cve-2018-4344-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-27T00:00:00+00:00","exploited_since":"2022-06-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-4344-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2019-8605","slug":"cve-2019-8605-apple-multiple-products-use-after-free-vulnerability","title":"Apple Multiple Products Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-27T00:00:00+00:00","exploited_since":"2022-06-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-8605-apple-multiple-products-use-after-free-vulnerability"},{"cve":"CVE-2020-3837","slug":"cve-2020-3837-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-27T00:00:00+00:00","exploited_since":"2022-06-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-3837-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2020-9907","slug":"cve-2020-9907-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-27T00:00:00+00:00","exploited_since":"2022-06-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-9907-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2021-30533","slug":"cve-2021-30533-google-chromium-popupblocker-security-bypass-vulnerability","title":"Google Chromium PopupBlocker Security Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-27T00:00:00+00:00","exploited_since":"2022-06-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30533-google-chromium-popupblocker-security-bypass-vulnerability"},{"cve":"CVE-2021-30983","slug":"cve-2021-30983-apple-ios-and-ipados-buffer-overflow-vulnerability","title":"Apple iOS and iPadOS Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-27T00:00:00+00:00","exploited_since":"2022-06-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30983-apple-ios-and-ipados-buffer-overflow-vulnerability"},{"cve":"CVE-2021-4034","slug":"cve-2021-4034-red-hat-polkit-out-of-bounds-read-and-write-vulnerability","title":"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-27T00:00:00+00:00","exploited_since":"2022-06-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-4034-red-hat-polkit-out-of-bounds-read-and-write-vulnerability"},{"cve":"CVE-2022-29499","slug":"cve-2022-29499-mitel-mivoice-connect-data-validation-vulnerability","title":"Mitel MiVoice Connect Data Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-27T00:00:00+00:00","exploited_since":"2022-06-27T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-29499-mitel-mivoice-connect-data-validation-vulnerability"},{"cve":"CVE-2022-30190","slug":"cve-2022-30190-microsoft-windows-support-diagnostic-tool-msdt-remote-code","title":"Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-14T00:00:00+00:00","exploited_since":"2022-06-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-30190-microsoft-windows-support-diagnostic-tool-msdt-remote-code"},{"cve":"CVE-2016-2386","slug":"cve-2016-2386-sap-netweaver-sql-injection-vulnerability","title":"SAP NetWeaver SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-09T00:00:00+00:00","exploited_since":"2022-06-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-2386-sap-netweaver-sql-injection-vulnerability"},{"cve":"CVE-2016-2388","slug":"cve-2016-2388-sap-netweaver-information-disclosure-vulnerability","title":"SAP NetWeaver Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-09T00:00:00+00:00","exploited_since":"2022-06-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-2388-sap-netweaver-information-disclosure-vulnerability"},{"cve":"CVE-2021-38163","slug":"cve-2021-38163-sap-netweaver-unrestricted-file-upload-vulnerability","title":"SAP NetWeaver Unrestricted File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-09T00:00:00+00:00","exploited_since":"2022-06-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-38163-sap-netweaver-unrestricted-file-upload-vulnerability"},{"cve":"CVE-2006-2492","slug":"cve-2006-2492-microsoft-word-malformed-object-pointer-vulnerability","title":"Microsoft Word Malformed Object Pointer Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2006-2492-microsoft-word-malformed-object-pointer-vulnerability"},{"cve":"CVE-2007-5659","slug":"cve-2007-5659-adobe-acrobat-and-reader-buffer-overflow-vulnerability","title":"Adobe Acrobat and Reader Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2007-5659-adobe-acrobat-and-reader-buffer-overflow-vulnerability"},{"cve":"CVE-2008-0655","slug":"cve-2008-0655-adobe-acrobat-and-reader-unspecified-vulnerability","title":"Adobe Acrobat and Reader Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2008-0655-adobe-acrobat-and-reader-unspecified-vulnerability"},{"cve":"CVE-2009-0557","slug":"cve-2009-0557-microsoft-office-object-record-corruption-vulnerability","title":"Microsoft Office Object Record Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-0557-microsoft-office-object-record-corruption-vulnerability"},{"cve":"CVE-2009-0563","slug":"cve-2009-0563-microsoft-office-buffer-overflow-vulnerability","title":"Microsoft Office Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-0563-microsoft-office-buffer-overflow-vulnerability"},{"cve":"CVE-2009-1862","slug":"cve-2009-1862-adobe-acrobat-and-reader-flash-player-unspecified-vulnerability","title":"Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-1862-adobe-acrobat-and-reader-flash-player-unspecified-vulnerability"},{"cve":"CVE-2009-3953","slug":"cve-2009-3953-adobe-acrobat-and-reader-universal-3d-remote-code-execution","title":"Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-3953-adobe-acrobat-and-reader-universal-3d-remote-code-execution"},{"cve":"CVE-2009-4324","slug":"cve-2009-4324-adobe-acrobat-and-reader-use-after-free-vulnerability","title":"Adobe Acrobat and Reader Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-4324-adobe-acrobat-and-reader-use-after-free-vulnerability"},{"cve":"CVE-2010-1297","slug":"cve-2010-1297-adobe-flash-player-memory-corruption-vulnerability","title":"Adobe Flash Player Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-1297-adobe-flash-player-memory-corruption-vulnerability"},{"cve":"CVE-2010-2572","slug":"cve-2010-2572-microsoft-powerpoint-buffer-overflow-vulnerability","title":"Microsoft PowerPoint Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-2572-microsoft-powerpoint-buffer-overflow-vulnerability"},{"cve":"CVE-2010-2883","slug":"cve-2010-2883-adobe-acrobat-and-reader-stack-based-buffer-overflow-vulnerability","title":"Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-2883-adobe-acrobat-and-reader-stack-based-buffer-overflow-vulnerability"},{"cve":"CVE-2011-0609","slug":"cve-2011-0609-adobe-flash-player-unspecified-vulnerability","title":"Adobe Flash Player Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2011-0609-adobe-flash-player-unspecified-vulnerability"},{"cve":"CVE-2011-2462","slug":"cve-2011-2462-adobe-reader-and-acrobat-universal-3d-memory-corruption","title":"Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2011-2462-adobe-reader-and-acrobat-universal-3d-memory-corruption"},{"cve":"CVE-2012-0151","slug":"cve-2012-0151-microsoft-windows-authenticode-signature-verification-remote-code","title":"Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-0151-microsoft-windows-authenticode-signature-verification-remote-code"},{"cve":"CVE-2012-0754","slug":"cve-2012-0754-adobe-flash-player-memory-corruption-vulnerability","title":"Adobe Flash Player Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-0754-adobe-flash-player-memory-corruption-vulnerability"},{"cve":"CVE-2012-0767","slug":"cve-2012-0767-adobe-flash-player-cross-site-scripting-xss-vulnerability","title":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-0767-adobe-flash-player-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2012-1889","slug":"cve-2012-1889-microsoft-xml-core-services-memory-corruption-vulnerability","title":"Microsoft XML Core Services Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-1889-microsoft-xml-core-services-memory-corruption-vulnerability"},{"cve":"CVE-2012-4969","slug":"cve-2012-4969-microsoft-internet-explorer-use-after-free-vulnerability","title":"Microsoft Internet Explorer Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-4969-microsoft-internet-explorer-use-after-free-vulnerability"},{"cve":"CVE-2012-5054","slug":"cve-2012-5054-adobe-flash-player-integer-overflow-vulnerability","title":"Adobe Flash Player Integer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-5054-adobe-flash-player-integer-overflow-vulnerability"},{"cve":"CVE-2013-1331","slug":"cve-2013-1331-microsoft-office-buffer-overflow-vulnerability","title":"Microsoft Office Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-1331-microsoft-office-buffer-overflow-vulnerability"},{"cve":"CVE-2016-1646","slug":"cve-2016-1646-google-chromium-v8-out-of-bounds-read-vulnerability","title":"Google Chromium V8 Out-of-Bounds Read Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-1646-google-chromium-v8-out-of-bounds-read-vulnerability"},{"cve":"CVE-2016-5198","slug":"cve-2016-5198-google-chromium-v8-out-of-bounds-memory-vulnerability","title":"Google Chromium V8 Out-of-Bounds Memory Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-5198-google-chromium-v8-out-of-bounds-memory-vulnerability"},{"cve":"CVE-2018-4990","slug":"cve-2018-4990-adobe-acrobat-and-reader-double-free-vulnerability","title":"Adobe Acrobat and Reader Double Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-4990-adobe-acrobat-and-reader-double-free-vulnerability"},{"cve":"CVE-2017-5030","slug":"cve-2017-5030-google-chromium-v8-memory-corruption-vulnerability","title":"Google Chromium V8 Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-5030-google-chromium-v8-memory-corruption-vulnerability"},{"cve":"CVE-2017-5070","slug":"cve-2017-5070-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-5070-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2017-6862","slug":"cve-2017-6862-netgear-multiple-devices-buffer-overflow-vulnerability","title":"NETGEAR Multiple Devices Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6862-netgear-multiple-devices-buffer-overflow-vulnerability"},{"cve":"CVE-2018-17463","slug":"cve-2018-17463-google-chromium-v8-remote-code-execution-vulnerability","title":"Google Chromium V8 Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-17463-google-chromium-v8-remote-code-execution-vulnerability"},{"cve":"CVE-2018-17480","slug":"cve-2018-17480-google-chromium-v8-out-of-bounds-write-vulnerability","title":"Google Chromium V8 Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-17480-google-chromium-v8-out-of-bounds-write-vulnerability"},{"cve":"CVE-2018-6065","slug":"cve-2018-6065-google-chromium-v8-integer-overflow-vulnerability","title":"Google Chromium V8 Integer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-6065-google-chromium-v8-integer-overflow-vulnerability"},{"cve":"CVE-2019-15271","slug":"cve-2019-15271-cisco-rv-series-routers-deserialization-of-untrusted-data","title":"Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-15271-cisco-rv-series-routers-deserialization-of-untrusted-data"},{"cve":"CVE-2019-5825","slug":"cve-2019-5825-google-chromium-v8-out-of-bounds-write-vulnerability","title":"Google Chromium V8 Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-5825-google-chromium-v8-out-of-bounds-write-vulnerability"},{"cve":"CVE-2019-7192","slug":"cve-2019-7192-qnap-photo-station-improper-access-control-vulnerability","title":"QNAP Photo Station Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-7192-qnap-photo-station-improper-access-control-vulnerability"},{"cve":"CVE-2019-7193","slug":"cve-2019-7193-qnap-qts-improper-input-validation-vulnerability","title":"QNAP QTS Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-7193-qnap-qts-improper-input-validation-vulnerability"},{"cve":"CVE-2019-7194","slug":"cve-2019-7194-qnap-photo-station-path-traversal-vulnerability","title":"QNAP Photo Station Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-7194-qnap-photo-station-path-traversal-vulnerability"},{"cve":"CVE-2019-7195","slug":"cve-2019-7195-qnap-photo-station-path-traversal-vulnerability","title":"QNAP Photo Station Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","exploited_since":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-7195-qnap-photo-station-path-traversal-vulnerability"},{"cve":"CVE-2022-26134","slug":"cve-2022-26134-atlassian-confluence-server-and-data-center-remote-code-execution","title":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-02T00:00:00+00:00","exploited_since":"2022-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26134-atlassian-confluence-server-and-data-center-remote-code-execution"},{"cve":"CVE-2015-8651","slug":"cve-2015-8651-adobe-flash-player-integer-overflow-vulnerability","title":"Adobe Flash Player Integer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-8651-adobe-flash-player-integer-overflow-vulnerability"},{"cve":"CVE-2010-0738","slug":"cve-2010-0738-red-hat-jboss-authentication-bypass-vulnerability","title":"Red Hat JBoss Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-0738-red-hat-jboss-authentication-bypass-vulnerability"},{"cve":"CVE-2010-0840","slug":"cve-2010-0840-oracle-jre-unspecified-vulnerability","title":"Oracle JRE Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-0840-oracle-jre-unspecified-vulnerability"},{"cve":"CVE-2010-1428","slug":"cve-2010-1428-red-hat-jboss-information-disclosure-vulnerability","title":"Red Hat JBoss Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-1428-red-hat-jboss-information-disclosure-vulnerability"},{"cve":"CVE-2012-1710","slug":"cve-2012-1710-oracle-fusion-middleware-unspecified-vulnerability","title":"Oracle Fusion Middleware Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-1710-oracle-fusion-middleware-unspecified-vulnerability"},{"cve":"CVE-2013-0074","slug":"cve-2013-0074-microsoft-silverlight-double-dereference-vulnerability","title":"Microsoft Silverlight Double Dereference Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-0074-microsoft-silverlight-double-dereference-vulnerability"},{"cve":"CVE-2013-0422","slug":"cve-2013-0422-oracle-jre-remote-code-execution-vulnerability","title":"Oracle JRE Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-0422-oracle-jre-remote-code-execution-vulnerability"},{"cve":"CVE-2013-0431","slug":"cve-2013-0431-oracle-jre-sandbox-bypass-vulnerability","title":"Oracle JRE Sandbox Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-0431-oracle-jre-sandbox-bypass-vulnerability"},{"cve":"CVE-2013-2423","slug":"cve-2013-2423-oracle-jre-unspecified-vulnerability","title":"Oracle JRE Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-2423-oracle-jre-unspecified-vulnerability"},{"cve":"CVE-2013-3896","slug":"cve-2013-3896-microsoft-silverlight-information-disclosure-vulnerability","title":"Microsoft Silverlight Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-3896-microsoft-silverlight-information-disclosure-vulnerability"},{"cve":"CVE-2013-3993","slug":"cve-2013-3993-ibm-infosphere-biginsights-invalid-input-vulnerability","title":"IBM InfoSphere BigInsights Invalid Input Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-3993-ibm-infosphere-biginsights-invalid-input-vulnerability"},{"cve":"CVE-2013-7331","slug":"cve-2013-7331-microsoft-internet-explorer-information-disclosure-vulnerability","title":"Microsoft Internet Explorer Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-7331-microsoft-internet-explorer-information-disclosure-vulnerability"},{"cve":"CVE-2014-0546","slug":"cve-2014-0546-adobe-reader-and-acrobat-sandbox-bypass-vulnerability","title":"Adobe Reader and Acrobat Sandbox Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-0546-adobe-reader-and-acrobat-sandbox-bypass-vulnerability"},{"cve":"CVE-2014-2817","slug":"cve-2014-2817-microsoft-internet-explorer-privilege-escalation-vulnerability","title":"Microsoft Internet Explorer Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-2817-microsoft-internet-explorer-privilege-escalation-vulnerability"},{"cve":"CVE-2014-3153","slug":"cve-2014-3153-linux-kernel-privilege-escalation-vulnerability","title":"Linux Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-3153-linux-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2014-4077","slug":"cve-2014-4077-microsoft-ime-japanese-privilege-escalation-vulnerability","title":"Microsoft IME Japanese Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-4077-microsoft-ime-japanese-privilege-escalation-vulnerability"},{"cve":"CVE-2014-4123","slug":"cve-2014-4123-microsoft-internet-explorer-privilege-escalation-vulnerability","title":"Microsoft Internet Explorer Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-4123-microsoft-internet-explorer-privilege-escalation-vulnerability"},{"cve":"CVE-2014-4148","slug":"cve-2014-4148-microsoft-windows-remote-code-execution-vulnerability","title":"Microsoft Windows Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-4148-microsoft-windows-remote-code-execution-vulnerability"},{"cve":"CVE-2014-8439","slug":"cve-2014-8439-adobe-flash-player-dereferenced-pointer-vulnerability","title":"Adobe Flash Player Dereferenced Pointer Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-8439-adobe-flash-player-dereferenced-pointer-vulnerability"},{"cve":"CVE-2015-0016","slug":"cve-2015-0016-microsoft-windows-ts-webproxy-directory-traversal-vulnerability","title":"Microsoft Windows TS WebProxy Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-0016-microsoft-windows-ts-webproxy-directory-traversal-vulnerability"},{"cve":"CVE-2015-0071","slug":"cve-2015-0071-microsoft-internet-explorer-aslr-bypass-vulnerability","title":"Microsoft Internet Explorer ASLR Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-0071-microsoft-internet-explorer-aslr-bypass-vulnerability"},{"cve":"CVE-2015-0310","slug":"cve-2015-0310-adobe-flash-player-aslr-bypass-vulnerability","title":"Adobe Flash Player ASLR Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-0310-adobe-flash-player-aslr-bypass-vulnerability"},{"cve":"CVE-2015-1671","slug":"cve-2015-1671-microsoft-windows-remote-code-execution-vulnerability","title":"Microsoft Windows Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-1671-microsoft-windows-remote-code-execution-vulnerability"},{"cve":"CVE-2015-1769","slug":"cve-2015-1769-microsoft-windows-mount-manager-privilege-escalation-vulnerability","title":"Microsoft Windows Mount Manager Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-1769-microsoft-windows-mount-manager-privilege-escalation-vulnerability"},{"cve":"CVE-2015-2360","slug":"cve-2015-2360-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-2360-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2015-2425","slug":"cve-2015-2425-microsoft-internet-explorer-memory-corruption-vulnerability","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-2425-microsoft-internet-explorer-memory-corruption-vulnerability"},{"cve":"CVE-2015-4495","slug":"cve-2015-4495-mozilla-firefox-security-feature-bypass-vulnerability","title":"Mozilla Firefox Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-4495-mozilla-firefox-security-feature-bypass-vulnerability"},{"cve":"CVE-2015-6175","slug":"cve-2015-6175-microsoft-windows-kernel-privilege-escalation-vulnerability","title":"Microsoft Windows Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-6175-microsoft-windows-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2016-0034","slug":"cve-2016-0034-microsoft-silverlight-runtime-remote-code-execution-vulnerability","title":"Microsoft Silverlight Runtime Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-0034-microsoft-silverlight-runtime-remote-code-execution-vulnerability"},{"cve":"CVE-2016-0984","slug":"cve-2016-0984-adobe-flash-player-and-air-use-after-free-vulnerability","title":"Adobe Flash Player and AIR Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-0984-adobe-flash-player-and-air-use-after-free-vulnerability"},{"cve":"CVE-2016-1010","slug":"cve-2016-1010-adobe-flash-player-and-air-integer-overflow-vulnerability","title":"Adobe Flash Player and AIR Integer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-1010-adobe-flash-player-and-air-integer-overflow-vulnerability"},{"cve":"CVE-2016-3393","slug":"cve-2016-3393-microsoft-windows-graphics-device-interface-gdi-remote-code","title":"Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3393-microsoft-windows-graphics-device-interface-gdi-remote-code"},{"cve":"CVE-2016-7256","slug":"cve-2016-7256-microsoft-windows-open-type-font-remote-code-execution","title":"Microsoft Windows Open Type Font Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-7256-microsoft-windows-open-type-font-remote-code-execution"},{"cve":"CVE-2019-3010","slug":"cve-2019-3010-oracle-solaris-privilege-escalation-vulnerability","title":"Oracle Solaris Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","exploited_since":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-3010-oracle-solaris-privilege-escalation-vulnerability"},{"cve":"CVE-2017-8291","slug":"cve-2017-8291-artifex-ghostscript-type-confusion-vulnerability","title":"Artifex Ghostscript Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-8291-artifex-ghostscript-type-confusion-vulnerability"},{"cve":"CVE-2016-0162","slug":"cve-2016-0162-microsoft-internet-explorer-information-disclosure-vulnerability","title":"Microsoft Internet Explorer Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-0162-microsoft-internet-explorer-information-disclosure-vulnerability"},{"cve":"CVE-2017-0005","slug":"cve-2017-0005-microsoft-windows-graphics-device-interface-gdi-privilege","title":"Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0005-microsoft-windows-graphics-device-interface-gdi-privilege"},{"cve":"CVE-2016-3298","slug":"cve-2016-3298-microsoft-internet-explorer-messaging-api-information-disclosure","title":"Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3298-microsoft-internet-explorer-messaging-api-information-disclosure"},{"cve":"CVE-2016-3351","slug":"cve-2016-3351-microsoft-internet-explorer-and-edge-information-disclosure","title":"Microsoft Internet Explorer and Edge Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3351-microsoft-internet-explorer-and-edge-information-disclosure"},{"cve":"CVE-2017-0022","slug":"cve-2017-0022-microsoft-xml-core-services-information-disclosure-vulnerability","title":"Microsoft XML Core Services Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0022-microsoft-xml-core-services-information-disclosure-vulnerability"},{"cve":"CVE-2016-4655","slug":"cve-2016-4655-apple-ios-information-disclosure-vulnerability","title":"Apple iOS Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-4655-apple-ios-information-disclosure-vulnerability"},{"cve":"CVE-2016-4656","slug":"cve-2016-4656-apple-ios-memory-corruption-vulnerability","title":"Apple iOS Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-4656-apple-ios-memory-corruption-vulnerability"},{"cve":"CVE-2016-4657","slug":"cve-2016-4657-apple-ios-webkit-memory-corruption-vulnerability","title":"Apple iOS Webkit Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-4657-apple-ios-webkit-memory-corruption-vulnerability"},{"cve":"CVE-2016-6366","slug":"cve-2016-6366-cisco-adaptive-security-appliance-asa-snmp-buffer-overflow","title":"Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-6366-cisco-adaptive-security-appliance-asa-snmp-buffer-overflow"},{"cve":"CVE-2016-6367","slug":"cve-2016-6367-cisco-adaptive-security-appliance-asa-cli-remote-code-execution","title":"Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-6367-cisco-adaptive-security-appliance-asa-cli-remote-code-execution"},{"cve":"CVE-2017-0147","slug":"cve-2017-0147-microsoft-windows-smbv1-information-disclosure-vulnerability","title":"Microsoft Windows SMBv1 Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0147-microsoft-windows-smbv1-information-disclosure-vulnerability"},{"cve":"CVE-2017-0149","slug":"cve-2017-0149-microsoft-internet-explorer-memory-corruption-vulnerability","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0149-microsoft-internet-explorer-memory-corruption-vulnerability"},{"cve":"CVE-2017-0210","slug":"cve-2017-0210-microsoft-internet-explorer-privilege-escalation-vulnerability","title":"Microsoft Internet Explorer Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0210-microsoft-internet-explorer-privilege-escalation-vulnerability"},{"cve":"CVE-2017-18362","slug":"cve-2017-18362-kaseya-vsa-sql-injection-vulnerability","title":"Kaseya VSA SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-18362-kaseya-vsa-sql-injection-vulnerability"},{"cve":"CVE-2017-8543","slug":"cve-2017-8543-microsoft-windows-search-remote-code-execution-vulnerability","title":"Microsoft Windows Search Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-8543-microsoft-windows-search-remote-code-execution-vulnerability"},{"cve":"CVE-2018-19943","slug":"cve-2018-19943-qnap-nas-file-station-cross-site-scripting-vulnerability","title":"QNAP NAS File Station Cross-Site Scripting Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-19943-qnap-nas-file-station-cross-site-scripting-vulnerability"},{"cve":"CVE-2018-19949","slug":"cve-2018-19949-qnap-nas-file-station-command-injection-vulnerability","title":"QNAP NAS File Station Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-19949-qnap-nas-file-station-command-injection-vulnerability"},{"cve":"CVE-2018-19953","slug":"cve-2018-19953-qnap-nas-file-station-cross-site-scripting-vulnerability","title":"QNAP NAS File Station Cross-Site Scripting Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-19953-qnap-nas-file-station-cross-site-scripting-vulnerability"},{"cve":"CVE-2018-8611","slug":"cve-2018-8611-microsoft-windows-kernel-privilege-escalation-vulnerability","title":"Microsoft Windows Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T00:00:00+00:00","exploited_since":"2022-05-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8611-microsoft-windows-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2018-5002","slug":"cve-2018-5002-adobe-flash-player-stack-based-buffer-overflow-vulnerability","title":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-5002-adobe-flash-player-stack-based-buffer-overflow-vulnerability"},{"cve":"CVE-2018-8589","slug":"cve-2018-8589-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8589-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2019-0676","slug":"cve-2019-0676-microsoft-internet-explorer-information-disclosure-vulnerability","title":"Microsoft Internet Explorer Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0676-microsoft-internet-explorer-information-disclosure-vulnerability"},{"cve":"CVE-2019-0703","slug":"cve-2019-0703-microsoft-windows-smb-information-disclosure-vulnerability","title":"Microsoft Windows SMB Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0703-microsoft-windows-smb-information-disclosure-vulnerability"},{"cve":"CVE-2019-0880","slug":"cve-2019-0880-microsoft-windows-privilege-escalation-vulnerability","title":"Microsoft Windows Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0880-microsoft-windows-privilege-escalation-vulnerability"},{"cve":"CVE-2019-1130","slug":"cve-2019-1130-microsoft-windows-appx-deployment-service-privilege-escalation","title":"Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1130-microsoft-windows-appx-deployment-service-privilege-escalation"},{"cve":"CVE-2019-11707","slug":"cve-2019-11707-mozilla-firefox-and-thunderbird-type-confusion-vulnerability","title":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-11707-mozilla-firefox-and-thunderbird-type-confusion-vulnerability"},{"cve":"CVE-2019-11708","slug":"cve-2019-11708-mozilla-firefox-and-thunderbird-sandbox-escape-vulnerability","title":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-11708-mozilla-firefox-and-thunderbird-sandbox-escape-vulnerability"},{"cve":"CVE-2019-13720","slug":"cve-2019-13720-google-chrome-webaudio-use-after-free-vulnerability","title":"Google Chrome WebAudio Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-13720-google-chrome-webaudio-use-after-free-vulnerability"},{"cve":"CVE-2019-1385","slug":"cve-2019-1385-microsoft-windows-appx-deployment-extensions-privilege-escalation","title":"Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1385-microsoft-windows-appx-deployment-extensions-privilege-escalation"},{"cve":"CVE-2019-18426","slug":"cve-2019-18426-whatsapp-cross-site-scripting-vulnerability","title":"WhatsApp Cross-Site Scripting Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-18426-whatsapp-cross-site-scripting-vulnerability"},{"cve":"CVE-2019-7286","slug":"cve-2019-7286-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-7286-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2019-7287","slug":"cve-2019-7287-apple-ios-memory-corruption-vulnerability","title":"Apple iOS Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-7287-apple-ios-memory-corruption-vulnerability"},{"cve":"CVE-2019-8720","slug":"cve-2019-8720-webkitgtk-memory-corruption-vulnerability","title":"WebKitGTK Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-8720-webkitgtk-memory-corruption-vulnerability"},{"cve":"CVE-2020-0638","slug":"cve-2020-0638-microsoft-update-notification-manager-privilege-escalation","title":"Microsoft Update Notification Manager Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0638-microsoft-update-notification-manager-privilege-escalation"},{"cve":"CVE-2020-1027","slug":"cve-2020-1027-microsoft-windows-kernel-privilege-escalation-vulnerability","title":"Microsoft Windows Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1027-microsoft-windows-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2021-0920","slug":"cve-2021-0920-android-kernel-race-condition-vulnerability","title":"Android Kernel Race Condition Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-0920-android-kernel-race-condition-vulnerability"},{"cve":"CVE-2021-1048","slug":"cve-2021-1048-android-kernel-use-after-free-vulnerability","title":"Android Kernel Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1048-android-kernel-use-after-free-vulnerability"},{"cve":"CVE-2021-30883","slug":"cve-2021-30883-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30883-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2022-20821","slug":"cve-2022-20821-cisco-ios-xr-open-port-vulnerability","title":"Cisco IOS XR Open Port Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-20821-cisco-ios-xr-open-port-vulnerability"},{"cve":"CVE-2019-5786","slug":"cve-2019-5786-google-chrome-blink-use-after-free-vulnerability","title":"Google Puppeteer use-after-free in Chromium FileReader","severity":"critical","exploited":true,"published_at":"2020-09-02T18:25:43+00:00","exploited_since":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-5786-google-chrome-blink-use-after-free-vulnerability"},{"cve":"CVE-2022-30525","slug":"cve-2022-30525-zyxel-multiple-firewalls-os-command-injection-vulnerability","title":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-16T00:00:00+00:00","exploited_since":"2022-05-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-30525-zyxel-multiple-firewalls-os-command-injection-vulnerability"},{"cve":"CVE-2022-22947","slug":"cve-2022-22947-vmware-spring-cloud-gateway-code-injection-vulnerability","title":"Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured","severity":"critical","exploited":true,"published_at":"2022-03-04T00:00:15+00:00","exploited_since":"2022-05-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22947-vmware-spring-cloud-gateway-code-injection-vulnerability"},{"cve":"CVE-2022-1388","slug":"cve-2022-1388-f5-big-ip-missing-authentication-vulnerability","title":"F5 BIG-IP Missing Authentication Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-10T00:00:00+00:00","exploited_since":"2022-05-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-1388-f5-big-ip-missing-authentication-vulnerability"},{"cve":"CVE-2021-1789","slug":"cve-2021-1789-apple-multiple-products-type-confusion-vulnerability","title":"Apple Multiple Products Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-04T00:00:00+00:00","exploited_since":"2022-05-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1789-apple-multiple-products-type-confusion-vulnerability"},{"cve":"CVE-2014-0160","slug":"cve-2014-0160-openssl-information-disclosure-vulnerability","title":"OpenSSL Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-04T00:00:00+00:00","exploited_since":"2022-05-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-0160-openssl-information-disclosure-vulnerability"},{"cve":"CVE-2014-0322","slug":"cve-2014-0322-microsoft-internet-explorer-use-after-free-vulnerability","title":"Microsoft Internet Explorer Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-04T00:00:00+00:00","exploited_since":"2022-05-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-0322-microsoft-internet-explorer-use-after-free-vulnerability"},{"cve":"CVE-2014-4113","slug":"cve-2014-4113-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-04T00:00:00+00:00","exploited_since":"2022-05-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-4113-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2019-8506","slug":"cve-2019-8506-apple-multiple-products-type-confusion-vulnerability","title":"Apple Multiple Products Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-04T00:00:00+00:00","exploited_since":"2022-05-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-8506-apple-multiple-products-type-confusion-vulnerability"},{"cve":"CVE-2019-1003029","slug":"cve-2019-1003029-jenkins-script-security-plugin-sandbox-bypass-vulnerability","title":"Sandbox bypass in Script Security Plugin","severity":"critical","exploited":true,"published_at":"2022-05-13T01:00:55+00:00","exploited_since":"2022-04-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1003029-jenkins-script-security-plugin-sandbox-bypass-vulnerability"},{"cve":"CVE-2021-41357","slug":"cve-2021-41357-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-25T00:00:00+00:00","exploited_since":"2022-04-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-41357-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2022-0847","slug":"cve-2022-0847-linux-kernel-privilege-escalation-vulnerability","title":"Linux Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-25T00:00:00+00:00","exploited_since":"2022-04-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-0847-linux-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2022-21919","slug":"cve-2022-21919-microsoft-windows-user-profile-service-privilege-escalation","title":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-25T00:00:00+00:00","exploited_since":"2022-04-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-21919-microsoft-windows-user-profile-service-privilege-escalation"},{"cve":"CVE-2022-26904","slug":"cve-2022-26904-microsoft-windows-user-profile-service-privilege-escalation","title":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-25T00:00:00+00:00","exploited_since":"2022-04-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26904-microsoft-windows-user-profile-service-privilege-escalation"},{"cve":"CVE-2022-29464","slug":"cve-2022-29464-wso2-multiple-products-unrestrictive-upload-of-file-vulnerability","title":"WSO2 Multiple Products Unrestrictive Upload of File Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-25T00:00:00+00:00","exploited_since":"2022-04-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-29464-wso2-multiple-products-unrestrictive-upload-of-file-vulnerability"},{"cve":"CVE-2021-40450","slug":"cve-2021-40450-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-25T00:00:00+00:00","exploited_since":"2022-04-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-40450-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2018-6882","slug":"cve-2018-6882-synacor-zimbra-collaboration-suite-zcs-cross-site-scripting-xss","title":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-19T00:00:00+00:00","exploited_since":"2022-04-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-6882-synacor-zimbra-collaboration-suite-zcs-cross-site-scripting-xss"},{"cve":"CVE-2019-3568","slug":"cve-2019-3568-whatsapp-voip-stack-buffer-overflow-vulnerability","title":"WhatsApp VOIP Stack Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-19T00:00:00+00:00","exploited_since":"2022-04-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-3568-whatsapp-voip-stack-buffer-overflow-vulnerability"},{"cve":"CVE-2022-22718","slug":"cve-2022-22718-microsoft-windows-print-spooler-privilege-escalation","title":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-19T00:00:00+00:00","exploited_since":"2022-04-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22718-microsoft-windows-print-spooler-privilege-escalation"},{"cve":"CVE-2010-5330","slug":"cve-2010-5330-ubiquiti-airos-command-injection-vulnerability","title":"Ubiquiti AirOS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-15T00:00:00+00:00","exploited_since":"2022-04-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-5330-ubiquiti-airos-command-injection-vulnerability"},{"cve":"CVE-2018-7841","slug":"cve-2018-7841-schneider-electric-u-motion-builder-sql-injection-vulnerability","title":"Schneider Electric U.motion Builder SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-15T00:00:00+00:00","exploited_since":"2022-04-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-7841-schneider-electric-u-motion-builder-sql-injection-vulnerability"},{"cve":"CVE-2016-4523","slug":"cve-2016-4523-trihedral-vtscada-formerly-vts-denial-of-service-vulnerability","title":"Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-15T00:00:00+00:00","exploited_since":"2022-04-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-4523-trihedral-vtscada-formerly-vts-denial-of-service-vulnerability"},{"cve":"CVE-2022-22960","slug":"cve-2022-22960-vmware-multiple-products-privilege-escalation-vulnerability","title":"VMware Multiple Products Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-15T00:00:00+00:00","exploited_since":"2022-04-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22960-vmware-multiple-products-privilege-escalation-vulnerability"},{"cve":"CVE-2019-3929","slug":"cve-2019-3929-crestron-multiple-products-command-injection-vulnerability","title":"Crestron Multiple Products Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-15T00:00:00+00:00","exploited_since":"2022-04-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-3929-crestron-multiple-products-command-injection-vulnerability"},{"cve":"CVE-2014-0780","slug":"cve-2014-0780-indusoft-web-studio-ntwebserver-directory-traversal-vulnerability","title":"InduSoft Web Studio NTWebServer Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-15T00:00:00+00:00","exploited_since":"2022-04-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-0780-indusoft-web-studio-ntwebserver-directory-traversal-vulnerability"},{"cve":"CVE-2022-1364","slug":"cve-2022-1364-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-15T00:00:00+00:00","exploited_since":"2022-04-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-1364-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2007-3010","slug":"cve-2007-3010-alcatel-omnipcx-enterprise-remote-code-execution-vulnerability","title":"Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-15T00:00:00+00:00","exploited_since":"2022-04-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2007-3010-alcatel-omnipcx-enterprise-remote-code-execution-vulnerability"},{"cve":"CVE-2019-16057","slug":"cve-2019-16057-d-link-dns-320-remote-code-execution-vulnerability","title":"D-Link DNS-320 Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-15T00:00:00+00:00","exploited_since":"2022-04-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-16057-d-link-dns-320-remote-code-execution-vulnerability"},{"cve":"CVE-2022-22954","slug":"cve-2022-22954-vmware-workspace-one-access-and-identity-manager-server-side","title":"VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-14T00:00:00+00:00","exploited_since":"2022-04-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22954-vmware-workspace-one-access-and-identity-manager-server-side"},{"cve":"CVE-2018-7602","slug":"cve-2018-7602-drupal-core-remote-code-execution-vulnerability","title":"Drupal Core Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2024-04-23T22:36:09+00:00","exploited_since":"2022-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-7602-drupal-core-remote-code-execution-vulnerability"},{"cve":"CVE-2015-5122","slug":"cve-2015-5122-adobe-flash-player-use-after-free-vulnerability","title":"Adobe Flash Player Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-13T00:00:00+00:00","exploited_since":"2022-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-5122-adobe-flash-player-use-after-free-vulnerability"},{"cve":"CVE-2014-9163","slug":"cve-2014-9163-adobe-flash-player-stack-based-buffer-overflow-vulnerability","title":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-13T00:00:00+00:00","exploited_since":"2022-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-9163-adobe-flash-player-stack-based-buffer-overflow-vulnerability"},{"cve":"CVE-2015-0311","slug":"cve-2015-0311-adobe-flash-player-remote-code-execution-vulnerability","title":"Adobe Flash Player Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-13T00:00:00+00:00","exploited_since":"2022-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-0311-adobe-flash-player-remote-code-execution-vulnerability"},{"cve":"CVE-2015-0313","slug":"cve-2015-0313-adobe-flash-player-use-after-free-vulnerability","title":"Adobe Flash Player Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-13T00:00:00+00:00","exploited_since":"2022-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-0313-adobe-flash-player-use-after-free-vulnerability"},{"cve":"CVE-2015-2502","slug":"cve-2015-2502-microsoft-internet-explorer-memory-corruption-vulnerability","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-13T00:00:00+00:00","exploited_since":"2022-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-2502-microsoft-internet-explorer-memory-corruption-vulnerability"},{"cve":"CVE-2015-3113","slug":"cve-2015-3113-adobe-flash-player-heap-based-buffer-overflow-vulnerability","title":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-13T00:00:00+00:00","exploited_since":"2022-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-3113-adobe-flash-player-heap-based-buffer-overflow-vulnerability"},{"cve":"CVE-2015-5123","slug":"cve-2015-5123-adobe-flash-player-use-after-free-vulnerability","title":"Adobe Flash Player Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-13T00:00:00+00:00","exploited_since":"2022-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-5123-adobe-flash-player-use-after-free-vulnerability"},{"cve":"CVE-2018-20753","slug":"cve-2018-20753-kaseya-vsa-remote-code-execution-vulnerability","title":"Kaseya VSA Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-13T00:00:00+00:00","exploited_since":"2022-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-20753-kaseya-vsa-remote-code-execution-vulnerability"},{"cve":"CVE-2022-24521","slug":"cve-2022-24521-microsoft-windows-clfs-driver-privilege-escalation-vulnerability","title":"Microsoft Windows CLFS Driver Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-13T00:00:00+00:00","exploited_since":"2022-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-24521-microsoft-windows-clfs-driver-privilege-escalation-vulnerability"},{"cve":"CVE-2021-42287","slug":"cve-2021-42287-microsoft-active-directory-domain-services-privilege-escalation","title":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-11T00:00:00+00:00","exploited_since":"2022-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-42287-microsoft-active-directory-domain-services-privilege-escalation"},{"cve":"CVE-2022-23176","slug":"cve-2022-23176-watchguard-firebox-and-xtm-privilege-escalation-vulnerability","title":"WatchGuard Firebox and XTM Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-11T00:00:00+00:00","exploited_since":"2022-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-23176-watchguard-firebox-and-xtm-privilege-escalation-vulnerability"},{"cve":"CVE-2021-42278","slug":"cve-2021-42278-microsoft-active-directory-domain-services-privilege-escalation","title":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-11T00:00:00+00:00","exploited_since":"2022-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-42278-microsoft-active-directory-domain-services-privilege-escalation"},{"cve":"CVE-2021-39793","slug":"cve-2021-39793-google-pixel-out-of-bounds-write-vulnerability","title":"Google Pixel Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-11T00:00:00+00:00","exploited_since":"2022-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-39793-google-pixel-out-of-bounds-write-vulnerability"},{"cve":"CVE-2021-27852","slug":"cve-2021-27852-checkbox-survey-deserialization-of-untrusted-data-vulnerability","title":"Checkbox Survey Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-11T00:00:00+00:00","exploited_since":"2022-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27852-checkbox-survey-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2021-22600","slug":"cve-2021-22600-linux-kernel-privilege-escalation-vulnerability","title":"Linux Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-11T00:00:00+00:00","exploited_since":"2022-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22600-linux-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2020-2509","slug":"cve-2020-2509-qnap-network-attached-storage-nas-command-injection-vulnerability","title":"QNAP Network-Attached Storage (NAS) Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-11T00:00:00+00:00","exploited_since":"2022-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-2509-qnap-network-attached-storage-nas-command-injection-vulnerability"},{"cve":"CVE-2017-11317","slug":"cve-2017-11317-telerik-ui-for-asp-net-ajax-unrestricted-file-upload","title":"Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-11T00:00:00+00:00","exploited_since":"2022-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-11317-telerik-ui-for-asp-net-ajax-unrestricted-file-upload"},{"cve":"CVE-2017-0148","slug":"cve-2017-0148-microsoft-smbv1-server-remote-code-execution-vulnerability","title":"Microsoft SMBv1 Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-06T00:00:00+00:00","exploited_since":"2022-04-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0148-microsoft-smbv1-server-remote-code-execution-vulnerability"},{"cve":"CVE-2021-3156","slug":"cve-2021-3156-sudo-heap-based-buffer-overflow-vulnerability","title":"Sudo Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-06T00:00:00+00:00","exploited_since":"2022-04-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-3156-sudo-heap-based-buffer-overflow-vulnerability"},{"cve":"CVE-2021-31166","slug":"cve-2021-31166-microsoft-http-protocol-stack-remote-code-execution-vulnerability","title":"Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-06T00:00:00+00:00","exploited_since":"2022-04-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-31166-microsoft-http-protocol-stack-remote-code-execution-vulnerability"},{"cve":"CVE-2022-22675","slug":"cve-2022-22675-apple-macos-out-of-bounds-write-vulnerability","title":"Apple macOS Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-04T00:00:00+00:00","exploited_since":"2022-04-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22675-apple-macos-out-of-bounds-write-vulnerability"},{"cve":"CVE-2022-22674","slug":"cve-2022-22674-apple-macos-out-of-bounds-read-vulnerability","title":"Apple macOS Out-of-Bounds Read Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-04T00:00:00+00:00","exploited_since":"2022-04-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22674-apple-macos-out-of-bounds-read-vulnerability"},{"cve":"CVE-2021-45382","slug":"cve-2021-45382-d-link-multiple-routers-remote-code-execution-vulnerability","title":"D-Link Multiple Routers Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-04T00:00:00+00:00","exploited_since":"2022-04-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-45382-d-link-multiple-routers-remote-code-execution-vulnerability"},{"cve":"CVE-2022-22965","slug":"cve-2022-22965-spring-framework-jdk-9-remote-code-execution-vulnerability","title":"Remote Code Execution in Spring Framework","severity":"critical","exploited":true,"published_at":"2022-03-31T18:30:50+00:00","exploited_since":"2022-04-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22965-spring-framework-jdk-9-remote-code-execution-vulnerability"},{"cve":"CVE-2018-10561","slug":"cve-2018-10561-dasan-gpon-routers-authentication-bypass-vulnerability","title":"Dasan GPON Routers Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-31T00:00:00+00:00","exploited_since":"2022-03-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-10561-dasan-gpon-routers-authentication-bypass-vulnerability"},{"cve":"CVE-2018-10562","slug":"cve-2018-10562-dasan-gpon-routers-command-injection-vulnerability","title":"Dasan GPON Routers Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-31T00:00:00+00:00","exploited_since":"2022-03-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-10562-dasan-gpon-routers-command-injection-vulnerability"},{"cve":"CVE-2021-21551","slug":"cve-2021-21551-dell-dbutil-driver-insufficient-access-control-vulnerability","title":"Dell dbutil Driver Insufficient Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-31T00:00:00+00:00","exploited_since":"2022-03-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21551-dell-dbutil-driver-insufficient-access-control-vulnerability"},{"cve":"CVE-2021-28799","slug":"cve-2021-28799-qnap-nas-improper-authorization-vulnerability","title":"QNAP NAS Improper Authorization Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-31T00:00:00+00:00","exploited_since":"2022-03-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-28799-qnap-nas-improper-authorization-vulnerability"},{"cve":"CVE-2021-34484","slug":"cve-2021-34484-microsoft-windows-user-profile-service-privilege-escalation","title":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-31T00:00:00+00:00","exploited_since":"2022-03-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-34484-microsoft-windows-user-profile-service-privilege-escalation"},{"cve":"CVE-2022-26871","slug":"cve-2022-26871-trend-micro-apex-central-arbitrary-file-upload-vulnerability","title":"Trend Micro Apex Central Arbitrary File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-31T00:00:00+00:00","exploited_since":"2022-03-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26871-trend-micro-apex-central-arbitrary-file-upload-vulnerability"},{"cve":"CVE-2022-1040","slug":"cve-2022-1040-sophos-firewall-authentication-bypass-vulnerability","title":"Sophos Firewall Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-31T00:00:00+00:00","exploited_since":"2022-03-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-1040-sophos-firewall-authentication-bypass-vulnerability"},{"cve":"CVE-2016-7201","slug":"cve-2016-7201-microsoft-edge-memory-corruption-vulnerability","title":"ChakraCore RCE Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-14T02:22:42+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-7201-microsoft-edge-memory-corruption-vulnerability"},{"cve":"CVE-2016-7200","slug":"cve-2016-7200-microsoft-edge-memory-corruption-vulnerability","title":"ChakraCore RCE Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-14T02:22:42+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-7200-microsoft-edge-memory-corruption-vulnerability"},{"cve":"CVE-2021-26085","slug":"cve-2021-26085-atlassian-confluence-server-pre-authorization-arbitrary-file-read","title":"Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-26085-atlassian-confluence-server-pre-authorization-arbitrary-file-read"},{"cve":"CVE-2012-2034","slug":"cve-2012-2034-adobe-flash-player-memory-corruption-vulnerability","title":"Adobe Flash Player Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-2034-adobe-flash-player-memory-corruption-vulnerability"},{"cve":"CVE-2012-2539","slug":"cve-2012-2539-microsoft-word-remote-code-execution-vulnerability","title":"Microsoft Word Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-2539-microsoft-word-remote-code-execution-vulnerability"},{"cve":"CVE-2010-4398","slug":"cve-2010-4398-microsoft-windows-kernel-stack-based-buffer-overflow-vulnerability","title":"Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-4398-microsoft-windows-kernel-stack-based-buffer-overflow-vulnerability"},{"cve":"CVE-2011-2005","slug":"cve-2011-2005-microsoft-ancillary-function-driver-afd-sys-improper-input","title":"Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2011-2005-microsoft-ancillary-function-driver-afd-sys-improper-input"},{"cve":"CVE-2012-0518","slug":"cve-2012-0518-oracle-fusion-middleware-unspecified-vulnerability","title":"Oracle Fusion Middleware Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-0518-oracle-fusion-middleware-unspecified-vulnerability"},{"cve":"CVE-2012-5076","slug":"cve-2012-5076-oracle-java-se-sandbox-bypass-vulnerability","title":"Oracle Java SE Sandbox Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-5076-oracle-java-se-sandbox-bypass-vulnerability"},{"cve":"CVE-2013-1690","slug":"cve-2013-1690-mozilla-firefox-and-thunderbird-denial-of-service-vulnerability","title":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-1690-mozilla-firefox-and-thunderbird-denial-of-service-vulnerability"},{"cve":"CVE-2013-2465","slug":"cve-2013-2465-oracle-java-se-unspecified-vulnerability","title":"Oracle Java SE Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-2465-oracle-java-se-unspecified-vulnerability"},{"cve":"CVE-2013-2551","slug":"cve-2013-2551-microsoft-internet-explorer-use-after-free-vulnerability","title":"Microsoft Internet Explorer Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-2551-microsoft-internet-explorer-use-after-free-vulnerability"},{"cve":"CVE-2013-2729","slug":"cve-2013-2729-adobe-reader-and-acrobat-arbitrary-integer-overflow-vulnerability","title":"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-2729-adobe-reader-and-acrobat-arbitrary-integer-overflow-vulnerability"},{"cve":"CVE-2013-3660","slug":"cve-2013-3660-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-3660-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2015-1770","slug":"cve-2015-1770-microsoft-office-uninitialized-memory-use-vulnerability","title":"Microsoft Office Uninitialized Memory Use Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-1770-microsoft-office-uninitialized-memory-use-vulnerability"},{"cve":"CVE-2015-2419","slug":"cve-2015-2419-microsoft-internet-explorer-memory-corruption-vulnerability","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-2419-microsoft-internet-explorer-memory-corruption-vulnerability"},{"cve":"CVE-2015-2426","slug":"cve-2015-2426-microsoft-windows-adobe-type-manager-library-remote-code-execution","title":"Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-2426-microsoft-windows-adobe-type-manager-library-remote-code-execution"},{"cve":"CVE-2016-0040","slug":"cve-2016-0040-microsoft-windows-kernel-privilege-escalation-vulnerability","title":"Microsoft Windows Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-0040-microsoft-windows-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2016-0151","slug":"cve-2016-0151-microsoft-windows-csrss-security-feature-bypass-vulnerability","title":"Microsoft Windows CSRSS Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-0151-microsoft-windows-csrss-security-feature-bypass-vulnerability"},{"cve":"CVE-2016-0189","slug":"cve-2016-0189-microsoft-internet-explorer-memory-corruption-vulnerability","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-0189-microsoft-internet-explorer-memory-corruption-vulnerability"},{"cve":"CVE-2017-0037","slug":"cve-2017-0037-microsoft-edge-and-internet-explorer-type-confusion-vulnerability","title":"Microsoft Edge and Internet Explorer Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0037-microsoft-edge-and-internet-explorer-type-confusion-vulnerability"},{"cve":"CVE-2017-0059","slug":"cve-2017-0059-microsoft-internet-explorer-information-disclosure-vulnerability","title":"Microsoft Internet Explorer Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0059-microsoft-internet-explorer-information-disclosure-vulnerability"},{"cve":"CVE-2017-0213","slug":"cve-2017-0213-microsoft-windows-privilege-escalation-vulnerability","title":"Microsoft Windows Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0213-microsoft-windows-privilege-escalation-vulnerability"},{"cve":"CVE-2018-8440","slug":"cve-2018-8440-microsoft-windows-privilege-escalation-vulnerability","title":"Microsoft Windows Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8440-microsoft-windows-privilege-escalation-vulnerability"},{"cve":"CVE-2018-8405","slug":"cve-2018-8405-microsoft-directx-graphics-kernel-privilege-escalation","title":"Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8405-microsoft-directx-graphics-kernel-privilege-escalation"},{"cve":"CVE-2018-8406","slug":"cve-2018-8406-microsoft-directx-graphics-kernel-privilege-escalation","title":"Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8406-microsoft-directx-graphics-kernel-privilege-escalation"},{"cve":"CVE-2019-7483","slug":"cve-2019-7483-sonicwall-sma100-directory-traversal-vulnerability","title":"SonicWall SMA100 Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-7483-sonicwall-sma100-directory-traversal-vulnerability"},{"cve":"CVE-2021-20028","slug":"cve-2021-20028-sonicwall-secure-remote-access-sra-sql-injection-vulnerability","title":"SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20028-sonicwall-secure-remote-access-sra-sql-injection-vulnerability"},{"cve":"CVE-2021-34486","slug":"cve-2021-34486-microsoft-windows-event-tracing-privilege-escalation","title":"Microsoft Windows Event Tracing Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-34486-microsoft-windows-event-tracing-privilege-escalation"},{"cve":"CVE-2021-38646","slug":"cve-2021-38646-microsoft-office-access-connectivity-engine-remote-code-execution","title":"Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-38646-microsoft-office-access-connectivity-engine-remote-code-execution"},{"cve":"CVE-2022-0543","slug":"cve-2022-0543-debian-specific-redis-server-lua-sandbox-escape-vulnerability","title":"Debian-specific Redis Server Lua Sandbox Escape Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-0543-debian-specific-redis-server-lua-sandbox-escape-vulnerability"},{"cve":"CVE-2022-1096","slug":"cve-2022-1096-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","exploited_since":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-1096-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2014-3120","slug":"cve-2014-3120-elasticsearch-remote-code-execution-vulnerability","title":"Elasticsearch Improper Access Control vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-17T03:28:58+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-3120-elasticsearch-remote-code-execution-vulnerability"},{"cve":"CVE-2015-1427","slug":"cve-2015-1427-elasticsearch-groovy-scripting-engine-remote-code-execution","title":"Improper Access Control in Elasticsearch","severity":"critical","exploited":true,"published_at":"2022-05-14T02:49:44+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-1427-elasticsearch-groovy-scripting-engine-remote-code-execution"},{"cve":"CVE-2017-12617","slug":"cve-2017-12617-apache-tomcat-remote-code-execution-vulnerability","title":"Unrestricted Upload of File with Dangerous Type Apache Tomcat","severity":"critical","exploited":true,"published_at":"2022-05-14T01:07:15+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-12617-apache-tomcat-remote-code-execution-vulnerability"},{"cve":"CVE-2019-6340","slug":"cve-2019-6340-drupal-core-remote-code-execution-vulnerability","title":"Drupal Core Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-13T01:22:41+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-6340-drupal-core-remote-code-execution-vulnerability"},{"cve":"CVE-2019-1003030","slug":"cve-2019-1003030-jenkins-matrix-project-plugin-remote-code-execution","title":"Sandbox bypass in Jenkins Pipeline: Groovy Plugin","severity":"critical","exploited":true,"published_at":"2022-05-13T01:14:26+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1003030-jenkins-matrix-project-plugin-remote-code-execution"},{"cve":"CVE-2013-2251","slug":"cve-2013-2251-apache-struts-improper-input-validation-vulnerability","title":"Code injection in Apache Struts","severity":"critical","exploited":true,"published_at":"2022-05-13T01:14:26+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-2251-apache-struts-improper-input-validation-vulnerability"},{"cve":"CVE-2017-0146","slug":"cve-2017-0146-microsoft-windows-smb-remote-code-execution-vulnerability","title":"Microsoft Windows SMB Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0146-microsoft-windows-smb-remote-code-execution-vulnerability"},{"cve":"CVE-2005-2773","slug":"cve-2005-2773-hp-openview-network-node-manager-remote-code-execution","title":"HP OpenView Network Node Manager Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2005-2773-hp-openview-network-node-manager-remote-code-execution"},{"cve":"CVE-2009-0927","slug":"cve-2009-0927-adobe-reader-and-adobe-acrobat-stack-based-buffer-overflow","title":"Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-0927-adobe-reader-and-adobe-acrobat-stack-based-buffer-overflow"},{"cve":"CVE-2009-1151","slug":"cve-2009-1151-phpmyadmin-remote-code-execution-vulnerability","title":"phpMyAdmin Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-1151-phpmyadmin-remote-code-execution-vulnerability"},{"cve":"CVE-2009-2055","slug":"cve-2009-2055-cisco-ios-xr-border-gateway-protocol-bgp-denial-of-service","title":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-2055-cisco-ios-xr-border-gateway-protocol-bgp-denial-of-service"},{"cve":"CVE-2010-2861","slug":"cve-2010-2861-adobe-coldfusion-directory-traversal-vulnerability","title":"Adobe ColdFusion Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-2861-adobe-coldfusion-directory-traversal-vulnerability"},{"cve":"CVE-2010-3035","slug":"cve-2010-3035-cisco-ios-xr-border-gateway-protocol-bgp-denial-of-service","title":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-3035-cisco-ios-xr-border-gateway-protocol-bgp-denial-of-service"},{"cve":"CVE-2010-4344","slug":"cve-2010-4344-exim-heap-based-buffer-overflow-vulnerability","title":"Exim Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-4344-exim-heap-based-buffer-overflow-vulnerability"},{"cve":"CVE-2010-4345","slug":"cve-2010-4345-exim-privilege-escalation-vulnerability","title":"Exim Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-4345-exim-privilege-escalation-vulnerability"},{"cve":"CVE-2012-1823","slug":"cve-2012-1823-php-cgi-query-string-parameter-vulnerability","title":"PHP-CGI Query String Parameter Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-1823-php-cgi-query-string-parameter-vulnerability"},{"cve":"CVE-2013-4810","slug":"cve-2013-4810-hp-multiple-products-remote-code-execution-vulnerability","title":"HP Multiple Products Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-4810-hp-multiple-products-remote-code-execution-vulnerability"},{"cve":"CVE-2013-5223","slug":"cve-2013-5223-d-link-dsl-2760u-gateway-cross-site-scripting-vulnerability","title":"D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-5223-d-link-dsl-2760u-gateway-cross-site-scripting-vulnerability"},{"cve":"CVE-2014-6287","slug":"cve-2014-6287-rejetto-http-file-server-hfs-remote-code-execution-vulnerability","title":"Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-6287-rejetto-http-file-server-hfs-remote-code-execution-vulnerability"},{"cve":"CVE-2014-6324","slug":"cve-2014-6324-microsoft-kerberos-key-distribution-center-kdc-privilege","title":"Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-6324-microsoft-kerberos-key-distribution-center-kdc-privilege"},{"cve":"CVE-2014-6332","slug":"cve-2014-6332-microsoft-windows-object-linking-embedding-ole-automation-array","title":"Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-6332-microsoft-windows-object-linking-embedding-ole-automation-array"},{"cve":"CVE-2015-0666","slug":"cve-2015-0666-cisco-prime-data-center-network-manager-dcnm-directory-traversal","title":"Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-0666-cisco-prime-data-center-network-manager-dcnm-directory-traversal"},{"cve":"CVE-2015-1187","slug":"cve-2015-1187-d-link-and-trendnet-multiple-devices-remote-code-execution","title":"D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-1187-d-link-and-trendnet-multiple-devices-remote-code-execution"},{"cve":"CVE-2015-3035","slug":"cve-2015-3035-tp-link-multiple-archer-devices-directory-traversal-vulnerability","title":"TP-Link Multiple Archer Devices Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-3035-tp-link-multiple-archer-devices-directory-traversal-vulnerability"},{"cve":"CVE-2015-4068","slug":"cve-2015-4068-arcserve-unified-data-protection-udp-directory-traversal","title":"Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-4068-arcserve-unified-data-protection-udp-directory-traversal"},{"cve":"CVE-2016-10174","slug":"cve-2016-10174-netgear-wnr2000v5-router-buffer-overflow-vulnerability","title":"NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-10174-netgear-wnr2000v5-router-buffer-overflow-vulnerability"},{"cve":"CVE-2016-11021","slug":"cve-2016-11021-d-link-dcs-930l-devices-os-command-injection-vulnerability","title":"D-Link DCS-930L Devices OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-11021-d-link-dcs-930l-devices-os-command-injection-vulnerability"},{"cve":"CVE-2016-1555","slug":"cve-2016-1555-netgear-multiple-wap-devices-command-injection-vulnerability","title":"NETGEAR Multiple WAP Devices Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-1555-netgear-multiple-wap-devices-command-injection-vulnerability"},{"cve":"CVE-2016-4171","slug":"cve-2016-4171-adobe-flash-player-remote-code-execution-vulnerability","title":"Adobe Flash Player Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-4171-adobe-flash-player-remote-code-execution-vulnerability"},{"cve":"CVE-2016-7892","slug":"cve-2016-7892-adobe-flash-player-use-after-free-vulnerability","title":"Adobe Flash Player Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-7892-adobe-flash-player-use-after-free-vulnerability"},{"cve":"CVE-2017-3881","slug":"cve-2017-3881-cisco-ios-and-ios-xe-remote-code-execution-vulnerability","title":"Cisco IOS and IOS XE Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-3881-cisco-ios-and-ios-xe-remote-code-execution-vulnerability"},{"cve":"CVE-2018-14839","slug":"cve-2018-14839-lg-n1a1-nas-remote-command-execution-vulnerability","title":"LG N1A1 NAS Remote Command Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-14839-lg-n1a1-nas-remote-command-execution-vulnerability"},{"cve":"CVE-2017-6316","slug":"cve-2017-6316-citrix-multiple-products-remote-code-execution-vulnerability","title":"Citrix Multiple Products Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6316-citrix-multiple-products-remote-code-execution-vulnerability"},{"cve":"CVE-2017-6334","slug":"cve-2017-6334-netgear-dgn2200-devices-os-command-injection-vulnerability","title":"NETGEAR DGN2200 Devices OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6334-netgear-dgn2200-devices-os-command-injection-vulnerability"},{"cve":"CVE-2018-0125","slug":"cve-2018-0125-cisco-vpn-routers-remote-code-execution-vulnerability","title":"Cisco VPN Routers Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0125-cisco-vpn-routers-remote-code-execution-vulnerability"},{"cve":"CVE-2018-0147","slug":"cve-2018-0147-cisco-secure-access-control-system-java-deserialization","title":"Cisco Secure Access Control System Java Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0147-cisco-secure-access-control-system-java-deserialization"},{"cve":"CVE-2018-11138","slug":"cve-2018-11138-quest-kace-system-management-appliance-remote-command-execution","title":"Quest KACE System Management Appliance Remote Command Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-11138-quest-kace-system-management-appliance-remote-command-execution"},{"cve":"CVE-2018-6961","slug":"cve-2018-6961-vmware-sd-wan-edge-by-velocloud-command-injection-vulnerability","title":"VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-6961-vmware-sd-wan-edge-by-velocloud-command-injection-vulnerability"},{"cve":"CVE-2018-8373","slug":"cve-2018-8373-microsoft-scripting-engine-memory-corruption-vulnerability","title":"Microsoft Scripting Engine Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8373-microsoft-scripting-engine-memory-corruption-vulnerability"},{"cve":"CVE-2018-8414","slug":"cve-2018-8414-microsoft-windows-shell-remote-code-execution-vulnerability","title":"Microsoft Windows Shell Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8414-microsoft-windows-shell-remote-code-execution-vulnerability"},{"cve":"CVE-2019-0903","slug":"cve-2019-0903-microsoft-gdi-remote-code-execution-vulnerability","title":"Microsoft GDI Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0903-microsoft-gdi-remote-code-execution-vulnerability"},{"cve":"CVE-2019-10068","slug":"cve-2019-10068-kentico-xperience-deserialization-of-untrusted-data-vulnerability","title":"Kentico Xperience Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-10068-kentico-xperience-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2019-11043","slug":"cve-2019-11043-php-fastcgi-process-manager-fpm-buffer-overflow-vulnerability","title":"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-11043-php-fastcgi-process-manager-fpm-buffer-overflow-vulnerability"},{"cve":"CVE-2019-12989","slug":"cve-2019-12989-citrix-sd-wan-and-netscaler-sql-injection-vulnerability","title":"Citrix SD-WAN and NetScaler SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-12989-citrix-sd-wan-and-netscaler-sql-injection-vulnerability"},{"cve":"CVE-2019-12991","slug":"cve-2019-12991-citrix-sd-wan-and-netscaler-command-injection-vulnerability","title":"Citrix SD-WAN and NetScaler Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-12991-citrix-sd-wan-and-netscaler-command-injection-vulnerability"},{"cve":"CVE-2019-15107","slug":"cve-2019-15107-webmin-command-injection-vulnerability","title":"Webmin Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-15107-webmin-command-injection-vulnerability"},{"cve":"CVE-2019-16920","slug":"cve-2019-16920-d-link-multiple-routers-command-injection-vulnerability","title":"D-Link Multiple Routers Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-16920-d-link-multiple-routers-command-injection-vulnerability"},{"cve":"CVE-2019-2616","slug":"cve-2019-2616-oracle-bi-publisher-unauthorized-access-vulnerability","title":"Oracle BI Publisher Unauthorized Access Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-2616-oracle-bi-publisher-unauthorized-access-vulnerability"},{"cve":"CVE-2020-1631","slug":"cve-2020-1631-juniper-junos-os-path-traversal-vulnerability","title":"Juniper Junos OS Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1631-juniper-junos-os-path-traversal-vulnerability"},{"cve":"CVE-2020-2021","slug":"cve-2020-2021-palo-alto-networks-pan-os-authentication-bypass-vulnerability","title":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-2021-palo-alto-networks-pan-os-authentication-bypass-vulnerability"},{"cve":"CVE-2020-2506","slug":"cve-2020-2506-qnap-helpdesk-improper-access-control-vulnerability","title":"QNAP Helpdesk Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-2506-qnap-helpdesk-improper-access-control-vulnerability"},{"cve":"CVE-2020-25223","slug":"cve-2020-25223-sophos-sg-utm-remote-code-execution-vulnerability","title":"Sophos SG UTM Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-25223-sophos-sg-utm-remote-code-execution-vulnerability"},{"cve":"CVE-2020-7247","slug":"cve-2020-7247-opensmtpd-remote-code-execution-vulnerability","title":"OpenSMTPD Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-7247-opensmtpd-remote-code-execution-vulnerability"},{"cve":"CVE-2020-9054","slug":"cve-2020-9054-zyxel-multiple-nas-devices-os-command-injection-vulnerability","title":"Zyxel Multiple NAS Devices OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-9054-zyxel-multiple-nas-devices-os-command-injection-vulnerability"},{"cve":"CVE-2020-9377","slug":"cve-2020-9377-d-link-dir-610-devices-remote-command-execution","title":"D-Link DIR-610 Devices Remote Command Execution","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-9377-d-link-dir-610-devices-remote-command-execution"},{"cve":"CVE-2021-22941","slug":"cve-2021-22941-citrix-sharefile-improper-access-control-vulnerability","title":"Citrix ShareFile Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22941-citrix-sharefile-improper-access-control-vulnerability"},{"cve":"CVE-2022-21999","slug":"cve-2022-21999-microsoft-windows-print-spooler-privilege-escalation","title":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-21999-microsoft-windows-print-spooler-privilege-escalation"},{"cve":"CVE-2021-42237","slug":"cve-2021-42237-sitecore-xp-remote-command-execution-vulnerability","title":"Sitecore XP Remote Command Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-42237-sitecore-xp-remote-command-execution-vulnerability"},{"cve":"CVE-2022-26143","slug":"cve-2022-26143-micollab-mivoice-business-express-access-control-vulnerability","title":"MiCollab, MiVoice Business Express Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26143-micollab-mivoice-business-express-access-control-vulnerability"},{"cve":"CVE-2022-26318","slug":"cve-2022-26318-watchguard-firebox-and-xtm-appliances-arbitrary-code-execution","title":"WatchGuard Firebox and XTM Appliances Arbitrary Code Execution","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26318-watchguard-firebox-and-xtm-appliances-arbitrary-code-execution"},{"cve":"CVE-2020-1956","slug":"cve-2020-1956-apache-kylin-os-command-injection-vulnerability","title":"Command Injection in Kylin","severity":"critical","exploited":true,"published_at":"2020-07-27T22:51:44+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1956-apache-kylin-os-command-injection-vulnerability"},{"cve":"CVE-2020-5410","slug":"cve-2020-5410-vmware-tanzu-spring-cloud-config-directory-traversal-vulnerability","title":"Directory traversal attack in Spring Cloud Config","severity":"critical","exploited":true,"published_at":"2020-06-05T16:13:20+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-5410-vmware-tanzu-spring-cloud-config-directory-traversal-vulnerability"},{"cve":"CVE-2018-1273","slug":"cve-2018-1273-vmware-tanzu-spring-data-commons-property-binder-vulnerability","title":"Spring Data Commons remote code injection vulnerability","severity":"critical","exploited":true,"published_at":"2018-10-17T17:23:24+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-1273-vmware-tanzu-spring-data-commons-property-binder-vulnerability"},{"cve":"CVE-2017-12615","slug":"cve-2017-12615-apache-tomcat-on-windows-remote-code-execution-vulnerability","title":"When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server","severity":"critical","exploited":true,"published_at":"2018-10-17T16:30:31+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-12615-apache-tomcat-on-windows-remote-code-execution-vulnerability"},{"cve":"CVE-2014-0130","slug":"cve-2014-0130-ruby-on-rails-directory-traversal-vulnerability","title":"actionpack Path Traversal vulnerability","severity":"critical","exploited":true,"published_at":"2017-10-24T18:33:36+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-0130-ruby-on-rails-directory-traversal-vulnerability"},{"cve":"CVE-2016-0752","slug":"cve-2016-0752-ruby-on-rails-directory-traversal-vulnerability","title":"Directory traversal vulnerability in Action View in Ruby on Rails","severity":"critical","exploited":true,"published_at":"2017-10-24T18:33:35+00:00","exploited_since":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-0752-ruby-on-rails-directory-traversal-vulnerability"},{"cve":"CVE-2019-0841","slug":"cve-2019-0841-microsoft-windows-appx-deployment-service-appxsvc-privilege","title":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0841-microsoft-windows-appx-deployment-service-appxsvc-privilege"},{"cve":"CVE-2019-1064","slug":"cve-2019-1064-microsoft-windows-appx-deployment-service-appxsvc-privilege","title":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1064-microsoft-windows-appx-deployment-service-appxsvc-privilege"},{"cve":"CVE-2019-1069","slug":"cve-2019-1069-microsoft-task-scheduler-privilege-escalation-vulnerability","title":"Microsoft Task Scheduler Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1069-microsoft-task-scheduler-privilege-escalation-vulnerability"},{"cve":"CVE-2019-1129","slug":"cve-2019-1129-microsoft-windows-appx-deployment-service-appxsvc-privilege","title":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1129-microsoft-windows-appx-deployment-service-appxsvc-privilege"},{"cve":"CVE-2019-1132","slug":"cve-2019-1132-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1132-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2019-1315","slug":"cve-2019-1315-microsoft-windows-error-reporting-manager-privilege-escalation","title":"Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1315-microsoft-windows-error-reporting-manager-privilege-escalation"},{"cve":"CVE-2019-1322","slug":"cve-2019-1322-microsoft-windows-privilege-escalation-vulnerability","title":"Microsoft Windows Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1322-microsoft-windows-privilege-escalation-vulnerability"},{"cve":"CVE-2019-1405","slug":"cve-2019-1405-microsoft-windows-universal-plug-and-play-upnp-service-privilege","title":"Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1405-microsoft-windows-universal-plug-and-play-upnp-service-privilege"},{"cve":"CVE-2020-5135","slug":"cve-2020-5135-sonicwall-sonicos-buffer-overflow-vulnerability","title":"SonicWall SonicOS Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-5135-sonicwall-sonicos-buffer-overflow-vulnerability"},{"cve":"CVE-2019-1253","slug":"cve-2019-1253-microsoft-windows-appx-deployment-server-privilege-escalation","title":"Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1253-microsoft-windows-appx-deployment-server-privilege-escalation"},{"cve":"CVE-2015-2546","slug":"cve-2015-2546-microsoft-win32k-memory-corruption-vulnerability","title":"Microsoft Win32k Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-2546-microsoft-win32k-memory-corruption-vulnerability"},{"cve":"CVE-2016-3309","slug":"cve-2016-3309-microsoft-windows-kernel-privilege-escalation-vulnerability","title":"Microsoft Windows Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3309-microsoft-windows-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2017-0101","slug":"cve-2017-0101-microsoft-windows-transaction-manager-privilege-escalation","title":"Microsoft Windows Transaction Manager Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0101-microsoft-windows-transaction-manager-privilege-escalation"},{"cve":"CVE-2018-8120","slug":"cve-2018-8120-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8120-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2019-0543","slug":"cve-2019-0543-microsoft-windows-privilege-escalation-vulnerability","title":"Microsoft Windows Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","exploited_since":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0543-microsoft-windows-privilege-escalation-vulnerability"},{"cve":"CVE-2009-3960","slug":"cve-2009-3960-adobe-blazeds-information-disclosure-vulnerability","title":"Adobe BlazeDS Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","exploited_since":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-3960-adobe-blazeds-information-disclosure-vulnerability"},{"cve":"CVE-2013-0625","slug":"cve-2013-0625-adobe-coldfusion-authentication-bypass-vulnerability","title":"Adobe ColdFusion Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","exploited_since":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-0625-adobe-coldfusion-authentication-bypass-vulnerability"},{"cve":"CVE-2013-0629","slug":"cve-2013-0629-adobe-coldfusion-directory-traversal-vulnerability","title":"Adobe ColdFusion Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","exploited_since":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-0629-adobe-coldfusion-directory-traversal-vulnerability"},{"cve":"CVE-2013-0631","slug":"cve-2013-0631-adobe-coldfusion-information-disclosure-vulnerability","title":"Adobe ColdFusion Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","exploited_since":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-0631-adobe-coldfusion-information-disclosure-vulnerability"},{"cve":"CVE-2016-6277","slug":"cve-2016-6277-netgear-multiple-routers-remote-code-execution-vulnerability","title":"NETGEAR Multiple Routers Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","exploited_since":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-6277-netgear-multiple-routers-remote-code-execution-vulnerability"},{"cve":"CVE-2017-6077","slug":"cve-2017-6077-netgear-dgn2200-remote-code-execution-vulnerability","title":"NETGEAR DGN2200 Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","exploited_since":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6077-netgear-dgn2200-remote-code-execution-vulnerability"},{"cve":"CVE-2019-11581","slug":"cve-2019-11581-atlassian-jira-server-and-data-center-server-side-template","title":"Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","exploited_since":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-11581-atlassian-jira-server-and-data-center-server-side-template"},{"cve":"CVE-2020-8218","slug":"cve-2020-8218-pulse-connect-secure-code-injection-vulnerability","title":"Pulse Connect Secure Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","exploited_since":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8218-pulse-connect-secure-code-injection-vulnerability"},{"cve":"CVE-2021-21973","slug":"cve-2021-21973-vmware-vcenter-server-and-cloud-foundation-server-side-request","title":"VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","exploited_since":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21973-vmware-vcenter-server-and-cloud-foundation-server-side-request"},{"cve":"CVE-2022-26485","slug":"cve-2022-26485-mozilla-firefox-use-after-free-vulnerability","title":"Mozilla Firefox Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","exploited_since":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26485-mozilla-firefox-use-after-free-vulnerability"},{"cve":"CVE-2022-26486","slug":"cve-2022-26486-mozilla-firefox-use-after-free-vulnerability","title":"Mozilla Firefox Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","exploited_since":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26486-mozilla-firefox-use-after-free-vulnerability"},{"cve":"CVE-2018-8298","slug":"cve-2018-8298-chakracore-scripting-engine-type-confusion-vulnerability","title":"ChakraCore RCE Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-13T01:20:46+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8298-chakracore-scripting-engine-type-confusion-vulnerability"},{"cve":"CVE-2015-3043","slug":"cve-2015-3043-adobe-flash-player-memory-corruption-vulnerability","title":"Adobe Flash Player Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-3043-adobe-flash-player-memory-corruption-vulnerability"},{"cve":"CVE-2002-0367","slug":"cve-2002-0367-microsoft-windows-privilege-escalation-vulnerability","title":"Microsoft Windows Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2002-0367-microsoft-windows-privilege-escalation-vulnerability"},{"cve":"CVE-2004-0210","slug":"cve-2004-0210-microsoft-windows-privilege-escalation-vulnerability","title":"Microsoft Windows Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2004-0210-microsoft-windows-privilege-escalation-vulnerability"},{"cve":"CVE-2008-2992","slug":"cve-2008-2992-adobe-reader-and-acrobat-input-validation-vulnerability","title":"Adobe Reader and Acrobat Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2008-2992-adobe-reader-and-acrobat-input-validation-vulnerability"},{"cve":"CVE-2008-3431","slug":"cve-2008-3431-oracle-virtualbox-insufficient-input-validation-vulnerability","title":"Oracle VirtualBox Insufficient Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2008-3431-oracle-virtualbox-insufficient-input-validation-vulnerability"},{"cve":"CVE-2009-1123","slug":"cve-2009-1123-microsoft-windows-improper-input-validation-vulnerability","title":"Microsoft Windows Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-1123-microsoft-windows-improper-input-validation-vulnerability"},{"cve":"CVE-2009-3129","slug":"cve-2009-3129-microsoft-excel-featheader-record-memory-corruption-vulnerability","title":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-3129-microsoft-excel-featheader-record-memory-corruption-vulnerability"},{"cve":"CVE-2010-0188","slug":"cve-2010-0188-adobe-reader-and-acrobat-arbitrary-code-execution-vulnerability","title":"Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-0188-adobe-reader-and-acrobat-arbitrary-code-execution-vulnerability"},{"cve":"CVE-2011-0611","slug":"cve-2011-0611-adobe-flash-player-remote-code-execution-vulnerability","title":"Adobe Flash Player Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2011-0611-adobe-flash-player-remote-code-execution-vulnerability"},{"cve":"CVE-2010-0232","slug":"cve-2010-0232-microsoft-windows-kernel-exception-handler-vulnerability","title":"Microsoft Windows Kernel Exception Handler Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-0232-microsoft-windows-kernel-exception-handler-vulnerability"},{"cve":"CVE-2010-3333","slug":"cve-2010-3333-microsoft-office-stack-based-buffer-overflow-vulnerability","title":"Microsoft Office Stack-based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-3333-microsoft-office-stack-based-buffer-overflow-vulnerability"},{"cve":"CVE-2011-1889","slug":"cve-2011-1889-microsoft-forefront-tmg-remote-code-execution-vulnerability","title":"Microsoft Forefront TMG Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2011-1889-microsoft-forefront-tmg-remote-code-execution-vulnerability"},{"cve":"CVE-2011-3544","slug":"cve-2011-3544-oracle-java-se-runtime-environment-jre-arbitrary-code-execution","title":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2011-3544-oracle-java-se-runtime-environment-jre-arbitrary-code-execution"},{"cve":"CVE-2012-0507","slug":"cve-2012-0507-oracle-java-se-runtime-environment-jre-arbitrary-code-execution","title":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-0507-oracle-java-se-runtime-environment-jre-arbitrary-code-execution"},{"cve":"CVE-2012-1535","slug":"cve-2012-1535-adobe-flash-player-arbitrary-code-execution-vulnerability","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-1535-adobe-flash-player-arbitrary-code-execution-vulnerability"},{"cve":"CVE-2012-1723","slug":"cve-2012-1723-oracle-java-se-runtime-environment-jre-arbitrary-code-execution","title":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-1723-oracle-java-se-runtime-environment-jre-arbitrary-code-execution"},{"cve":"CVE-2012-1856","slug":"cve-2012-1856-microsoft-office-mscomctl-ocx-remote-code-execution-vulnerability","title":"Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-1856-microsoft-office-mscomctl-ocx-remote-code-execution-vulnerability"},{"cve":"CVE-2012-4681","slug":"cve-2012-4681-oracle-java-se-runtime-environment-jre-arbitrary-code-execution","title":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-4681-oracle-java-se-runtime-environment-jre-arbitrary-code-execution"},{"cve":"CVE-2013-0632","slug":"cve-2013-0632-adobe-coldfusion-authentication-bypass-vulnerability","title":"Adobe ColdFusion Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-0632-adobe-coldfusion-authentication-bypass-vulnerability"},{"cve":"CVE-2013-0640","slug":"cve-2013-0640-adobe-reader-and-acrobat-memory-corruption-vulnerability","title":"Adobe Reader and Acrobat Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-0640-adobe-reader-and-acrobat-memory-corruption-vulnerability"},{"cve":"CVE-2013-0641","slug":"cve-2013-0641-adobe-reader-buffer-overflow-vulnerability","title":"Adobe Reader Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-0641-adobe-reader-buffer-overflow-vulnerability"},{"cve":"CVE-2013-1347","slug":"cve-2013-1347-microsoft-internet-explorer-remote-code-execution-vulnerability","title":"Microsoft Internet Explorer Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-1347-microsoft-internet-explorer-remote-code-execution-vulnerability"},{"cve":"CVE-2013-1675","slug":"cve-2013-1675-mozilla-firefox-information-disclosure-vulnerability","title":"Mozilla Firefox Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-1675-mozilla-firefox-information-disclosure-vulnerability"},{"cve":"CVE-2013-3346","slug":"cve-2013-3346-adobe-reader-and-acrobat-memory-corruption-vulnerability","title":"Adobe Reader and Acrobat Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-3346-adobe-reader-and-acrobat-memory-corruption-vulnerability"},{"cve":"CVE-2013-3897","slug":"cve-2013-3897-microsoft-internet-explorer-use-after-free-vulnerability","title":"Microsoft Internet Explorer Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-3897-microsoft-internet-explorer-use-after-free-vulnerability"},{"cve":"CVE-2013-5065","slug":"cve-2013-5065-microsoft-windows-kernel-privilege-escalation-vulnerability","title":"Microsoft Windows Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-5065-microsoft-windows-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2014-0496","slug":"cve-2014-0496-adobe-reader-and-acrobat-use-after-free-vulnerability","title":"Adobe Reader and Acrobat Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-0496-adobe-reader-and-acrobat-use-after-free-vulnerability"},{"cve":"CVE-2014-4114","slug":"cve-2014-4114-microsoft-windows-object-linking-embedding-ole-remote-code","title":"Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-4114-microsoft-windows-object-linking-embedding-ole-remote-code"},{"cve":"CVE-2015-1642","slug":"cve-2015-1642-microsoft-office-memory-corruption-vulnerability","title":"Microsoft Office Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-1642-microsoft-office-memory-corruption-vulnerability"},{"cve":"CVE-2015-1701","slug":"cve-2015-1701-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-1701-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2015-2387","slug":"cve-2015-2387-microsoft-atm-font-driver-privilege-escalation-vulnerability","title":"Microsoft ATM Font Driver Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-2387-microsoft-atm-font-driver-privilege-escalation-vulnerability"},{"cve":"CVE-2015-2424","slug":"cve-2015-2424-microsoft-powerpoint-memory-corruption-vulnerability","title":"Microsoft PowerPoint Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-2424-microsoft-powerpoint-memory-corruption-vulnerability"},{"cve":"CVE-2015-2545","slug":"cve-2015-2545-microsoft-office-malformed-eps-file-vulnerability","title":"Microsoft Office Malformed EPS File Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-2545-microsoft-office-malformed-eps-file-vulnerability"},{"cve":"CVE-2015-2590","slug":"cve-2015-2590-oracle-java-se-and-java-se-embedded-remote-code-execution","title":"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-2590-oracle-java-se-and-java-se-embedded-remote-code-execution"},{"cve":"CVE-2015-4902","slug":"cve-2015-4902-oracle-java-se-integrity-check-vulnerability","title":"Oracle Java SE Integrity Check Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-4902-oracle-java-se-integrity-check-vulnerability"},{"cve":"CVE-2015-5119","slug":"cve-2015-5119-adobe-flash-player-use-after-free-vulnerability","title":"Adobe Flash Player Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-5119-adobe-flash-player-use-after-free-vulnerability"},{"cve":"CVE-2015-7645","slug":"cve-2015-7645-adobe-flash-player-arbitrary-code-execution-vulnerability","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-7645-adobe-flash-player-arbitrary-code-execution-vulnerability"},{"cve":"CVE-2016-0099","slug":"cve-2016-0099-microsoft-windows-secondary-logon-service-privilege-escalation","title":"Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-0099-microsoft-windows-secondary-logon-service-privilege-escalation"},{"cve":"CVE-2016-1019","slug":"cve-2016-1019-adobe-flash-player-arbitrary-code-execution-vulnerability","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-1019-adobe-flash-player-arbitrary-code-execution-vulnerability"},{"cve":"CVE-2016-4117","slug":"cve-2016-4117-adobe-flash-player-arbitrary-code-execution-vulnerability","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-4117-adobe-flash-player-arbitrary-code-execution-vulnerability"},{"cve":"CVE-2016-5195","slug":"cve-2016-5195-linux-kernel-race-condition-vulnerability","title":"Linux Kernel Race Condition Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-5195-linux-kernel-race-condition-vulnerability"},{"cve":"CVE-2016-7193","slug":"cve-2016-7193-microsoft-office-memory-corruption-vulnerability","title":"Microsoft Office Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-7193-microsoft-office-memory-corruption-vulnerability"},{"cve":"CVE-2016-7262","slug":"cve-2016-7262-microsoft-office-security-feature-bypass-vulnerability","title":"Microsoft Office Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-7262-microsoft-office-security-feature-bypass-vulnerability"},{"cve":"CVE-2016-7855","slug":"cve-2016-7855-adobe-flash-player-use-after-free-vulnerability","title":"Adobe Flash Player Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-7855-adobe-flash-player-use-after-free-vulnerability"},{"cve":"CVE-2016-8562","slug":"cve-2016-8562-siemens-simatic-cp-1543-1-improper-privilege-management","title":"Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-8562-siemens-simatic-cp-1543-1-improper-privilege-management"},{"cve":"CVE-2017-0001","slug":"cve-2017-0001-microsoft-graphics-device-interface-gdi-privilege-escalation","title":"Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0001-microsoft-graphics-device-interface-gdi-privilege-escalation"},{"cve":"CVE-2017-0261","slug":"cve-2017-0261-microsoft-office-use-after-free-vulnerability","title":"Microsoft Office Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0261-microsoft-office-use-after-free-vulnerability"},{"cve":"CVE-2017-11292","slug":"cve-2017-11292-adobe-flash-player-type-confusion-vulnerability","title":"Adobe Flash Player Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-11292-adobe-flash-player-type-confusion-vulnerability"},{"cve":"CVE-2017-11826","slug":"cve-2017-11826-microsoft-office-remote-code-execution-vulnerability","title":"Microsoft Office Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-11826-microsoft-office-remote-code-execution-vulnerability"},{"cve":"CVE-2017-12231","slug":"cve-2017-12231-cisco-ios-software-network-address-translation-denial-of-service","title":"Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-12231-cisco-ios-software-network-address-translation-denial-of-service"},{"cve":"CVE-2017-12232","slug":"cve-2017-12232-cisco-ios-software-for-cisco-integrated-services-routers-denial","title":"Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-12232-cisco-ios-software-for-cisco-integrated-services-routers-denial"},{"cve":"CVE-2017-12233","slug":"cve-2017-12233-cisco-ios-software-common-industrial-protocol-request-denial-of","title":"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-12233-cisco-ios-software-common-industrial-protocol-request-denial-of"},{"cve":"CVE-2017-12234","slug":"cve-2017-12234-cisco-ios-software-common-industrial-protocol-request-denial-of","title":"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-12234-cisco-ios-software-common-industrial-protocol-request-denial-of"},{"cve":"CVE-2017-12235","slug":"cve-2017-12235-cisco-ios-software-for-cisco-industrial-ethernet-switches","title":"Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-12235-cisco-ios-software-for-cisco-industrial-ethernet-switches"},{"cve":"CVE-2017-12237","slug":"cve-2017-12237-cisco-ios-and-ios-xe-software-internet-key-exchange-denial-of","title":"Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-12237-cisco-ios-and-ios-xe-software-internet-key-exchange-denial-of"},{"cve":"CVE-2017-12238","slug":"cve-2017-12238-cisco-catalyst-6800-series-switches-vpls-denial-of-service","title":"Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-12238-cisco-catalyst-6800-series-switches-vpls-denial-of-service"},{"cve":"CVE-2017-12240","slug":"cve-2017-12240-cisco-ios-and-ios-xe-software-dhcp-remote-code-execution","title":"Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-12240-cisco-ios-and-ios-xe-software-dhcp-remote-code-execution"},{"cve":"CVE-2017-12319","slug":"cve-2017-12319-cisco-ios-xe-software-ethernet-virtual-private-network-border","title":"Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-12319-cisco-ios-xe-software-ethernet-virtual-private-network-border"},{"cve":"CVE-2017-6627","slug":"cve-2017-6627-cisco-ios-software-and-cisco-ios-xe-software-udp-packet-processing","title":"Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6627-cisco-ios-software-and-cisco-ios-xe-software-udp-packet-processing"},{"cve":"CVE-2017-6663","slug":"cve-2017-6663-cisco-ios-software-and-cisco-ios-xe-software-denial-of-service","title":"Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6663-cisco-ios-software-and-cisco-ios-xe-software-denial-of-service"},{"cve":"CVE-2017-6736","slug":"cve-2017-6736-cisco-ios-and-ios-xe-software-snmp-remote-code-execution","title":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6736-cisco-ios-and-ios-xe-software-snmp-remote-code-execution"},{"cve":"CVE-2017-6737","slug":"cve-2017-6737-cisco-ios-and-ios-xe-software-snmp-remote-code-execution","title":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6737-cisco-ios-and-ios-xe-software-snmp-remote-code-execution"},{"cve":"CVE-2017-6738","slug":"cve-2017-6738-cisco-ios-and-ios-xe-software-snmp-remote-code-execution","title":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6738-cisco-ios-and-ios-xe-software-snmp-remote-code-execution"},{"cve":"CVE-2017-6739","slug":"cve-2017-6739-cisco-ios-and-ios-xe-software-snmp-remote-code-execution","title":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6739-cisco-ios-and-ios-xe-software-snmp-remote-code-execution"},{"cve":"CVE-2017-6740","slug":"cve-2017-6740-cisco-ios-and-ios-xe-software-snmp-remote-code-execution","title":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6740-cisco-ios-and-ios-xe-software-snmp-remote-code-execution"},{"cve":"CVE-2017-6743","slug":"cve-2017-6743-cisco-ios-and-ios-xe-software-snmp-remote-code-execution","title":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6743-cisco-ios-and-ios-xe-software-snmp-remote-code-execution"},{"cve":"CVE-2017-6744","slug":"cve-2017-6744-cisco-ios-software-snmp-remote-code-execution-vulnerability","title":"Cisco IOS Software SNMP Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6744-cisco-ios-software-snmp-remote-code-execution-vulnerability"},{"cve":"CVE-2017-8540","slug":"cve-2017-8540-microsoft-malware-protection-engine-improper-restriction-of","title":"Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-8540-microsoft-malware-protection-engine-improper-restriction-of"},{"cve":"CVE-2018-0151","slug":"cve-2018-0151-cisco-ios-software-and-cisco-ios-xe-software-quality-of-service","title":"Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0151-cisco-ios-software-and-cisco-ios-xe-software-quality-of-service"},{"cve":"CVE-2018-0154","slug":"cve-2018-0154-cisco-ios-software-integrated-services-module-for-vpn-denial-of","title":"Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0154-cisco-ios-software-integrated-services-module-for-vpn-denial-of"},{"cve":"CVE-2018-0155","slug":"cve-2018-0155-cisco-catalyst-bidirectional-forwarding-detection-denial-of","title":"Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0155-cisco-catalyst-bidirectional-forwarding-detection-denial-of"},{"cve":"CVE-2018-0156","slug":"cve-2018-0156-cisco-ios-software-and-cisco-ios-xe-software-smart-install-denial","title":"Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0156-cisco-ios-software-and-cisco-ios-xe-software-smart-install-denial"},{"cve":"CVE-2018-0158","slug":"cve-2018-0158-cisco-ios-and-xe-software-internet-key-exchange-memory-leak","title":"Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0158-cisco-ios-and-xe-software-internet-key-exchange-memory-leak"},{"cve":"CVE-2018-0159","slug":"cve-2018-0159-cisco-ios-and-xe-software-internet-key-exchange-version-1-denial","title":"Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0159-cisco-ios-and-xe-software-internet-key-exchange-version-1-denial"},{"cve":"CVE-2018-0161","slug":"cve-2018-0161-cisco-ios-software-resource-management-errors-vulnerability","title":"Cisco IOS Software Resource Management Errors Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0161-cisco-ios-software-resource-management-errors-vulnerability"},{"cve":"CVE-2018-0167","slug":"cve-2018-0167-cisco-ios-xr-and-xe-software-buffer-overflow-vulnerability","title":"Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0167-cisco-ios-xr-and-xe-software-buffer-overflow-vulnerability"},{"cve":"CVE-2018-0172","slug":"cve-2018-0172-cisco-ios-and-ios-xe-software-improper-input-validation","title":"Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0172-cisco-ios-and-ios-xe-software-improper-input-validation"},{"cve":"CVE-2018-0173","slug":"cve-2018-0173-cisco-ios-and-ios-xe-software-improper-input-validation","title":"Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0173-cisco-ios-and-ios-xe-software-improper-input-validation"},{"cve":"CVE-2018-0174","slug":"cve-2018-0174-cisco-ios-software-and-cisco-ios-xe-software-improper-input","title":"Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0174-cisco-ios-software-and-cisco-ios-xe-software-improper-input"},{"cve":"CVE-2018-0175","slug":"cve-2018-0175-cisco-ios-xr-and-xe-software-buffer-overflow-vulnerability","title":"Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0175-cisco-ios-xr-and-xe-software-buffer-overflow-vulnerability"},{"cve":"CVE-2018-0179","slug":"cve-2018-0179-cisco-ios-software-denial-of-service-vulnerability","title":"Cisco IOS Software Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0179-cisco-ios-software-denial-of-service-vulnerability"},{"cve":"CVE-2018-0180","slug":"cve-2018-0180-cisco-ios-software-denial-of-service-vulnerability","title":"Cisco IOS Software Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0180-cisco-ios-software-denial-of-service-vulnerability"},{"cve":"CVE-2018-8581","slug":"cve-2018-8581-microsoft-exchange-server-privilege-escalation-vulnerability","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8581-microsoft-exchange-server-privilege-escalation-vulnerability"},{"cve":"CVE-2019-1297","slug":"cve-2019-1297-microsoft-excel-remote-code-execution-vulnerability","title":"Microsoft Excel Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1297-microsoft-excel-remote-code-execution-vulnerability"},{"cve":"CVE-2019-1652","slug":"cve-2019-1652-cisco-small-business-routers-improper-input-validation","title":"Cisco Small Business Routers Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1652-cisco-small-business-routers-improper-input-validation"},{"cve":"CVE-2019-16928","slug":"cve-2019-16928-exim-out-of-bounds-write-vulnerability","title":"Exim Out-of-bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-16928-exim-out-of-bounds-write-vulnerability"},{"cve":"CVE-2020-11899","slug":"cve-2020-11899-treck-tcp-ip-stack-out-of-bounds-read-vulnerability","title":"Treck TCP/IP stack Out-of-Bounds Read Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-11899-treck-tcp-ip-stack-out-of-bounds-read-vulnerability"},{"cve":"CVE-2021-41379","slug":"cve-2021-41379-microsoft-windows-installer-privilege-escalation-vulnerability","title":"Microsoft Windows Installer Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-41379-microsoft-windows-installer-privilege-escalation-vulnerability"},{"cve":"CVE-2022-20699","slug":"cve-2022-20699-cisco-small-business-rv-series-routers-stack-based-buffer","title":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-20699-cisco-small-business-rv-series-routers-stack-based-buffer"},{"cve":"CVE-2022-20700","slug":"cve-2022-20700-cisco-small-business-rv-series-routers-stack-based-buffer","title":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-20700-cisco-small-business-rv-series-routers-stack-based-buffer"},{"cve":"CVE-2022-20701","slug":"cve-2022-20701-cisco-small-business-rv-series-routers-stack-based-buffer","title":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-20701-cisco-small-business-rv-series-routers-stack-based-buffer"},{"cve":"CVE-2022-20703","slug":"cve-2022-20703-cisco-small-business-rv-series-routers-stack-based-buffer","title":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-20703-cisco-small-business-rv-series-routers-stack-based-buffer"},{"cve":"CVE-2022-20708","slug":"cve-2022-20708-cisco-small-business-rv-series-routers-stack-based-buffer","title":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-20708-cisco-small-business-rv-series-routers-stack-based-buffer"},{"cve":"CVE-2020-1938","slug":"cve-2020-1938-apache-tomcat-improper-privilege-management-vulnerability","title":"Improper Privilege Management in Tomcat","severity":"critical","exploited":true,"published_at":"2020-06-15T18:51:21+00:00","exploited_since":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1938-apache-tomcat-improper-privilege-management-vulnerability"},{"cve":"CVE-2017-8570","slug":"cve-2017-8570-microsoft-office-remote-code-execution-vulnerability","title":"Microsoft Office Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-25T00:00:00+00:00","exploited_since":"2022-02-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-8570-microsoft-office-remote-code-execution-vulnerability"},{"cve":"CVE-2022-24682","slug":"cve-2022-24682-synacor-zimbra-collaborate-suite-zcs-cross-site-scripting","title":"Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-25T00:00:00+00:00","exploited_since":"2022-02-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-24682-synacor-zimbra-collaborate-suite-zcs-cross-site-scripting"},{"cve":"CVE-2014-6352","slug":"cve-2014-6352-microsoft-windows-code-injection-vulnerability","title":"Microsoft Windows Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-25T00:00:00+00:00","exploited_since":"2022-02-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-6352-microsoft-windows-code-injection-vulnerability"},{"cve":"CVE-2017-0222","slug":"cve-2017-0222-microsoft-internet-explorer-remote-code-execution-vulnerability","title":"Microsoft Internet Explorer Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-25T00:00:00+00:00","exploited_since":"2022-02-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0222-microsoft-internet-explorer-remote-code-execution-vulnerability"},{"cve":"CVE-2022-23134","slug":"cve-2022-23134-zabbix-frontend-improper-access-control-vulnerability","title":"Zabbix Frontend Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-22T00:00:00+00:00","exploited_since":"2022-02-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-23134-zabbix-frontend-improper-access-control-vulnerability"},{"cve":"CVE-2022-23131","slug":"cve-2022-23131-zabbix-frontend-authentication-bypass-vulnerability","title":"Zabbix Frontend Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-22T00:00:00+00:00","exploited_since":"2022-02-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-23131-zabbix-frontend-authentication-bypass-vulnerability"},{"cve":"CVE-2017-9841","slug":"cve-2017-9841-phpunit-command-injection-vulnerability","title":"Code Injection in PHPUnit","severity":"critical","exploited":true,"published_at":"2022-03-26T00:19:30+00:00","exploited_since":"2022-02-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-9841-phpunit-command-injection-vulnerability"},{"cve":"CVE-2022-0609","slug":"cve-2022-0609-google-chromium-animation-use-after-free-vulnerability","title":"Use after free in Animation","severity":"critical","exploited":true,"published_at":"2022-02-22T21:51:19+00:00","exploited_since":"2022-02-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-0609-google-chromium-animation-use-after-free-vulnerability"},{"cve":"CVE-2022-24086","slug":"cve-2022-24086-adobe-commerce-and-magento-open-source-improper-input-validation","title":"Magento improper input validation vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-17T00:00:29+00:00","exploited_since":"2022-02-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-24086-adobe-commerce-and-magento-open-source-improper-input-validation"},{"cve":"CVE-2018-15982","slug":"cve-2018-15982-adobe-flash-player-use-after-free-vulnerability","title":"Adobe Flash Player Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-15T00:00:00+00:00","exploited_since":"2022-02-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-15982-adobe-flash-player-use-after-free-vulnerability"},{"cve":"CVE-2019-0752","slug":"cve-2019-0752-microsoft-internet-explorer-type-confusion-vulnerability","title":"Microsoft Internet Explorer Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-15T00:00:00+00:00","exploited_since":"2022-02-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0752-microsoft-internet-explorer-type-confusion-vulnerability"},{"cve":"CVE-2018-8174","slug":"cve-2018-8174-microsoft-windows-vbscript-engine-out-of-bounds-write","title":"Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-15T00:00:00+00:00","exploited_since":"2022-02-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8174-microsoft-windows-vbscript-engine-out-of-bounds-write"},{"cve":"CVE-2018-20250","slug":"cve-2018-20250-winrar-absolute-path-traversal-vulnerability","title":"WinRAR Absolute Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-15T00:00:00+00:00","exploited_since":"2022-02-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-20250-winrar-absolute-path-traversal-vulnerability"},{"cve":"CVE-2014-1761","slug":"cve-2014-1761-microsoft-word-memory-corruption-vulnerability","title":"Microsoft Word Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-15T00:00:00+00:00","exploited_since":"2022-02-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-1761-microsoft-word-memory-corruption-vulnerability"},{"cve":"CVE-2013-3906","slug":"cve-2013-3906-microsoft-graphics-component-memory-corruption-vulnerability","title":"Microsoft Graphics Component Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-15T00:00:00+00:00","exploited_since":"2022-02-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-3906-microsoft-graphics-component-memory-corruption-vulnerability"},{"cve":"CVE-2022-22620","slug":"cve-2022-22620-apple-ios-ipados-and-macos-webkit-use-after-free-vulnerability","title":"Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-11T00:00:00+00:00","exploited_since":"2022-02-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22620-apple-ios-ipados-and-macos-webkit-use-after-free-vulnerability"},{"cve":"CVE-2016-3088","slug":"cve-2016-3088-apache-activemq-improper-input-validation-vulnerability","title":"Improper Input Validation in Apache ActiveMQ","severity":"critical","exploited":true,"published_at":"2022-05-14T01:14:51+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3088-apache-activemq-improper-input-validation-vulnerability"},{"cve":"CVE-2017-9791","slug":"cve-2017-9791-apache-struts-1-improper-input-validation-vulnerability","title":"Code execution in Apache Struts 1 plugin","severity":"critical","exploited":true,"published_at":"2022-05-13T01:26:13+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-9791-apache-struts-1-improper-input-validation-vulnerability"},{"cve":"CVE-2018-1000861","slug":"cve-2018-1000861-jenkins-stapler-web-framework-deserialization-of-untrusted-data","title":"Deserialization of Untrusted Data in Jenkins","severity":"critical","exploited":true,"published_at":"2022-05-13T01:01:00+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-1000861-jenkins-stapler-web-framework-deserialization-of-untrusted-data"},{"cve":"CVE-2021-36934","slug":"cve-2021-36934-microsoft-windows-sam-local-privilege-escalation-vulnerability","title":"Microsoft Windows SAM Local Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-10T00:00:00+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-36934-microsoft-windows-sam-local-privilege-escalation-vulnerability"},{"cve":"CVE-2017-0262","slug":"cve-2017-0262-microsoft-office-remote-code-execution-vulnerability","title":"Microsoft Office Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-10T00:00:00+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0262-microsoft-office-remote-code-execution-vulnerability"},{"cve":"CVE-2014-4404","slug":"cve-2014-4404-apple-os-x-heap-based-buffer-overflow-vulnerability","title":"Apple OS X Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-10T00:00:00+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-4404-apple-os-x-heap-based-buffer-overflow-vulnerability"},{"cve":"CVE-2015-1130","slug":"cve-2015-1130-apple-os-x-authentication-bypass-vulnerability","title":"Apple OS X Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-10T00:00:00+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-1130-apple-os-x-authentication-bypass-vulnerability"},{"cve":"CVE-2015-1635","slug":"cve-2015-1635-microsoft-http-sys-remote-code-execution-vulnerability","title":"Microsoft HTTP.sys Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-10T00:00:00+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-1635-microsoft-http-sys-remote-code-execution-vulnerability"},{"cve":"CVE-2015-2051","slug":"cve-2015-2051-d-link-dir-645-router-remote-code-execution-vulnerability","title":"D-Link DIR-645 Router Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-10T00:00:00+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-2051-d-link-dir-645-router-remote-code-execution-vulnerability"},{"cve":"CVE-2017-0144","slug":"cve-2017-0144-microsoft-smbv1-remote-code-execution-vulnerability","title":"Microsoft SMBv1 Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-10T00:00:00+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0144-microsoft-smbv1-remote-code-execution-vulnerability"},{"cve":"CVE-2017-0145","slug":"cve-2017-0145-microsoft-smbv1-remote-code-execution-vulnerability","title":"Microsoft SMBv1 Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-10T00:00:00+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0145-microsoft-smbv1-remote-code-execution-vulnerability"},{"cve":"CVE-2017-0263","slug":"cve-2017-0263-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-10T00:00:00+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0263-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2017-10271","slug":"cve-2017-10271-oracle-corporation-weblogic-server-remote-code-execution","title":"Oracle Corporation WebLogic Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-10T00:00:00+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-10271-oracle-corporation-weblogic-server-remote-code-execution"},{"cve":"CVE-2017-8464","slug":"cve-2017-8464-microsoft-windows-shell-lnk-remote-code-execution-vulnerability","title":"Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-10T00:00:00+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-8464-microsoft-windows-shell-lnk-remote-code-execution-vulnerability"},{"cve":"CVE-2020-0796","slug":"cve-2020-0796-microsoft-smbv3-remote-code-execution-vulnerability","title":"Microsoft SMBv3 Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-10T00:00:00+00:00","exploited_since":"2022-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0796-microsoft-smbv3-remote-code-execution-vulnerability"},{"cve":"CVE-2022-21882","slug":"cve-2022-21882-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-04T00:00:00+00:00","exploited_since":"2022-02-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-21882-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2020-5722","slug":"cve-2020-5722-grandstream-networks-ucm6200-series-sql-injection-vulnerability","title":"Grandstream Networks UCM6200 Series SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-28T00:00:00+00:00","exploited_since":"2022-01-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-5722-grandstream-networks-ucm6200-series-sql-injection-vulnerability"},{"cve":"CVE-2020-0787","slug":"cve-2020-0787-microsoft-windows-background-intelligent-transfer-service-bits","title":"Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-28T00:00:00+00:00","exploited_since":"2022-01-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0787-microsoft-windows-background-intelligent-transfer-service-bits"},{"cve":"CVE-2021-20038","slug":"cve-2021-20038-sonicwall-sma-100-appliances-stack-based-buffer-overflow","title":"SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-28T00:00:00+00:00","exploited_since":"2022-01-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20038-sonicwall-sma-100-appliances-stack-based-buffer-overflow"},{"cve":"CVE-2022-22587","slug":"cve-2022-22587-apple-memory-corruption-vulnerability","title":"Apple Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-28T00:00:00+00:00","exploited_since":"2022-01-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22587-apple-memory-corruption-vulnerability"},{"cve":"CVE-2017-5689","slug":"cve-2017-5689-intel-active-management-technology-amt-small-business-technology","title":"Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege…","severity":"critical","exploited":true,"published_at":"2022-01-28T00:00:00+00:00","exploited_since":"2022-01-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-5689-intel-active-management-technology-amt-small-business-technology"},{"cve":"CVE-2014-1776","slug":"cve-2014-1776-microsoft-internet-explorer-memory-corruption-vulnerability","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-28T00:00:00+00:00","exploited_since":"2022-01-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-1776-microsoft-internet-explorer-memory-corruption-vulnerability"},{"cve":"CVE-2014-6271","slug":"cve-2014-6271-gnu-bourne-again-shell-bash-arbitrary-code-execution-vulnerability","title":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-28T00:00:00+00:00","exploited_since":"2022-01-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-6271-gnu-bourne-again-shell-bash-arbitrary-code-execution-vulnerability"},{"cve":"CVE-2014-7169","slug":"cve-2014-7169-gnu-bourne-again-shell-bash-arbitrary-code-execution-vulnerability","title":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-28T00:00:00+00:00","exploited_since":"2022-01-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-7169-gnu-bourne-again-shell-bash-arbitrary-code-execution-vulnerability"},{"cve":"CVE-2012-0391","slug":"cve-2012-0391-apache-struts-2-improper-input-validation-vulnerability","title":"Apache Struts Remote Java Code Execution","severity":"critical","exploited":true,"published_at":"2022-05-04T00:29:43+00:00","exploited_since":"2022-01-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-0391-apache-struts-2-improper-input-validation-vulnerability"},{"cve":"CVE-2006-1547","slug":"cve-2006-1547-apache-struts-1-actionform-denial-of-service-vulnerability","title":"Improper Input Validation in Apache Struts","severity":"critical","exploited":true,"published_at":"2022-05-01T06:50:42+00:00","exploited_since":"2022-01-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2006-1547-apache-struts-1-actionform-denial-of-service-vulnerability"},{"cve":"CVE-2021-35247","slug":"cve-2021-35247-solarwinds-serv-u-improper-input-validation-vulnerability","title":"SolarWinds Serv-U Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-21T00:00:00+00:00","exploited_since":"2022-01-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-35247-solarwinds-serv-u-improper-input-validation-vulnerability"},{"cve":"CVE-2018-8453","slug":"cve-2018-8453-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-21T00:00:00+00:00","exploited_since":"2022-01-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8453-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2020-14864","slug":"cve-2020-14864-oracle-business-intelligence-enterprise-edition-path-transversal","title":"Oracle Business Intelligence Enterprise Edition Path Transversal","severity":"critical","exploited":true,"published_at":"2022-01-18T00:00:00+00:00","exploited_since":"2022-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-14864-oracle-business-intelligence-enterprise-edition-path-transversal"},{"cve":"CVE-2021-25296","slug":"cve-2021-25296-nagios-xi-os-command-injection","title":"Nagios XI OS Command Injection","severity":"critical","exploited":true,"published_at":"2022-01-18T00:00:00+00:00","exploited_since":"2022-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-25296-nagios-xi-os-command-injection"},{"cve":"CVE-2021-25297","slug":"cve-2021-25297-nagios-xi-os-command-injection","title":"Nagios XI OS Command Injection","severity":"critical","exploited":true,"published_at":"2022-01-18T00:00:00+00:00","exploited_since":"2022-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-25297-nagios-xi-os-command-injection"},{"cve":"CVE-2021-25298","slug":"cve-2021-25298-nagios-xi-os-command-injection","title":"Nagios XI OS Command Injection","severity":"critical","exploited":true,"published_at":"2022-01-18T00:00:00+00:00","exploited_since":"2022-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-25298-nagios-xi-os-command-injection"},{"cve":"CVE-2021-40870","slug":"cve-2021-40870-aviatrix-controller-unrestricted-upload-of-file","title":"Aviatrix Controller Unrestricted Upload of File","severity":"critical","exploited":true,"published_at":"2022-01-18T00:00:00+00:00","exploited_since":"2022-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-40870-aviatrix-controller-unrestricted-upload-of-file"},{"cve":"CVE-2021-33766","slug":"cve-2021-33766-microsoft-exchange-server-information-disclosure","title":"Microsoft Exchange Server Information Disclosure","severity":"critical","exploited":true,"published_at":"2022-01-18T00:00:00+00:00","exploited_since":"2022-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-33766-microsoft-exchange-server-information-disclosure"},{"cve":"CVE-2021-22991","slug":"cve-2021-22991-f5-big-ip-traffic-management-microkernel-buffer-overflow","title":"F5 BIG-IP Traffic Management Microkernel Buffer Overflow","severity":"critical","exploited":true,"published_at":"2022-01-18T00:00:00+00:00","exploited_since":"2022-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22991-f5-big-ip-traffic-management-microkernel-buffer-overflow"},{"cve":"CVE-2021-21975","slug":"cve-2021-21975-vmware-server-side-request-forgery-in-vrealize-operations-manager","title":"VMware Server Side Request Forgery in vRealize Operations Manager API","severity":"critical","exploited":true,"published_at":"2022-01-18T00:00:00+00:00","exploited_since":"2022-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21975-vmware-server-side-request-forgery-in-vrealize-operations-manager"},{"cve":"CVE-2020-13671","slug":"cve-2020-13671-drupal-core-un-restricted-upload-of-file","title":"Drupal core Unrestricted Upload of File with Dangerous Type","severity":"critical","exploited":true,"published_at":"2021-10-12T16:28:25+00:00","exploited_since":"2022-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-13671-drupal-core-un-restricted-upload-of-file"},{"cve":"CVE-2021-32648","slug":"cve-2021-32648-october-cms-improper-authentication","title":"Account Takeover in Octobercms","severity":"critical","exploited":true,"published_at":"2021-08-30T16:13:02+00:00","exploited_since":"2022-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-32648-october-cms-improper-authentication"},{"cve":"CVE-2021-21315","slug":"cve-2021-21315-system-information-library-for-node-js-command-injection","title":"System Information Library for Node.JS Command Injection","severity":"critical","exploited":true,"published_at":"2021-02-16T16:51:04+00:00","exploited_since":"2022-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21315-system-information-library-for-node-js-command-injection"},{"cve":"CVE-2020-13927","slug":"cve-2020-13927-apache-airflow-s-experimental-api-authentication-bypass","title":"Authentication bypass in Apache Airflow","severity":"critical","exploited":true,"published_at":"2020-11-10T16:15:00+00:00","exploited_since":"2022-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-13927-apache-airflow-s-experimental-api-authentication-bypass"},{"cve":"CVE-2020-11978","slug":"cve-2020-11978-apache-airflow-command-injection","title":"Remote code execution (RCE) in Apache Airflow","severity":"critical","exploited":true,"published_at":"2020-07-17T00:15:00+00:00","exploited_since":"2022-01-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-11978-apache-airflow-command-injection"},{"cve":"CVE-2018-13383","slug":"cve-2018-13383-fortinet-fortios-and-fortiproxy-out-of-bounds-write","title":"Fortinet FortiOS and FortiProxy Out-of-bounds Write","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-13383-fortinet-fortios-and-fortiproxy-out-of-bounds-write"},{"cve":"CVE-2021-36260","slug":"cve-2021-36260-hikvision-improper-input-validation","title":"Hikvision Improper Input Validation","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-36260-hikvision-improper-input-validation"},{"cve":"CVE-2013-3900","slug":"cve-2013-3900-microsoft-winverifytrust-function-remote-code-execution","title":"Microsoft WinVerifyTrust function Remote Code Execution","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-3900-microsoft-winverifytrust-function-remote-code-execution"},{"cve":"CVE-2015-7450","slug":"cve-2015-7450-ibm-websphere-application-server-and-server-hypervisor-edition","title":"IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-7450-ibm-websphere-application-server-and-server-hypervisor-edition"},{"cve":"CVE-2018-13382","slug":"cve-2018-13382-fortinet-fortios-and-fortiproxy-improper-authorization","title":"Fortinet FortiOS and FortiProxy Improper Authorization","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-13382-fortinet-fortios-and-fortiproxy-improper-authorization"},{"cve":"CVE-2021-27860","slug":"cve-2021-27860-fatpipe-warp-ipvpn-and-mpvpn-configuration-upload-exploit","title":"FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27860-fatpipe-warp-ipvpn-and-mpvpn-configuration-upload-exploit"},{"cve":"CVE-2019-10149","slug":"cve-2019-10149-exim-mail-transfer-agent-mta-improper-input-validation","title":"Exim Mail Transfer Agent (MTA) Improper Input Validation","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-10149-exim-mail-transfer-agent-mta-improper-input-validation"},{"cve":"CVE-2019-1458","slug":"cve-2019-1458-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1458-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2019-1579","slug":"cve-2019-1579-palo-alto-networks-pan-os-remote-code-execution-vulnerability","title":"Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1579-palo-alto-networks-pan-os-remote-code-execution-vulnerability"},{"cve":"CVE-2019-2725","slug":"cve-2019-2725-oracle-weblogic-server-injection","title":"Oracle WebLogic Server, Injection","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-2725-oracle-weblogic-server-injection"},{"cve":"CVE-2019-7609","slug":"cve-2019-7609-kibana-arbitrary-code-execution","title":"Kibana Arbitrary Code Execution","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-7609-kibana-arbitrary-code-execution"},{"cve":"CVE-2019-9670","slug":"cve-2019-9670-synacor-zimbra-collaboration-suite-zcs-improper-restriction-of-xml","title":"Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-9670-synacor-zimbra-collaboration-suite-zcs-improper-restriction-of-xml"},{"cve":"CVE-2020-6572","slug":"cve-2020-6572-google-chrome-media-use-after-free-vulnerability","title":"Google Chrome Media Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-6572-google-chrome-media-use-after-free-vulnerability"},{"cve":"CVE-2021-22017","slug":"cve-2021-22017-vmware-vcenter-server-improper-access-control","title":"VMware vCenter Server Improper Access Control","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22017-vmware-vcenter-server-improper-access-control"},{"cve":"CVE-2017-1000486","slug":"cve-2017-1000486-primetek-primefaces-remote-code-execution-vulnerability","title":"Inadequate Encryption Strength","severity":"critical","exploited":true,"published_at":"2021-06-03T19:22:22+00:00","exploited_since":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-1000486-primetek-primefaces-remote-code-execution-vulnerability"},{"cve":"CVE-2021-4102","slug":"cve-2021-4102-google-chromium-v8-use-after-free-vulnerability","title":"Google Chromium V8 Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-15T00:00:00+00:00","exploited_since":"2021-12-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-4102-google-chromium-v8-use-after-free-vulnerability"},{"cve":"CVE-2021-43890","slug":"cve-2021-43890-microsoft-windows-appx-installer-spoofing-vulnerability","title":"Microsoft Windows AppX Installer Spoofing Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-15T00:00:00+00:00","exploited_since":"2021-12-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-43890-microsoft-windows-appx-installer-spoofing-vulnerability"},{"cve":"CVE-2021-44228","slug":"cve-2021-44228-apache-log4j2-remote-code-execution-vulnerability","title":"Remote code injection in Log4j","severity":"critical","exploited":true,"published_at":"2021-12-10T00:40:56+00:00","exploited_since":"2021-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-44228-apache-log4j2-remote-code-execution-vulnerability"},{"cve":"CVE-2021-35394","slug":"cve-2021-35394-realtek-jungle-sdk-remote-code-execution-vulnerability","title":"Realtek Jungle SDK Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-10T00:00:00+00:00","exploited_since":"2021-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-35394-realtek-jungle-sdk-remote-code-execution-vulnerability"},{"cve":"CVE-2020-8816","slug":"cve-2020-8816-pi-hole-adminlte-remote-code-execution-vulnerability","title":"Pi-Hole AdminLTE Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-10T00:00:00+00:00","exploited_since":"2021-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8816-pi-hole-adminlte-remote-code-execution-vulnerability"},{"cve":"CVE-2020-17463","slug":"cve-2020-17463-fuel-cms-sql-injection-vulnerability","title":"Fuel CMS SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-10T00:00:00+00:00","exploited_since":"2021-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-17463-fuel-cms-sql-injection-vulnerability"},{"cve":"CVE-2019-7238","slug":"cve-2019-7238-sonatype-nexus-repository-manager-incorrect-access-control","title":"Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-10T00:00:00+00:00","exploited_since":"2021-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-7238-sonatype-nexus-repository-manager-incorrect-access-control"},{"cve":"CVE-2019-13272","slug":"cve-2019-13272-linux-kernel-improper-privilege-management-vulnerability","title":"Linux Kernel Improper Privilege Management Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-10T00:00:00+00:00","exploited_since":"2021-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-13272-linux-kernel-improper-privilege-management-vulnerability"},{"cve":"CVE-2017-17562","slug":"cve-2017-17562-embedthis-goahead-remote-code-execution-vulnerability","title":"Embedthis GoAhead Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-10T00:00:00+00:00","exploited_since":"2021-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-17562-embedthis-goahead-remote-code-execution-vulnerability"},{"cve":"CVE-2017-12149","slug":"cve-2017-12149-red-hat-jboss-application-server-remote-code-execution","title":"Red Hat JBoss Application Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-10T00:00:00+00:00","exploited_since":"2021-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-12149-red-hat-jboss-application-server-remote-code-execution"},{"cve":"CVE-2010-1871","slug":"cve-2010-1871-red-hat-linux-jboss-seam-2-remote-code-execution-vulnerability","title":"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-10T00:00:00+00:00","exploited_since":"2021-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-1871-red-hat-linux-jboss-seam-2-remote-code-execution-vulnerability"},{"cve":"CVE-2021-44515","slug":"cve-2021-44515-zoho-desktop-central-authentication-bypass-vulnerability","title":"Zoho Desktop Central Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-10T00:00:00+00:00","exploited_since":"2021-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-44515-zoho-desktop-central-authentication-bypass-vulnerability"},{"cve":"CVE-2021-44168","slug":"cve-2021-44168-fortinet-fortios-arbitrary-file-download","title":"Fortinet FortiOS Arbitrary File Download","severity":"critical","exploited":true,"published_at":"2021-12-10T00:00:00+00:00","exploited_since":"2021-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-44168-fortinet-fortios-arbitrary-file-download"},{"cve":"CVE-2019-10758","slug":"cve-2019-10758-mongodb-mongo-express-remote-code-execution-vulnerability","title":"mongo-express remote code execution in index creation","severity":"critical","exploited":true,"published_at":"2019-12-30T19:30:31+00:00","exploited_since":"2021-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-10758-mongodb-mongo-express-remote-code-execution-vulnerability"},{"cve":"CVE-2019-0193","slug":"cve-2019-0193-apache-solr-dataimporthandler-code-injection-vulnerability","title":"XML External Entity (XXE) Injection in Apache Solr","severity":"critical","exploited":true,"published_at":"2019-08-01T19:17:35+00:00","exploited_since":"2021-12-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0193-apache-solr-dataimporthandler-code-injection-vulnerability"},{"cve":"CVE-2018-14847","slug":"cve-2018-14847-mikrotik-router-os-directory-traversal-vulnerability","title":"MikroTik Router OS Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-01T00:00:00+00:00","exploited_since":"2021-12-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-14847-mikrotik-router-os-directory-traversal-vulnerability"},{"cve":"CVE-2021-44077","slug":"cve-2021-44077-zoho-manageengine-servicedesk-plus-remote-code-execution","title":"Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-01T00:00:00+00:00","exploited_since":"2021-12-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-44077-zoho-manageengine-servicedesk-plus-remote-code-execution"},{"cve":"CVE-2020-11261","slug":"cve-2020-11261-qualcomm-multiple-chipsets-improper-input-validation","title":"Qualcomm Multiple Chipsets Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-01T00:00:00+00:00","exploited_since":"2021-12-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-11261-qualcomm-multiple-chipsets-improper-input-validation"},{"cve":"CVE-2021-37415","slug":"cve-2021-37415-zoho-manageengine-servicedesk-authentication-bypass-vulnerability","title":"Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2021-12-01T00:00:00+00:00","exploited_since":"2021-12-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-37415-zoho-manageengine-servicedesk-authentication-bypass-vulnerability"},{"cve":"CVE-2021-40438","slug":"cve-2021-40438-apache-http-server-side-request-forgery-ssrf","title":"Apache HTTP Server-Side Request Forgery (SSRF)","severity":"critical","exploited":true,"published_at":"2021-12-01T00:00:00+00:00","exploited_since":"2021-12-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-40438-apache-http-server-side-request-forgery-ssrf"},{"cve":"CVE-2021-40449","slug":"cve-2021-40449-microsoft-windows-win32k-privilege-escalation-vulnerability","title":"Microsoft Windows Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-17T00:00:00+00:00","exploited_since":"2021-11-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-40449-microsoft-windows-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2021-42321","slug":"cve-2021-42321-microsoft-exchange-server-remote-code-execution-vulnerability","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-17T00:00:00+00:00","exploited_since":"2021-11-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-42321-microsoft-exchange-server-remote-code-execution-vulnerability"},{"cve":"CVE-2021-42292","slug":"cve-2021-42292-microsoft-excel-security-feature-bypass","title":"Microsoft Excel Security Feature Bypass","severity":"critical","exploited":true,"published_at":"2021-11-17T00:00:00+00:00","exploited_since":"2021-11-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-42292-microsoft-excel-security-feature-bypass"},{"cve":"CVE-2021-22204","slug":"cve-2021-22204-exiftool-remote-code-execution-vulnerability","title":"ExifTool Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-17T00:00:00+00:00","exploited_since":"2021-11-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22204-exiftool-remote-code-execution-vulnerability"},{"cve":"CVE-2020-0601","slug":"cve-2020-0601-microsoft-windows-cryptoapi-spoofing-vulnerability","title":"GO-2022-0535 - Certificate validation bypass on Windows in crypto/x509","severity":"critical","exploited":true,"published_at":"2022-08-01T22:21:17+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0601-microsoft-windows-cryptoapi-spoofing-vulnerability"},{"cve":"CVE-2020-1147","slug":"cve-2020-1147-microsoft-net-framework-sharepoint-and-visual-studio-remote-code","title":".NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-24T17:22:57+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1147-microsoft-net-framework-sharepoint-and-visual-studio-remote-code"},{"cve":"CVE-2020-7961","slug":"cve-2020-7961-liferay-portal-deserialization-of-untrusted-data-vulnerability","title":"Deserialization of Untrusted Data in Liferay Portal","severity":"critical","exploited":true,"published_at":"2022-05-24T17:12:05+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-7961-liferay-portal-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2016-4437","slug":"cve-2016-4437-apache-shiro-code-execution-vulnerability","title":"Improper Access Control in Apache Shiro","severity":"critical","exploited":true,"published_at":"2022-05-14T02:46:17+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-4437-apache-shiro-code-execution-vulnerability"},{"cve":"CVE-2018-7600","slug":"cve-2018-7600-drupal-core-remote-code-execution-vulnerability","title":"Drupal Core Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-14T01:29:45+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-7600-drupal-core-remote-code-execution-vulnerability"},{"cve":"CVE-2020-17530","slug":"cve-2020-17530-apache-struts-remote-code-execution-vulnerability","title":"Remote code execution in Apache Struts","severity":"critical","exploited":true,"published_at":"2022-02-09T22:51:56+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-17530-apache-struts-remote-code-execution-vulnerability"},{"cve":"CVE-2020-1350","slug":"cve-2020-1350-microsoft-windows-dns-server-remote-code-execution-vulnerability","title":"Microsoft Windows DNS Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1350-microsoft-windows-dns-server-remote-code-execution-vulnerability"},{"cve":"CVE-2020-1380","slug":"cve-2020-1380-microsoft-internet-explorer-scripting-engine-memory-corruption","title":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1380-microsoft-internet-explorer-scripting-engine-memory-corruption"},{"cve":"CVE-2020-1464","slug":"cve-2020-1464-microsoft-windows-spoofing-vulnerability","title":"Microsoft Windows Spoofing Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1464-microsoft-windows-spoofing-vulnerability"},{"cve":"CVE-2020-1472","slug":"cve-2020-1472-microsoft-netlogon-privilege-escalation-vulnerability","title":"Microsoft Netlogon Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1472-microsoft-netlogon-privilege-escalation-vulnerability"},{"cve":"CVE-2020-14750","slug":"cve-2020-14750-oracle-weblogic-server-remote-code-execution-vulnerability","title":"Oracle WebLogic Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-14750-oracle-weblogic-server-remote-code-execution-vulnerability"},{"cve":"CVE-2020-14871","slug":"cve-2020-14871-oracle-solaris-and-zettabyte-file-system-zfs-unspecified","title":"Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-14871-oracle-solaris-and-zettabyte-file-system-zfs-unspecified"},{"cve":"CVE-2020-14882","slug":"cve-2020-14882-oracle-weblogic-server-remote-code-execution-vulnerability","title":"Oracle WebLogic Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-14882-oracle-weblogic-server-remote-code-execution-vulnerability"},{"cve":"CVE-2020-14883","slug":"cve-2020-14883-oracle-weblogic-server-unspecified-vulnerability","title":"Oracle WebLogic Server Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-14883-oracle-weblogic-server-unspecified-vulnerability"},{"cve":"CVE-2020-15505","slug":"cve-2020-15505-ivanti-mobileiron-multiple-products-remote-code-execution","title":"Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-15505-ivanti-mobileiron-multiple-products-remote-code-execution"},{"cve":"CVE-2020-16010","slug":"cve-2020-16010-google-chrome-for-android-ui-heap-buffer-overflow-vulnerability","title":"Google Chrome for Android UI Heap Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-16010-google-chrome-for-android-ui-heap-buffer-overflow-vulnerability"},{"cve":"CVE-2020-17087","slug":"cve-2020-17087-microsoft-windows-kernel-privilege-escalation-vulnerability","title":"Microsoft Windows Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-17087-microsoft-windows-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2020-17144","slug":"cve-2020-17144-microsoft-exchange-server-remote-code-execution-vulnerability","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-17144-microsoft-exchange-server-remote-code-execution-vulnerability"},{"cve":"CVE-2020-17496","slug":"cve-2020-17496-vbulletin-php-module-remote-code-execution-vulnerability","title":"vBulletin PHP Module Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-17496-vbulletin-php-module-remote-code-execution-vulnerability"},{"cve":"CVE-2020-24557","slug":"cve-2020-24557-trend-micro-multiple-products-improper-access-control","title":"Trend Micro Multiple Products Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-24557-trend-micro-multiple-products-improper-access-control"},{"cve":"CVE-2020-25213","slug":"cve-2020-25213-wordpress-file-manager-plugin-remote-code-execution-vulnerability","title":"WordPress File Manager Plugin Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-25213-wordpress-file-manager-plugin-remote-code-execution-vulnerability"},{"cve":"CVE-2020-25506","slug":"cve-2020-25506-d-link-dns-320-device-command-injection-vulnerability","title":"D-Link DNS-320 Device Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-25506-d-link-dns-320-device-command-injection-vulnerability"},{"cve":"CVE-2020-2555","slug":"cve-2020-2555-oracle-multiple-products-remote-code-execution-vulnerability","title":"Oracle Multiple Products Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-2555-oracle-multiple-products-remote-code-execution-vulnerability"},{"cve":"CVE-2020-26919","slug":"cve-2020-26919-netgear-jgs516pe-devices-missing-function-level-access-control","title":"Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-26919-netgear-jgs516pe-devices-missing-function-level-access-control"},{"cve":"CVE-2020-27930","slug":"cve-2020-27930-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-27930-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2020-27932","slug":"cve-2020-27932-apple-multiple-products-type-confusion-vulnerability","title":"Apple Multiple Products Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-27932-apple-multiple-products-type-confusion-vulnerability"},{"cve":"CVE-2020-27950","slug":"cve-2020-27950-apple-multiple-products-memory-initialization-vulnerability","title":"Apple Multiple Products Memory Initialization Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-27950-apple-multiple-products-memory-initialization-vulnerability"},{"cve":"CVE-2020-29557","slug":"cve-2020-29557-d-link-dir-825-r1-devices-buffer-overflow-vulnerability","title":"D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-29557-d-link-dir-825-r1-devices-buffer-overflow-vulnerability"},{"cve":"CVE-2020-29583","slug":"cve-2020-29583-zyxel-multiple-products-use-of-hard-coded-credentials","title":"Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-29583-zyxel-multiple-products-use-of-hard-coded-credentials"},{"cve":"CVE-2020-3118","slug":"cve-2020-3118-cisco-ios-xr-software-discovery-protocol-format-string","title":"Cisco IOS XR Software Discovery Protocol Format String Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-3118-cisco-ios-xr-software-discovery-protocol-format-string"},{"cve":"CVE-2020-3161","slug":"cve-2020-3161-cisco-ip-phones-web-server-remote-code-execution-and-denial-of","title":"Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-3161-cisco-ip-phones-web-server-remote-code-execution-and-denial-of"},{"cve":"CVE-2020-3452","slug":"cve-2020-3452-cisco-asa-and-ftd-read-only-path-traversal-vulnerability","title":"Cisco ASA and FTD Read-Only Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-3452-cisco-asa-and-ftd-read-only-path-traversal-vulnerability"},{"cve":"CVE-2020-3566","slug":"cve-2020-3566-cisco-ios-xr-software-dvmrp-memory-exhaustion-vulnerability","title":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-3566-cisco-ios-xr-software-dvmrp-memory-exhaustion-vulnerability"},{"cve":"CVE-2020-3569","slug":"cve-2020-3569-cisco-ios-xr-software-dvmrp-memory-exhaustion-vulnerability","title":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-3569-cisco-ios-xr-software-dvmrp-memory-exhaustion-vulnerability"},{"cve":"CVE-2020-3580","slug":"cve-2020-3580-cisco-asa-and-ftd-cross-site-scripting-xss-vulnerability","title":"Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-3580-cisco-asa-and-ftd-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2020-3950","slug":"cve-2020-3950-vmware-multiple-products-privilege-escalation-vulnerability","title":"VMware Multiple Products Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-3950-vmware-multiple-products-privilege-escalation-vulnerability"},{"cve":"CVE-2020-3952","slug":"cve-2020-3952-vmware-vcenter-server-information-disclosure-vulnerability","title":"VMware vCenter Server Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-3952-vmware-vcenter-server-information-disclosure-vulnerability"},{"cve":"CVE-2020-3992","slug":"cve-2020-3992-vmware-esxi-openslp-use-after-free-vulnerability","title":"VMware ESXi OpenSLP Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-3992-vmware-esxi-openslp-use-after-free-vulnerability"},{"cve":"CVE-2020-4006","slug":"cve-2020-4006-multiple-vmware-products-command-injection-vulnerability","title":"Multiple VMware Products Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-4006-multiple-vmware-products-command-injection-vulnerability"},{"cve":"CVE-2020-4427","slug":"cve-2020-4427-ibm-data-risk-manager-security-bypass-vulnerability","title":"IBM Data Risk Manager Security Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-4427-ibm-data-risk-manager-security-bypass-vulnerability"},{"cve":"CVE-2020-4428","slug":"cve-2020-4428-ibm-data-risk-manager-remote-code-execution-vulnerability","title":"IBM Data Risk Manager Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-4428-ibm-data-risk-manager-remote-code-execution-vulnerability"},{"cve":"CVE-2020-4430","slug":"cve-2020-4430-ibm-data-risk-manager-directory-traversal-vulnerability","title":"IBM Data Risk Manager Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-4430-ibm-data-risk-manager-directory-traversal-vulnerability"},{"cve":"CVE-2020-5735","slug":"cve-2020-5735-amcrest-cameras-and-nvr-stack-based-buffer-overflow-vulnerability","title":"Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-5735-amcrest-cameras-and-nvr-stack-based-buffer-overflow-vulnerability"},{"cve":"CVE-2020-5847","slug":"cve-2020-5847-unraid-remote-code-execution-vulnerability","title":"Unraid Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-5847-unraid-remote-code-execution-vulnerability"},{"cve":"CVE-2020-5849","slug":"cve-2020-5849-unraid-authentication-bypass-vulnerability","title":"Unraid Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-5849-unraid-authentication-bypass-vulnerability"},{"cve":"CVE-2020-5902","slug":"cve-2020-5902-f5-big-ip-traffic-management-user-interface-tmui-remote-code","title":"F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-5902-f5-big-ip-traffic-management-user-interface-tmui-remote-code"},{"cve":"CVE-2020-6207","slug":"cve-2020-6207-sap-solution-manager-missing-authentication-for-critical-function","title":"SAP Solution Manager Missing Authentication for Critical Function Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-6207-sap-solution-manager-missing-authentication-for-critical-function"},{"cve":"CVE-2020-6287","slug":"cve-2020-6287-sap-netweaver-missing-authentication-for-critical-function","title":"SAP NetWeaver Missing Authentication for Critical Function Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-6287-sap-netweaver-missing-authentication-for-critical-function"},{"cve":"CVE-2020-6418","slug":"cve-2020-6418-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-6418-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2020-6819","slug":"cve-2020-6819-mozilla-firefox-and-thunderbird-use-after-free-vulnerability","title":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-6819-mozilla-firefox-and-thunderbird-use-after-free-vulnerability"},{"cve":"CVE-2020-6820","slug":"cve-2020-6820-mozilla-firefox-and-thunderbird-use-after-free-vulnerability","title":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-6820-mozilla-firefox-and-thunderbird-use-after-free-vulnerability"},{"cve":"CVE-2020-8193","slug":"cve-2020-8193-citrix-adc-gateway-and-sd-wan-wanop-appliance-authorization-bypass","title":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8193-citrix-adc-gateway-and-sd-wan-wanop-appliance-authorization-bypass"},{"cve":"CVE-2020-8195","slug":"cve-2020-8195-citrix-adc-gateway-and-sd-wan-wanop-appliance-information","title":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8195-citrix-adc-gateway-and-sd-wan-wanop-appliance-information"},{"cve":"CVE-2020-8196","slug":"cve-2020-8196-citrix-adc-gateway-and-sd-wan-wanop-appliance-information","title":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8196-citrix-adc-gateway-and-sd-wan-wanop-appliance-information"},{"cve":"CVE-2020-8243","slug":"cve-2020-8243-ivanti-pulse-connect-secure-code-execution-vulnerability","title":"Ivanti Pulse Connect Secure Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8243-ivanti-pulse-connect-secure-code-execution-vulnerability"},{"cve":"CVE-2020-8260","slug":"cve-2020-8260-ivanti-pulse-connect-secure-code-execution-vulnerability","title":"Ivanti Pulse Connect Secure Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8260-ivanti-pulse-connect-secure-code-execution-vulnerability"},{"cve":"CVE-2020-8467","slug":"cve-2020-8467-trend-micro-apex-one-and-officescan-remote-code-execution","title":"Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8467-trend-micro-apex-one-and-officescan-remote-code-execution"},{"cve":"CVE-2020-8468","slug":"cve-2020-8468-trend-micro-multiple-products-content-validation-escape","title":"Trend Micro Multiple Products Content Validation Escape Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8468-trend-micro-multiple-products-content-validation-escape"},{"cve":"CVE-2020-8515","slug":"cve-2020-8515-multiple-draytek-vigor-routers-web-management-page-vulnerability","title":"Multiple DrayTek Vigor Routers Web Management Page Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8515-multiple-draytek-vigor-routers-web-management-page-vulnerability"},{"cve":"CVE-2020-8599","slug":"cve-2020-8599-trend-micro-apex-one-and-officescan-authentication-bypass","title":"Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8599-trend-micro-apex-one-and-officescan-authentication-bypass"},{"cve":"CVE-2020-8644","slug":"cve-2020-8644-playsms-server-side-template-injection-vulnerability","title":"PlaySMS Server-Side Template Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8644-playsms-server-side-template-injection-vulnerability"},{"cve":"CVE-2020-8655","slug":"cve-2020-8655-eyesofnetwork-improper-privilege-management-vulnerability","title":"EyesOfNetwork Improper Privilege Management Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8655-eyesofnetwork-improper-privilege-management-vulnerability"},{"cve":"CVE-2020-8657","slug":"cve-2020-8657-eyesofnetwork-use-of-hard-coded-credentials-vulnerability","title":"EyesOfNetwork Use of Hard-Coded Credentials Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8657-eyesofnetwork-use-of-hard-coded-credentials-vulnerability"},{"cve":"CVE-2020-9818","slug":"cve-2020-9818-apple-ios-ipados-and-watchos-out-of-bounds-write-vulnerability","title":"Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-9818-apple-ios-ipados-and-watchos-out-of-bounds-write-vulnerability"},{"cve":"CVE-2020-9819","slug":"cve-2020-9819-apple-ios-ipados-and-watchos-memory-corruption-vulnerability","title":"Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-9819-apple-ios-ipados-and-watchos-memory-corruption-vulnerability"},{"cve":"CVE-2020-9859","slug":"cve-2020-9859-apple-multiple-products-code-execution-vulnerability","title":"Apple Multiple Products Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-9859-apple-multiple-products-code-execution-vulnerability"},{"cve":"CVE-2021-1497","slug":"cve-2021-1497-cisco-hyperflex-hx-installer-virtual-machine-command-injection","title":"Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1497-cisco-hyperflex-hx-installer-virtual-machine-command-injection"},{"cve":"CVE-2021-1498","slug":"cve-2021-1498-cisco-hyperflex-hx-data-platform-command-injection-vulnerability","title":"Cisco HyperFlex HX Data Platform Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1498-cisco-hyperflex-hx-data-platform-command-injection-vulnerability"},{"cve":"CVE-2021-1647","slug":"cve-2021-1647-microsoft-defender-remote-code-execution-vulnerability","title":"Microsoft Defender Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1647-microsoft-defender-remote-code-execution-vulnerability"},{"cve":"CVE-2021-1675","slug":"cve-2021-1675-microsoft-windows-print-spooler-remote-code-execution","title":"Microsoft Windows Print Spooler Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1675-microsoft-windows-print-spooler-remote-code-execution"},{"cve":"CVE-2021-1732","slug":"cve-2021-1732-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1732-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2021-1782","slug":"cve-2021-1782-apple-multiple-products-race-condition-vulnerability","title":"Apple Multiple Products Race Condition Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1782-apple-multiple-products-race-condition-vulnerability"},{"cve":"CVE-2021-1870","slug":"cve-2021-1870-apple-ios-ipados-and-macos-webkit-remote-code-execution","title":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1870-apple-ios-ipados-and-macos-webkit-remote-code-execution"},{"cve":"CVE-2021-1871","slug":"cve-2021-1871-apple-ios-ipados-and-macos-webkit-remote-code-execution","title":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1871-apple-ios-ipados-and-macos-webkit-remote-code-execution"},{"cve":"CVE-2021-21017","slug":"cve-2021-21017-adobe-acrobat-and-reader-heap-based-buffer-overflow-vulnerability","title":"Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21017-adobe-acrobat-and-reader-heap-based-buffer-overflow-vulnerability"},{"cve":"CVE-2021-1879","slug":"cve-2021-1879-apple-ios-ipados-and-watchos-webkit-cross-site-scripting-xss","title":"Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1879-apple-ios-ipados-and-watchos-webkit-cross-site-scripting-xss"},{"cve":"CVE-2021-1905","slug":"cve-2021-1905-qualcomm-multiple-chipsets-use-after-free-vulnerability","title":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1905-qualcomm-multiple-chipsets-use-after-free-vulnerability"},{"cve":"CVE-2021-1906","slug":"cve-2021-1906-qualcomm-multiple-chipsets-detection-of-error-condition-without","title":"Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1906-qualcomm-multiple-chipsets-detection-of-error-condition-without"},{"cve":"CVE-2021-20016","slug":"cve-2021-20016-sonicwall-sslvpn-sma100-sql-injection-vulnerability","title":"SonicWall SSLVPN SMA100 SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20016-sonicwall-sslvpn-sma100-sql-injection-vulnerability"},{"cve":"CVE-2021-20021","slug":"cve-2021-20021-sonicwall-email-security-improper-privilege-management","title":"SonicWall Email Security Improper Privilege Management Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20021-sonicwall-email-security-improper-privilege-management"},{"cve":"CVE-2021-20022","slug":"cve-2021-20022-sonicwall-email-security-unrestricted-upload-of-file","title":"SonicWall Email Security Unrestricted Upload of File Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20022-sonicwall-email-security-unrestricted-upload-of-file"},{"cve":"CVE-2021-20023","slug":"cve-2021-20023-sonicwall-email-security-path-traversal-vulnerability","title":"SonicWall Email Security Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20023-sonicwall-email-security-path-traversal-vulnerability"},{"cve":"CVE-2021-20090","slug":"cve-2021-20090-arcadyan-buffalo-firmware-path-traversal-vulnerability","title":"Arcadyan Buffalo Firmware Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20090-arcadyan-buffalo-firmware-path-traversal-vulnerability"},{"cve":"CVE-2021-21148","slug":"cve-2021-21148-google-chromium-v8-heap-buffer-overflow-vulnerability","title":"Google Chromium V8 Heap Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21148-google-chromium-v8-heap-buffer-overflow-vulnerability"},{"cve":"CVE-2021-21166","slug":"cve-2021-21166-google-chromium-race-condition-vulnerability","title":"Google Chromium Race Condition Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21166-google-chromium-race-condition-vulnerability"},{"cve":"CVE-2021-21193","slug":"cve-2021-21193-google-chromium-blink-use-after-free-vulnerability","title":"Google Chromium Blink Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21193-google-chromium-blink-use-after-free-vulnerability"},{"cve":"CVE-2021-21206","slug":"cve-2021-21206-google-chromium-blink-use-after-free-vulnerability","title":"Google Chromium Blink Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21206-google-chromium-blink-use-after-free-vulnerability"},{"cve":"CVE-2021-21220","slug":"cve-2021-21220-google-chromium-v8-improper-input-validation-vulnerability","title":"Google Chromium V8 Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21220-google-chromium-v8-improper-input-validation-vulnerability"},{"cve":"CVE-2021-21224","slug":"cve-2021-21224-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21224-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2021-21972","slug":"cve-2021-21972-vmware-vcenter-server-remote-code-execution-vulnerability","title":"VMware vCenter Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21972-vmware-vcenter-server-remote-code-execution-vulnerability"},{"cve":"CVE-2021-21985","slug":"cve-2021-21985-vmware-vcenter-server-improper-input-validation-vulnerability","title":"VMware vCenter Server Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-21985-vmware-vcenter-server-improper-input-validation-vulnerability"},{"cve":"CVE-2021-22005","slug":"cve-2021-22005-vmware-vcenter-server-file-upload-vulnerability","title":"VMware vCenter Server File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22005-vmware-vcenter-server-file-upload-vulnerability"},{"cve":"CVE-2021-22502","slug":"cve-2021-22502-micro-focus-operation-bridge-report-obr-remote-code-execution","title":"Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22502-micro-focus-operation-bridge-report-obr-remote-code-execution"},{"cve":"CVE-2021-22506","slug":"cve-2021-22506-micro-focus-access-manager-information-leakage-vulnerability","title":"Micro Focus Access Manager Information Leakage Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22506-micro-focus-access-manager-information-leakage-vulnerability"},{"cve":"CVE-2021-22893","slug":"cve-2021-22893-ivanti-pulse-connect-secure-use-after-free-vulnerability","title":"Ivanti Pulse Connect Secure Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22893-ivanti-pulse-connect-secure-use-after-free-vulnerability"},{"cve":"CVE-2021-22894","slug":"cve-2021-22894-ivanti-pulse-connect-secure-collaboration-suite-buffer-overflow","title":"Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22894-ivanti-pulse-connect-secure-collaboration-suite-buffer-overflow"},{"cve":"CVE-2021-22899","slug":"cve-2021-22899-ivanti-pulse-connect-secure-command-injection-vulnerability","title":"Ivanti Pulse Connect Secure Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22899-ivanti-pulse-connect-secure-command-injection-vulnerability"},{"cve":"CVE-2021-22900","slug":"cve-2021-22900-ivanti-pulse-connect-secure-unrestricted-file-upload","title":"Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22900-ivanti-pulse-connect-secure-unrestricted-file-upload"},{"cve":"CVE-2021-22986","slug":"cve-2021-22986-f5-big-ip-and-big-iq-centralized-management-icontrol-rest-remote","title":"F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22986-f5-big-ip-and-big-iq-centralized-management-icontrol-rest-remote"},{"cve":"CVE-2021-23874","slug":"cve-2021-23874-mcafee-total-protection-mtp-improper-privilege-management","title":"McAfee Total Protection (MTP) Improper Privilege Management Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-23874-mcafee-total-protection-mtp-improper-privilege-management"},{"cve":"CVE-2021-26084","slug":"cve-2021-26084-atlassian-confluence-server-and-data-center-object-graph","title":"Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-26084-atlassian-confluence-server-and-data-center-object-graph"},{"cve":"CVE-2021-26411","slug":"cve-2021-26411-microsoft-internet-explorer-memory-corruption-vulnerability","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-26411-microsoft-internet-explorer-memory-corruption-vulnerability"},{"cve":"CVE-2021-26855","slug":"cve-2021-26855-microsoft-exchange-server-remote-code-execution-vulnerability","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-26855-microsoft-exchange-server-remote-code-execution-vulnerability"},{"cve":"CVE-2021-26857","slug":"cve-2021-26857-microsoft-exchange-server-remote-code-execution-vulnerability","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-26857-microsoft-exchange-server-remote-code-execution-vulnerability"},{"cve":"CVE-2021-26858","slug":"cve-2021-26858-microsoft-exchange-server-remote-code-execution-vulnerability","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-26858-microsoft-exchange-server-remote-code-execution-vulnerability"},{"cve":"CVE-2021-27059","slug":"cve-2021-27059-microsoft-office-remote-code-execution-vulnerability","title":"Microsoft Office Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27059-microsoft-office-remote-code-execution-vulnerability"},{"cve":"CVE-2021-27065","slug":"cve-2021-27065-microsoft-exchange-server-remote-code-execution-vulnerability","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27065-microsoft-exchange-server-remote-code-execution-vulnerability"},{"cve":"CVE-2021-27103","slug":"cve-2021-27103-accellion-fta-server-side-request-forgery-ssrf-vulnerability","title":"Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27103-accellion-fta-server-side-request-forgery-ssrf-vulnerability"},{"cve":"CVE-2021-27104","slug":"cve-2021-27104-accellion-fta-os-command-injection-vulnerability","title":"Accellion FTA OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27104-accellion-fta-os-command-injection-vulnerability"},{"cve":"CVE-2021-27561","slug":"cve-2021-27561-yealink-device-management-server-side-request-forgery-ssrf","title":"Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27561-yealink-device-management-server-side-request-forgery-ssrf"},{"cve":"CVE-2021-27562","slug":"cve-2021-27562-arm-trusted-firmware-out-of-bounds-write-vulnerability","title":"Arm Trusted Firmware Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27562-arm-trusted-firmware-out-of-bounds-write-vulnerability"},{"cve":"CVE-2021-28310","slug":"cve-2021-28310-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-28310-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2021-28550","slug":"cve-2021-28550-adobe-acrobat-and-reader-use-after-free-vulnerability","title":"Adobe Acrobat and Reader Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-28550-adobe-acrobat-and-reader-use-after-free-vulnerability"},{"cve":"CVE-2021-28663","slug":"cve-2021-28663-arm-mali-graphics-processing-unit-gpu-use-after-free","title":"Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-28663-arm-mali-graphics-processing-unit-gpu-use-after-free"},{"cve":"CVE-2021-28664","slug":"cve-2021-28664-arm-mali-graphics-processing-unit-gpu-unspecified-vulnerability","title":"Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-28664-arm-mali-graphics-processing-unit-gpu-unspecified-vulnerability"},{"cve":"CVE-2021-30116","slug":"cve-2021-30116-kaseya-virtual-system-server-administrator-vsa-information","title":"Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30116-kaseya-virtual-system-server-administrator-vsa-information"},{"cve":"CVE-2021-30551","slug":"cve-2021-30551-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30551-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2021-30554","slug":"cve-2021-30554-google-chromium-webgl-use-after-free-vulnerability","title":"Google Chromium WebGL Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30554-google-chromium-webgl-use-after-free-vulnerability"},{"cve":"CVE-2021-30563","slug":"cve-2021-30563-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30563-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2021-30632","slug":"cve-2021-30632-google-chromium-v8-out-of-bounds-write-vulnerability","title":"Google Chromium V8 Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30632-google-chromium-v8-out-of-bounds-write-vulnerability"},{"cve":"CVE-2021-30633","slug":"cve-2021-30633-google-chromium-indexed-db-api-use-after-free-vulnerability","title":"Google Chromium Indexed DB API Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30633-google-chromium-indexed-db-api-use-after-free-vulnerability"},{"cve":"CVE-2021-30657","slug":"cve-2021-30657-apple-macos-unspecified-vulnerability","title":"Apple macOS Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30657-apple-macos-unspecified-vulnerability"},{"cve":"CVE-2021-30661","slug":"cve-2021-30661-apple-multiple-products-webkit-storage-use-after-free","title":"Apple Multiple Products WebKit Storage Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30661-apple-multiple-products-webkit-storage-use-after-free"},{"cve":"CVE-2021-30663","slug":"cve-2021-30663-apple-multiple-products-webkit-integer-overflow-vulnerability","title":"Apple Multiple Products WebKit Integer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30663-apple-multiple-products-webkit-integer-overflow-vulnerability"},{"cve":"CVE-2021-30665","slug":"cve-2021-30665-apple-multiple-products-webkit-memory-corruption-vulnerability","title":"Apple Multiple Products WebKit Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30665-apple-multiple-products-webkit-memory-corruption-vulnerability"},{"cve":"CVE-2021-30666","slug":"cve-2021-30666-apple-ios-webkit-buffer-overflow-vulnerability","title":"Apple iOS WebKit Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30666-apple-ios-webkit-buffer-overflow-vulnerability"},{"cve":"CVE-2021-30713","slug":"cve-2021-30713-apple-macos-unspecified-vulnerability","title":"Apple macOS Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30713-apple-macos-unspecified-vulnerability"},{"cve":"CVE-2021-30761","slug":"cve-2021-30761-apple-ios-webkit-memory-corruption-vulnerability","title":"Apple iOS WebKit Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30761-apple-ios-webkit-memory-corruption-vulnerability"},{"cve":"CVE-2021-30762","slug":"cve-2021-30762-apple-ios-webkit-use-after-free-vulnerability","title":"Apple iOS WebKit Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30762-apple-ios-webkit-use-after-free-vulnerability"},{"cve":"CVE-2021-30807","slug":"cve-2021-30807-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30807-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2021-30858","slug":"cve-2021-30858-apple-ios-ipados-macos-use-after-free-vulnerability","title":"Apple iOS, iPadOS, macOS Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30858-apple-ios-ipados-macos-use-after-free-vulnerability"},{"cve":"CVE-2021-30860","slug":"cve-2021-30860-apple-multiple-products-integer-overflow-vulnerability","title":"Apple Multiple Products Integer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30860-apple-multiple-products-integer-overflow-vulnerability"},{"cve":"CVE-2021-30869","slug":"cve-2021-30869-apple-ios-ipados-and-macos-type-confusion-vulnerability","title":"Apple iOS, iPadOS, and macOS Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30869-apple-ios-ipados-and-macos-type-confusion-vulnerability"},{"cve":"CVE-2021-31199","slug":"cve-2021-31199-microsoft-enhanced-cryptographic-provider-privilege-escalation","title":"Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-31199-microsoft-enhanced-cryptographic-provider-privilege-escalation"},{"cve":"CVE-2021-31201","slug":"cve-2021-31201-microsoft-enhanced-cryptographic-provider-privilege-escalation","title":"Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-31201-microsoft-enhanced-cryptographic-provider-privilege-escalation"},{"cve":"CVE-2021-31207","slug":"cve-2021-31207-microsoft-exchange-server-security-feature-bypass-vulnerability","title":"Microsoft Exchange Server Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-31207-microsoft-exchange-server-security-feature-bypass-vulnerability"},{"cve":"CVE-2021-31755","slug":"cve-2021-31755-tenda-ac11-router-stack-buffer-overflow-vulnerability","title":"Tenda AC11 Router Stack Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-31755-tenda-ac11-router-stack-buffer-overflow-vulnerability"},{"cve":"CVE-2021-31955","slug":"cve-2021-31955-microsoft-windows-kernel-information-disclosure-vulnerability","title":"Microsoft Windows Kernel Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-31955-microsoft-windows-kernel-information-disclosure-vulnerability"},{"cve":"CVE-2021-31956","slug":"cve-2021-31956-microsoft-windows-ntfs-privilege-escalation-vulnerability","title":"Microsoft Windows NTFS Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-31956-microsoft-windows-ntfs-privilege-escalation-vulnerability"},{"cve":"CVE-2021-31979","slug":"cve-2021-31979-microsoft-windows-kernel-privilege-escalation-vulnerability","title":"Microsoft Windows Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-31979-microsoft-windows-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2021-33739","slug":"cve-2021-33739-microsoft-desktop-window-manager-dwm-core-library-privilege","title":"Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-33739-microsoft-desktop-window-manager-dwm-core-library-privilege"},{"cve":"CVE-2021-33742","slug":"cve-2021-33742-microsoft-windows-mshtml-platform-remote-code-execution","title":"Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-33742-microsoft-windows-mshtml-platform-remote-code-execution"},{"cve":"CVE-2021-33771","slug":"cve-2021-33771-microsoft-windows-kernel-privilege-escalation-vulnerability","title":"Microsoft Windows Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-33771-microsoft-windows-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2021-34448","slug":"cve-2021-34448-microsoft-windows-scripting-engine-memory-corruption","title":"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-34448-microsoft-windows-scripting-engine-memory-corruption"},{"cve":"CVE-2021-34473","slug":"cve-2021-34473-microsoft-exchange-server-remote-code-execution-vulnerability","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-34473-microsoft-exchange-server-remote-code-execution-vulnerability"},{"cve":"CVE-2021-34523","slug":"cve-2021-34523-microsoft-exchange-server-privilege-escalation-vulnerability","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-34523-microsoft-exchange-server-privilege-escalation-vulnerability"},{"cve":"CVE-2021-34527","slug":"cve-2021-34527-microsoft-windows-print-spooler-remote-code-execution","title":"Microsoft Windows Print Spooler Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-34527-microsoft-windows-print-spooler-remote-code-execution"},{"cve":"CVE-2021-35211","slug":"cve-2021-35211-solarwinds-serv-u-remote-code-execution-vulnerability","title":"SolarWinds Serv-U Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-35211-solarwinds-serv-u-remote-code-execution-vulnerability"},{"cve":"CVE-2021-35395","slug":"cve-2021-35395-realtek-ap-router-sdk-buffer-overflow-vulnerability","title":"Realtek AP-Router SDK Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-35395-realtek-ap-router-sdk-buffer-overflow-vulnerability"},{"cve":"CVE-2021-35464","slug":"cve-2021-35464-forgerock-access-management-am-core-server-remote-code-execution","title":"ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-35464-forgerock-access-management-am-core-server-remote-code-execution"},{"cve":"CVE-2021-36741","slug":"cve-2021-36741-trend-micro-multiple-products-improper-input-validation","title":"Trend Micro Multiple Products Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-36741-trend-micro-multiple-products-improper-input-validation"},{"cve":"CVE-2021-36742","slug":"cve-2021-36742-trend-micro-multiple-products-improper-input-validation","title":"Trend Micro Multiple Products Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-36742-trend-micro-multiple-products-improper-input-validation"},{"cve":"CVE-2021-36942","slug":"cve-2021-36942-microsoft-windows-local-security-authority-lsa-spoofing","title":"Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-36942-microsoft-windows-local-security-authority-lsa-spoofing"},{"cve":"CVE-2021-36948","slug":"cve-2021-36948-microsoft-windows-update-medic-service-privilege-escalation","title":"Microsoft Windows Update Medic Service Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-36948-microsoft-windows-update-medic-service-privilege-escalation"},{"cve":"CVE-2021-36955","slug":"cve-2021-36955-microsoft-windows-common-log-file-system-clfs-driver-privilege","title":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-36955-microsoft-windows-common-log-file-system-clfs-driver-privilege"},{"cve":"CVE-2021-37973","slug":"cve-2021-37973-google-chromium-portals-use-after-free-vulnerability","title":"Google Chromium Portals Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-37973-google-chromium-portals-use-after-free-vulnerability"},{"cve":"CVE-2021-37975","slug":"cve-2021-37975-google-chromium-v8-use-after-free-vulnerability","title":"Google Chromium V8 Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-37975-google-chromium-v8-use-after-free-vulnerability"},{"cve":"CVE-2021-37976","slug":"cve-2021-37976-google-chromium-information-disclosure-vulnerability","title":"Google Chromium Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-37976-google-chromium-information-disclosure-vulnerability"},{"cve":"CVE-2021-38000","slug":"cve-2021-38000-google-chromium-intents-improper-input-validation-vulnerability","title":"Google Chromium Intents Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-38000-google-chromium-intents-improper-input-validation-vulnerability"},{"cve":"CVE-2021-38003","slug":"cve-2021-38003-google-chromium-v8-memory-corruption-vulnerability","title":"Google Chromium V8 Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-38003-google-chromium-v8-memory-corruption-vulnerability"},{"cve":"CVE-2021-38645","slug":"cve-2021-38645-microsoft-open-management-infrastructure-omi-privilege-escalation","title":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-38645-microsoft-open-management-infrastructure-omi-privilege-escalation"},{"cve":"CVE-2021-38647","slug":"cve-2021-38647-microsoft-open-management-infrastructure-omi-remote-code","title":"Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-38647-microsoft-open-management-infrastructure-omi-remote-code"},{"cve":"CVE-2021-38648","slug":"cve-2021-38648-microsoft-open-management-infrastructure-omi-privilege-escalation","title":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-38648-microsoft-open-management-infrastructure-omi-privilege-escalation"},{"cve":"CVE-2021-38649","slug":"cve-2021-38649-microsoft-open-management-infrastructure-omi-privilege-escalation","title":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-38649-microsoft-open-management-infrastructure-omi-privilege-escalation"},{"cve":"CVE-2021-40444","slug":"cve-2021-40444-microsoft-mshtml-remote-code-execution-vulnerability","title":"Microsoft MSHTML Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-40444-microsoft-mshtml-remote-code-execution-vulnerability"},{"cve":"CVE-2021-40539","slug":"cve-2021-40539-zoho-manageengine-adselfservice-plus-authentication-bypass","title":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-40539-zoho-manageengine-adselfservice-plus-authentication-bypass"},{"cve":"CVE-2021-41773","slug":"cve-2021-41773-apache-http-server-path-traversal-vulnerability","title":"Apache HTTP Server Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-41773-apache-http-server-path-traversal-vulnerability"},{"cve":"CVE-2021-42013","slug":"cve-2021-42013-apache-http-server-path-traversal-vulnerability","title":"Apache HTTP Server Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-42013-apache-http-server-path-traversal-vulnerability"},{"cve":"CVE-2021-42258","slug":"cve-2021-42258-bqe-billquick-web-suite-sql-injection-vulnerability","title":"BQE BillQuick Web Suite SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-42258-bqe-billquick-web-suite-sql-injection-vulnerability"},{"cve":"CVE-2021-22205","slug":"cve-2021-22205-gitlab-community-and-enterprise-editions-remote-code-execution","title":"GitLab Community and Enterprise Editions Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22205-gitlab-community-and-enterprise-editions-remote-code-execution"},{"cve":"CVE-2010-5326","slug":"cve-2010-5326-sap-netweaver-remote-code-execution-vulnerability","title":"SAP NetWeaver Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-5326-sap-netweaver-remote-code-execution-vulnerability"},{"cve":"CVE-2012-0158","slug":"cve-2012-0158-microsoft-mscomctl-ocx-remote-code-execution-vulnerability","title":"Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-0158-microsoft-mscomctl-ocx-remote-code-execution-vulnerability"},{"cve":"CVE-2012-3152","slug":"cve-2012-3152-oracle-fusion-middleware-unspecified-vulnerability","title":"Oracle Fusion Middleware Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-3152-oracle-fusion-middleware-unspecified-vulnerability"},{"cve":"CVE-2014-1812","slug":"cve-2014-1812-microsoft-windows-group-policy-preferences-password-privilege","title":"Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-1812-microsoft-windows-group-policy-preferences-password-privilege"},{"cve":"CVE-2015-1641","slug":"cve-2015-1641-microsoft-office-memory-corruption-vulnerability","title":"Microsoft Office Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-1641-microsoft-office-memory-corruption-vulnerability"},{"cve":"CVE-2015-4852","slug":"cve-2015-4852-oracle-weblogic-server-deserialization-of-untrusted-data","title":"Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-4852-oracle-weblogic-server-deserialization-of-untrusted-data"},{"cve":"CVE-2016-0167","slug":"cve-2016-0167-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-0167-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2016-0185","slug":"cve-2016-0185-microsoft-windows-media-center-remote-code-execution-vulnerability","title":"Microsoft Windows Media Center Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-0185-microsoft-windows-media-center-remote-code-execution-vulnerability"},{"cve":"CVE-2016-3235","slug":"cve-2016-3235-microsoft-office-ole-dll-side-loading-vulnerability","title":"Microsoft Office OLE DLL Side Loading Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3235-microsoft-office-ole-dll-side-loading-vulnerability"},{"cve":"CVE-2016-3643","slug":"cve-2016-3643-solarwinds-virtualization-manager-privilege-escalation","title":"SolarWinds Virtualization Manager Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3643-solarwinds-virtualization-manager-privilege-escalation"},{"cve":"CVE-2016-3715","slug":"cve-2016-3715-imagemagick-arbitrary-file-deletion-vulnerability","title":"ImageMagick Arbitrary File Deletion Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3715-imagemagick-arbitrary-file-deletion-vulnerability"},{"cve":"CVE-2016-3718","slug":"cve-2016-3718-imagemagick-server-side-request-forgery-ssrf-vulnerability","title":"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3718-imagemagick-server-side-request-forgery-ssrf-vulnerability"},{"cve":"CVE-2016-3976","slug":"cve-2016-3976-sap-netweaver-directory-traversal-vulnerability","title":"SAP NetWeaver Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3976-sap-netweaver-directory-traversal-vulnerability"},{"cve":"CVE-2016-7255","slug":"cve-2016-7255-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-7255-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2016-9563","slug":"cve-2016-9563-sap-netweaver-xml-external-entity-xxe-vulnerability","title":"SAP NetWeaver XML External Entity (XXE) Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-9563-sap-netweaver-xml-external-entity-xxe-vulnerability"},{"cve":"CVE-2017-0143","slug":"cve-2017-0143-microsoft-windows-server-message-block-smbv1-remote-code-execution","title":"Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0143-microsoft-windows-server-message-block-smbv1-remote-code-execution"},{"cve":"CVE-2017-0199","slug":"cve-2017-0199-microsoft-office-and-wordpad-remote-code-execution-vulnerability","title":"Microsoft Office and WordPad Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-0199-microsoft-office-and-wordpad-remote-code-execution-vulnerability"},{"cve":"CVE-2017-11774","slug":"cve-2017-11774-microsoft-office-outlook-security-feature-bypass-vulnerability","title":"Microsoft Office Outlook Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-11774-microsoft-office-outlook-security-feature-bypass-vulnerability"},{"cve":"CVE-2017-11882","slug":"cve-2017-11882-microsoft-office-memory-corruption-vulnerability","title":"Microsoft Office Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-11882-microsoft-office-memory-corruption-vulnerability"},{"cve":"CVE-2017-16651","slug":"cve-2017-16651-roundcube-webmail-file-disclosure-vulnerability","title":"Roundcube Webmail File Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-16651-roundcube-webmail-file-disclosure-vulnerability"},{"cve":"CVE-2017-6327","slug":"cve-2017-6327-symantec-messaging-gateway-remote-code-execution-vulnerability","title":"Symantec Messaging Gateway Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6327-symantec-messaging-gateway-remote-code-execution-vulnerability"},{"cve":"CVE-2017-7269","slug":"cve-2017-7269-microsoft-windows-server-buffer-overflow-vulnerability","title":"Microsoft Windows Server Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-7269-microsoft-windows-server-buffer-overflow-vulnerability"},{"cve":"CVE-2017-8759","slug":"cve-2017-8759-microsoft-net-framework-remote-code-execution-vulnerability","title":"Microsoft .NET Framework Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-8759-microsoft-net-framework-remote-code-execution-vulnerability"},{"cve":"CVE-2017-9248","slug":"cve-2017-9248-progress-telerik-ui-for-asp-net-ajax-and-sitefinity-cryptographic","title":"Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-9248-progress-telerik-ui-for-asp-net-ajax-and-sitefinity-cryptographic"},{"cve":"CVE-2018-0171","slug":"cve-2018-0171-cisco-ios-and-ios-xe-software-smart-install-remote-code-execution","title":"Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0171-cisco-ios-and-ios-xe-software-smart-install-remote-code-execution"},{"cve":"CVE-2021-27101","slug":"cve-2021-27101-accellion-fta-sql-injection-vulnerability","title":"Accellion FTA SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27101-accellion-fta-sql-injection-vulnerability"},{"cve":"CVE-2018-0296","slug":"cve-2018-0296-cisco-adaptive-security-appliance-asa-denial-of-service","title":"Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0296-cisco-adaptive-security-appliance-asa-denial-of-service"},{"cve":"CVE-2018-0798","slug":"cve-2018-0798-microsoft-office-memory-corruption-vulnerability","title":"Microsoft Office Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0798-microsoft-office-memory-corruption-vulnerability"},{"cve":"CVE-2018-0802","slug":"cve-2018-0802-microsoft-office-memory-corruption-vulnerability","title":"Microsoft Office Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0802-microsoft-office-memory-corruption-vulnerability"},{"cve":"CVE-2021-27102","slug":"cve-2021-27102-accellion-fta-os-command-injection-vulnerability","title":"Accellion FTA OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27102-accellion-fta-os-command-injection-vulnerability"},{"cve":"CVE-2018-13379","slug":"cve-2018-13379-fortinet-fortios-ssl-vpn-path-traversal-vulnerability","title":"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-13379-fortinet-fortios-ssl-vpn-path-traversal-vulnerability"},{"cve":"CVE-2018-14558","slug":"cve-2018-14558-tenda-ac7-ac9-and-ac10-routers-command-injection-vulnerability","title":"Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-14558-tenda-ac7-ac9-and-ac10-routers-command-injection-vulnerability"},{"cve":"CVE-2018-15961","slug":"cve-2018-15961-adobe-coldfusion-unrestricted-file-upload-vulnerability","title":"Adobe ColdFusion Unrestricted File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-15961-adobe-coldfusion-unrestricted-file-upload-vulnerability"},{"cve":"CVE-2018-20062","slug":"cve-2018-20062-thinkphp-nonecms-remote-code-execution-vulnerability","title":"ThinkPHP \"noneCms\" Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-20062-thinkphp-nonecms-remote-code-execution-vulnerability"},{"cve":"CVE-2018-2380","slug":"cve-2018-2380-sap-customer-relationship-management-crm-path-traversal","title":"SAP Customer Relationship Management (CRM) Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-2380-sap-customer-relationship-management-crm-path-traversal"},{"cve":"CVE-2018-4878","slug":"cve-2018-4878-adobe-flash-player-use-after-free-vulnerability","title":"Adobe Flash Player Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-4878-adobe-flash-player-use-after-free-vulnerability"},{"cve":"CVE-2018-4939","slug":"cve-2018-4939-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability","title":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-4939-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2018-6789","slug":"cve-2018-6789-exim-buffer-overflow-vulnerability","title":"Exim Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-6789-exim-buffer-overflow-vulnerability"},{"cve":"CVE-2018-8653","slug":"cve-2018-8653-microsoft-internet-explorer-scripting-engine-memory-corruption","title":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-8653-microsoft-internet-explorer-scripting-engine-memory-corruption"},{"cve":"CVE-2019-0211","slug":"cve-2019-0211-apache-http-server-privilege-escalation-vulnerability","title":"Apache HTTP Server Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0211-apache-http-server-privilege-escalation-vulnerability"},{"cve":"CVE-2019-0541","slug":"cve-2019-0541-microsoft-mshtml-remote-code-execution-vulnerability","title":"Microsoft MSHTML Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0541-microsoft-mshtml-remote-code-execution-vulnerability"},{"cve":"CVE-2019-0604","slug":"cve-2019-0604-microsoft-sharepoint-remote-code-execution-vulnerability","title":"Microsoft SharePoint Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0604-microsoft-sharepoint-remote-code-execution-vulnerability"},{"cve":"CVE-2019-0708","slug":"cve-2019-0708-microsoft-remote-desktop-services-remote-code-execution","title":"Microsoft Remote Desktop Services Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0708-microsoft-remote-desktop-services-remote-code-execution"},{"cve":"CVE-2019-0797","slug":"cve-2019-0797-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0797-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2019-0803","slug":"cve-2019-0803-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0803-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2019-0808","slug":"cve-2019-0808-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0808-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2019-0859","slug":"cve-2019-0859-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0859-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2019-0863","slug":"cve-2019-0863-microsoft-windows-error-reporting-wer-privilege-escalation","title":"Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-0863-microsoft-windows-error-reporting-wer-privilege-escalation"},{"cve":"CVE-2021-27085","slug":"cve-2021-27085-microsoft-internet-explorer-remote-code-execution-vulnerability","title":"Microsoft Internet Explorer Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27085-microsoft-internet-explorer-remote-code-execution-vulnerability"},{"cve":"CVE-2019-11510","slug":"cve-2019-11510-ivanti-pulse-connect-secure-arbitrary-file-read-vulnerability","title":"Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-11510-ivanti-pulse-connect-secure-arbitrary-file-read-vulnerability"},{"cve":"CVE-2019-11539","slug":"cve-2019-11539-ivanti-pulse-connect-secure-and-policy-secure-command-injection","title":"Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-11539-ivanti-pulse-connect-secure-and-policy-secure-command-injection"},{"cve":"CVE-2019-11580","slug":"cve-2019-11580-atlassian-crowd-and-crowd-data-center-remote-code-execution","title":"Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-11580-atlassian-crowd-and-crowd-data-center-remote-code-execution"},{"cve":"CVE-2019-11634","slug":"cve-2019-11634-citrix-workspace-application-and-receiver-for-windows-remote-code","title":"Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-11634-citrix-workspace-application-and-receiver-for-windows-remote-code"},{"cve":"CVE-2019-1214","slug":"cve-2019-1214-microsoft-windows-privilege-common-log-file-system-clfs-escalation","title":"Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1214-microsoft-windows-privilege-common-log-file-system-clfs-escalation"},{"cve":"CVE-2019-1215","slug":"cve-2019-1215-microsoft-windows-privilege-escalation-vulnerability","title":"Microsoft Windows Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1215-microsoft-windows-privilege-escalation-vulnerability"},{"cve":"CVE-2019-13608","slug":"cve-2019-13608-citrix-storefront-server-xml-external-entity-xxe-processing","title":"Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-13608-citrix-storefront-server-xml-external-entity-xxe-processing"},{"cve":"CVE-2019-1367","slug":"cve-2019-1367-microsoft-internet-explorer-scripting-engine-memory-corruption","title":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1367-microsoft-internet-explorer-scripting-engine-memory-corruption"},{"cve":"CVE-2019-1429","slug":"cve-2019-1429-microsoft-internet-explorer-scripting-engine-memory-corruption","title":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1429-microsoft-internet-explorer-scripting-engine-memory-corruption"},{"cve":"CVE-2019-15752","slug":"cve-2019-15752-docker-desktop-community-edition-privilege-escalation","title":"Docker Desktop Community Edition Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-15752-docker-desktop-community-edition-privilege-escalation"},{"cve":"CVE-2019-15949","slug":"cve-2019-15949-nagios-xi-remote-code-execution-vulnerability","title":"Nagios XI Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-15949-nagios-xi-remote-code-execution-vulnerability"},{"cve":"CVE-2019-16256","slug":"cve-2019-16256-simalliance-toolbox-browser-command-injection-vulnerability","title":"SIMalliance Toolbox Browser Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-16256-simalliance-toolbox-browser-command-injection-vulnerability"},{"cve":"CVE-2019-1653","slug":"cve-2019-1653-cisco-small-business-rv320-and-rv325-routers-information","title":"Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1653-cisco-small-business-rv320-and-rv325-routers-information"},{"cve":"CVE-2019-16759","slug":"cve-2019-16759-vbulletin-php-module-remote-code-execution-vulnerability","title":"vBulletin PHP Module Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-16759-vbulletin-php-module-remote-code-execution-vulnerability"},{"cve":"CVE-2019-17026","slug":"cve-2019-17026-mozilla-firefox-and-thunderbird-type-confusion-vulnerability","title":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-17026-mozilla-firefox-and-thunderbird-type-confusion-vulnerability"},{"cve":"CVE-2019-18187","slug":"cve-2019-18187-trend-micro-officescan-directory-traversal-vulnerability","title":"Trend Micro OfficeScan Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-18187-trend-micro-officescan-directory-traversal-vulnerability"},{"cve":"CVE-2019-18935","slug":"cve-2019-18935-progress-telerik-ui-for-asp-net-ajax-deserialization-of-untrusted","title":"Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-18935-progress-telerik-ui-for-asp-net-ajax-deserialization-of-untrusted"},{"cve":"CVE-2019-18988","slug":"cve-2019-18988-teamviewer-desktop-bypass-remote-login-vulnerability","title":"TeamViewer Desktop Bypass Remote Login Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-18988-teamviewer-desktop-bypass-remote-login-vulnerability"},{"cve":"CVE-2019-19356","slug":"cve-2019-19356-netis-wf2419-devices-remote-code-execution-vulnerability","title":"Netis WF2419 Devices Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-19356-netis-wf2419-devices-remote-code-execution-vulnerability"},{"cve":"CVE-2019-19781","slug":"cve-2019-19781-citrix-adc-gateway-and-sd-wan-wanop-appliance-code-execution","title":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-19781-citrix-adc-gateway-and-sd-wan-wanop-appliance-code-execution"},{"cve":"CVE-2019-20085","slug":"cve-2019-20085-tvt-nvms-1000-directory-traversal-vulnerability","title":"TVT NVMS-1000 Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-20085-tvt-nvms-1000-directory-traversal-vulnerability"},{"cve":"CVE-2019-2215","slug":"cve-2019-2215-android-kernel-use-after-free-vulnerability","title":"Android Kernel Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-2215-android-kernel-use-after-free-vulnerability"},{"cve":"CVE-2019-3396","slug":"cve-2019-3396-atlassian-confluence-server-and-data-center-server-side-template","title":"Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-3396-atlassian-confluence-server-and-data-center-server-side-template"},{"cve":"CVE-2019-3398","slug":"cve-2019-3398-atlassian-confluence-server-and-data-center-path-traversal","title":"Atlassian Confluence Server and Data Center Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-3398-atlassian-confluence-server-and-data-center-path-traversal"},{"cve":"CVE-2019-4716","slug":"cve-2019-4716-ibm-planning-analytics-remote-code-execution-vulnerability","title":"IBM Planning Analytics Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-4716-ibm-planning-analytics-remote-code-execution-vulnerability"},{"cve":"CVE-2019-5544","slug":"cve-2019-5544-vmware-esxi-and-horizon-daas-openslp-heap-based-buffer-overflow","title":"VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-5544-vmware-esxi-and-horizon-daas-openslp-heap-based-buffer-overflow"},{"cve":"CVE-2019-5591","slug":"cve-2019-5591-fortinet-fortios-default-configuration-vulnerability","title":"Fortinet FortiOS Default Configuration Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-5591-fortinet-fortios-default-configuration-vulnerability"},{"cve":"CVE-2019-6223","slug":"cve-2019-6223-apple-ios-and-macos-group-facetime-vulnerability","title":"Apple iOS and macOS Group Facetime Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-6223-apple-ios-and-macos-group-facetime-vulnerability"},{"cve":"CVE-2019-7481","slug":"cve-2019-7481-sonicwall-sma100-sql-injection-vulnerability","title":"SonicWall SMA100 SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-7481-sonicwall-sma100-sql-injection-vulnerability"},{"cve":"CVE-2019-8394","slug":"cve-2019-8394-zoho-manageengine-servicedesk-plus-sdp-file-upload-vulnerability","title":"Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-8394-zoho-manageengine-servicedesk-plus-sdp-file-upload-vulnerability"},{"cve":"CVE-2019-9082","slug":"cve-2019-9082-thinkphp-remote-code-execution-vulnerability","title":"ThinkPHP Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-9082-thinkphp-remote-code-execution-vulnerability"},{"cve":"CVE-2019-9978","slug":"cve-2019-9978-wordpress-social-warfare-plugin-cross-site-scripting-xss","title":"WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-9978-wordpress-social-warfare-plugin-cross-site-scripting-xss"},{"cve":"CVE-2020-0041","slug":"cve-2020-0041-android-kernel-out-of-bounds-write-vulnerability","title":"Android Kernel Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0041-android-kernel-out-of-bounds-write-vulnerability"},{"cve":"CVE-2020-0069","slug":"cve-2020-0069-mediatek-multiple-chipsets-insufficient-input-validation","title":"Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0069-mediatek-multiple-chipsets-insufficient-input-validation"},{"cve":"CVE-2020-0646","slug":"cve-2020-0646-microsoft-net-framework-remote-code-execution-vulnerability","title":"Microsoft .NET Framework Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0646-microsoft-net-framework-remote-code-execution-vulnerability"},{"cve":"CVE-2020-0674","slug":"cve-2020-0674-microsoft-internet-explorer-scripting-engine-memory-corruption","title":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0674-microsoft-internet-explorer-scripting-engine-memory-corruption"},{"cve":"CVE-2020-0683","slug":"cve-2020-0683-microsoft-windows-installer-privilege-escalation-vulnerability","title":"Microsoft Windows Installer Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0683-microsoft-windows-installer-privilege-escalation-vulnerability"},{"cve":"CVE-2020-0688","slug":"cve-2020-0688-microsoft-exchange-server-validation-key-remote-code-execution","title":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0688-microsoft-exchange-server-validation-key-remote-code-execution"},{"cve":"CVE-2020-0878","slug":"cve-2020-0878-microsoft-edge-and-internet-explorer-memory-corruption","title":"Microsoft Edge and Internet Explorer Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0878-microsoft-edge-and-internet-explorer-memory-corruption"},{"cve":"CVE-2020-0938","slug":"cve-2020-0938-microsoft-windows-adobe-font-manager-library-remote-code-execution","title":"Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0938-microsoft-windows-adobe-font-manager-library-remote-code-execution"},{"cve":"CVE-2020-0968","slug":"cve-2020-0968-microsoft-internet-explorer-scripting-engine-memory-corruption","title":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0968-microsoft-internet-explorer-scripting-engine-memory-corruption"},{"cve":"CVE-2020-0986","slug":"cve-2020-0986-microsoft-windows-kernel-privilege-escalation-vulnerability","title":"Microsoft Windows Kernel Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0986-microsoft-windows-kernel-privilege-escalation-vulnerability"},{"cve":"CVE-2020-10148","slug":"cve-2020-10148-solarwinds-orion-authentication-bypass-vulnerability","title":"SolarWinds Orion Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-10148-solarwinds-orion-authentication-bypass-vulnerability"},{"cve":"CVE-2020-10181","slug":"cve-2020-10181-sumavision-emr-cross-site-request-forgery-csrf-vulnerability","title":"Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-10181-sumavision-emr-cross-site-request-forgery-csrf-vulnerability"},{"cve":"CVE-2020-10189","slug":"cve-2020-10189-zoho-manageengine-desktop-central-file-upload-vulnerability","title":"Zoho ManageEngine Desktop Central File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-10189-zoho-manageengine-desktop-central-file-upload-vulnerability"},{"cve":"CVE-2020-1020","slug":"cve-2020-1020-microsoft-windows-adobe-font-manager-library-remote-code-execution","title":"Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1020-microsoft-windows-adobe-font-manager-library-remote-code-execution"},{"cve":"CVE-2020-10221","slug":"cve-2020-10221-rconfig-os-command-injection-vulnerability","title":"rConfig OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-10221-rconfig-os-command-injection-vulnerability"},{"cve":"CVE-2020-1040","slug":"cve-2020-1040-microsoft-hyper-v-remotefx-vgpu-remote-code-execution","title":"Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1040-microsoft-hyper-v-remotefx-vgpu-remote-code-execution"},{"cve":"CVE-2020-1054","slug":"cve-2020-1054-microsoft-win32k-privilege-escalation-vulnerability","title":"Microsoft Win32k Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-1054-microsoft-win32k-privilege-escalation-vulnerability"},{"cve":"CVE-2020-10987","slug":"cve-2020-10987-tenda-ac1900-router-ac15-model-remote-code-execution","title":"Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-10987-tenda-ac1900-router-ac15-model-remote-code-execution"},{"cve":"CVE-2020-11738","slug":"cve-2020-11738-wordpress-snap-creek-duplicator-plugin-file-download","title":"WordPress Snap Creek Duplicator Plugin File Download Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-11738-wordpress-snap-creek-duplicator-plugin-file-download"},{"cve":"CVE-2020-12271","slug":"cve-2020-12271-sophos-sfos-sql-injection-vulnerability","title":"Sophos SFOS SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-12271-sophos-sfos-sql-injection-vulnerability"},{"cve":"CVE-2020-12812","slug":"cve-2020-12812-fortinet-fortios-ssl-vpn-improper-authentication-vulnerability","title":"Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-12812-fortinet-fortios-ssl-vpn-improper-authentication-vulnerability"},{"cve":"CVE-2020-16009","slug":"cve-2020-16009-google-chromium-v8-type-confusion-vulnerability","title":"Inappropriate implementation in V8","severity":"critical","exploited":true,"published_at":"2020-12-02T18:28:47+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-16009-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2020-16017","slug":"cve-2020-16017-google-chrome-use-after-free-vulnerability","title":"Use after free in CefSharp","severity":"critical","exploited":true,"published_at":"2020-11-27T20:13:05+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-16017-google-chrome-use-after-free-vulnerability"},{"cve":"CVE-2020-16013","slug":"cve-2020-16013-google-chromium-v8-incorrect-implementation-vulnerabililty","title":"Inappropriate implementation in V8 in CefSharp","severity":"critical","exploited":true,"published_at":"2020-11-27T20:12:55+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-16013-google-chromium-v8-incorrect-implementation-vulnerabililty"},{"cve":"CVE-2020-16846","slug":"cve-2020-16846-saltstack-salt-shell-injection-vulnerability","title":"SaltStack Salt Command Injection in netapi ssh client","severity":"critical","exploited":true,"published_at":"2020-11-06T08:15:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-16846-saltstack-salt-shell-injection-vulnerability"},{"cve":"CVE-2020-15999","slug":"cve-2020-15999-google-chrome-freetype-heap-buffer-overflow-vulnerability","title":"Heap buffer overflow in CefSharp","severity":"critical","exploited":true,"published_at":"2020-10-27T19:47:38+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-15999-google-chrome-freetype-heap-buffer-overflow-vulnerability"},{"cve":"CVE-2020-11651","slug":"cve-2020-11651-saltstack-salt-authentication-bypass-vulnerability","title":"SaltStack Salt Unauthenticated Remote Code Execution","severity":"critical","exploited":true,"published_at":"2020-04-30T17:15:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-11651-saltstack-salt-authentication-bypass-vulnerability"},{"cve":"CVE-2020-11652","slug":"cve-2020-11652-saltstack-salt-path-traversal-vulnerability","title":"SaltStack Salt is vulnerable Arbitrary Directory Access","severity":"critical","exploited":true,"published_at":"2020-04-30T17:15:00+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-11652-saltstack-salt-path-traversal-vulnerability"},{"cve":"CVE-2020-10199","slug":"cve-2020-10199-sonatype-nexus-repository-remote-code-execution-vulnerability","title":"Nexus Repository Manager 3 - Remote Code Execution","severity":"critical","exploited":true,"published_at":"2020-04-14T15:27:05+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-10199-sonatype-nexus-repository-remote-code-execution-vulnerability"},{"cve":"CVE-2019-17558","slug":"cve-2019-17558-apache-solr-velocityresponsewriter-plug-in-remote-code-execution","title":"Improper Input Validation in Apache Solr","severity":"critical","exploited":true,"published_at":"2020-02-12T18:45:28+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-17558-apache-solr-velocityresponsewriter-plug-in-remote-code-execution"},{"cve":"CVE-2018-15811","slug":"cve-2018-15811-dotnetnuke-dnn-inadequate-encryption-strength-vulnerability","title":"Inadequate Encryption Strength in DotNetNuke","severity":"critical","exploited":true,"published_at":"2019-07-05T21:08:36+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-15811-dotnetnuke-dnn-inadequate-encryption-strength-vulnerability"},{"cve":"CVE-2018-18325","slug":"cve-2018-18325-dotnetnuke-dnn-inadequate-encryption-strength-vulnerability","title":"Inadequate Encryption Strength in DotNetNuke","severity":"critical","exploited":true,"published_at":"2019-07-05T21:08:16+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-18325-dotnetnuke-dnn-inadequate-encryption-strength-vulnerability"},{"cve":"CVE-2018-11776","slug":"cve-2018-11776-apache-struts-remote-code-execution-vulnerability","title":"Apache Struts vulnerable to remote command execution (RCE) due to improper input validation","severity":"critical","exploited":true,"published_at":"2018-10-18T19:24:38+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-11776-apache-struts-remote-code-execution-vulnerability"},{"cve":"CVE-2017-5638","slug":"cve-2017-5638-apache-struts-remote-code-execution-vulnerability","title":"Apache Struts vulnerable to remote arbitrary command execution due to improper input validation","severity":"critical","exploited":true,"published_at":"2018-10-18T19:24:26+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-5638-apache-struts-remote-code-execution-vulnerability"},{"cve":"CVE-2017-9805","slug":"cve-2017-9805-apache-struts-deserialization-of-untrusted-data-vulnerability","title":"REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering","severity":"critical","exploited":true,"published_at":"2018-10-16T19:37:56+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-9805-apache-struts-deserialization-of-untrusted-data-vulnerability"},{"cve":"CVE-2017-9822","slug":"cve-2017-9822-dotnetnuke-dnn-remote-code-execution-vulnerability","title":"DNN (aka DotNetNuke) has Remote Code Execution via a cookie","severity":"critical","exploited":true,"published_at":"2018-10-16T19:34:22+00:00","exploited_since":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-9822-dotnetnuke-dnn-remote-code-execution-vulnerability"}],"kind":"exploited","weeks":[{"key":"2026-11-02","top":"Apple Ios","total":3,"period":{"end":"2026-11-08","start":"2026-11-02"},"critical":3,"url":"https://junglewise.ai/threats/exploited/2026-11-02"},{"key":"2026-10-26","top":"Amazon AWS","total":10,"period":{"end":"2026-11-01","start":"2026-10-26"},"critical":10,"url":"https://junglewise.ai/threats/exploited/2026-10-26"},{"key":"2026-10-19","top":"Plex Media Server","total":8,"period":{"end":"2026-10-25","start":"2026-10-19"},"critical":8,"url":"https://junglewise.ai/threats/exploited/2026-10-19"},{"key":"2026-10-12","top":"AhsayCBS","total":9,"period":{"end":"2026-10-18","start":"2026-10-12"},"critical":9,"url":"https://junglewise.ai/threats/exploited/2026-10-12"},{"key":"2026-10-05","top":"@strapi/strapi (npm)","total":5,"period":{"end":"2026-10-11","start":"2026-10-05"},"critical":5,"url":"https://junglewise.ai/threats/exploited/2026-10-05"},{"key":"2026-09-28","top":"Zammad","total":6,"period":{"end":"2026-10-04","start":"2026-09-28"},"critical":6,"url":"https://junglewise.ai/threats/exploited/2026-09-28"},{"key":"2026-09-21","top":"Citrix NetScaler","total":12,"period":{"end":"2026-09-27","start":"2026-09-21"},"critical":12,"url":"https://junglewise.ai/threats/exploited/2026-09-21"},{"key":"2026-09-14","top":"Linux Kernel","total":7,"period":{"end":"2026-09-20","start":"2026-09-14"},"critical":7,"url":"https://junglewise.ai/threats/exploited/2026-09-14"},{"key":"2026-09-07","top":"JFrog Artifactory","total":14,"period":{"end":"2026-09-13","start":"2026-09-07"},"critical":14,"url":"https://junglewise.ai/threats/exploited/2026-09-07"},{"key":"2026-08-31","top":"PaperCut MF","total":10,"period":{"end":"2026-09-06","start":"2026-08-31"},"critical":10,"url":"https://junglewise.ai/threats/exploited/2026-08-31"},{"key":"2026-08-24","top":"Linux Kernel","total":11,"period":{"end":"2026-08-30","start":"2026-08-24"},"critical":11,"url":"https://junglewise.ai/threats/exploited/2026-08-24"},{"key":"2026-08-17","top":"TrueConf Server","total":9,"period":{"end":"2026-08-23","start":"2026-08-17"},"critical":9,"url":"https://junglewise.ai/threats/exploited/2026-08-17"},{"key":"2026-08-10","top":"Cisco Adaptive Security Appliance Software","total":3,"period":{"end":"2026-08-16","start":"2026-08-10"},"critical":3,"url":"https://junglewise.ai/threats/exploited/2026-08-10"},{"key":"2026-08-03","top":"N-able N-central","total":6,"period":{"end":"2026-08-09","start":"2026-08-03"},"critical":6,"url":"https://junglewise.ai/threats/exploited/2026-08-03"},{"key":"2026-07-27","top":"Arista Networks VeloCloud Orchestrator","total":3,"period":{"end":"2026-08-02","start":"2026-07-27"},"critical":3,"url":"https://junglewise.ai/threats/exploited/2026-07-27"},{"key":"2026-07-20","top":"Wordpress","total":6,"period":{"end":"2026-07-26","start":"2026-07-20"},"critical":6,"url":"https://junglewise.ai/threats/exploited/2026-07-20"},{"key":"2026-07-13","top":"Fortinet FortiSandbox","total":10,"period":{"end":"2026-07-19","start":"2026-07-13"},"critical":10,"url":"https://junglewise.ai/threats/exploited/2026-07-13"},{"key":"2026-07-06","top":"Adobe ColdFusion","total":6,"period":{"end":"2026-07-12","start":"2026-07-06"},"critical":6,"url":"https://junglewise.ai/threats/exploited/2026-07-06"},{"key":"2026-06-29","top":"Microsoft SharePoint","total":2,"period":{"end":"2026-07-05","start":"2026-06-29"},"critical":2,"url":"https://junglewise.ai/threats/exploited/2026-06-29"},{"key":"2026-06-22","top":"Ubiquiti Enterprise Fortress Gateway","total":6,"period":{"end":"2026-06-28","start":"2026-06-22"},"critical":6,"url":"https://junglewise.ai/threats/exploited/2026-06-22"},{"key":"2026-06-15","top":"Cisco Catalyst SD-WAN Manager","total":4,"period":{"end":"2026-06-21","start":"2026-06-15"},"critical":4,"url":"https://junglewise.ai/threats/exploited/2026-06-15"},{"key":"2026-06-08","top":"Arista EOS","total":7,"period":{"end":"2026-06-14","start":"2026-06-08"},"critical":7,"url":"https://junglewise.ai/threats/exploited/2026-06-08"},{"key":"2026-06-01","top":"Android Laravel Framework","total":6,"period":{"end":"2026-06-07","start":"2026-06-01"},"critical":6,"url":"https://junglewise.ai/threats/exploited/2026-06-01"},{"key":"2026-05-25","top":"TanStack","total":5,"period":{"end":"2026-05-31","start":"2026-05-25"},"critical":5,"url":"https://junglewise.ai/threats/exploited/2026-05-25"},{"key":"2026-05-18","top":"Microsoft Defender","total":9,"period":{"end":"2026-05-24","start":"2026-05-18"},"critical":9,"url":"https://junglewise.ai/threats/exploited/2026-05-18"},{"key":"2026-05-11","top":"Cisco Catalyst Sd-Wan","total":2,"period":{"end":"2026-05-17","start":"2026-05-11"},"critical":2,"url":"https://junglewise.ai/threats/exploited/2026-05-11"},{"key":"2026-05-04","top":"Berriai LiteLLM","total":3,"period":{"end":"2026-05-10","start":"2026-05-04"},"critical":3,"url":"https://junglewise.ai/threats/exploited/2026-05-04"},{"key":"2026-04-27","top":"Microsoft Windows","total":4,"period":{"end":"2026-05-03","start":"2026-04-27"},"critical":4,"url":"https://junglewise.ai/threats/exploited/2026-04-27"},{"key":"2026-04-20","top":"Cisco Catalyst SD-WAN Manager","total":14,"period":{"end":"2026-04-26","start":"2026-04-20"},"critical":14,"url":"https://junglewise.ai/threats/exploited/2026-04-20"},{"key":"2026-04-13","top":"Adobe Acrobat","total":10,"period":{"end":"2026-04-19","start":"2026-04-13"},"critical":10,"url":"https://junglewise.ai/threats/exploited/2026-04-13"},{"key":"2026-04-06","top":"Fortinet FortiClient EMS","total":2,"period":{"end":"2026-04-12","start":"2026-04-06"},"critical":2,"url":"https://junglewise.ai/threats/exploited/2026-04-06"},{"key":"2026-03-30","top":"Apple macOS","total":3,"period":{"end":"2026-04-05","start":"2026-03-30"},"critical":3,"url":"https://junglewise.ai/threats/exploited/2026-03-30"}],"counts":{"all_time":1779,"last_7_days":11,"last_30_days":38,"last_365_days":320},"period":{"end":"2026-11-13","start":"2026-11-09"},"this_week":{"total":10,"critical":10,"technologies":[{"hub":false,"name":"Barracuda Email Security Gateway","slug":"barracuda-email-security-gateway","vulnerabilities":1},{"hub":false,"name":"Barracuda Email Security Gateway (ESG)","slug":"email-security-gateway-esg","vulnerabilities":1},{"hub":false,"name":"Barracuda Load Balancer Application Delivery Controller (ADC)","slug":"load-balancer-application-delivery-controller-adc","vulnerabilities":1},{"hub":false,"name":"Barracuda Message Archiver (BMA)","slug":"message-archiver-bma","vulnerabilities":1},{"hub":false,"name":"Barracuda Networks Barracuda Email Security Gateway (Esg)","slug":"barracuda-email-security-gateway-esg","vulnerabilities":1},{"hub":false,"name":"Barracuda Networks Multiple Products","slug":"barracuda-networks-multiple-products","vulnerabilities":1},{"hub":false,"name":"Barracuda WAF Control Center (WCC)","slug":"waf-control-center-wcc","vulnerabilities":1},{"hub":false,"name":"Barracuda Web Application Firewall (WAF)","slug":"web-application-firewall-waf","vulnerabilities":1},{"hub":false,"name":"Barracuda Web Security Gateway (WSG)","slug":"web-security-gateway-wsg","vulnerabilities":1},{"hub":false,"name":"Cisco Broadworks","slug":"broadworks","vulnerabilities":1},{"hub":false,"name":"Cisco BroadWorks Application Delivery Platform","slug":"broadworks-application-delivery-platform","vulnerabilities":1},{"hub":false,"name":"Cisco BroadWorks Application Server","slug":"broadworks-application-server","vulnerabilities":1},{"hub":false,"name":"Cisco BroadWorks Profile Server","slug":"broadworks-profile-server","vulnerabilities":1},{"hub":false,"name":"Cisco BroadWorks Xtended Services Platform","slug":"broadworks-xtended-services-platform","vulnerabilities":1},{"hub":true,"name":"Google Chrome","slug":"chrome","vulnerabilities":1}],"vulnerabilities":[{"cve":"CVE-2026-125350","slug":"cve-2026-125350-use-after-free-in-xml-in-google-chrome-prior-to-157-0-8103-50","title":"Google Chrome use after free in XML","severity":"critical","exploited":true,"published_at":"2026-11-10T18:17:35.237+00:00","technologies":[{"hub":true,"name":"Google Chrome","slug":"chrome","vendor":{"hub":true,"name":"Google","slug":"google"}},{"hub":true,"name":"Google Chromium","slug":"chromium","vendor":{"hub":true,"name":"Google","slug":"google"}}],"exploited_since":"2026-11-10T19:57:35.562031+00:00","url":"https://junglewise.ai/threats/cve-2026-125350-use-after-free-in-xml-in-google-chrome-prior-to-157-0-8103-50"},{"cve":"CVE-2026-116606","epss":0.016,"slug":"cve-2026-116606-an-authentication-bypass-in-barracuda-email-security-gateway","title":"Barracuda Email Security Gateway authentication bypass","severity":"critical","exploited":true,"published_at":"2026-11-02T13:17:37.017+00:00","technologies":[{"hub":false,"name":"Barracuda Email Security Gateway","slug":"barracuda-email-security-gateway","vendor":{"hub":true,"name":"Barracuda","slug":"barracuda"}},{"hub":false,"name":"Barracuda Networks Barracuda Email Security Gateway (Esg)","slug":"barracuda-email-security-gateway-esg","vendor":{"hub":false,"name":"Barracuda Networks","slug":"barracuda-networks"}}],"exploited_since":"2026-11-10T19:57:32.012873+00:00","url":"https://junglewise.ai/threats/cve-2026-116606-an-authentication-bypass-in-barracuda-email-security-gateway"},{"cve":"CVE-2026-20320","cvss":7.5,"epss":0.0039,"slug":"cve-2026-20320-cisco-broadworks-xxe-injection-in-oci-xml-parser","title":"Cisco BroadWorks XXE injection in OCI XML parser","severity":"critical","exploited":true,"published_at":"2026-08-19T17:18:40.433+00:00","technologies":[{"hub":false,"name":"Cisco Broadworks","slug":"broadworks","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco BroadWorks Application Delivery Platform","slug":"broadworks-application-delivery-platform","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco BroadWorks Application Server","slug":"broadworks-application-server","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco BroadWorks Profile Server","slug":"broadworks-profile-server","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco BroadWorks Xtended Services Platform","slug":"broadworks-xtended-services-platform","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-11-10T19:57:25.775122+00:00","url":"https://junglewise.ai/threats/cve-2026-20320-cisco-broadworks-xxe-injection-in-oci-xml-parser"},{"cve":"CVE-2026-111560","epss":0.0106,"slug":"cve-2026-111560-improper-neutralization-of-shell-metacharacters-in-the-timezone","title":"Barracuda appliance OS command injection in timezone field","severity":"critical","exploited":true,"published_at":"2026-11-02T13:17:35.19+00:00","technologies":[{"hub":false,"name":"Barracuda Networks Multiple Products","slug":"barracuda-networks-multiple-products","vendor":{"hub":false,"name":"Barracuda Networks","slug":"barracuda-networks"}},{"hub":false,"name":"Barracuda Email Security Gateway (ESG)","slug":"email-security-gateway-esg","vendor":{"hub":true,"name":"Barracuda","slug":"barracuda"}},{"hub":false,"name":"Barracuda Load Balancer Application Delivery Controller (ADC)","slug":"load-balancer-application-delivery-controller-adc","vendor":{"hub":true,"name":"Barracuda","slug":"barracuda"}},{"hub":false,"name":"Barracuda Message Archiver (BMA)","slug":"message-archiver-bma","vendor":{"hub":true,"name":"Barracuda","slug":"barracuda"}},{"hub":false,"name":"Barracuda WAF Control Center (WCC)","slug":"waf-control-center-wcc","vendor":{"hub":true,"name":"Barracuda","slug":"barracuda"}},{"hub":false,"name":"Barracuda Web Application Firewall (WAF)","slug":"web-application-firewall-waf","vendor":{"hub":true,"name":"Barracuda","slug":"barracuda"}}],"exploited_since":"2026-11-10T19:57:25.569036+00:00","url":"https://junglewise.ai/threats/cve-2026-111560-improper-neutralization-of-shell-metacharacters-in-the-timezone"},{"cve":"CVE-2026-111793","cvss":4.3,"epss":0.0027,"slug":"cve-2026-111793-openwave-webtop-media-transcoder-does-not-enforce-administrator","title":"Openwave Webtop Media Transcoder file type restriction bypass","severity":"critical","exploited":true,"published_at":"2026-10-16T19:17:05.68+00:00","technologies":[{"hub":false,"name":"Openwave Messaging Limited Webtop Media Transcoder","slug":"openwave-messaging-limited-webtop-media-transcoder","vendor":{"hub":false,"name":"Openwave Messaging Limited","slug":"openwave-messaging-limited"}},{"hub":false,"name":"Openwave Webtop Media Transcoder","slug":"webtop-media-transcoder","vendor":{"hub":false,"name":"Openwave","slug":"openwave"}}],"exploited_since":"2026-11-10T19:57:22.143548+00:00","url":"https://junglewise.ai/threats/cve-2026-111793-openwave-webtop-media-transcoder-does-not-enforce-administrator"},{"cve":"CVE-2026-124194","cvss":6.5,"slug":"cve-2026-124194-microsoft-office-outlook-missing-user-interaction-for","title":"Microsoft Office Outlook user warning spoofing vulnerability","severity":"critical","exploited":true,"published_at":"2026-11-10T19:20:48.18+00:00","technologies":[{"hub":true,"name":"Microsoft Office","slug":"office","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Office Outlook","slug":"office-outlook","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Outlook","slug":"outlook","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-11-10T19:57:19.482833+00:00","url":"https://junglewise.ai/threats/cve-2026-124194-microsoft-office-outlook-missing-user-interaction-for"},{"cve":"CVE-2026-123218","cvss":9.8,"epss":0.004,"slug":"cve-2026-123218-ibm-aspera-faspex-5-0-0-through-5-0-19-could-allow-an-authorized","title":"IBM Aspera Faspex authorization bypass","severity":"critical","exploited":true,"published_at":"2026-11-07T04:17:28.9+00:00","technologies":[{"hub":true,"name":"IBM Aspera Faspex","slug":"aspera-faspex","vendor":{"hub":true,"name":"IBM","slug":"ibm"}}],"exploited_since":"2026-11-09T20:16:04.230552+00:00","url":"https://junglewise.ai/threats/cve-2026-123218-ibm-aspera-faspex-5-0-0-through-5-0-19-could-allow-an-authorized"},{"cve":"CVE-2026-102895","cvss":9.8,"epss":0.0056,"slug":"cve-2026-102895-gpustack-is-an-open-source-gpu-cluster-manager-for-ai-model","title":"GPUStack authentication bypass via localhost spoofing","severity":"critical","exploited":true,"published_at":"2026-11-04T22:17:44.613+00:00","technologies":[{"hub":true,"name":"GPUStack","slug":"gpustack","vendor":{"hub":true,"name":"GPUStack","slug":"gpustack"}},{"hub":true,"name":"gpustack (PyPI)","slug":"pypi-gpustack","vendor":{"hub":true,"name":"PyPI","slug":"pypi"}}],"exploited_since":"2026-11-09T17:46:05.53205+00:00","url":"https://junglewise.ai/threats/cve-2026-102895-gpustack-is-an-open-source-gpu-cluster-manager-for-ai-model"},{"cve":"CVE-2026-123158","cvss":8.1,"epss":0.0101,"slug":"cve-2026-123158-sshd-in-openssh-before-10-6p2-on-linux-when-musl-libc-is-used","title":"OpenSSH password authentication bypass on musl libc without PAM","severity":"critical","exploited":true,"published_at":"2026-11-05T16:17:47.11+00:00","technologies":[{"hub":true,"name":"OpenBSD OpenSSH","slug":"openssh","vendor":{"hub":true,"name":"OpenBSD","slug":"openbsd"}},{"hub":true,"name":"OpenSSH","slug":"openssh-openssh","vendor":{"hub":true,"name":"OpenSSH","slug":"openssh"}}],"exploited_since":"2026-11-09T17:46:05.392048+00:00","url":"https://junglewise.ai/threats/cve-2026-123158-sshd-in-openssh-before-10-6p2-on-linux-when-musl-libc-is-used"},{"cve":"CVE-2026-116779","cvss":9.8,"epss":0.013,"slug":"cve-2026-116779-freeswitch-is-a-software-defined-telecom-stack-enabling-the","title":"FreeSWITCH command injection via SIP MESSAGE chat protocol","severity":"critical","exploited":true,"published_at":"2026-11-05T20:17:44.79+00:00","technologies":[{"hub":true,"name":"SignalWire Freeswitch","slug":"freeswitch","vendor":{"hub":true,"name":"SignalWire","slug":"signalwire"}}],"exploited_since":"2026-11-09T17:46:05.315063+00:00","url":"https://junglewise.ai/threats/cve-2026-116779-freeswitch-is-a-software-defined-telecom-stack-enabling-the"}]},"generated_at":"2026-11-13T00:07:00.146049+00:00","last_30_days":{"total":38,"critical":38,"technologies":[{"hub":true,"name":"Plex Media Server","slug":"media-server","vulnerabilities":4},{"hub":true,"name":"Amazon AWS","slug":"aws","vulnerabilities":3},{"hub":true,"name":"Google Cloud Platform","slug":"google-cloud-platform","vulnerabilities":3},{"hub":false,"name":"AhsayCBS","slug":"ahsaycbs","vulnerabilities":2},{"hub":true,"name":"Ivanti Connect Secure","slug":"connect-secure","vulnerabilities":2},{"hub":true,"name":"PHP Group PHP","slug":"php","vulnerabilities":2},{"hub":true,"name":"Adobe Commerce","slug":"commerce","vulnerabilities":1},{"hub":true,"name":"Adobe Commerce B2B","slug":"commerce-b2b","vulnerabilities":1},{"hub":true,"name":"Adobe Commerce Webhooks Plugin","slug":"commerce-webhooks-plugin","vulnerabilities":1},{"hub":true,"name":"Adobe Magento","slug":"magento","vulnerabilities":1},{"hub":true,"name":"Adobe Magento Enterprise Edition","slug":"magento-enterprise-edition","vulnerabilities":1},{"hub":true,"name":"Adobe Magento Open Source","slug":"magento-open-source","vulnerabilities":1},{"hub":true,"name":"Apple Ios","slug":"apple-ios","vulnerabilities":1},{"hub":true,"name":"Apple iPadOS","slug":"ipados","vulnerabilities":1},{"hub":true,"name":"Apple macOS","slug":"macos","vulnerabilities":1}],"vulnerabilities":[{"cve":"CVE-2026-125350","slug":"cve-2026-125350-use-after-free-in-xml-in-google-chrome-prior-to-157-0-8103-50","title":"Google Chrome use after free in XML","severity":"critical","exploited":true,"published_at":"2026-11-10T18:17:35.237+00:00","technologies":[{"hub":true,"name":"Google Chrome","slug":"chrome","vendor":{"hub":true,"name":"Google","slug":"google"}},{"hub":true,"name":"Google Chromium","slug":"chromium","vendor":{"hub":true,"name":"Google","slug":"google"}}],"exploited_since":"2026-11-10T19:57:35.562031+00:00","url":"https://junglewise.ai/threats/cve-2026-125350-use-after-free-in-xml-in-google-chrome-prior-to-157-0-8103-50"},{"cve":"CVE-2026-116606","epss":0.016,"slug":"cve-2026-116606-an-authentication-bypass-in-barracuda-email-security-gateway","title":"Barracuda Email Security Gateway authentication bypass","severity":"critical","exploited":true,"published_at":"2026-11-02T13:17:37.017+00:00","technologies":[{"hub":false,"name":"Barracuda Email Security Gateway","slug":"barracuda-email-security-gateway","vendor":{"hub":true,"name":"Barracuda","slug":"barracuda"}},{"hub":false,"name":"Barracuda Networks Barracuda Email Security Gateway (Esg)","slug":"barracuda-email-security-gateway-esg","vendor":{"hub":false,"name":"Barracuda Networks","slug":"barracuda-networks"}}],"exploited_since":"2026-11-10T19:57:32.012873+00:00","url":"https://junglewise.ai/threats/cve-2026-116606-an-authentication-bypass-in-barracuda-email-security-gateway"},{"cve":"CVE-2026-20320","cvss":7.5,"epss":0.0039,"slug":"cve-2026-20320-cisco-broadworks-xxe-injection-in-oci-xml-parser","title":"Cisco BroadWorks XXE injection in OCI XML parser","severity":"critical","exploited":true,"published_at":"2026-08-19T17:18:40.433+00:00","technologies":[{"hub":false,"name":"Cisco Broadworks","slug":"broadworks","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco BroadWorks Application Delivery Platform","slug":"broadworks-application-delivery-platform","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco BroadWorks Application Server","slug":"broadworks-application-server","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco BroadWorks Profile Server","slug":"broadworks-profile-server","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco BroadWorks Xtended Services Platform","slug":"broadworks-xtended-services-platform","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-11-10T19:57:25.775122+00:00","url":"https://junglewise.ai/threats/cve-2026-20320-cisco-broadworks-xxe-injection-in-oci-xml-parser"},{"cve":"CVE-2026-111560","epss":0.0106,"slug":"cve-2026-111560-improper-neutralization-of-shell-metacharacters-in-the-timezone","title":"Barracuda appliance OS command injection in timezone field","severity":"critical","exploited":true,"published_at":"2026-11-02T13:17:35.19+00:00","technologies":[{"hub":false,"name":"Barracuda Networks Multiple Products","slug":"barracuda-networks-multiple-products","vendor":{"hub":false,"name":"Barracuda Networks","slug":"barracuda-networks"}},{"hub":false,"name":"Barracuda Email Security Gateway (ESG)","slug":"email-security-gateway-esg","vendor":{"hub":true,"name":"Barracuda","slug":"barracuda"}},{"hub":false,"name":"Barracuda Load Balancer Application Delivery Controller (ADC)","slug":"load-balancer-application-delivery-controller-adc","vendor":{"hub":true,"name":"Barracuda","slug":"barracuda"}},{"hub":false,"name":"Barracuda Message Archiver (BMA)","slug":"message-archiver-bma","vendor":{"hub":true,"name":"Barracuda","slug":"barracuda"}},{"hub":false,"name":"Barracuda WAF Control Center (WCC)","slug":"waf-control-center-wcc","vendor":{"hub":true,"name":"Barracuda","slug":"barracuda"}},{"hub":false,"name":"Barracuda Web Application Firewall (WAF)","slug":"web-application-firewall-waf","vendor":{"hub":true,"name":"Barracuda","slug":"barracuda"}}],"exploited_since":"2026-11-10T19:57:25.569036+00:00","url":"https://junglewise.ai/threats/cve-2026-111560-improper-neutralization-of-shell-metacharacters-in-the-timezone"},{"cve":"CVE-2026-111793","cvss":4.3,"epss":0.0027,"slug":"cve-2026-111793-openwave-webtop-media-transcoder-does-not-enforce-administrator","title":"Openwave Webtop Media Transcoder file type restriction bypass","severity":"critical","exploited":true,"published_at":"2026-10-16T19:17:05.68+00:00","technologies":[{"hub":false,"name":"Openwave Messaging Limited Webtop Media Transcoder","slug":"openwave-messaging-limited-webtop-media-transcoder","vendor":{"hub":false,"name":"Openwave Messaging Limited","slug":"openwave-messaging-limited"}},{"hub":false,"name":"Openwave Webtop Media Transcoder","slug":"webtop-media-transcoder","vendor":{"hub":false,"name":"Openwave","slug":"openwave"}}],"exploited_since":"2026-11-10T19:57:22.143548+00:00","url":"https://junglewise.ai/threats/cve-2026-111793-openwave-webtop-media-transcoder-does-not-enforce-administrator"},{"cve":"CVE-2026-124194","cvss":6.5,"slug":"cve-2026-124194-microsoft-office-outlook-missing-user-interaction-for","title":"Microsoft Office Outlook user warning spoofing vulnerability","severity":"critical","exploited":true,"published_at":"2026-11-10T19:20:48.18+00:00","technologies":[{"hub":true,"name":"Microsoft Office","slug":"office","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Office Outlook","slug":"office-outlook","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Outlook","slug":"outlook","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-11-10T19:57:19.482833+00:00","url":"https://junglewise.ai/threats/cve-2026-124194-microsoft-office-outlook-missing-user-interaction-for"},{"cve":"CVE-2026-123218","cvss":9.8,"epss":0.004,"slug":"cve-2026-123218-ibm-aspera-faspex-5-0-0-through-5-0-19-could-allow-an-authorized","title":"IBM Aspera Faspex authorization bypass","severity":"critical","exploited":true,"published_at":"2026-11-07T04:17:28.9+00:00","technologies":[{"hub":true,"name":"IBM Aspera Faspex","slug":"aspera-faspex","vendor":{"hub":true,"name":"IBM","slug":"ibm"}}],"exploited_since":"2026-11-09T20:16:04.230552+00:00","url":"https://junglewise.ai/threats/cve-2026-123218-ibm-aspera-faspex-5-0-0-through-5-0-19-could-allow-an-authorized"},{"cve":"CVE-2026-102895","cvss":9.8,"epss":0.0056,"slug":"cve-2026-102895-gpustack-is-an-open-source-gpu-cluster-manager-for-ai-model","title":"GPUStack authentication bypass via localhost spoofing","severity":"critical","exploited":true,"published_at":"2026-11-04T22:17:44.613+00:00","technologies":[{"hub":true,"name":"GPUStack","slug":"gpustack","vendor":{"hub":true,"name":"GPUStack","slug":"gpustack"}},{"hub":true,"name":"gpustack (PyPI)","slug":"pypi-gpustack","vendor":{"hub":true,"name":"PyPI","slug":"pypi"}}],"exploited_since":"2026-11-09T17:46:05.53205+00:00","url":"https://junglewise.ai/threats/cve-2026-102895-gpustack-is-an-open-source-gpu-cluster-manager-for-ai-model"},{"cve":"CVE-2026-123158","cvss":8.1,"epss":0.0101,"slug":"cve-2026-123158-sshd-in-openssh-before-10-6p2-on-linux-when-musl-libc-is-used","title":"OpenSSH password authentication bypass on musl libc without PAM","severity":"critical","exploited":true,"published_at":"2026-11-05T16:17:47.11+00:00","technologies":[{"hub":true,"name":"OpenBSD OpenSSH","slug":"openssh","vendor":{"hub":true,"name":"OpenBSD","slug":"openbsd"}},{"hub":true,"name":"OpenSSH","slug":"openssh-openssh","vendor":{"hub":true,"name":"OpenSSH","slug":"openssh"}}],"exploited_since":"2026-11-09T17:46:05.392048+00:00","url":"https://junglewise.ai/threats/cve-2026-123158-sshd-in-openssh-before-10-6p2-on-linux-when-musl-libc-is-used"},{"cve":"CVE-2026-116779","cvss":9.8,"epss":0.013,"slug":"cve-2026-116779-freeswitch-is-a-software-defined-telecom-stack-enabling-the","title":"FreeSWITCH command injection via SIP MESSAGE chat protocol","severity":"critical","exploited":true,"published_at":"2026-11-05T20:17:44.79+00:00","technologies":[{"hub":true,"name":"SignalWire Freeswitch","slug":"freeswitch","vendor":{"hub":true,"name":"SignalWire","slug":"signalwire"}}],"exploited_since":"2026-11-09T17:46:05.315063+00:00","url":"https://junglewise.ai/threats/cve-2026-116779-freeswitch-is-a-software-defined-telecom-stack-enabling-the"},{"cve":"CVE-2026-19868","slug":"cve-2026-19868-an-authentication-enforcement-vulnerability-in-sonicos-sslvpn","title":"SonicWall SonicOS SSLVPN SAML authentication bypass","severity":"critical","exploited":true,"published_at":"2026-11-06T19:17:48.437+00:00","technologies":[{"hub":true,"name":"SonicWall SonicOS","slug":"sonicos","vendor":{"hub":true,"name":"SonicWall","slug":"sonicwall"}},{"hub":false,"name":"SonicWall Sonicos Sslvpn","slug":"sonicos-sslvpn","vendor":{"hub":true,"name":"SonicWall","slug":"sonicwall"}}],"exploited_since":"2026-11-06T21:11:03.253458+00:00","url":"https://junglewise.ai/threats/cve-2026-19868-an-authentication-enforcement-vulnerability-in-sonicos-sslvpn"},{"cve":"CVE-2024-27834","epss":0.006,"slug":"cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability","title":"Apple iOS, iPadOS, macOS, Safari, tvOS, watchOS pointer authentication bypass","severity":"critical","exploited":true,"published_at":"2026-11-04T00:00:00+00:00","technologies":[{"hub":true,"name":"Apple Ios","slug":"apple-ios","vendor":{"hub":true,"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple iPadOS","slug":"ipados","vendor":{"hub":true,"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple macOS","slug":"macos","vendor":{"hub":true,"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple Multiple Products","slug":"multiple-products","vendor":{"hub":true,"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple Safari","slug":"safari","vendor":{"hub":true,"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple tvOS","slug":"tvos","vendor":{"hub":true,"name":"Apple","slug":"apple"}}],"exploited_since":"2026-11-04T20:26:03.753837+00:00","url":"https://junglewise.ai/threats/cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability"},{"cve":"CVE-2026-119977","cvss":8.1,"epss":0.006,"slug":"cve-2026-119977-wordpress-core-is-vulnerable-to-remote-code-execution-in","title":"WordPress Core remote code execution in upgrade path","severity":"critical","exploited":true,"published_at":"2026-10-31T06:16:34.55+00:00","technologies":[{"hub":false,"name":"Automattic WordPress","slug":"automattic-wordpress","vendor":{"hub":true,"name":"Automattic","slug":"automattic"}},{"hub":true,"name":"Wordpress","slug":"wordpress","vendor":{"hub":true,"name":"Wordpress","slug":"wordpress"}}],"exploited_since":"2026-11-03T21:50:17.885017+00:00","url":"https://junglewise.ai/threats/cve-2026-119977-wordpress-core-is-vulnerable-to-remote-code-execution-in"},{"cve":"CVE-2026-118527","cvss":4.3,"slug":"cve-2026-118527-ivanti-connect-secure-generation-of-predictable-numbers-or","title":"Ivanti Connect Secure predictable identifier generation","severity":"critical","exploited":true,"published_at":"2026-11-03T15:17:24.92+00:00","technologies":[{"hub":true,"name":"Ivanti Connect Secure","slug":"connect-secure","vendor":{"hub":true,"name":"Ivanti","slug":"ivanti"}}],"exploited_since":"2026-10-30T18:16:06.796877+00:00","url":"https://junglewise.ai/threats/cve-2026-118527-ivanti-connect-secure-generation-of-predictable-numbers-or"},{"cve":"CVE-2026-111357","cvss":7,"epss":0.0032,"slug":"cve-2026-111357-ivanti-connect-secure-22-8r2-4-mishandles-the-manner-in-which","title":"Ivanti Connect Secure privilege escalation via DSCache configuration","severity":"critical","exploited":true,"published_at":"2026-10-15T21:17:13.19+00:00","technologies":[{"hub":true,"name":"Ivanti Connect Secure","slug":"connect-secure","vendor":{"hub":true,"name":"Ivanti","slug":"ivanti"}}],"exploited_since":"2026-10-30T18:16:04.487685+00:00","url":"https://junglewise.ai/threats/cve-2026-111357-ivanti-connect-secure-22-8r2-4-mishandles-the-manner-in-which"},{"cve":"CVE-2026-76418","cvss":8.6,"epss":0.0057,"slug":"cve-2026-76418-a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco","title":"Cisco Secure Firewall ASA and FTD SSL VPN denial of service","severity":"critical","exploited":true,"published_at":"2026-10-28T20:18:47.063+00:00","technologies":[{"hub":false,"name":"Cisco Secure Ftd Software","slug":"cisco-secure-ftd-software","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","slug":"secure-firewall-adaptive-security-appliance-asa-software","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco Adaptive Security Appliance Software","slug":"secure-firewall-asa-software","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}},{"hub":true,"name":"Cisco Secure Firewall Threat Defense (FTD) Software","slug":"secure-firewall-threat-defense-ftd-software","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-10-29T20:56:02.712602+00:00","url":"https://junglewise.ai/threats/cve-2026-76418-a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco"},{"cve":"CVE-2026-97229","cvss":10,"epss":0.1843,"slug":"cve-2026-97229-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all","title":"GitLab CE/EE integer overflow in CI/CD regular expression compiler","severity":"critical","exploited":true,"published_at":"2026-10-13T02:17:00.84+00:00","technologies":[{"hub":true,"name":"GitLab Community Edition","slug":"gitlab-ce","vendor":{"hub":true,"name":"GitLab","slug":"gitlab"}},{"hub":true,"name":"GitLab Enterprise Edition","slug":"gitlab-ee","vendor":{"hub":true,"name":"GitLab","slug":"gitlab"}},{"hub":true,"name":"GitLab","slug":"gitlab","vendor":{"hub":true,"name":"GitLab","slug":"gitlab"}},{"hub":true,"name":"GitLab Community Edition","slug":"gitlab-ce","vendor":{"hub":true,"name":"GitLab","slug":"gitlab"}},{"hub":true,"name":"GitLab Enterprise Edition","slug":"gitlab-ee","vendor":{"hub":true,"name":"GitLab","slug":"gitlab"}}],"exploited_since":"2026-10-29T20:56:02.670046+00:00","url":"https://junglewise.ai/threats/cve-2026-97229-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all"},{"cve":"CVE-2026-46300","cvss":7.8,"epss":0.1019,"slug":"cve-2026-46300-linux-kernel-out-of-bounds-write-in-skbuff-coalescing","title":"Linux Kernel out-of-bounds write in skbuff coalescing","severity":"critical","exploited":true,"published_at":"2026-05-23T12:17:02.66+00:00","technologies":[{"hub":true,"name":"Amazon AWS","slug":"aws","vendor":{"hub":true,"name":"Amazon","slug":"amazon"}},{"hub":true,"name":"Google Cloud Platform","slug":"google-cloud-platform","vendor":{"hub":true,"name":"Google","slug":"google"}},{"hub":true,"name":"Linux Kernel","slug":"kernel","vendor":{"hub":true,"name":"Linux","slug":"linux"}},{"hub":true,"name":"Linux Kernel","slug":"kernel","vendor":{"hub":true,"name":"Linux","slug":"linux"}}],"exploited_since":"2026-10-28T20:36:03.885024+00:00","url":"https://junglewise.ai/threats/cve-2026-46300-linux-kernel-out-of-bounds-write-in-skbuff-coalescing"},{"cve":"CVE-2026-41709","cvss":2.7,"epss":0.003,"slug":"cve-2026-41709-vmware-esx-insufficient-logging-vulnerability","title":"VMware ESX insufficient logging vulnerability","severity":"critical","exploited":true,"published_at":"2026-07-30T14:16:57.42+00:00","technologies":[{"hub":true,"name":"VMware Cloud Foundation","slug":"cloud-foundation","vendor":{"hub":true,"name":"VMware","slug":"vmware"}},{"hub":false,"name":"VMware ESX","slug":"esx","vendor":{"hub":true,"name":"VMware","slug":"vmware"}},{"hub":true,"name":"VMware ESXi","slug":"esxi","vendor":{"hub":true,"name":"VMware","slug":"vmware"}},{"hub":false,"name":"Broadcom Vmware Esx","slug":"vmware-esx","vendor":{"hub":true,"name":"Broadcom","slug":"broadcom"}},{"hub":true,"name":"VMware vSphere Foundation","slug":"vsphere-foundation","vendor":{"hub":true,"name":"VMware","slug":"vmware"}}],"exploited_since":"2026-10-28T20:36:03.864826+00:00","url":"https://junglewise.ai/threats/cve-2026-41709-vmware-esx-insufficient-logging-vulnerability"},{"cve":"CVE-2026-111497","cvss":4,"epss":0.8264,"slug":"cve-2026-111497-a-buffer-overflow-vulnerability-in-the-brotli-decoder-c-dec","title":"Google Brotli buffer overflow in decoder","severity":"critical","exploited":true,"published_at":"2026-10-22T14:17:37.19+00:00","technologies":[{"hub":true,"name":"Amazon AWS","slug":"aws","vendor":{"hub":true,"name":"Amazon","slug":"amazon"}},{"hub":true,"name":"Google Brotli","slug":"brotli","vendor":{"hub":true,"name":"Google","slug":"google"}},{"hub":false,"name":"github.com/andybalholm/brotli (Go)","slug":"github-com-andybalholm-brotli","vendor":{"hub":true,"name":"Go","slug":"go"}},{"hub":true,"name":"Google Cloud Platform","slug":"google-cloud-platform","vendor":{"hub":true,"name":"Google","slug":"google"}},{"hub":false,"name":"Node.js","slug":"node-js-node-js","vendor":{"hub":false,"name":"Node.js","slug":"node-js"}},{"hub":true,"name":"brotli (PyPI)","slug":"pypi-brotli","vendor":{"hub":true,"name":"PyPI","slug":"pypi"}}],"exploited_since":"2026-10-27T20:21:03.02653+00:00","url":"https://junglewise.ai/threats/cve-2026-111497-a-buffer-overflow-vulnerability-in-the-brotli-decoder-c-dec"},{"cve":"CVE-2026-48356","cvss":9.6,"epss":0.3058,"slug":"cve-2026-48356-adobe-commerce-unrestricted-file-upload-in-multiple-components","title":"Adobe Commerce unrestricted file upload in multiple components","severity":"critical","exploited":true,"published_at":"2026-07-14T20:17:08.437+00:00","technologies":[{"hub":true,"name":"Adobe Commerce","slug":"commerce","vendor":{"hub":true,"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Commerce B2B","slug":"commerce-b2b","vendor":{"hub":true,"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Commerce Webhooks Plugin","slug":"commerce-webhooks-plugin","vendor":{"hub":true,"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Magento","slug":"magento","vendor":{"hub":true,"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Magento Enterprise Edition","slug":"magento-enterprise-edition","vendor":{"hub":true,"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Magento Open Source","slug":"magento-open-source","vendor":{"hub":true,"name":"Adobe","slug":"adobe"}}],"exploited_since":"2026-10-27T20:21:02.977172+00:00","url":"https://junglewise.ai/threats/cve-2026-48356-adobe-commerce-unrestricted-file-upload-in-multiple-components"},{"cve":"CVE-2026-109619","epss":1,"slug":"cve-2026-109619-php-has-various-global-state-that-temporarily-points-into","title":"PHP use-after-free in global state handling","severity":"critical","exploited":true,"published_at":"2026-10-21T14:17:09.823+00:00","technologies":[{"hub":true,"name":"PHP Group PHP","slug":"php","vendor":{"hub":true,"name":"PHP Group","slug":"php-group"}}],"exploited_since":"2026-10-26T23:41:03.70627+00:00","url":"https://junglewise.ai/threats/cve-2026-109619-php-has-various-global-state-that-temporarily-points-into"},{"cve":"CVE-2026-109618","epss":0.9998,"slug":"cve-2026-109618-gcp-2026-070","title":"PHP Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-21T14:17:09.357+00:00","technologies":[{"hub":true,"name":"Amazon AWS","slug":"aws","vendor":{"hub":true,"name":"Amazon","slug":"amazon"}},{"hub":true,"name":"Google Cloud Platform","slug":"google-cloud-platform","vendor":{"hub":true,"name":"Google","slug":"google"}},{"hub":true,"name":"PHP Group PHP","slug":"php","vendor":{"hub":true,"name":"PHP Group","slug":"php-group"}}],"exploited_since":"2026-10-26T23:41:03.585412+00:00","url":"https://junglewise.ai/threats/cve-2026-109618-gcp-2026-070"},{"cve":"CVE-2026-110447","epss":0.0123,"slug":"cve-2026-110447-collabora-online-built-in-code-server-before-26-4-303","title":"Collabora Online CODE Server OS command injection in proxy.php","severity":"critical","exploited":true,"published_at":"2026-10-14T03:17:20.683+00:00","technologies":[{"hub":false,"name":"Collabora Online – Built-In Code Server","slug":"collabora-online-built-in-code-server","vendor":{"hub":true,"name":"Collabora","slug":"collabora"}},{"hub":false,"name":"Collabora Online CODE Server (richdocumentscode)","slug":"online-code-server-richdocumentscode","vendor":{"hub":true,"name":"Collabora","slug":"collabora"}}],"exploited_since":"2026-10-23T20:16:03.153854+00:00","url":"https://junglewise.ai/threats/cve-2026-110447-collabora-online-built-in-code-server-before-26-4-303"},{"cve":"CVE-2026-114625","cvss":9.9,"epss":0.0056,"slug":"cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where","title":"Arista VeloCloud Orchestrator privilege escalation","severity":"critical","exploited":true,"published_at":"2026-10-22T21:17:16.87+00:00","technologies":[{"hub":false,"name":"Arista Velocloud Orchestrator","slug":"arista-velocloud-orchestrator","vendor":{"hub":true,"name":"Arista","slug":"arista"}}],"exploited_since":"2026-10-23T17:51:03.688829+00:00","url":"https://junglewise.ai/threats/cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where"},{"cve":"CVE-2026-110936","cvss":6.7,"epss":0.0014,"slug":"cve-2026-110936-a-vulnerability-has-been-identified-in-siemens-software-center","title":"Siemens Software Center DLL sideloading vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-15T15:17:30.383+00:00","technologies":[{"hub":false,"name":"Siemens Software Center","slug":"siemens-software-center","vendor":{"hub":true,"name":"Siemens","slug":"siemens"}}],"exploited_since":"2026-10-20T20:01:09.876749+00:00","url":"https://junglewise.ai/threats/cve-2026-110936-a-vulnerability-has-been-identified-in-siemens-software-center"},{"cve":"CVE-2026-96655","cvss":4.3,"epss":0.0022,"slug":"cve-2026-96655-plex-media-server-before-1-43-3-10861-allows-an-authenticated","title":"Plex Media Server SSRF via transcode endpoint","severity":"critical","exploited":true,"published_at":"2026-09-23T17:17:23.677+00:00","technologies":[{"hub":true,"name":"Plex Media Server","slug":"media-server","vendor":{"hub":true,"name":"Plex","slug":"plex"}}],"exploited_since":"2026-10-20T20:01:06.9595+00:00","url":"https://junglewise.ai/threats/cve-2026-96655-plex-media-server-before-1-43-3-10861-allows-an-authenticated"},{"cve":"CVE-2026-106931","cvss":7.8,"epss":0.0066,"slug":"cve-2026-106931-siteguard-server-edition-contains-an-os-command-injection","title":"EG Secure Solutions SiteGuard Server Edition OS command injection","severity":"critical","exploited":true,"published_at":"2026-10-14T05:16:42.633+00:00","technologies":[{"hub":false,"name":"EG Secure Solutions SiteGuard Server Edition","slug":"siteguard-server-edition","vendor":{"hub":false,"name":"EG Secure Solutions","slug":"eg-secure-solutions"}}],"exploited_since":"2026-10-20T20:01:06.904136+00:00","url":"https://junglewise.ai/threats/cve-2026-106931-siteguard-server-edition-contains-an-os-command-injection"},{"cve":"CVE-2026-96652","cvss":4.3,"epss":0.0022,"slug":"cve-2026-96652-plex-media-server-before-1-43-3-10861-allows-ssrf-via-player","title":"Plex Media Server SSRF via /player/timeline","severity":"critical","exploited":true,"published_at":"2026-09-23T17:17:23.363+00:00","technologies":[{"hub":true,"name":"Plex Media Server","slug":"media-server","vendor":{"hub":true,"name":"Plex","slug":"plex"}}],"exploited_since":"2026-10-20T20:01:06.869259+00:00","url":"https://junglewise.ai/threats/cve-2026-96652-plex-media-server-before-1-43-3-10861-allows-ssrf-via-player"},{"cve":"CVE-2026-96654","cvss":6.5,"epss":0.0023,"slug":"cve-2026-96654-plex-media-server-before-1-43-3-10861-does-not-correctly","title":"Plex Media Server unsafe URL neutralization in searchOne","severity":"critical","exploited":true,"published_at":"2026-09-23T17:17:23.517+00:00","technologies":[{"hub":true,"name":"Plex Media Server","slug":"media-server","vendor":{"hub":true,"name":"Plex","slug":"plex"}}],"exploited_since":"2026-10-20T20:01:06.677505+00:00","url":"https://junglewise.ai/threats/cve-2026-96654-plex-media-server-before-1-43-3-10861-does-not-correctly"},{"cve":"CVE-2026-96656","cvss":7.2,"epss":0.004,"slug":"cve-2026-96656-plex-media-server-before-1-43-3-10861-allows-an-admin-user-to","title":"Plex Media Server arbitrary file write in transcoder options","severity":"critical","exploited":true,"published_at":"2026-09-23T17:17:23.84+00:00","technologies":[{"hub":true,"name":"Plex Media Server","slug":"media-server","vendor":{"hub":true,"name":"Plex","slug":"plex"}}],"exploited_since":"2026-10-20T20:01:06.626134+00:00","url":"https://junglewise.ai/threats/cve-2026-96656-plex-media-server-before-1-43-3-10861-allows-an-admin-user-to"},{"cve":"CVE-2026-102764","cvss":9.8,"epss":0.006,"slug":"cve-2026-102764-beyondtrust-remote-support-authentication-bypass-by-spoofing","title":"BeyondTrust Remote Support authentication bypass by spoofing","severity":"critical","exploited":true,"published_at":"2026-10-15T21:17:00.117+00:00","technologies":[{"hub":true,"name":"BeyondTrust Remote Support","slug":"remote-support","vendor":{"hub":true,"name":"BeyondTrust","slug":"beyondtrust"}}],"exploited_since":"2026-10-16T18:26:05.237023+00:00","url":"https://junglewise.ai/threats/cve-2026-102764-beyondtrust-remote-support-authentication-bypass-by-spoofing"},{"cve":"CVE-2025-61624","cvss":6,"epss":0.0058,"slug":"cve-2025-61624-fortinet-multiple-products-path-traversal-in-cli","title":"Fortinet multiple products path traversal in CLI","severity":"critical","exploited":true,"published_at":"2026-04-14T16:16:31.3+00:00","technologies":[{"hub":false,"name":"Fortinet Multiple Products","slug":"fortinet-multiple-products","vendor":{"hub":true,"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Fortinet FortiOS","slug":"fortios","vendor":{"hub":true,"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Fortinet FortiPAM","slug":"fortipam","vendor":{"hub":true,"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Fortinet FortiProxy","slug":"fortiproxy","vendor":{"hub":true,"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Fortinet FortiSwitchManager","slug":"fortiswitchmanager","vendor":{"hub":true,"name":"Fortinet","slug":"fortinet"}},{"hub":true,"name":"Siemens RUGGEDCOM APE1808","slug":"ruggedcom-ape1808","vendor":{"hub":true,"name":"Siemens","slug":"siemens"}}],"exploited_since":"2026-10-16T18:26:04.501573+00:00","url":"https://junglewise.ai/threats/cve-2025-61624-fortinet-multiple-products-path-traversal-in-cli"},{"cve":"CVE-2026-21589","epss":0.0278,"slug":"cve-2026-21589-h3-summary-this-is-a-vulnerability-in-bitbucket-data-center","title":"Atlassian Data Center arbitrary file access without authentication","severity":"critical","exploited":true,"published_at":"2026-10-05T22:16:58.423+00:00","technologies":[{"hub":false,"name":"Atlassian Multiple Products","slug":"atlassian-multiple-products","vendor":{"hub":true,"name":"Atlassian","slug":"atlassian"}},{"hub":false,"name":"Atlassian Bamboo Data Center","slug":"bamboo-data-center","vendor":{"hub":true,"name":"Atlassian","slug":"atlassian"}},{"hub":false,"name":"Atlassian Bitbucket Data Center","slug":"bitbucket-data-center","vendor":{"hub":true,"name":"Atlassian","slug":"atlassian"}},{"hub":true,"name":"Atlassian Confluence Data Center","slug":"confluence-data-center","vendor":{"hub":true,"name":"Atlassian","slug":"atlassian"}},{"hub":false,"name":"Atlassian Crowd Data Center","slug":"crowd-data-center","vendor":{"hub":true,"name":"Atlassian","slug":"atlassian"}},{"hub":false,"name":"Atlassian Crucible","slug":"crucible","vendor":{"hub":true,"name":"Atlassian","slug":"atlassian"}}],"exploited_since":"2026-10-15T17:56:03.217157+00:00","url":"https://junglewise.ai/threats/cve-2026-21589-h3-summary-this-is-a-vulnerability-in-bitbucket-data-center"},{"cve":"CVE-2026-76519","slug":"cve-2026-76519-cisco-secure-email-gateway-relative-path-traversal-vulnerability","title":"Cisco Secure Email Gateway relative path traversal","severity":"critical","exploited":true,"published_at":"2026-10-14T00:00:00+00:00","technologies":[{"hub":true,"name":"Cisco Secure Email Gateway","slug":"secure-email-gateway","vendor":{"hub":true,"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-10-14T20:11:06.395451+00:00","url":"https://junglewise.ai/threats/cve-2026-76519-cisco-secure-email-gateway-relative-path-traversal-vulnerability"},{"cve":"CVE-2026-0322","cvss":7.2,"epss":0.0174,"slug":"cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability","title":"Palo Alto Networks PAN-OS code injection vulnerability","severity":"critical","exploited":true,"published_at":"2026-10-14T18:17:07.743+00:00","technologies":[{"hub":true,"name":"Palo Alto Networks PAN-OS","slug":"pan-os","vendor":{"hub":true,"name":"Palo Alto Networks","slug":"palo-alto-networks"}},{"hub":false,"name":"Paloaltonetworks Pan-Os","slug":"paloaltonetworks-pan-os","vendor":{"hub":true,"name":"Paloaltonetworks","slug":"paloaltonetworks"}},{"hub":true,"name":"Palo Alto Networks PAN-OS","slug":"pan-os","vendor":{"hub":true,"name":"Palo Alto Networks","slug":"palo-alto-networks"}}],"exploited_since":"2026-10-14T20:11:06.135095+00:00","url":"https://junglewise.ai/threats/cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability"},{"cve":"CVE-2026-105133","cvss":7.3,"epss":0.0038,"slug":"cve-2026-105133-a-vulnerability-was-detected-in-ahsay-ahsaycbs-up-to-10-3-2-this","title":"Ahsay AhsayCBS authentication bypass in API","severity":"critical","exploited":true,"published_at":"2026-10-04T07:16:33.087+00:00","technologies":[{"hub":false,"name":"AhsayCBS","slug":"ahsaycbs","vendor":{"hub":false,"name":"Ahsay","slug":"ahsay"}}],"exploited_since":"2026-10-14T20:11:05.112315+00:00","url":"https://junglewise.ai/threats/cve-2026-105133-a-vulnerability-was-detected-in-ahsay-ahsaycbs-up-to-10-3-2-this"},{"cve":"CVE-2026-105134","cvss":10,"epss":0.0184,"slug":"cve-2026-105134-a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-10-3-2-this","title":"Ahsay AhsayCBS OS command injection in UpdateReceivers","severity":"critical","exploited":true,"published_at":"2026-10-04T07:16:33.48+00:00","technologies":[{"hub":false,"name":"AhsayCBS","slug":"ahsaycbs","vendor":{"hub":false,"name":"Ahsay","slug":"ahsay"}}],"exploited_since":"2026-10-14T20:11:04.823032+00:00","url":"https://junglewise.ai/threats/cve-2026-105134-a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-10-3-2-this"}]}}