# Vulnerabilities exploited in the wild

Source: https://junglewise.ai/threats/exploited  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 13 November 2026, 00:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/exploited.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence tracks 1,779 vulnerabilities known to be exploited in the wild, from the CISA Known Exploited Vulnerabilities catalogue and vendor advisories: 11 newly exploited in the last 7 days, 38 in the last 30 days and 320 in the last year. The most recent, CVE-2026-125350, was first recorded as exploited on 10 November 2026. The technology hit most in the last 30 days was Plex Media Server, with 4 vulnerabilities.

## Newly exploited this week (from 9 November 2026)

- [CVE-2026-125350: Google Chrome use after free in XML](https://junglewise.ai/threats/cve-2026-125350-use-after-free-in-xml-in-google-chrome-prior-to-157-0-8103-50) (critical, exploited in the wild, exploited since 10 Nov 2026, published 10 Nov 2026)
- [CVE-2026-116606: Barracuda Email Security Gateway authentication bypass](https://junglewise.ai/threats/cve-2026-116606-an-authentication-bypass-in-barracuda-email-security-gateway) (critical, exploited in the wild, exploited since 10 Nov 2026, published 2 Nov 2026)
- [CVE-2026-20320: Cisco BroadWorks XXE injection in OCI XML parser](https://junglewise.ai/threats/cve-2026-20320-cisco-broadworks-xxe-injection-in-oci-xml-parser) (critical, exploited in the wild, CVSS 7.5, exploited since 10 Nov 2026, published 19 Aug 2026)
- [CVE-2026-111560: Barracuda appliance OS command injection in timezone field](https://junglewise.ai/threats/cve-2026-111560-improper-neutralization-of-shell-metacharacters-in-the-timezone) (critical, exploited in the wild, exploited since 10 Nov 2026, published 2 Nov 2026)
- [CVE-2026-111793: Openwave Webtop Media Transcoder file type restriction bypass](https://junglewise.ai/threats/cve-2026-111793-openwave-webtop-media-transcoder-does-not-enforce-administrator) (critical, exploited in the wild, CVSS 4.3, exploited since 10 Nov 2026, published 16 Oct 2026)
- [CVE-2026-124194: Microsoft Office Outlook user warning spoofing vulnerability](https://junglewise.ai/threats/cve-2026-124194-microsoft-office-outlook-missing-user-interaction-for) (critical, exploited in the wild, CVSS 6.5, exploited since 10 Nov 2026, published 10 Nov 2026)
- [CVE-2026-123218: IBM Aspera Faspex authorization bypass](https://junglewise.ai/threats/cve-2026-123218-ibm-aspera-faspex-5-0-0-through-5-0-19-could-allow-an-authorized) (critical, exploited in the wild, CVSS 9.8, exploited since 9 Nov 2026, published 7 Nov 2026)
- [CVE-2026-102895: GPUStack authentication bypass via localhost spoofing](https://junglewise.ai/threats/cve-2026-102895-gpustack-is-an-open-source-gpu-cluster-manager-for-ai-model) (critical, exploited in the wild, CVSS 9.8, exploited since 9 Nov 2026, published 4 Nov 2026)
- [CVE-2026-123158: OpenSSH password authentication bypass on musl libc without PAM](https://junglewise.ai/threats/cve-2026-123158-sshd-in-openssh-before-10-6p2-on-linux-when-musl-libc-is-used) (critical, exploited in the wild, CVSS 8.1, exploited since 9 Nov 2026, published 5 Nov 2026)
- [CVE-2026-116779: FreeSWITCH command injection via SIP MESSAGE chat protocol](https://junglewise.ai/threats/cve-2026-116779-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (critical, exploited in the wild, CVSS 9.8, exploited since 9 Nov 2026, published 5 Nov 2026)

## Newly exploited in the last 30 days

- [CVE-2026-125350: Google Chrome use after free in XML](https://junglewise.ai/threats/cve-2026-125350-use-after-free-in-xml-in-google-chrome-prior-to-157-0-8103-50) (critical, exploited in the wild, exploited since 10 Nov 2026, published 10 Nov 2026)
- [CVE-2026-116606: Barracuda Email Security Gateway authentication bypass](https://junglewise.ai/threats/cve-2026-116606-an-authentication-bypass-in-barracuda-email-security-gateway) (critical, exploited in the wild, exploited since 10 Nov 2026, published 2 Nov 2026)
- [CVE-2026-20320: Cisco BroadWorks XXE injection in OCI XML parser](https://junglewise.ai/threats/cve-2026-20320-cisco-broadworks-xxe-injection-in-oci-xml-parser) (critical, exploited in the wild, CVSS 7.5, exploited since 10 Nov 2026, published 19 Aug 2026)
- [CVE-2026-111560: Barracuda appliance OS command injection in timezone field](https://junglewise.ai/threats/cve-2026-111560-improper-neutralization-of-shell-metacharacters-in-the-timezone) (critical, exploited in the wild, exploited since 10 Nov 2026, published 2 Nov 2026)
- [CVE-2026-111793: Openwave Webtop Media Transcoder file type restriction bypass](https://junglewise.ai/threats/cve-2026-111793-openwave-webtop-media-transcoder-does-not-enforce-administrator) (critical, exploited in the wild, CVSS 4.3, exploited since 10 Nov 2026, published 16 Oct 2026)
- [CVE-2026-124194: Microsoft Office Outlook user warning spoofing vulnerability](https://junglewise.ai/threats/cve-2026-124194-microsoft-office-outlook-missing-user-interaction-for) (critical, exploited in the wild, CVSS 6.5, exploited since 10 Nov 2026, published 10 Nov 2026)
- [CVE-2026-123218: IBM Aspera Faspex authorization bypass](https://junglewise.ai/threats/cve-2026-123218-ibm-aspera-faspex-5-0-0-through-5-0-19-could-allow-an-authorized) (critical, exploited in the wild, CVSS 9.8, exploited since 9 Nov 2026, published 7 Nov 2026)
- [CVE-2026-102895: GPUStack authentication bypass via localhost spoofing](https://junglewise.ai/threats/cve-2026-102895-gpustack-is-an-open-source-gpu-cluster-manager-for-ai-model) (critical, exploited in the wild, CVSS 9.8, exploited since 9 Nov 2026, published 4 Nov 2026)
- [CVE-2026-123158: OpenSSH password authentication bypass on musl libc without PAM](https://junglewise.ai/threats/cve-2026-123158-sshd-in-openssh-before-10-6p2-on-linux-when-musl-libc-is-used) (critical, exploited in the wild, CVSS 8.1, exploited since 9 Nov 2026, published 5 Nov 2026)
- [CVE-2026-116779: FreeSWITCH command injection via SIP MESSAGE chat protocol](https://junglewise.ai/threats/cve-2026-116779-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (critical, exploited in the wild, CVSS 9.8, exploited since 9 Nov 2026, published 5 Nov 2026)
- [CVE-2026-19868: SonicWall SonicOS SSLVPN SAML authentication bypass](https://junglewise.ai/threats/cve-2026-19868-an-authentication-enforcement-vulnerability-in-sonicos-sslvpn) (critical, exploited in the wild, exploited since 6 Nov 2026, published 6 Nov 2026)
- [CVE-2024-27834: Apple iOS, iPadOS, macOS, Safari, tvOS, watchOS pointer authentication bypass](https://junglewise.ai/threats/cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability) (critical, exploited in the wild, exploited since 4 Nov 2026, published 4 Nov 2026)
- [CVE-2026-119977: WordPress Core remote code execution in upgrade path](https://junglewise.ai/threats/cve-2026-119977-wordpress-core-is-vulnerable-to-remote-code-execution-in) (critical, exploited in the wild, CVSS 8.1, exploited since 3 Nov 2026, published 31 Oct 2026)
- [CVE-2026-118527: Ivanti Connect Secure predictable identifier generation](https://junglewise.ai/threats/cve-2026-118527-ivanti-connect-secure-generation-of-predictable-numbers-or) (critical, exploited in the wild, CVSS 4.3, exploited since 30 Oct 2026, published 3 Nov 2026)
- [CVE-2026-111357: Ivanti Connect Secure privilege escalation via DSCache configuration](https://junglewise.ai/threats/cve-2026-111357-ivanti-connect-secure-22-8r2-4-mishandles-the-manner-in-which) (critical, exploited in the wild, CVSS 7, exploited since 30 Oct 2026, published 15 Oct 2026)
- [CVE-2026-76418: Cisco Secure Firewall ASA and FTD SSL VPN denial of service](https://junglewise.ai/threats/cve-2026-76418-a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco) (critical, exploited in the wild, CVSS 8.6, exploited since 29 Oct 2026, published 28 Oct 2026)
- [CVE-2026-97229: GitLab CE/EE integer overflow in CI/CD regular expression compiler](https://junglewise.ai/threats/cve-2026-97229-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all) (critical, exploited in the wild, CVSS 10, exploited since 29 Oct 2026, published 13 Oct 2026)
- [CVE-2026-46300: Linux Kernel out-of-bounds write in skbuff coalescing](https://junglewise.ai/threats/cve-2026-46300-linux-kernel-out-of-bounds-write-in-skbuff-coalescing) (critical, exploited in the wild, CVSS 7.8, exploited since 28 Oct 2026, published 23 May 2026)
- [CVE-2026-41709: VMware ESX insufficient logging vulnerability](https://junglewise.ai/threats/cve-2026-41709-vmware-esx-insufficient-logging-vulnerability) (critical, exploited in the wild, CVSS 2.7, exploited since 28 Oct 2026, published 30 Jul 2026)
- [CVE-2026-111497: Google Brotli buffer overflow in decoder](https://junglewise.ai/threats/cve-2026-111497-a-buffer-overflow-vulnerability-in-the-brotli-decoder-c-dec) (critical, exploited in the wild, CVSS 4, exploited since 27 Oct 2026, published 22 Oct 2026)
- [CVE-2026-48356: Adobe Commerce unrestricted file upload in multiple components](https://junglewise.ai/threats/cve-2026-48356-adobe-commerce-unrestricted-file-upload-in-multiple-components) (critical, exploited in the wild, CVSS 9.6, exploited since 27 Oct 2026, published 14 Jul 2026)
- [CVE-2026-109619: PHP use-after-free in global state handling](https://junglewise.ai/threats/cve-2026-109619-php-has-various-global-state-that-temporarily-points-into) (critical, exploited in the wild, exploited since 26 Oct 2026, published 21 Oct 2026)
- [CVE-2026-109618: PHP Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2026-109618-gcp-2026-070) (critical, exploited in the wild, exploited since 26 Oct 2026, published 21 Oct 2026)
- [CVE-2026-110447: Collabora Online CODE Server OS command injection in proxy.php](https://junglewise.ai/threats/cve-2026-110447-collabora-online-built-in-code-server-before-26-4-303) (critical, exploited in the wild, exploited since 23 Oct 2026, published 14 Oct 2026)
- [CVE-2026-114625: Arista VeloCloud Orchestrator privilege escalation](https://junglewise.ai/threats/cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where) (critical, exploited in the wild, CVSS 9.9, exploited since 23 Oct 2026, published 22 Oct 2026)
- [CVE-2026-110936: Siemens Software Center DLL sideloading vulnerability](https://junglewise.ai/threats/cve-2026-110936-a-vulnerability-has-been-identified-in-siemens-software-center) (critical, exploited in the wild, CVSS 6.7, exploited since 20 Oct 2026, published 15 Oct 2026)
- [CVE-2026-96655: Plex Media Server SSRF via transcode endpoint](https://junglewise.ai/threats/cve-2026-96655-plex-media-server-before-1-43-3-10861-allows-an-authenticated) (critical, exploited in the wild, CVSS 4.3, exploited since 20 Oct 2026, published 23 Sep 2026)
- [CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS command injection](https://junglewise.ai/threats/cve-2026-106931-siteguard-server-edition-contains-an-os-command-injection) (critical, exploited in the wild, CVSS 7.8, exploited since 20 Oct 2026, published 14 Oct 2026)
- [CVE-2026-96652: Plex Media Server SSRF via /player/timeline](https://junglewise.ai/threats/cve-2026-96652-plex-media-server-before-1-43-3-10861-allows-ssrf-via-player) (critical, exploited in the wild, CVSS 4.3, exploited since 20 Oct 2026, published 23 Sep 2026)
- [CVE-2026-96654: Plex Media Server unsafe URL neutralization in searchOne](https://junglewise.ai/threats/cve-2026-96654-plex-media-server-before-1-43-3-10861-does-not-correctly) (critical, exploited in the wild, CVSS 6.5, exploited since 20 Oct 2026, published 23 Sep 2026)
- [CVE-2026-96656: Plex Media Server arbitrary file write in transcoder options](https://junglewise.ai/threats/cve-2026-96656-plex-media-server-before-1-43-3-10861-allows-an-admin-user-to) (critical, exploited in the wild, CVSS 7.2, exploited since 20 Oct 2026, published 23 Sep 2026)
- [CVE-2026-102764: BeyondTrust Remote Support authentication bypass by spoofing](https://junglewise.ai/threats/cve-2026-102764-beyondtrust-remote-support-authentication-bypass-by-spoofing) (critical, exploited in the wild, CVSS 9.8, exploited since 16 Oct 2026, published 15 Oct 2026)
- [CVE-2025-61624: Fortinet multiple products path traversal in CLI](https://junglewise.ai/threats/cve-2025-61624-fortinet-multiple-products-path-traversal-in-cli) (critical, exploited in the wild, CVSS 6, exploited since 16 Oct 2026, published 14 Apr 2026)
- [CVE-2026-21589: Atlassian Data Center arbitrary file access without authentication](https://junglewise.ai/threats/cve-2026-21589-h3-summary-this-is-a-vulnerability-in-bitbucket-data-center) (critical, exploited in the wild, exploited since 15 Oct 2026, published 5 Oct 2026)
- [CVE-2026-76519: Cisco Secure Email Gateway relative path traversal](https://junglewise.ai/threats/cve-2026-76519-cisco-secure-email-gateway-relative-path-traversal-vulnerability) (critical, exploited in the wild, exploited since 14 Oct 2026, published 14 Oct 2026)
- [CVE-2026-0322: Palo Alto Networks PAN-OS code injection vulnerability](https://junglewise.ai/threats/cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability) (critical, exploited in the wild, CVSS 7.2, exploited since 14 Oct 2026, published 14 Oct 2026)
- [CVE-2026-105133: Ahsay AhsayCBS authentication bypass in API](https://junglewise.ai/threats/cve-2026-105133-a-vulnerability-was-detected-in-ahsay-ahsaycbs-up-to-10-3-2-this) (critical, exploited in the wild, CVSS 7.3, exploited since 14 Oct 2026, published 4 Oct 2026)
- [CVE-2026-105134: Ahsay AhsayCBS OS command injection in UpdateReceivers](https://junglewise.ai/threats/cve-2026-105134-a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-10-3-2-this) (critical, exploited in the wild, CVSS 10, exploited since 14 Oct 2026, published 4 Oct 2026)

## Technologies hit most in the last 30 days

1. [Plex Media Server](https://junglewise.ai/threats/technologies/media-server): 4 vulnerabilities
2. [Amazon AWS](https://junglewise.ai/threats/technologies/aws): 3 vulnerabilities
3. [Google Cloud Platform](https://junglewise.ai/threats/technologies/google-cloud-platform): 3 vulnerabilities
4. AhsayCBS: 2 vulnerabilities
5. [Ivanti Connect Secure](https://junglewise.ai/threats/technologies/connect-secure): 2 vulnerabilities
6. [PHP Group PHP](https://junglewise.ai/threats/technologies/php): 2 vulnerabilities
7. [Adobe Commerce](https://junglewise.ai/threats/technologies/commerce): 1 vulnerability
8. [Adobe Commerce B2B](https://junglewise.ai/threats/technologies/commerce-b2b): 1 vulnerability
9. [Adobe Commerce Webhooks Plugin](https://junglewise.ai/threats/technologies/commerce-webhooks-plugin): 1 vulnerability
10. [Adobe Magento](https://junglewise.ai/threats/technologies/magento): 1 vulnerability
11. [Adobe Magento Enterprise Edition](https://junglewise.ai/threats/technologies/magento-enterprise-edition): 1 vulnerability
12. [Adobe Magento Open Source](https://junglewise.ai/threats/technologies/magento-open-source): 1 vulnerability
13. [Apple Ios](https://junglewise.ai/threats/technologies/apple-ios): 1 vulnerability
14. [Apple iPadOS](https://junglewise.ai/threats/technologies/ipados): 1 vulnerability
15. [Apple macOS](https://junglewise.ai/threats/technologies/macos): 1 vulnerability

## Weekly reports

- [Week of 2 to 8 November 2026](https://junglewise.ai/threats/exploited/2026-11-02): 3 vulnerabilities newly exploited, 3 critical
- [Week of 26 October to 1 November 2026](https://junglewise.ai/threats/exploited/2026-10-26): 10 vulnerabilities newly exploited, 10 critical
- [Week of 19 to 25 October 2026](https://junglewise.ai/threats/exploited/2026-10-19): 8 vulnerabilities newly exploited, 8 critical
- [Week of 12 to 18 October 2026](https://junglewise.ai/threats/exploited/2026-10-12): 9 vulnerabilities newly exploited, 9 critical
- [Week of 5 to 11 October 2026](https://junglewise.ai/threats/exploited/2026-10-05): 5 vulnerabilities newly exploited, 5 critical
- [Week of 28 September to 4 October 2026](https://junglewise.ai/threats/exploited/2026-09-28): 6 vulnerabilities newly exploited, 6 critical
- [Week of 21 to 27 September 2026](https://junglewise.ai/threats/exploited/2026-09-21): 12 vulnerabilities newly exploited, 12 critical
- [Week of 14 to 20 September 2026](https://junglewise.ai/threats/exploited/2026-09-14): 7 vulnerabilities newly exploited, 7 critical
- [Week of 7 to 13 September 2026](https://junglewise.ai/threats/exploited/2026-09-07): 14 vulnerabilities newly exploited, 14 critical
- [Week of 31 August to 6 September 2026](https://junglewise.ai/threats/exploited/2026-08-31): 10 vulnerabilities newly exploited, 10 critical
- [Week of 24 to 30 August 2026](https://junglewise.ai/threats/exploited/2026-08-24): 11 vulnerabilities newly exploited, 11 critical
- [Week of 17 to 23 August 2026](https://junglewise.ai/threats/exploited/2026-08-17): 9 vulnerabilities newly exploited, 9 critical
- [Week of 10 to 16 August 2026](https://junglewise.ai/threats/exploited/2026-08-10): 3 vulnerabilities newly exploited, 3 critical
- [Week of 3 to 9 August 2026](https://junglewise.ai/threats/exploited/2026-08-03): 6 vulnerabilities newly exploited, 6 critical
- [Week of 27 July to 2 August 2026](https://junglewise.ai/threats/exploited/2026-07-27): 3 vulnerabilities newly exploited, 3 critical
- [Week of 20 to 26 July 2026](https://junglewise.ai/threats/exploited/2026-07-20): 6 vulnerabilities newly exploited, 6 critical
- [Week of 13 to 19 July 2026](https://junglewise.ai/threats/exploited/2026-07-13): 10 vulnerabilities newly exploited, 10 critical
- [Week of 6 to 12 July 2026](https://junglewise.ai/threats/exploited/2026-07-06): 6 vulnerabilities newly exploited, 6 critical
- [Week of 29 June to 5 July 2026](https://junglewise.ai/threats/exploited/2026-06-29): 2 vulnerabilities newly exploited, 2 critical
- [Week of 22 to 28 June 2026](https://junglewise.ai/threats/exploited/2026-06-22): 6 vulnerabilities newly exploited, 6 critical
- [Week of 15 to 21 June 2026](https://junglewise.ai/threats/exploited/2026-06-15): 4 vulnerabilities newly exploited, 4 critical
- [Week of 8 to 14 June 2026](https://junglewise.ai/threats/exploited/2026-06-08): 7 vulnerabilities newly exploited, 7 critical
- [Week of 1 to 7 June 2026](https://junglewise.ai/threats/exploited/2026-06-01): 6 vulnerabilities newly exploited, 6 critical
- [Week of 25 to 31 May 2026](https://junglewise.ai/threats/exploited/2026-05-25): 5 vulnerabilities newly exploited, 5 critical
- [Week of 18 to 24 May 2026](https://junglewise.ai/threats/exploited/2026-05-18): 9 vulnerabilities newly exploited, 9 critical
- [Week of 11 to 17 May 2026](https://junglewise.ai/threats/exploited/2026-05-11): 2 vulnerabilities newly exploited, 2 critical
- [Week of 4 to 10 May 2026](https://junglewise.ai/threats/exploited/2026-05-04): 3 vulnerabilities newly exploited, 3 critical
- [Week of 27 April to 3 May 2026](https://junglewise.ai/threats/exploited/2026-04-27): 4 vulnerabilities newly exploited, 4 critical
- [Week of 20 to 26 April 2026](https://junglewise.ai/threats/exploited/2026-04-20): 14 vulnerabilities newly exploited, 14 critical
- [Week of 13 to 19 April 2026](https://junglewise.ai/threats/exploited/2026-04-13): 10 vulnerabilities newly exploited, 10 critical
- [Week of 6 to 12 April 2026](https://junglewise.ai/threats/exploited/2026-04-06): 2 vulnerabilities newly exploited, 2 critical
- [Week of 30 March to 5 April 2026](https://junglewise.ai/threats/exploited/2026-03-30): 3 vulnerabilities newly exploited, 3 critical

## Every vulnerability exploited in the wild

- [CVE-2026-125350: Google Chrome use after free in XML](https://junglewise.ai/threats/cve-2026-125350-use-after-free-in-xml-in-google-chrome-prior-to-157-0-8103-50) (10 Nov 2026)
- [CVE-2026-116606: Barracuda Email Security Gateway authentication bypass](https://junglewise.ai/threats/cve-2026-116606-an-authentication-bypass-in-barracuda-email-security-gateway) (10 Nov 2026)
- [CVE-2026-20320: Cisco BroadWorks XXE injection in OCI XML parser](https://junglewise.ai/threats/cve-2026-20320-cisco-broadworks-xxe-injection-in-oci-xml-parser) (10 Nov 2026)
- [CVE-2026-111560: Barracuda appliance OS command injection in timezone field](https://junglewise.ai/threats/cve-2026-111560-improper-neutralization-of-shell-metacharacters-in-the-timezone) (10 Nov 2026)
- [CVE-2026-111793: Openwave Webtop Media Transcoder file type restriction bypass](https://junglewise.ai/threats/cve-2026-111793-openwave-webtop-media-transcoder-does-not-enforce-administrator) (10 Nov 2026)
- [CVE-2026-124194: Microsoft Office Outlook user warning spoofing vulnerability](https://junglewise.ai/threats/cve-2026-124194-microsoft-office-outlook-missing-user-interaction-for) (10 Nov 2026)
- [CVE-2026-123218: IBM Aspera Faspex authorization bypass](https://junglewise.ai/threats/cve-2026-123218-ibm-aspera-faspex-5-0-0-through-5-0-19-could-allow-an-authorized) (9 Nov 2026)
- [CVE-2026-102895: GPUStack authentication bypass via localhost spoofing](https://junglewise.ai/threats/cve-2026-102895-gpustack-is-an-open-source-gpu-cluster-manager-for-ai-model) (9 Nov 2026)
- [CVE-2026-123158: OpenSSH password authentication bypass on musl libc without PAM](https://junglewise.ai/threats/cve-2026-123158-sshd-in-openssh-before-10-6p2-on-linux-when-musl-libc-is-used) (9 Nov 2026)
- [CVE-2026-116779: FreeSWITCH command injection via SIP MESSAGE chat protocol](https://junglewise.ai/threats/cve-2026-116779-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (9 Nov 2026)
- [CVE-2026-19868: SonicWall SonicOS SSLVPN SAML authentication bypass](https://junglewise.ai/threats/cve-2026-19868-an-authentication-enforcement-vulnerability-in-sonicos-sslvpn) (6 Nov 2026)
- [CVE-2024-27834: Apple iOS, iPadOS, macOS, Safari, tvOS, watchOS pointer authentication bypass](https://junglewise.ai/threats/cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability) (4 Nov 2026)
- [CVE-2026-119977: WordPress Core remote code execution in upgrade path](https://junglewise.ai/threats/cve-2026-119977-wordpress-core-is-vulnerable-to-remote-code-execution-in) (3 Nov 2026)
- [CVE-2026-118527: Ivanti Connect Secure predictable identifier generation](https://junglewise.ai/threats/cve-2026-118527-ivanti-connect-secure-generation-of-predictable-numbers-or) (30 Oct 2026)
- [CVE-2026-111357: Ivanti Connect Secure privilege escalation via DSCache configuration](https://junglewise.ai/threats/cve-2026-111357-ivanti-connect-secure-22-8r2-4-mishandles-the-manner-in-which) (30 Oct 2026)
- [CVE-2026-76418: Cisco Secure Firewall ASA and FTD SSL VPN denial of service](https://junglewise.ai/threats/cve-2026-76418-a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco) (29 Oct 2026)
- [CVE-2026-97229: GitLab CE/EE integer overflow in CI/CD regular expression compiler](https://junglewise.ai/threats/cve-2026-97229-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all) (29 Oct 2026)
- [CVE-2026-46300: Linux Kernel out-of-bounds write in skbuff coalescing](https://junglewise.ai/threats/cve-2026-46300-linux-kernel-out-of-bounds-write-in-skbuff-coalescing) (28 Oct 2026)
- [CVE-2026-41709: VMware ESX insufficient logging vulnerability](https://junglewise.ai/threats/cve-2026-41709-vmware-esx-insufficient-logging-vulnerability) (28 Oct 2026)
- [CVE-2026-111497: Google Brotli buffer overflow in decoder](https://junglewise.ai/threats/cve-2026-111497-a-buffer-overflow-vulnerability-in-the-brotli-decoder-c-dec) (27 Oct 2026)
- [CVE-2026-48356: Adobe Commerce unrestricted file upload in multiple components](https://junglewise.ai/threats/cve-2026-48356-adobe-commerce-unrestricted-file-upload-in-multiple-components) (27 Oct 2026)
- [CVE-2026-109619: PHP use-after-free in global state handling](https://junglewise.ai/threats/cve-2026-109619-php-has-various-global-state-that-temporarily-points-into) (26 Oct 2026)
- [CVE-2026-109618: PHP Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2026-109618-gcp-2026-070) (26 Oct 2026)
- [CVE-2026-110447: Collabora Online CODE Server OS command injection in proxy.php](https://junglewise.ai/threats/cve-2026-110447-collabora-online-built-in-code-server-before-26-4-303) (23 Oct 2026)
- [CVE-2026-114625: Arista VeloCloud Orchestrator privilege escalation](https://junglewise.ai/threats/cve-2026-114625-velocloud-orchestrator-vco-on-prem-has-a-security-issue-where) (23 Oct 2026)
- [CVE-2026-110936: Siemens Software Center DLL sideloading vulnerability](https://junglewise.ai/threats/cve-2026-110936-a-vulnerability-has-been-identified-in-siemens-software-center) (20 Oct 2026)
- [CVE-2026-96655: Plex Media Server SSRF via transcode endpoint](https://junglewise.ai/threats/cve-2026-96655-plex-media-server-before-1-43-3-10861-allows-an-authenticated) (20 Oct 2026)
- [CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS command injection](https://junglewise.ai/threats/cve-2026-106931-siteguard-server-edition-contains-an-os-command-injection) (20 Oct 2026)
- [CVE-2026-96652: Plex Media Server SSRF via /player/timeline](https://junglewise.ai/threats/cve-2026-96652-plex-media-server-before-1-43-3-10861-allows-ssrf-via-player) (20 Oct 2026)
- [CVE-2026-96654: Plex Media Server unsafe URL neutralization in searchOne](https://junglewise.ai/threats/cve-2026-96654-plex-media-server-before-1-43-3-10861-does-not-correctly) (20 Oct 2026)
- [CVE-2026-96656: Plex Media Server arbitrary file write in transcoder options](https://junglewise.ai/threats/cve-2026-96656-plex-media-server-before-1-43-3-10861-allows-an-admin-user-to) (20 Oct 2026)
- [CVE-2026-102764: BeyondTrust Remote Support authentication bypass by spoofing](https://junglewise.ai/threats/cve-2026-102764-beyondtrust-remote-support-authentication-bypass-by-spoofing) (16 Oct 2026)
- [CVE-2025-61624: Fortinet multiple products path traversal in CLI](https://junglewise.ai/threats/cve-2025-61624-fortinet-multiple-products-path-traversal-in-cli) (16 Oct 2026)
- [CVE-2026-21589: Atlassian Data Center arbitrary file access without authentication](https://junglewise.ai/threats/cve-2026-21589-h3-summary-this-is-a-vulnerability-in-bitbucket-data-center) (15 Oct 2026)
- [CVE-2026-76519: Cisco Secure Email Gateway relative path traversal](https://junglewise.ai/threats/cve-2026-76519-cisco-secure-email-gateway-relative-path-traversal-vulnerability) (14 Oct 2026)
- [CVE-2026-0322: Palo Alto Networks PAN-OS code injection vulnerability](https://junglewise.ai/threats/cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability) (14 Oct 2026)
- [CVE-2026-105133: Ahsay AhsayCBS authentication bypass in API](https://junglewise.ai/threats/cve-2026-105133-a-vulnerability-was-detected-in-ahsay-ahsaycbs-up-to-10-3-2-this) (14 Oct 2026)
- [CVE-2026-105134: Ahsay AhsayCBS OS command injection in UpdateReceivers](https://junglewise.ai/threats/cve-2026-105134-a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-10-3-2-this) (14 Oct 2026)
- [CVE-2026-96951: Microsoft Windows command injection in Shell](https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability) (13 Oct 2026)
- [CVE-2026-104935: Ivanti Connect Secure authentication bypass by spoofing](https://junglewise.ai/threats/cve-2026-104935-ivanti-connect-secure-authentication-bypass-by-spoofing) (13 Oct 2026)
- [CVE-2015-3306: ProFTPD improper access control in SITE commands](https://junglewise.ai/threats/cve-2015-3306-proftpd-improper-access-control-vulnerability) (8 Oct 2026)
- [CVE-2021-3199: ONLYOFFICE Docs Server path traversal in image upload](https://junglewise.ai/threats/cve-2021-3199-onlyoffice-docs-server-path-traversal-vulnerability) (8 Oct 2026)
- [CVE-2016-3081: Apache Struts command injection in Dynamic Method Invocation](https://junglewise.ai/threats/cve-2016-3081-apache-struts-rce-vulnerability) (8 Oct 2026)
- [CVE-2015-5477: ISC BIND denial of service via TKEY queries](https://junglewise.ai/threats/cve-2015-5477-isc-bind-data-processing-errors-vulnerability) (8 Oct 2026)
- [CVE-2023-22894: Strapi information disclosure via private field filtering](https://junglewise.ai/threats/cve-2023-22894-strapi-information-disclosure-via-private-field-filtering) (8 Oct 2026)
- [CVE-2026-88779: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory…](https://junglewise.ai/threats/cve-2026-88779-cisa-adds-one-known-exploited-vulnerability-to-catalog) (4 Oct 2026)
- [CVE-2026-102490: Zammad privilege escalation to root](https://junglewise.ai/threats/cve-2026-102490-all-versions-of-zammad-including-the-latest-alpha-enable-the) (2 Oct 2026)
- [CVE-2026-102489: Zammad session hijack leading to remote code execution](https://junglewise.ai/threats/cve-2026-102489-zammad-versions-6-3-0-to-6-5-4-are-vulnerable-a-session-hijack) (2 Oct 2026)
- [CVE-2026-104286: Fortinet FortiMail path traversal vulnerability](https://junglewise.ai/threats/cve-2026-104286-fortinet-fortimail-path-traversal-vulnerability) (1 Oct 2026)
- [CVE-2026-76504: Cisco Catalyst SD-WAN Manager API authentication bypass](https://junglewise.ai/threats/cve-2026-76504-a-vulnerability-in-the-api-session-based-authentication) (30 Sep 2026)
- [CVE-2026-86950: Apple CoreGraphics out-of-bounds write in file processing](https://junglewise.ai/threats/cve-2026-86950-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds) (29 Sep 2026)
- [CVE-2026-88772: Citrix NetScaler ADC and Gateway remote code execution and denial of service](https://junglewise.ai/threats/cve-2026-88772-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler) (27 Sep 2026)
- [CVE-2026-88771: Citrix NetScaler ADC and Gateway improper input validation](https://junglewise.ai/threats/cve-2026-88771-improper-input-validation-vulnerability-in-citrix-netscaler-adc) (27 Sep 2026)
- [CVE-2026-87902: WordPress Core remote file inclusion](https://junglewise.ai/threats/cve-2026-87902-wordpress-core-remote-file-inclusion) (25 Sep 2026)
- [CVE-2026-67279: Mikrotik RouterOS improper behavioral workflow enforcement](https://junglewise.ai/threats/cve-2026-67279-mikrotik-routeros-improper-behavioral-workflow-enforcement) (25 Sep 2026)
- [CVE-2026-65660: Microsoft SharePoint code injection](https://junglewise.ai/threats/cve-2026-65660-microsoft-sharepoint-code-injection) (25 Sep 2026)
- [CVE-2026-71362: Adobe Commerce and Magento incorrect authorization](https://junglewise.ai/threats/cve-2026-71362-adobe-commerce-and-magento-incorrect-authorization) (24 Sep 2026)
- [CVE-2026-5430: WSO2 API Control Plane path traversal vulnerability](https://junglewise.ai/threats/cve-2026-5430-wso2-api-control-plane-path-traversal-vulnerability) (24 Sep 2026)
- [CVE-2026-94127: F5 BIG-IP APM heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-94127-f5-big-ip-apm-heap-based-buffer-overflow) (22 Sep 2026)
- [CVE-2026-93616: Check Point Multiple Products path traversal vulnerability](https://junglewise.ai/threats/cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability) (22 Sep 2026)
- [CVE-2026-93952: Arista VeloCloud Orchestrator improper input validation](https://junglewise.ai/threats/cve-2026-93952-arista-velocloud-orchestrator-improper-input-validation) (22 Sep 2026)
- [CVE-2026-85102: Check Point Security Gateway and Spark Firewall improper certificate validation in…](https://junglewise.ai/threats/cve-2026-85102-check-point-security-gateway-and-spark-firewall-improper) (22 Sep 2026)
- [CVE-2026-7273: Zyxel GS1900 Series stack-based buffer overflow in CGI program](https://junglewise.ai/threats/cve-2026-7273-zyxel-gs1900-series-stack-based-buffer-overflow-in-cgi-program) (21 Sep 2026)
- [CVE-2026-53266: Linux Kernel netfilter improper memory write in ebt_snat ARP rewrite](https://junglewise.ai/threats/cve-2026-53266-linux-kernel-netfilter-improper-memory-write-in-ebt-snat-arp) (18 Sep 2026)
- [CVE-2025-39964: Linux Kernel race condition in af_alg_sendmsg](https://junglewise.ai/threats/cve-2025-39964-linux-kernel-race-condition-in-af-alg-sendmsg) (18 Sep 2026)
- [CVE-2025-39682: Linux Kernel memory corruption in TLS zero-length record handling](https://junglewise.ai/threats/cve-2025-39682-linux-kernel-memory-corruption-in-tls-zero-length-record-handling) (18 Sep 2026)
- [CVE-2026-87886: Acronis Backup privilege escalation in cPanel/WHM and Plesk plugins](https://junglewise.ai/threats/cve-2026-87886-acronis-backup-privilege-escalation-in-cpanel-whm-and-plesk) (16 Sep 2026)
- [CVE-2026-76460: A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an…](https://junglewise.ai/threats/cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use) (16 Sep 2026)
- [CVE-2026-58704: Google Pixel improper authorization in cellular modem](https://junglewise.ai/threats/cve-2026-58704-google-pixel-improper-authorization-in-cellular-modem) (16 Sep 2026)
- [CVE-2026-76461: Cisco Secure Email Gateway SQL injection](https://junglewise.ai/threats/cve-2026-76461-cisco-secure-email-gateway-sql-injection) (14 Sep 2026)
- [CVE-2026-85706: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7…](https://junglewise.ai/threats/cve-2026-85706-gitlab-community-and-enterprise-edition-path-traversal-in-commits) (11 Sep 2026)
- [CVE-2026-84869: ConnectWise ScreenConnect unauthorized file transfer and execution](https://junglewise.ai/threats/cve-2026-84869-connectwise-screenconnect-unauthorized-file-transfer-and) (11 Sep 2026)
- [CVE-2026-42018: JFrog Artifactory improper authentication vulnerability](https://junglewise.ai/threats/cve-2026-42018-jfrog-artifactory-improper-authentication-vulnerability) (11 Sep 2026)
- [CVE-2026-42016: JFrog Artifactory privilege escalation via improper token scope validation](https://junglewise.ai/threats/cve-2026-42016-jfrog-artifactory-privilege-escalation-via-improper-token-scope) (11 Sep 2026)
- [CVE-2026-86060: MikroTik RouterOS argument delimiter neutralization privilege escalation](https://junglewise.ai/threats/cve-2026-86060-mikrotik-routeros-argument-delimiter-neutralization-privilege) (10 Sep 2026)
- [CVE-2026-67277: MikroTik RouterOS missing authentication in btest service](https://junglewise.ai/threats/cve-2026-67277-mikrotik-routeros-missing-authentication-in-btest-service) (10 Sep 2026)
- [CVE-2026-87491: Google Chromium V8 out-of-bounds write in JavaScript engine](https://junglewise.ai/threats/cve-2026-87491-google-chromium-v8-out-of-bounds-write-in-javascript-engine) (9 Sep 2026)
- [CVE-2026-19490: Citrix NetScaler authentication bypass via alternate path](https://junglewise.ai/threats/cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path) (9 Sep 2026)
- [CVE-2026-20079: Cisco Secure Firewall Management Center auth bypass in web interface](https://junglewise.ai/threats/cve-2026-20079-cisco-secure-firewall-management-center-auth-bypass-in-web) (9 Sep 2026)
- [CVE-2025-25249: Fortinet FortiOS heap overflow in cw_acd daemon](https://junglewise.ai/threats/cve-2025-25249-fortinet-fortios-heap-overflow-in-cw-acd-daemon) (9 Sep 2026)
- [CVE-2026-85880: Heap-based buffer overflow in Windows ALPC allows an authorized attacker to…](https://junglewise.ai/threats/cve-2026-85880-microsoft-windows-heap-based-buffer-overflow-in-advanced-local) (8 Sep 2026)
- [CVE-2026-81963: Microsoft Windows privilege escalation via link following in Update Stack](https://junglewise.ai/threats/cve-2026-81963-microsoft-windows-privilege-escalation-via-link-following-in) (8 Sep 2026)
- [CVE-2026-75650: Adobe Commerce and Magento improper neutralization in template engine](https://junglewise.ai/threats/cve-2026-75650-adobe-commerce-and-magento-improper-neutralization-in-template) (8 Sep 2026)
- [CVE-2026-86218: N-central is vulnerable to a pre-auth remote code execution This issue affects…](https://junglewise.ai/threats/cve-2026-86218-n-able-n-central-static-code-injection-vulnerability) (8 Sep 2026)
- [CVE-2026-85046: Google Chromium V8 type confusion vulnerability](https://junglewise.ai/threats/cve-2026-85046-google-chromium-v8-type-confusion-vulnerability) (4 Sep 2026)
- [CVE-2026-83549: SonicWall SMA1000 OS command injection](https://junglewise.ai/threats/cve-2026-83549-sonicwall-sma1000-os-command-injection) (2 Sep 2026)
- [CVE-2026-83548: SonicWall SMA1000 server-side request forgery](https://junglewise.ai/threats/cve-2026-83548-sonicwall-sma1000-server-side-request-forgery) (2 Sep 2026)
- [CVE-2026-82329: JFrog Artifactory improper authentication vulnerability](https://junglewise.ai/threats/cve-2026-82329-jfrog-artifactory-improper-authentication-vulnerability) (2 Sep 2026)
- [CVE-2026-9586: Sangoma Switchvox SMB SQL injection in /pa endpoint](https://junglewise.ai/threats/cve-2026-9586-sangoma-switchvox-smb-sql-injection-in-pa-endpoint) (2 Sep 2026)
- [CVE-2026-59822: BerriAI LiteLLM authentication bypass in MCP endpoint](https://junglewise.ai/threats/cve-2026-59822-berriai-litellm-authentication-bypass-in-mcp-endpoint) (2 Sep 2026)
- [CVE-2026-49869: Kestra OSS authentication bypass in AuthenticationFilter](https://junglewise.ai/threats/cve-2026-49869-kestra-oss-authentication-bypass-in-authenticationfilter) (2 Sep 2026)
- [CVE-2026-48710: Starlette auth bypass via malformed Host header](https://junglewise.ai/threats/cve-2026-48710-starlette-auth-bypass-via-malformed-host-header) (2 Sep 2026)
- [CVE-2026-82078: PaperCut NG/MF unsafe reflection vulnerability](https://junglewise.ai/threats/cve-2026-82078-papercut-ng-mf-unsafe-reflection-vulnerability) (31 Aug 2026)
- [CVE-2026-81578: PaperCut NG/MF missing authentication for critical function](https://junglewise.ai/threats/cve-2026-81578-papercut-ng-mf-missing-authentication-for-critical-function) (31 Aug 2026)
- [CVE-2023-49105: ownCloud improper authentication vulnerability](https://junglewise.ai/threats/cve-2023-49105-owncloud-improper-authentication-vulnerability) (27 Aug 2026)
- [CVE-2026-66384: An authenticated user may write data outside the intended Docker cache path under…](https://junglewise.ai/threats/cve-2026-66384-jfrog-artifactory-path-traversal-in-docker-cache) (27 Aug 2026)
- [CVE-2026-53362: Linux Kernel buffer overflow in IPv6 paged allocation](https://junglewise.ai/threats/cve-2026-53362-linux-kernel-buffer-overflow-in-ipv6-paged-allocation) (27 Aug 2026)
- [CVE-2015-3246: Red Hat Libuser race condition in passwd file handling](https://junglewise.ai/threats/cve-2015-3246-red-hat-libuser-race-condition-in-passwd-file-handling) (26 Aug 2026)
- [CVE-2015-5287: Red Hat ABRT privilege escalation via symlink attack](https://junglewise.ai/threats/cve-2015-5287-red-hat-abrt-privilege-escalation-via-symlink-attack) (26 Aug 2026)
- [CVE-2022-0995: Linux Kernel out-of-bounds write vulnerability](https://junglewise.ai/threats/cve-2022-0995-linux-kernel-out-of-bounds-write-vulnerability) (26 Aug 2026)
- [CVE-2019-1068: Microsoft SQL Server remote code execution](https://junglewise.ai/threats/cve-2019-1068-microsoft-sql-server-remote-code-execution) (26 Aug 2026)
- [CVE-2026-8452: NetScaler ADC and Gateway memory overflow in Gateway or AAA virtual server](https://junglewise.ai/threats/cve-2026-8452-netscaler-adc-and-gateway-memory-overflow-in-gateway-or-aaa) (26 Aug 2026)
- [CVE-2021-23758: Remote Code Execution in AjaxNetProfessional](https://junglewise.ai/threats/cve-2021-23758-ajax-net-professional-unsafe-deserialization-of-untrusted-data) (26 Aug 2026)
- [CVE-2026-60004: Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git…](https://junglewise.ai/threats/cve-2026-60004-gitea-code-injection-in-diffpatch-api) (25 Aug 2026)
- [CVE-2026-21962: Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in improper access control](https://junglewise.ai/threats/cve-2026-21962-oracle-http-server-and-oracle-weblogic-server-proxy-plug-in) (24 Aug 2026)
- [CVE-2026-73570: Zimbra Collaboration Suite OS command injection in SMTP](https://junglewise.ai/threats/cve-2026-73570-zimbra-collaboration-suite-os-command-injection-in-smtp) (21 Aug 2026)
- [CVE-2026-72530: TrueConf Server code injection vulnerability](https://junglewise.ai/threats/cve-2026-72530-trueconf-server-code-injection-vulnerability) (20 Aug 2026)
- [CVE-2026-72529: TrueConf Server missing authentication for critical function](https://junglewise.ai/threats/cve-2026-72529-trueconf-server-missing-authentication-for-critical-function) (20 Aug 2026)
- [CVE-2026-64849: MLflow unauthenticated SSRF via unvalidated webhook redirects](https://junglewise.ai/threats/cve-2026-64849-mlflow-server-side-request-forgery) (19 Aug 2026)
- [CVE-2026-65400: Apple macOS Screen Sharing authentication bypass](https://junglewise.ai/threats/cve-2026-65400-apple-macos-screen-sharing-authentication-bypass) (18 Aug 2026)
- [CVE-2026-59310: VMware vCenter directory traversal in Syslog server](https://junglewise.ai/threats/cve-2026-59310-vmware-vcenter-directory-traversal-in-syslog-server) (18 Aug 2026)
- [CVE-2026-55040: Microsoft SharePoint weak authentication security feature bypass](https://junglewise.ai/threats/cve-2026-55040-microsoft-sharepoint-weak-authentication-security-feature-bypass) (18 Aug 2026)
- [CVE-2026-33824: Microsoft Windows double free in IKE Extension](https://junglewise.ai/threats/cve-2026-33824-microsoft-windows-double-free-in-ike-extension) (18 Aug 2026)
- [CVE-2025-62593: PYSEC-2026-520 - Ray is vulnerable to Critical RCE via Safari & Firefox Browsers…](https://junglewise.ai/threats/cve-2025-62593-ray-project-ray-code-injection-vulnerability) (17 Aug 2026)
- [CVE-2026-68820: Use after free in Windows Ancillary Function Driver for WinSock allows an…](https://junglewise.ai/threats/cve-2026-68820-microsoft-windows-ancillary-function-driver-for-winsock-use-after) (11 Aug 2026)
- [CVE-2026-20349: Cisco Secure Firewall ASA and FTD denial of service in SSL VPN](https://junglewise.ai/threats/cve-2026-20349-cisco-secure-firewall-asa-and-ftd-denial-of-service-in-ssl-vpn) (11 Aug 2026)
- [CVE-2026-72898: Metabase SQL injection in password reset endpoint](https://junglewise.ai/threats/cve-2026-72898-metabase-sql-injection-in-password-reset-endpoint) (11 Aug 2026)
- [CVE-2026-8037: Progress LoadMaster OS command injection in API](https://junglewise.ai/threats/cve-2026-8037-progress-loadmaster-os-command-injection-in-api) (7 Aug 2026)
- [CVE-2026-63077: JetBrains TeamCity remote code execution in agent polling protocol](https://junglewise.ai/threats/cve-2026-63077-jetbrains-teamcity-remote-code-execution-in-agent-polling) (5 Aug 2026)
- [CVE-2026-18556: N-able N-central authentication bypass via alternate path](https://junglewise.ai/threats/cve-2026-18556-n-able-n-central-authentication-bypass-via-alternate-path) (4 Aug 2026)
- [CVE-2026-9198: IBM Langflow OSS remote code execution via auto-login bypass](https://junglewise.ai/threats/cve-2026-9198-ibm-langflow-oss-remote-code-execution-via-auto-login-bypass) (4 Aug 2026)
- [CVE-2026-34486: Apache Tomcat encryption bypass in EncryptInterceptor](https://junglewise.ai/threats/cve-2026-34486-apache-tomcat-encryption-bypass-in-encryptinterceptor) (4 Aug 2026)
- [CVE-2026-18577: An incomplete patch for allows for authentication bypass and account takeover in…](https://junglewise.ai/threats/cve-2026-18577-n-able-n-central-authentication-bypass-and-account-takeover) (3 Aug 2026)
- [CVE-2026-20316: Cisco Secure Firewall Management Center static credentials in web interface](https://junglewise.ai/threats/cve-2026-20316-cisco-secure-firewall-management-center-static-credentials-in-web) (29 Jul 2026)
- [CVE-2026-16812: Arista VeloCloud Orchestrator OS command injection in on-prem host](https://junglewise.ai/threats/cve-2026-16812-arista-velocloud-orchestrator-os-command-injection-in-on-prem) (27 Jul 2026)
- [CVE-2025-68686: Fortinet FortiOS information disclosure in SSL-VPN](https://junglewise.ai/threats/cve-2025-68686-fortinet-fortios-information-disclosure-in-ssl-vpn) (27 Jul 2026)
- [CVE-2026-16232: Check Point SmartConsole authentication bypass in login process](https://junglewise.ai/threats/cve-2026-16232-check-point-smartconsole-authentication-bypass-in-login-process) (22 Jul 2026)
- [CVE-2026-50522: Microsoft SharePoint remote code execution via unsafe deserialization](https://junglewise.ai/threats/cve-2026-50522-microsoft-sharepoint-remote-code-execution-via-unsafe) (22 Jul 2026)
- [CVE-2026-63030: WordPress REST API route confusion and SQL injection leading to RCE](https://junglewise.ai/threats/cve-2026-63030-wordpress-rest-api-route-confusion-and-sql-injection-leading-to) (21 Jul 2026)
- [CVE-2026-60137: WordPress SQL injection in WP_Query author__not_in parameter](https://junglewise.ai/threats/cve-2026-60137-wordpress-sql-injection-in-wp-query-author-not-in-parameter) (21 Jul 2026)
- [CVE-2021-27137: DD-WRT stack buffer overflow in UPnP SSDP parser](https://junglewise.ai/threats/cve-2021-27137-dd-wrt-stack-buffer-overflow-in-upnp-ssdp-parser) (21 Jul 2026)
- [CVE-2026-0770: Langflow remote code execution in validate endpoint](https://junglewise.ai/threats/cve-2026-0770-langflow-remote-code-execution-in-validate-endpoint) (21 Jul 2026)
- [CVE-2026-58644: Microsoft SharePoint remote code execution via untrusted deserialization](https://junglewise.ai/threats/cve-2026-58644-microsoft-sharepoint-remote-code-execution-via-untrusted) (16 Jul 2026)
- [CVE-2026-25089: Fortinet FortiSandbox OS command injection in Web UI](https://junglewise.ai/threats/cve-2026-25089-fortinet-fortisandbox-os-command-injection-in-web-ui) (16 Jul 2026)
- [CVE-2026-39808: Fortinet FortiSandbox OS command injection in API endpoint](https://junglewise.ai/threats/cve-2026-39808-fortinet-fortisandbox-os-command-injection-in-api-endpoint) (16 Jul 2026)
- [CVE-2023-4346: KNX Association KNX Protocol account lockout in Connection Authorization Option 1](https://junglewise.ai/threats/cve-2023-4346-knx-association-knx-protocol-account-lockout-in-connection) (15 Jul 2026)
- [CVE-2026-46817: Oracle E-Business Suite remote compromise in Oracle Payments](https://junglewise.ai/threats/cve-2026-46817-oracle-e-business-suite-remote-compromise-in-oracle-payments) (15 Jul 2026)
- [CVE-2026-15410: SonicWall SMA1000 code injection in Appliance Management Console](https://junglewise.ai/threats/cve-2026-15410-sonicwall-sma1000-code-injection-in-appliance-management-console) (14 Jul 2026)
- [CVE-2026-15409: SonicWall SMA1000 SSRF in Work Place interface](https://junglewise.ai/threats/cve-2026-15409-sonicwall-sma1000-ssrf-in-work-place-interface) (14 Jul 2026)
- [CVE-2026-56164: Microsoft SharePoint missing authentication in critical function](https://junglewise.ai/threats/cve-2026-56164-microsoft-sharepoint-missing-authentication-in-critical-function) (14 Jul 2026)
- [CVE-2026-56155: Microsoft AD FS privilege escalation via insufficient access control granularity](https://junglewise.ai/threats/cve-2026-56155-microsoft-ad-fs-privilege-escalation-via-insufficient-access) (14 Jul 2026)
- [CVE-2008-4128: Cisco IOS CSRF in HTTP Administration component](https://junglewise.ai/threats/cve-2008-4128-cisco-ios-csrf-in-http-administration-component) (13 Jul 2026)
- [CVE-2026-56291: Balbooa Forms for Joomla unauthenticated file upload RCE](https://junglewise.ai/threats/cve-2026-56291-balbooa-forms-for-joomla-unauthenticated-file-upload-rce) (10 Jul 2026)
- [CVE-2026-48939: Joomla iCagenda arbitrary file upload in file attachment feature](https://junglewise.ai/threats/cve-2026-48939-joomla-icagenda-arbitrary-file-upload-in-file-attachment-feature) (10 Jul 2026)
- [CVE-2026-48282: Adobe ColdFusion path traversal in multiple versions](https://junglewise.ai/threats/cve-2026-48282-adobe-coldfusion-path-traversal-in-multiple-versions) (7 Jul 2026)
- [CVE-2026-56290: Joomlack Page Builder CK unauthenticated arbitrary file upload](https://junglewise.ai/threats/cve-2026-56290-joomlack-page-builder-ck-unauthenticated-arbitrary-file-upload) (7 Jul 2026)
- [CVE-2026-55255: Langflow IDOR in responses endpoint allows cross-user flow execution](https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow) (7 Jul 2026)
- [CVE-2026-48908: JoomShaper SP Page Builder arbitrary file upload in Joomla](https://junglewise.ai/threats/cve-2026-48908-joomshaper-sp-page-builder-arbitrary-file-upload-in-joomla) (7 Jul 2026)
- [CVE-2026-45659: Microsoft Office SharePoint deserialization of untrusted data](https://junglewise.ai/threats/cve-2026-45659-microsoft-office-sharepoint-deserialization-of-untrusted-data) (1 Jul 2026)
- [CVE-2026-48558: SimpleHelp authentication bypass in OIDC authentication flow](https://junglewise.ai/threats/cve-2026-48558-simplehelp-authentication-bypass-in-oidc-authentication-flow) (29 Jun 2026)
- [CVE-2026-12569: PTC Windchill and FlexPLM remote code execution via deserialization](https://junglewise.ai/threats/cve-2026-12569-ptc-windchill-and-flexplm-remote-code-execution-via) (25 Jun 2026)
- [CVE-2026-20230: Cisco Unified Communications Manager SSRF in WebDialer](https://junglewise.ai/threats/cve-2026-20230-cisco-unified-communications-manager-ssrf-in-webdialer) (25 Jun 2026)
- [CVE-2026-34910: Ubiquiti UniFi OS command injection via improper input validation](https://junglewise.ai/threats/cve-2026-34910-ubiquiti-unifi-os-command-injection-via-improper-input-validation) (23 Jun 2026)
- [CVE-2026-34909: Ubiquiti UniFi OS path traversal in underlying system files](https://junglewise.ai/threats/cve-2026-34909-ubiquiti-unifi-os-path-traversal-in-underlying-system-files) (23 Jun 2026)
- [CVE-2026-34908: Ubiquiti UniFi OS improper access control](https://junglewise.ai/threats/cve-2026-34908-ubiquiti-unifi-os-improper-access-control) (23 Jun 2026)
- [CVE-2025-67038: Lantronix EDS5000 OS command injection in HTTP RPC module](https://junglewise.ai/threats/cve-2025-67038-lantronix-eds5000-os-command-injection-in-http-rpc-module) (23 Jun 2026)
- [CVE-2026-20253: Splunk Enterprise auth bypass in PostgreSQL sidecar service](https://junglewise.ai/threats/cve-2026-20253-splunk-enterprise-auth-bypass-in-postgresql-sidecar-service) (18 Jun 2026)
- [CVE-2026-48907: Joomla JCE Editor improper access control leading to RCE](https://junglewise.ai/threats/cve-2026-48907-joomla-jce-editor-improper-access-control-leading-to-rce) (16 Jun 2026)
- [CVE-2026-20262: Cisco Catalyst SD-WAN Manager arbitrary file write in web UI](https://junglewise.ai/threats/cve-2026-20262-cisco-catalyst-sd-wan-manager-arbitrary-file-write-in-web-ui) (15 Jun 2026)
- [CVE-2026-54420: LiteSpeed cPanel plugin privilege escalation via symlink following](https://junglewise.ai/threats/cve-2026-54420-litespeed-cpanel-plugin-privilege-escalation-via-symlink) (15 Jun 2026)
- [CVE-2026-35273: Oracle PeopleSoft PeopleTools compromise in Updates Environment Management](https://junglewise.ai/threats/cve-2026-35273-oracle-peoplesoft-peopletools-compromise-in-updates-environment) (12 Jun 2026)
- [CVE-2026-10520: Ivanti Sentry OS command injection allows remote code execution](https://junglewise.ai/threats/cve-2026-10520-ivanti-sentry-os-command-injection-allows-remote-code-execution) (11 Jun 2026)
- [CVE-2026-11645: Google Chrome V8 out of bounds read and write](https://junglewise.ai/threats/cve-2026-11645-google-chrome-v8-out-of-bounds-read-and-write) (9 Jun 2026)
- [CVE-2026-7473: Arista EOS improper tunnel protocol verification in decapsulation](https://junglewise.ai/threats/cve-2026-7473-arista-eos-improper-tunnel-protocol-verification-in-decapsulation) (9 Jun 2026)
- [CVE-2026-20245: Cisco Catalyst SD-WAN Manager privilege escalation in CLI](https://junglewise.ai/threats/cve-2026-20245-cisco-catalyst-sd-wan-manager-privilege-escalation-in-cli) (9 Jun 2026)
- [CVE-2026-50751: Check Point VPN authentication bypass in IKEv1 key exchange](https://junglewise.ai/threats/cve-2026-50751-check-point-vpn-authentication-bypass-in-ikev1-key-exchange) (8 Jun 2026)
- [CVE-2026-42271: BerriAI LiteLLM OS command injection in MCP test endpoints](https://junglewise.ai/threats/cve-2026-42271-berriai-litellm-os-command-injection-in-mcp-test-endpoints) (8 Jun 2026)
- [CVE-2026-28318: SolarWinds Serv-U denial of service via crafted POST request](https://junglewise.ai/threats/cve-2026-28318-solarwinds-serv-u-denial-of-service-via-crafted-post-request) (5 Jun 2026)
- [CVE-2010-0249: Microsoft Internet Explorer use-after-free in HTML object handling](https://junglewise.ai/threats/cve-2010-0249-microsoft-internet-explorer-use-after-free-in-html-object-handling) (3 Jun 2026)
- [CVE-2026-45247: Mirasvit Full Page Cache Warmer PHP object injection in cookie](https://junglewise.ai/threats/cve-2026-45247-mirasvit-full-page-cache-warmer-php-object-injection-in-cookie) (3 Jun 2026)
- [CVE-2022-0492: Linux Kernel privilege escalation in cgroups v1 release_agent](https://junglewise.ai/threats/cve-2022-0492-linux-kernel-privilege-escalation-in-cgroups-v1-release-agent) (2 Jun 2026)
- [CVE-2025-48595: Google Android Framework privilege escalation via integer overflow](https://junglewise.ai/threats/cve-2025-48595-google-android-framework-privilege-escalation-via-integer) (2 Jun 2026)
- [CVE-2024-21182: Oracle WebLogic Server unspecified vulnerability in Core component](https://junglewise.ai/threats/cve-2024-21182-oracle-weblogic-server-unspecified-vulnerability-in-core) (1 Jun 2026)
- [CVE-2026-0257: Palo Alto Networks PAN-OS auth bypass in GlobalProtect](https://junglewise.ai/threats/cve-2026-0257-palo-alto-networks-pan-os-auth-bypass-in-globalprotect) (29 May 2026)
- [CVE-2026-48027: nrwl Nx Console Malicious Code Injection in VSCode Extension](https://junglewise.ai/threats/cve-2026-48027-nrwl-nx-console-malicious-code-injection-in-vscode-extension) (27 May 2026)
- [CVE-2026-8398: AVB Disc Soft DAEMON Tools Lite supply chain compromise](https://junglewise.ai/threats/cve-2026-8398-avb-disc-soft-daemon-tools-lite-supply-chain-compromise) (27 May 2026)
- [CVE-2026-45321: TanStack npm packages supply chain compromise via GitHub Actions OIDC hijacking](https://junglewise.ai/threats/cve-2026-45321-tanstack-npm-packages-supply-chain-compromise-via-github-actions) (27 May 2026)
- [CVE-2026-48172: LiteSpeed User-End cPanel Plugin privilege escalation to root](https://junglewise.ai/threats/cve-2026-48172-litespeed-user-end-cpanel-plugin-privilege-escalation-to-root) (26 May 2026)
- [CVE-2026-9082: Drupal Drupal core SQL injection in database abstraction API](https://junglewise.ai/threats/cve-2026-9082-drupal-drupal-core-sql-injection-in-database-abstraction-api) (22 May 2026)
- [CVE-2026-34926: Trend Micro Apex One directory traversal in on-premise server](https://junglewise.ai/threats/cve-2026-34926-trend-micro-apex-one-directory-traversal-in-on-premise-server) (21 May 2026)
- [CVE-2025-34291: Langflow CORS misconfiguration enables Account Takeover and RCE](https://junglewise.ai/threats/cve-2025-34291-langflow-cors-misconfiguration-and-account-takeover-leading-to) (21 May 2026)
- [CVE-2026-45498: Microsoft Defender denial of service](https://junglewise.ai/threats/cve-2026-45498-microsoft-defender-denial-of-service) (20 May 2026)
- [CVE-2026-41091: Microsoft Defender privilege escalation via improper link resolution](https://junglewise.ai/threats/cve-2026-41091-microsoft-defender-privilege-escalation-via-improper-link) (20 May 2026)
- [CVE-2008-4250: Microsoft Windows buffer overflow in Server service](https://junglewise.ai/threats/cve-2008-4250-microsoft-windows-buffer-overflow-in-server-service) (20 May 2026)
- [CVE-2009-1537: Microsoft DirectX NULL byte overwrite in QuickTime Movie Parser Filter](https://junglewise.ai/threats/cve-2009-1537-microsoft-directx-null-byte-overwrite-in-quicktime-movie-parser) (20 May 2026)
- [CVE-2009-3459: Adobe Acrobat and Reader heap overflow in PDF parsing](https://junglewise.ai/threats/cve-2009-3459-adobe-acrobat-and-reader-heap-overflow-in-pdf-parsing) (20 May 2026)
- [CVE-2010-0806: Microsoft Internet Explorer use-after-free in Peer Objects](https://junglewise.ai/threats/cve-2010-0806-microsoft-internet-explorer-use-after-free-in-peer-objects) (20 May 2026)
- [CVE-2026-42897: Microsoft Exchange Server cross-site scripting in Outlook Web Access](https://junglewise.ai/threats/cve-2026-42897-microsoft-exchange-server-cross-site-scripting-in-outlook-web) (15 May 2026)
- [CVE-2026-20182: Cisco Catalyst SD-WAN authentication bypass in peering mechanism](https://junglewise.ai/threats/cve-2026-20182-cisco-catalyst-sd-wan-authentication-bypass-in-peering-mechanism) (14 May 2026)
- [CVE-2026-42208: BerriAI LiteLLM SQL injection in Proxy API key verification](https://junglewise.ai/threats/cve-2026-42208-berriai-litellm-sql-injection-in-proxy-api-key-verification) (8 May 2026)
- [CVE-2026-6973: Ivanti Endpoint Manager Mobile RCE via Apache directive injection](https://junglewise.ai/threats/cve-2026-6973-ivanti-endpoint-manager-mobile-rce-via-apache-directive-injection) (7 May 2026)
- [CVE-2026-0300: Palo Alto Networks PAN-OS buffer overflow in User-ID Authentication Portal](https://junglewise.ai/threats/cve-2026-0300-palo-alto-networks-pan-os-buffer-overflow-in-user-id) (6 May 2026)
- [CVE-2026-31431: Linux Kernel crypto algif_aead improper memory handling](https://junglewise.ai/threats/cve-2026-31431-linux-kernel-crypto-algif-aead-improper-memory-handling) (1 May 2026)
- [CVE-2026-41940: WebPros cPanel & WHM authentication bypass in login flow](https://junglewise.ai/threats/cve-2026-41940-webpros-cpanel-whm-authentication-bypass-in-login-flow) (30 Apr 2026)
- [CVE-2024-1708: ConnectWise ScreenConnect path traversal](https://junglewise.ai/threats/cve-2024-1708-connectwise-screenconnect-path-traversal) (28 Apr 2026)
- [CVE-2026-32202: Microsoft Windows Shell protection mechanism failure spoofing](https://junglewise.ai/threats/cve-2026-32202-microsoft-windows-shell-protection-mechanism-failure-spoofing) (28 Apr 2026)
- [CVE-2024-7399: Samsung MagicINFO 9 Server path traversal](https://junglewise.ai/threats/cve-2024-7399-samsung-magicinfo-9-server-path-traversal) (24 Apr 2026)
- [CVE-2025-29635: D-Link DIR-823X command injection in set_prohibiting](https://junglewise.ai/threats/cve-2025-29635-d-link-dir-823x-command-injection-in-set-prohibiting) (24 Apr 2026)
- [CVE-2024-57728: SimpleHelp path traversal in ZIP file upload](https://junglewise.ai/threats/cve-2024-57728-simplehelp-path-traversal-in-zip-file-upload) (24 Apr 2026)
- [CVE-2024-57726: SimpleHelp privilege escalation via missing authorization in API key creation](https://junglewise.ai/threats/cve-2024-57726-simplehelp-privilege-escalation-via-missing-authorization-in-api) (24 Apr 2026)
- [CVE-2026-39987: Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass](https://junglewise.ai/threats/cve-2026-39987-marimo-pre-auth-remote-code-execution-via-terminal-websocket) (23 Apr 2026)
- [CVE-2026-33825: Microsoft Defender privilege escalation in Antimalware Platform](https://junglewise.ai/threats/cve-2026-33825-microsoft-defender-privilege-escalation-in-antimalware-platform) (22 Apr 2026)
- [CVE-2026-20133: Cisco Catalyst SD-WAN Manager information disclosure](https://junglewise.ai/threats/cve-2026-20133-cisco-catalyst-sd-wan-manager-information-disclosure) (20 Apr 2026)
- [CVE-2026-20128: Cisco Catalyst SD-WAN Manager recoverable password storage in DCA](https://junglewise.ai/threats/cve-2026-20128-cisco-catalyst-sd-wan-manager-recoverable-password-storage-in-dca) (20 Apr 2026)
- [CVE-2023-27351: PaperCut NG/MF authentication bypass in SecurityRequestFilter](https://junglewise.ai/threats/cve-2023-27351-papercut-ng-mf-authentication-bypass-in-securityrequestfilter) (20 Apr 2026)
- [CVE-2024-27199: JetBrains TeamCity relative path traversal in admin interface](https://junglewise.ai/threats/cve-2024-27199-jetbrains-teamcity-relative-path-traversal-in-admin-interface) (20 Apr 2026)
- [CVE-2025-2749: Kentico Xperience path traversal and RCE in Staging Sync Server](https://junglewise.ai/threats/cve-2025-2749-kentico-xperience-path-traversal-and-rce-in-staging-sync-server) (20 Apr 2026)
- [CVE-2025-32975: Quest KACE Systems Management Appliance authentication bypass in SSO](https://junglewise.ai/threats/cve-2025-32975-quest-kace-systems-management-appliance-authentication-bypass-in) (20 Apr 2026)
- [CVE-2025-48700: Synacor Zimbra Collaboration Suite XSS in Classic UI](https://junglewise.ai/threats/cve-2025-48700-synacor-zimbra-collaboration-suite-xss-in-classic-ui) (20 Apr 2026)
- [CVE-2026-20122: Cisco Catalyst SD-WAN Manager arbitrary file overwrite via API](https://junglewise.ai/threats/cve-2026-20122-cisco-catalyst-sd-wan-manager-arbitrary-file-overwrite-via-api) (20 Apr 2026)
- [CVE-2026-34197: Apache ActiveMQ code injection in Jolokia JMX-HTTP bridge](https://junglewise.ai/threats/cve-2026-34197-apache-activemq-code-injection-in-jolokia-jmx-http-bridge) (16 Apr 2026)
- [CVE-2026-32201: Microsoft SharePoint Server improper input validation spoofing vulnerability](https://junglewise.ai/threats/cve-2026-32201-microsoft-sharepoint-server-improper-input-validation-spoofing) (14 Apr 2026)
- [CVE-2009-0238: Microsoft Excel remote code execution via malformed object](https://junglewise.ai/threats/cve-2009-0238-microsoft-excel-remote-code-execution-via-malformed-object) (14 Apr 2026)
- [CVE-2023-21529: Microsoft Exchange Server deserialization remote code execution](https://junglewise.ai/threats/cve-2023-21529-microsoft-exchange-server-deserialization-remote-code-execution) (13 Apr 2026)
- [CVE-2023-36424: Microsoft Windows privilege escalation in Common Log File System Driver](https://junglewise.ai/threats/cve-2023-36424-microsoft-windows-privilege-escalation-in-common-log-file-system) (13 Apr 2026)
- [CVE-2012-1854: Microsoft Visual Basic for Applications insecure library loading in VBE6.dll](https://junglewise.ai/threats/cve-2012-1854-microsoft-visual-basic-for-applications-insecure-library-loading) (13 Apr 2026)
- [CVE-2020-9715: Adobe Acrobat use-after-free in PDF parsing](https://junglewise.ai/threats/cve-2020-9715-adobe-acrobat-use-after-free-in-pdf-parsing) (13 Apr 2026)
- [CVE-2026-21643: Fortinet FortiClient EMS SQL injection](https://junglewise.ai/threats/cve-2026-21643-fortinet-forticlient-ems-sql-injection) (13 Apr 2026)
- [CVE-2026-34621: Adobe Acrobat and Reader prototype pollution in JavaScript engine](https://junglewise.ai/threats/cve-2026-34621-adobe-acrobat-and-reader-prototype-pollution-in-javascript-engine) (13 Apr 2026)
- [CVE-2025-60710: Microsoft Windows privilege escalation in Host Process for Windows Tasks](https://junglewise.ai/threats/cve-2025-60710-microsoft-windows-privilege-escalation-in-host-process-for) (13 Apr 2026)
- [CVE-2026-1340: Ivanti Endpoint Manager Mobile code injection](https://junglewise.ai/threats/cve-2026-1340-ivanti-endpoint-manager-mobile-code-injection) (8 Apr 2026)
- [CVE-2026-35616: Fortinet FortiClientEMS improper access control in API](https://junglewise.ai/threats/cve-2026-35616-fortinet-forticlientems-improper-access-control-in-api) (6 Apr 2026)
- [CVE-2026-3502: TrueConf Client download of code without integrity check](https://junglewise.ai/threats/cve-2026-3502-trueconf-client-download-of-code-without-integrity-check) (2 Apr 2026)
- [CVE-2026-5281: Google Chrome use after free in Dawn](https://junglewise.ai/threats/cve-2026-5281-google-chrome-use-after-free-in-dawn) (1 Apr 2026)
- [CVE-2026-3055: Citrix NetScaler out-of-bounds read in SAML IdP](https://junglewise.ai/threats/cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp) (30 Mar 2026)
- [CVE-2025-53521: F5 BIG-IP stack-based buffer overflow in APM](https://junglewise.ai/threats/cve-2025-53521-f5-big-ip-stack-based-buffer-overflow-in-apm) (27 Mar 2026)
- [CVE-2026-33634: GO-2026-4919 - Trivy ecosystem supply chain was briefly compromised in…](https://junglewise.ai/threats/cve-2026-33634-aqua-security-trivy-supply-chain-compromise-via-malicious-code) (26 Mar 2026)
- [CVE-2026-33017: Langflow unauthenticated remote code execution in build_public_tmp endpoint](https://junglewise.ai/threats/cve-2026-33017-langflow-unauthenticated-remote-code-execution-in-build-public) (25 Mar 2026)
- [CVE-2025-43520: Apple Multiple Products classic buffer overflow in kernel memory](https://junglewise.ai/threats/cve-2025-43520-apple-multiple-products-classic-buffer-overflow-in-kernel-memory) (20 Mar 2026)
- [CVE-2025-43510: Apple Multiple Products improper locking in shared memory](https://junglewise.ai/threats/cve-2025-43510-apple-multiple-products-improper-locking-in-shared-memory) (20 Mar 2026)
- [CVE-2025-31277: Apple Multiple Products memory corruption in web content processing](https://junglewise.ai/threats/cve-2025-31277-apple-multiple-products-memory-corruption-in-web-content) (20 Mar 2026)
- [CVE-2025-54068: Livewire is vulnerable to remote command execution during component property…](https://junglewise.ai/threats/cve-2025-54068-laravel-livewire-code-injection-in-component-hydration) (20 Mar 2026)
- [CVE-2025-32432: Craft CMS Allows Remote Code Execution](https://junglewise.ai/threats/cve-2025-32432-craft-cms-remote-code-execution-via-code-injection) (20 Mar 2026)
- [CVE-2026-20131: Cisco Secure Firewall Management Center deserialization RCE](https://junglewise.ai/threats/cve-2026-20131-cisco-secure-firewall-management-center-deserialization-rce) (19 Mar 2026)
- [CVE-2026-20963: Microsoft SharePoint deserialization of untrusted data](https://junglewise.ai/threats/cve-2026-20963-microsoft-sharepoint-deserialization-of-untrusted-data) (18 Mar 2026)
- [CVE-2025-66376: Synacor Zimbra Collaboration Suite stored XSS in Classic UI](https://junglewise.ai/threats/cve-2025-66376-synacor-zimbra-collaboration-suite-stored-xss-in-classic-ui) (18 Mar 2026)
- [CVE-2025-47813: Wing FTP Server information disclosure in loginok.html](https://junglewise.ai/threats/cve-2025-47813-wing-ftp-server-information-disclosure-in-loginok-html) (16 Mar 2026)
- [CVE-2026-3910: Google Chromium V8 memory corruption in JavaScript engine](https://junglewise.ai/threats/cve-2026-3910-google-chromium-v8-memory-corruption-in-javascript-engine) (13 Mar 2026)
- [CVE-2026-3909: Google Skia out-of-bounds write in Google Chrome](https://junglewise.ai/threats/cve-2026-3909-google-skia-out-of-bounds-write-in-google-chrome) (13 Mar 2026)
- [CVE-2025-68613: n8n Vulnerable to Remote Code Execution via Expression Injection](https://junglewise.ai/threats/cve-2025-68613-n8n-remote-code-execution-in-workflow-expression-evaluation) (11 Mar 2026)
- [CVE-2021-22054: Omnissa Workspace ONE UEM SSRF in management console](https://junglewise.ai/threats/cve-2021-22054-omnissa-workspace-one-uem-ssrf-in-management-console) (9 Mar 2026)
- [CVE-2025-26399: SolarWinds Web Help Desk deserialization RCE in AjaxProxy](https://junglewise.ai/threats/cve-2025-26399-solarwinds-web-help-desk-deserialization-rce-in-ajaxproxy) (9 Mar 2026)
- [CVE-2026-1603: Ivanti Endpoint Manager authentication bypass in credential storage](https://junglewise.ai/threats/cve-2026-1603-ivanti-endpoint-manager-authentication-bypass-in-credential) (9 Mar 2026)
- [CVE-2023-41974: Apple iOS and iPadOS use-after-free in kernel](https://junglewise.ai/threats/cve-2023-41974-apple-ios-and-ipados-use-after-free-in-kernel) (5 Mar 2026)
- [CVE-2017-7921: Hikvision IP Cameras improper authentication](https://junglewise.ai/threats/cve-2017-7921-hikvision-ip-cameras-improper-authentication) (5 Mar 2026)
- [CVE-2021-22681: Rockwell Automation Logix Designer authentication bypass in Logix Controllers](https://junglewise.ai/threats/cve-2021-22681-rockwell-automation-logix-designer-authentication-bypass-in-logix) (5 Mar 2026)
- [CVE-2021-30952: Apple Multiple Products integer overflow in WebKit content processing](https://junglewise.ai/threats/cve-2021-30952-apple-multiple-products-integer-overflow-in-webkit-content) (5 Mar 2026)
- [CVE-2023-43000: Apple Multiple Products use-after-free in Web Content processing](https://junglewise.ai/threats/cve-2023-43000-apple-multiple-products-use-after-free-in-web-content-processing) (5 Mar 2026)
- [CVE-2026-21385: Qualcomm Multiple Chipsets memory corruption in memory allocation](https://junglewise.ai/threats/cve-2026-21385-qualcomm-multiple-chipsets-memory-corruption-in-memory-allocation) (3 Mar 2026)
- [CVE-2026-22719: Broadcom VMware Aria Operations command injection during migration](https://junglewise.ai/threats/cve-2026-22719-broadcom-vmware-aria-operations-command-injection-during) (3 Mar 2026)
- [CVE-2026-20127: Cisco Catalyst SD-WAN auth bypass in peering authentication](https://junglewise.ai/threats/cve-2026-20127-cisco-catalyst-sd-wan-auth-bypass-in-peering-authentication) (25 Feb 2026)
- [CVE-2022-20775: Cisco SD-WAN privilege escalation via path traversal in CLI](https://junglewise.ai/threats/cve-2022-20775-cisco-sd-wan-privilege-escalation-via-path-traversal-in-cli) (25 Feb 2026)
- [CVE-2026-25108: Soliton Systems FileZen OS command injection in Antivirus Check Option](https://junglewise.ai/threats/cve-2026-25108-soliton-systems-filezen-os-command-injection-in-antivirus-check) (24 Feb 2026)
- [CVE-2025-68461: Roundcube Webmail XSS in SVG animate tag](https://junglewise.ai/threats/cve-2025-68461-roundcube-webmail-xss-in-svg-animate-tag) (20 Feb 2026)
- [CVE-2025-49113: Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization](https://junglewise.ai/threats/cve-2025-49113-roundcube-webmail-php-deserialization-in-upload-php) (20 Feb 2026)
- [CVE-2026-22769: Dell RecoverPoint for Virtual Machines hard-coded credentials](https://junglewise.ai/threats/cve-2026-22769-dell-recoverpoint-for-virtual-machines-hard-coded-credentials) (18 Feb 2026)
- [CVE-2021-22175: GitLab SSRF in internal network webhooks](https://junglewise.ai/threats/cve-2021-22175-gitlab-ssrf-in-internal-network-webhooks) (18 Feb 2026)
- [CVE-2024-7694: TeamT5 ThreatSonar Anti-Ransomware unrestricted file upload](https://junglewise.ai/threats/cve-2024-7694-teamt5-threatsonar-anti-ransomware-unrestricted-file-upload) (17 Feb 2026)
- [CVE-2026-2441: Google Chromium use-after-free in CSS](https://junglewise.ai/threats/cve-2026-2441-google-chromium-use-after-free-in-css) (17 Feb 2026)
- [CVE-2008-0015: Microsoft Windows Video ActiveX Control stack buffer overflow in DirectShow](https://junglewise.ai/threats/cve-2008-0015-microsoft-windows-video-activex-control-stack-buffer-overflow-in) (17 Feb 2026)
- [CVE-2020-7796: Synacor Zimbra Collaboration Suite SSRF in WebEx zimlet](https://junglewise.ai/threats/cve-2020-7796-synacor-zimbra-collaboration-suite-ssrf-in-webex-zimlet) (17 Feb 2026)
- [CVE-2026-1731: BeyondTrust Remote Support and PRA OS command injection](https://junglewise.ai/threats/cve-2026-1731-beyondtrust-remote-support-and-pra-os-command-injection) (13 Feb 2026)
- [CVE-2024-43468: Microsoft Configuration Manager SQL injection](https://junglewise.ai/threats/cve-2024-43468-microsoft-configuration-manager-sql-injection) (12 Feb 2026)
- [CVE-2025-15556: Notepad++ code execution via WinGUp updater integrity failure](https://junglewise.ai/threats/cve-2025-15556-notepad-code-execution-via-wingup-updater-integrity-failure) (12 Feb 2026)
- [CVE-2025-40536: SolarWinds Web Help Desk security control bypass](https://junglewise.ai/threats/cve-2025-40536-solarwinds-web-help-desk-security-control-bypass) (12 Feb 2026)
- [CVE-2026-20700: Apple Multiple Operating Systems Buffer Overflow](https://junglewise.ai/threats/cve-2026-20700-apple-multiple-operating-systems-buffer-overflow) (12 Feb 2026)
- [CVE-2026-21519: Microsoft Windows type confusion in Desktop Window Manager](https://junglewise.ai/threats/cve-2026-21519-microsoft-windows-type-confusion-in-desktop-window-manager) (10 Feb 2026)
- [CVE-2026-21510: Microsoft Windows Shell protection mechanism failure](https://junglewise.ai/threats/cve-2026-21510-microsoft-windows-shell-protection-mechanism-failure) (10 Feb 2026)
- [CVE-2026-21513: Microsoft MSHTML Framework protection mechanism failure](https://junglewise.ai/threats/cve-2026-21513-microsoft-mshtml-framework-protection-mechanism-failure) (10 Feb 2026)
- [CVE-2026-21514: Microsoft Office Word reliance on untrusted inputs in security decision](https://junglewise.ai/threats/cve-2026-21514-microsoft-office-word-reliance-on-untrusted-inputs-in-security) (10 Feb 2026)
- [CVE-2026-21525: Microsoft Windows NULL pointer dereference in Remote Access Connection Manager](https://junglewise.ai/threats/cve-2026-21525-microsoft-windows-null-pointer-dereference-in-remote-access) (10 Feb 2026)
- [CVE-2026-21533: Microsoft Windows privilege escalation in Remote Desktop Services](https://junglewise.ai/threats/cve-2026-21533-microsoft-windows-privilege-escalation-in-remote-desktop-services) (10 Feb 2026)
- [CVE-2026-24423: SmarterTools SmarterMail auth bypass in ConnectToHub API](https://junglewise.ai/threats/cve-2026-24423-smartertools-smartermail-auth-bypass-in-connecttohub-api) (5 Feb 2026)
- [CVE-2025-11953: React Native Community CLI arbitrary OS command injection](https://junglewise.ai/threats/cve-2025-11953-react-native-community-cli-os-command-injection-in-metro-dev) (5 Feb 2026)
- [CVE-2019-19006: Sangoma FreePBX improper authentication in admin interface](https://junglewise.ai/threats/cve-2019-19006-sangoma-freepbx-improper-authentication-in-admin-interface) (3 Feb 2026)
- [CVE-2021-39935: GitLab CE/EE SSRF in CI Lint API](https://junglewise.ai/threats/cve-2021-39935-gitlab-ce-ee-ssrf-in-ci-lint-api) (3 Feb 2026)
- [CVE-2025-40551: SolarWinds Web Help Desk untrusted data deserialization](https://junglewise.ai/threats/cve-2025-40551-solarwinds-web-help-desk-untrusted-data-deserialization) (3 Feb 2026)
- [CVE-2025-64328: Sangoma FreePBX command injection in filestore module](https://junglewise.ai/threats/cve-2025-64328-sangoma-freepbx-command-injection-in-filestore-module) (3 Feb 2026)
- [CVE-2026-1281: Ivanti Endpoint Manager Mobile code injection remote code execution](https://junglewise.ai/threats/cve-2026-1281-ivanti-endpoint-manager-mobile-code-injection-remote-code) (29 Jan 2026)
- [CVE-2026-24858: Fortinet Multiple Products authentication bypass in FortiCloud SSO](https://junglewise.ai/threats/cve-2026-24858-fortinet-multiple-products-authentication-bypass-in-forticloud) (27 Jan 2026)
- [CVE-2026-21509: Microsoft Office security feature bypass via untrusted inputs](https://junglewise.ai/threats/cve-2026-21509-microsoft-office-security-feature-bypass-via-untrusted-inputs) (26 Jan 2026)
- [CVE-2018-14634: Linux Kernel integer overflow in create_elf_tables](https://junglewise.ai/threats/cve-2018-14634-linux-kernel-integer-overflow-in-create-elf-tables) (26 Jan 2026)
- [CVE-2026-23760: SmarterTools SmarterMail authentication bypass in password reset API](https://junglewise.ai/threats/cve-2026-23760-smartertools-smartermail-authentication-bypass-in-password-reset) (26 Jan 2026)
- [CVE-2026-24061: telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f…](https://junglewise.ai/threats/cve-2026-24061-gnu-inetutils-argument-injection-in-telnetd) (26 Jan 2026)
- [CVE-2025-52691: SmarterTools SmarterMail unrestricted file upload leading to RCE](https://junglewise.ai/threats/cve-2025-52691-smartertools-smartermail-unrestricted-file-upload-leading-to-rce) (26 Jan 2026)
- [CVE-2024-37079: Broadcom VMware vCenter Server out-of-bounds write in DCERPC protocol](https://junglewise.ai/threats/cve-2024-37079-broadcom-vmware-vcenter-server-out-of-bounds-write-in-dcerpc) (23 Jan 2026)
- [CVE-2025-34026: Versa Networks Concerto authentication bypass in Traefik configuration](https://junglewise.ai/threats/cve-2025-34026-versa-networks-concerto-authentication-bypass-in-traefik) (22 Jan 2026)
- [CVE-2025-68645: Synacor Zimbra Collaboration Suite file inclusion in RestFilter servlet](https://junglewise.ai/threats/cve-2025-68645-synacor-zimbra-collaboration-suite-file-inclusion-in-restfilter) (22 Jan 2026)
- [CVE-2025-54313: eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core…](https://junglewise.ai/threats/cve-2025-54313-prettier-eslint-config-prettier-embedded-malicious-code) (22 Jan 2026)
- [CVE-2025-31125: Vite server.fs.deny bypass with inline and raw query parameters](https://junglewise.ai/threats/cve-2025-31125-vitejs-vite-improper-access-control-in-dev-server) (22 Jan 2026)
- [CVE-2026-20045: Cisco Unified Communications Products code injection in management interface](https://junglewise.ai/threats/cve-2026-20045-cisco-unified-communications-products-code-injection-in) (21 Jan 2026)
- [CVE-2026-20805: Microsoft Windows Desktop Window Manager information disclosure](https://junglewise.ai/threats/cve-2026-20805-microsoft-windows-desktop-window-manager-information-disclosure) (13 Jan 2026)
- [CVE-2025-8110: Improper Symbolic link handling in the PutContents API in Gogs allows Local…](https://junglewise.ai/threats/cve-2025-8110-gogs-path-traversal-and-code-execution-in-putcontents-api) (12 Jan 2026)
- [CVE-2009-0556: Microsoft PowerPoint code injection in OutlineTextRefAtom](https://junglewise.ai/threats/cve-2009-0556-microsoft-powerpoint-code-injection-in-outlinetextrefatom) (7 Jan 2026)
- [CVE-2025-37164: HPE OneView code injection remote code execution](https://junglewise.ai/threats/cve-2025-37164-hpe-oneview-code-injection-remote-code-execution) (7 Jan 2026)
- [CVE-2025-14847: MongoDB Server uninitialized heap memory disclosure in Zlib headers](https://junglewise.ai/threats/cve-2025-14847-mongodb-server-uninitialized-heap-memory-disclosure-in-zlib) (29 Dec 2025)
- [CVE-2023-52163: Digiever DS-2105 Pro command injection in time_tzsetup.cgi](https://junglewise.ai/threats/cve-2023-52163-digiever-ds-2105-pro-command-injection-in-time-tzsetup-cgi) (22 Dec 2025)
- [CVE-2025-14733: WatchGuard Fireware OS out-of-bounds write in iked process](https://junglewise.ai/threats/cve-2025-14733-watchguard-fireware-os-out-of-bounds-write-in-iked-process) (19 Dec 2025)
- [CVE-2025-59374: ASUS Live Update supply chain compromise and embedded malicious code](https://junglewise.ai/threats/cve-2025-59374-asus-live-update-supply-chain-compromise-and-embedded-malicious) (17 Dec 2025)
- [CVE-2025-20393: Cisco Secure Email Gateway command injection in Spam Quarantine](https://junglewise.ai/threats/cve-2025-20393-cisco-secure-email-gateway-command-injection-in-spam-quarantine) (17 Dec 2025)
- [CVE-2025-40602: SonicWall SMA1000 privilege escalation in AMC](https://junglewise.ai/threats/cve-2025-40602-sonicwall-sma1000-privilege-escalation-in-amc) (17 Dec 2025)
- [CVE-2025-59718: Fortinet Multiple Products auth bypass via improper SAML signature verification](https://junglewise.ai/threats/cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml) (16 Dec 2025)
- [CVE-2025-43529: Apple WebKit use-after-free in multiple products](https://junglewise.ai/threats/cve-2025-43529-apple-webkit-use-after-free-in-multiple-products) (15 Dec 2025)
- [CVE-2025-14611: Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded…](https://junglewise.ai/threats/cve-2025-14611-gladinet-centrestack-and-triofox-hardcoded-cryptographic-keys) (15 Dec 2025)
- [CVE-2025-14174: Google Chromium out of bounds memory access in ANGLE](https://junglewise.ai/threats/cve-2025-14174-google-chromium-out-of-bounds-memory-access-in-angle) (12 Dec 2025)
- [CVE-2018-4063: Sierra Wireless ALEOS unrestricted file upload in upload.cgi](https://junglewise.ai/threats/cve-2018-4063-sierra-wireless-aleos-unrestricted-file-upload-in-upload-cgi) (12 Dec 2025)
- [CVE-2025-58360: GeoServer is vulnerable to Unauthenticated XML External Entities (XXE) attack via…](https://junglewise.ai/threats/cve-2025-58360-osgeo-geoserver-xxe-in-wms-getmap-operation) (11 Dec 2025)
- [CVE-2025-62221: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized…](https://junglewise.ai/threats/cve-2025-62221-microsoft-windows-use-after-free-in-cloud-files-mini-filter) (9 Dec 2025)
- [CVE-2025-6218: RARLAB WinRAR path traversal and remote code execution](https://junglewise.ai/threats/cve-2025-6218-rarlab-winrar-path-traversal-and-remote-code-execution) (9 Dec 2025)
- [CVE-2022-37055: D-Link GO-RT-AC750 buffer overflow in cgibin and hnap_main](https://junglewise.ai/threats/cve-2022-37055-d-link-go-rt-ac750-buffer-overflow-in-cgibin-and-hnap-main) (8 Dec 2025)
- [CVE-2025-66644: Array Networks ArrayOS AG OS command injection](https://junglewise.ai/threats/cve-2025-66644-array-networks-arrayos-ag-os-command-injection) (8 Dec 2025)
- [CVE-2025-55182: React Server Components are Vulnerable to RCE](https://junglewise.ai/threats/cve-2025-55182-meta-react-server-components-remote-code-execution) (5 Dec 2025)
- [CVE-2021-26828: OpenPLC ScadaBR unrestricted file upload in view_edit.shtm](https://junglewise.ai/threats/cve-2021-26828-openplc-scadabr-unrestricted-file-upload-in-view-edit-shtm) (3 Dec 2025)
- [CVE-2025-48633: Google Android privilege escalation in DevicePolicyManagerService](https://junglewise.ai/threats/cve-2025-48633-google-android-privilege-escalation-in-devicepolicymanagerservice) (2 Dec 2025)
- [CVE-2025-48572: Google Android Framework privilege escalation via background activity launch](https://junglewise.ai/threats/cve-2025-48572-google-android-framework-privilege-escalation-via-background) (2 Dec 2025)
- [CVE-2021-26829: OpenPLC ScadaBR stored XSS in system_settings.shtm](https://junglewise.ai/threats/cve-2021-26829-openplc-scadabr-stored-xss-in-system-settings-shtm) (28 Nov 2025)
- [CVE-2025-61757: Oracle Identity Manager missing authentication in REST WebServices](https://junglewise.ai/threats/cve-2025-61757-oracle-identity-manager-missing-authentication-in-rest) (21 Nov 2025)
- [CVE-2025-13223: Google Chrome type confusion in V8 engine](https://junglewise.ai/threats/cve-2025-13223-google-chrome-type-confusion-in-v8-engine) (19 Nov 2025)
- [CVE-2025-58034: Fortinet FortiWeb OS command injection](https://junglewise.ai/threats/cve-2025-58034-fortinet-fortiweb-os-command-injection) (18 Nov 2025)
- [CVE-2025-64446: Fortinet FortiWeb path traversal and command execution](https://junglewise.ai/threats/cve-2025-64446-fortinet-fortiweb-path-traversal-and-command-execution) (14 Nov 2025)
- [CVE-2025-62215: Microsoft Windows Kernel race condition privilege escalation](https://junglewise.ai/threats/cve-2025-62215-microsoft-windows-kernel-race-condition-privilege-escalation) (12 Nov 2025)
- [CVE-2025-9242: WatchGuard Fireware OS out-of-bounds write in iked process](https://junglewise.ai/threats/cve-2025-9242-watchguard-fireware-os-out-of-bounds-write-in-iked-process) (12 Nov 2025)
- [CVE-2025-12480: Gladinet Triofox improper access control in setup pages](https://junglewise.ai/threats/cve-2025-12480-gladinet-triofox-improper-access-control-in-setup-pages) (12 Nov 2025)
- [CVE-2025-21042: Samsung Mobile Devices out-of-bounds write in libimagecodec.quram.so](https://junglewise.ai/threats/cve-2025-21042-samsung-mobile-devices-out-of-bounds-write-in-libimagecodec-quram) (10 Nov 2025)
- [CVE-2025-48703: Control Web Panel OS command injection in filemanager](https://junglewise.ai/threats/cve-2025-48703-control-web-panel-os-command-injection-in-filemanager) (4 Nov 2025)
- [CVE-2025-11371: Gladinet CentreStack and Triofox unauthenticated local file inclusion](https://junglewise.ai/threats/cve-2025-11371-gladinet-centrestack-and-triofox-unauthenticated-local-file) (4 Nov 2025)
- [CVE-2025-24893: XWiki Platform eval injection in SolrSearch](https://junglewise.ai/threats/cve-2025-24893-xwiki-platform-eval-injection-in-solrsearch) (30 Oct 2025)
- [CVE-2025-41244: Broadcom VMware Aria Operations and VMware Tools privilege escalation](https://junglewise.ai/threats/cve-2025-41244-broadcom-vmware-aria-operations-and-vmware-tools-privilege) (30 Oct 2025)
- [CVE-2025-6204: Dassault Systèmes DELMIA Apriso code injection](https://junglewise.ai/threats/cve-2025-6204-dassault-systemes-delmia-apriso-code-injection) (28 Oct 2025)
- [CVE-2025-6205: Dassault Systèmes DELMIA Apriso missing authorization](https://junglewise.ai/threats/cve-2025-6205-dassault-systemes-delmia-apriso-missing-authorization) (28 Oct 2025)
- [CVE-2025-59287: Microsoft Windows Server Update Service deserialization RCE](https://junglewise.ai/threats/cve-2025-59287-microsoft-windows-server-update-service-deserialization-rce) (24 Oct 2025)
- [CVE-2025-54236: Magento Community Edition Improper Input Validation vulnerability](https://junglewise.ai/threats/cve-2025-54236-adobe-commerce-versions-2-4-9-alpha2-2-4-8-p2-2-4-7-p7-2-4-6-p12) (24 Oct 2025)
- [CVE-2025-61932: Motex LANSCOPE Endpoint Manager remote code execution](https://junglewise.ai/threats/cve-2025-61932-motex-lanscope-endpoint-manager-remote-code-execution) (22 Oct 2025)
- [CVE-2025-33073: Microsoft Windows SMB Client improper access control privilege escalation](https://junglewise.ai/threats/cve-2025-33073-microsoft-windows-smb-client-improper-access-control-privilege) (20 Oct 2025)
- [CVE-2022-48503: Apple Multiple Products code execution in JavaScriptCore](https://junglewise.ai/threats/cve-2022-48503-apple-multiple-products-code-execution-in-javascriptcore) (20 Oct 2025)
- [CVE-2025-2746: Kentico Xperience authentication bypass in Staging Sync Server](https://junglewise.ai/threats/cve-2025-2746-kentico-xperience-authentication-bypass-in-staging-sync-server) (20 Oct 2025)
- [CVE-2025-2747: Kentico Xperience CMS authentication bypass in Staging Sync Server](https://junglewise.ai/threats/cve-2025-2747-kentico-xperience-cms-authentication-bypass-in-staging-sync-server) (20 Oct 2025)
- [CVE-2025-61884: Oracle E-Business Suite SSRF in Configurator Runtime UI](https://junglewise.ai/threats/cve-2025-61884-oracle-e-business-suite-ssrf-in-configurator-runtime-ui) (20 Oct 2025)
- [CVE-2025-54253: Adobe Experience Manager Forms remote code execution](https://junglewise.ai/threats/cve-2025-54253-adobe-experience-manager-forms-remote-code-execution) (15 Oct 2025)
- [CVE-2016-7836: Sky SKYSEA Client View improper authentication in management console](https://junglewise.ai/threats/cve-2016-7836-sky-skysea-client-view-improper-authentication-in-management) (14 Oct 2025)
- [CVE-2025-24990: Microsoft Windows untrusted pointer dereference in Agere Modem Driver](https://junglewise.ai/threats/cve-2025-24990-microsoft-windows-untrusted-pointer-dereference-in-agere-modem) (14 Oct 2025)
- [CVE-2025-47827: IGEL OS Secure Boot bypass in igel-flash-driver](https://junglewise.ai/threats/cve-2025-47827-igel-os-secure-boot-bypass-in-igel-flash-driver) (14 Oct 2025)
- [CVE-2025-59230: Microsoft Windows privilege escalation in Remote Access Connection Manager](https://junglewise.ai/threats/cve-2025-59230-microsoft-windows-privilege-escalation-in-remote-access) (14 Oct 2025)
- [CVE-2021-43798: Grafana path traversal](https://junglewise.ai/threats/cve-2021-43798-grafana-path-traversal-in-plugin-assets) (9 Oct 2025)
- [CVE-2025-27915: Synacor Zimbra Collaboration Suite XSS in Classic Web Client](https://junglewise.ai/threats/cve-2025-27915-synacor-zimbra-collaboration-suite-xss-in-classic-web-client) (7 Oct 2025)
- [CVE-2010-3765: Mozilla Multiple Products memory corruption in nsCSSFrameConstructor](https://junglewise.ai/threats/cve-2010-3765-mozilla-multiple-products-memory-corruption-in) (6 Oct 2025)
- [CVE-2010-3962: Microsoft Internet Explorer use-after-free in CSS processing](https://junglewise.ai/threats/cve-2010-3962-microsoft-internet-explorer-use-after-free-in-css-processing) (6 Oct 2025)
- [CVE-2011-3402: Microsoft Windows remote code execution in TrueType font parsing engine](https://junglewise.ai/threats/cve-2011-3402-microsoft-windows-remote-code-execution-in-truetype-font-parsing) (6 Oct 2025)
- [CVE-2013-3918: Microsoft Windows out-of-bounds write in InformationCardSigninHelper ActiveX](https://junglewise.ai/threats/cve-2013-3918-microsoft-windows-out-of-bounds-write-in) (6 Oct 2025)
- [CVE-2021-22555: Linux Kernel heap out-of-bounds write in Netfilter x_tables](https://junglewise.ai/threats/cve-2021-22555-linux-kernel-heap-out-of-bounds-write-in-netfilter-x-tables) (6 Oct 2025)
- [CVE-2021-43226: Microsoft Windows privilege escalation in Common Log File System Driver](https://junglewise.ai/threats/cve-2021-43226-microsoft-windows-privilege-escalation-in-common-log-file-system) (6 Oct 2025)
- [CVE-2025-61882: Oracle E-Business Suite improper authentication in BI Publisher Integration](https://junglewise.ai/threats/cve-2025-61882-oracle-e-business-suite-improper-authentication-in-bi-publisher) (6 Oct 2025)
- [CVE-2014-6278: GNU Bash OS command injection via environment variables](https://junglewise.ai/threats/cve-2014-6278-gnu-bash-os-command-injection-via-environment-variables) (2 Oct 2025)
- [CVE-2015-7755: Juniper ScreenOS improper authentication in SSH and Telnet](https://junglewise.ai/threats/cve-2015-7755-juniper-screenos-improper-authentication-in-ssh-and-telnet) (2 Oct 2025)
- [CVE-2025-21043: Samsung Mobile Devices out-of-bounds write in libimagecodec.quram.so](https://junglewise.ai/threats/cve-2025-21043-samsung-mobile-devices-out-of-bounds-write-in-libimagecodec-quram) (2 Oct 2025)
- [CVE-2025-4008: Smartbedded Meteobridge command injection in web interface](https://junglewise.ai/threats/cve-2025-4008-smartbedded-meteobridge-command-injection-in-web-interface) (2 Oct 2025)
- [CVE-2017-1000353: Deserialization of Untrusted Data in Jenkins](https://junglewise.ai/threats/cve-2017-1000353-jenkins-remote-code-execution-via-cli-java-deserialization) (2 Oct 2025)
- [CVE-2025-10035: Fortra GoAnywhere MFT deserialization in License Servlet](https://junglewise.ai/threats/cve-2025-10035-fortra-goanywhere-mft-deserialization-in-license-servlet) (29 Sep 2025)
- [CVE-2025-20352: Cisco IOS and IOS XE stack overflow in SNMP subsystem](https://junglewise.ai/threats/cve-2025-20352-cisco-ios-and-ios-xe-stack-overflow-in-snmp-subsystem) (29 Sep 2025)
- [CVE-2025-32463: Sudo privilege escalation via untrusted chroot configuration](https://junglewise.ai/threats/cve-2025-32463-sudo-privilege-escalation-via-untrusted-chroot-configuration) (29 Sep 2025)
- [CVE-2025-59689: Libraesva Email Security Gateway command injection via compressed attachment](https://junglewise.ai/threats/cve-2025-59689-libraesva-email-security-gateway-command-injection-via-compressed) (29 Sep 2025)
- [CVE-2021-21311: SSRF in adminer](https://junglewise.ai/threats/cve-2021-21311-adminer-ssrf-in-database-driver-bundling) (29 Sep 2025)
- [CVE-2025-20362: Cisco Secure Firewall ASA and FTD missing authorization in VPN web server](https://junglewise.ai/threats/cve-2025-20362-cisco-secure-firewall-asa-and-ftd-missing-authorization-in-vpn) (25 Sep 2025)
- [CVE-2025-20333: Cisco ASA and FTD buffer overflow in VPN web server](https://junglewise.ai/threats/cve-2025-20333-cisco-asa-and-ftd-buffer-overflow-in-vpn-web-server) (25 Sep 2025)
- [CVE-2025-10585: Google Chrome type confusion in V8 engine](https://junglewise.ai/threats/cve-2025-10585-google-chrome-type-confusion-in-v8-engine) (23 Sep 2025)
- [CVE-2025-5086: Dassault Systèmes DELMIA Apriso deserialization remote code execution](https://junglewise.ai/threats/cve-2025-5086-dassault-systemes-delmia-apriso-deserialization-remote-code) (11 Sep 2025)
- [CVE-2025-38352: Linux Kernel TOCTOU race condition in POSIX CPU timers](https://junglewise.ai/threats/cve-2025-38352-linux-kernel-toctou-race-condition-in-posix-cpu-timers) (4 Sep 2025)
- [CVE-2025-48543: Google Android Runtime use-after-free in system_server](https://junglewise.ai/threats/cve-2025-48543-google-android-runtime-use-after-free-in-system-server) (4 Sep 2025)
- [CVE-2025-53690: Sitecore Multiple Products deserialization of untrusted data](https://junglewise.ai/threats/cve-2025-53690-sitecore-multiple-products-deserialization-of-untrusted-data) (4 Sep 2025)
- [CVE-2023-50224: TP-Link TL-WR841N authentication bypass in httpd service](https://junglewise.ai/threats/cve-2023-50224-tp-link-tl-wr841n-authentication-bypass-in-httpd-service) (3 Sep 2025)
- [CVE-2025-9377: TP-Link Archer C7 and TL-WR841N OS command injection in Parental Control](https://junglewise.ai/threats/cve-2025-9377-tp-link-archer-c7-and-tl-wr841n-os-command-injection-in-parental) (3 Sep 2025)
- [CVE-2020-24363: TP-Link TL-WA855RE missing authentication for factory reset](https://junglewise.ai/threats/cve-2020-24363-tp-link-tl-wa855re-missing-authentication-for-factory-reset) (2 Sep 2025)
- [CVE-2025-55177: Meta WhatsApp incorrect authorization in linked device synchronization](https://junglewise.ai/threats/cve-2025-55177-meta-whatsapp-incorrect-authorization-in-linked-device) (2 Sep 2025)
- [CVE-2025-57819: Sangoma FreePBX auth bypass and RCE in endpoint module](https://junglewise.ai/threats/cve-2025-57819-sangoma-freepbx-auth-bypass-and-rce-in-endpoint-module) (29 Aug 2025)
- [CVE-2025-7775: Citrix NetScaler memory overflow in ADC and Gateway](https://junglewise.ai/threats/cve-2025-7775-citrix-netscaler-memory-overflow-in-adc-and-gateway) (26 Aug 2025)
- [CVE-2024-8068: Citrix Session Recording privilege escalation in NetworkService account](https://junglewise.ai/threats/cve-2024-8068-citrix-session-recording-privilege-escalation-in-networkservice) (25 Aug 2025)
- [CVE-2024-8069: Citrix Session Recording deserialization of untrusted data](https://junglewise.ai/threats/cve-2024-8069-citrix-session-recording-deserialization-of-untrusted-data) (25 Aug 2025)
- [CVE-2025-48384: Git link following vulnerability in submodule handling](https://junglewise.ai/threats/cve-2025-48384-git-link-following-vulnerability-in-submodule-handling) (25 Aug 2025)
- [CVE-2025-43300: Apple iOS, iPadOS, and macOS out-of-bounds write in Image I/O](https://junglewise.ai/threats/cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o) (21 Aug 2025)
- [CVE-2025-54948: Trend Micro Apex One OS command injection in management console](https://junglewise.ai/threats/cve-2025-54948-trend-micro-apex-one-os-command-injection-in-management-console) (18 Aug 2025)
- [CVE-2025-8875: N-able N-Central insecure deserialization](https://junglewise.ai/threats/cve-2025-8875-n-able-n-central-insecure-deserialization) (13 Aug 2025)
- [CVE-2025-8876: N-able N-central command injection](https://junglewise.ai/threats/cve-2025-8876-n-able-n-central-command-injection) (13 Aug 2025)
- [CVE-2007-0671: Microsoft Office Excel remote code execution vulnerability](https://junglewise.ai/threats/cve-2007-0671-microsoft-office-excel-remote-code-execution-vulnerability) (12 Aug 2025)
- [CVE-2013-3893: Microsoft Internet Explorer use after free in mshtml.dll](https://junglewise.ai/threats/cve-2013-3893-microsoft-internet-explorer-use-after-free-in-mshtml-dll) (12 Aug 2025)
- [CVE-2025-8088: RARLAB WinRAR path traversal](https://junglewise.ai/threats/cve-2025-8088-rarlab-winrar-path-traversal) (12 Aug 2025)
- [CVE-2020-25078: D-Link DCS Cameras administrator password disclosure in /config/getuser](https://junglewise.ai/threats/cve-2020-25078-d-link-dcs-cameras-administrator-password-disclosure-in-config) (5 Aug 2025)
- [CVE-2020-25079: D-Link Multiple Cameras command injection in ddns_enc.cgi](https://junglewise.ai/threats/cve-2020-25079-d-link-multiple-cameras-command-injection-in-ddns-enc-cgi) (5 Aug 2025)
- [CVE-2022-40799: D-Link DNR-322L command execution in Backup Config](https://junglewise.ai/threats/cve-2022-40799-d-link-dnr-322l-command-execution-in-backup-config) (5 Aug 2025)
- [CVE-2023-2533: PaperCut NG/MF CSRF in admin interface](https://junglewise.ai/threats/cve-2023-2533-papercut-ng-mf-csrf-in-admin-interface) (28 Jul 2025)
- [CVE-2025-20281: Cisco Identity Services Engine unauthenticated RCE in API](https://junglewise.ai/threats/cve-2025-20281-cisco-identity-services-engine-unauthenticated-rce-in-api) (28 Jul 2025)
- [CVE-2025-20337: Cisco Identity Services Engine injection vulnerability in API](https://junglewise.ai/threats/cve-2025-20337-cisco-identity-services-engine-injection-vulnerability-in-api) (28 Jul 2025)
- [CVE-2025-2775: SysAid On-Prem XXE in Checkin processing functionality](https://junglewise.ai/threats/cve-2025-2775-sysaid-on-prem-xxe-in-checkin-processing-functionality) (22 Jul 2025)
- [CVE-2025-2776: SysAid On-Prem XXE in Server URL processing](https://junglewise.ai/threats/cve-2025-2776-sysaid-on-prem-xxe-in-server-url-processing) (22 Jul 2025)
- [CVE-2025-49704: Microsoft SharePoint code injection vulnerability](https://junglewise.ai/threats/cve-2025-49704-microsoft-sharepoint-code-injection-vulnerability) (22 Jul 2025)
- [CVE-2025-49706: Microsoft SharePoint improper authentication vulnerability](https://junglewise.ai/threats/cve-2025-49706-microsoft-sharepoint-improper-authentication-vulnerability) (22 Jul 2025)
- [CVE-2025-54309: CrushFTP unprotected alternate channel in AS2 validation](https://junglewise.ai/threats/cve-2025-54309-crushftp-unprotected-alternate-channel-in-as2-validation) (22 Jul 2025)
- [CVE-2025-6558: Google Chromium improper input validation in ANGLE and GPU](https://junglewise.ai/threats/cve-2025-6558-google-chromium-improper-input-validation-in-angle-and-gpu) (22 Jul 2025)
- [CVE-2025-53770: Microsoft SharePoint Server deserialization of untrusted data](https://junglewise.ai/threats/cve-2025-53770-microsoft-sharepoint-server-deserialization-of-untrusted-data) (20 Jul 2025)
- [CVE-2025-25257: Fortinet FortiWeb SQL injection](https://junglewise.ai/threats/cve-2025-25257-fortinet-fortiweb-sql-injection) (18 Jul 2025)
- [CVE-2025-47812: Wing FTP Server remote code execution via null byte injection](https://junglewise.ai/threats/cve-2025-47812-wing-ftp-server-remote-code-execution-via-null-byte-injection) (14 Jul 2025)
- [CVE-2025-5777: Citrix NetScaler ADC and Gateway out-of-bounds read](https://junglewise.ai/threats/cve-2025-5777-citrix-netscaler-adc-and-gateway-out-of-bounds-read) (10 Jul 2025)
- [CVE-2014-3931: Multi-Router Looking Glass buffer overflow in fastping.c](https://junglewise.ai/threats/cve-2014-3931-multi-router-looking-glass-buffer-overflow-in-fastping-c) (7 Jul 2025)
- [CVE-2019-9621: Synacor Zimbra Collaboration Suite SSRF in ProxyServlet](https://junglewise.ai/threats/cve-2019-9621-synacor-zimbra-collaboration-suite-ssrf-in-proxyservlet) (7 Jul 2025)
- [CVE-2016-10033: Remote code execution in PHPMailer](https://junglewise.ai/threats/cve-2016-10033-phpmailer-command-injection-in-mailsend-function) (7 Jul 2025)
- [CVE-2019-5418: Path Traversal in Action View](https://junglewise.ai/threats/cve-2019-5418-ruby-on-rails-path-traversal-in-action-view) (7 Jul 2025)
- [CVE-2025-6554: Google Chromium V8 type confusion in JavaScript engine](https://junglewise.ai/threats/cve-2025-6554-google-chromium-v8-type-confusion-in-javascript-engine) (2 Jul 2025)
- [CVE-2025-48927: TeleMessage TM SGNL insecure default configuration in Spring Boot Actuator](https://junglewise.ai/threats/cve-2025-48927-telemessage-tm-sgnl-insecure-default-configuration-in-spring-boot) (1 Jul 2025)
- [CVE-2025-48928: TeleMessage TM SGNL core dump exposure in JSP application](https://junglewise.ai/threats/cve-2025-48928-telemessage-tm-sgnl-core-dump-exposure-in-jsp-application) (1 Jul 2025)
- [CVE-2025-6543: Citrix NetScaler ADC and Gateway buffer overflow](https://junglewise.ai/threats/cve-2025-6543-citrix-netscaler-adc-and-gateway-buffer-overflow) (30 Jun 2025)
- [CVE-2019-6693: Fortinet FortiOS hard-coded cryptographic key in configuration backups](https://junglewise.ai/threats/cve-2019-6693-fortinet-fortios-hard-coded-cryptographic-key-in-configuration) (25 Jun 2025)
- [CVE-2024-0769: D-Link DIR-859 path traversal in hedwig.cgi](https://junglewise.ai/threats/cve-2024-0769-d-link-dir-859-path-traversal-in-hedwig-cgi) (25 Jun 2025)
- [CVE-2024-54085: AMI MegaRAC SPx authentication bypass in Redfish Host Interface](https://junglewise.ai/threats/cve-2024-54085-ami-megarac-spx-authentication-bypass-in-redfish-host-interface) (25 Jun 2025)
- [CVE-2023-0386: Linux Kernel privilege escalation in OverlayFS](https://junglewise.ai/threats/cve-2023-0386-linux-kernel-privilege-escalation-in-overlayfs) (17 Jun 2025)
- [CVE-2023-33538: TP-Link Multiple Routers command injection in WlanNetworkRpm](https://junglewise.ai/threats/cve-2023-33538-tp-link-multiple-routers-command-injection-in-wlannetworkrpm) (16 Jun 2025)
- [CVE-2025-43200: Apple Multiple Products logic issue in iCloud Link media processing](https://junglewise.ai/threats/cve-2025-43200-apple-multiple-products-logic-issue-in-icloud-link-media) (16 Jun 2025)
- [CVE-2025-33053: Microsoft Windows remote code execution in Internet Shortcut files](https://junglewise.ai/threats/cve-2025-33053-microsoft-windows-remote-code-execution-in-internet-shortcut) (10 Jun 2025)
- [CVE-2025-24016: GO-2025-3459 - Remote code execution in Wazuh server in github.com/wazuh/wazuh](https://junglewise.ai/threats/cve-2025-24016-wazuh-server-remote-code-execution-via-unsafe-deserialization) (10 Jun 2025)
- [CVE-2024-42009: Roundcube Webmail XSS in message_body function](https://junglewise.ai/threats/cve-2024-42009-roundcube-webmail-xss-in-message-body-function) (9 Jun 2025)
- [CVE-2025-32433: Erlang Erlang/OTP authentication bypass in SSH Server](https://junglewise.ai/threats/cve-2025-32433-erlang-erlang-otp-authentication-bypass-in-ssh-server) (9 Jun 2025)
- [CVE-2025-5419: Google Chromium V8 out-of-bounds read and write](https://junglewise.ai/threats/cve-2025-5419-google-chromium-v8-out-of-bounds-read-and-write) (5 Jun 2025)
- [CVE-2025-21479: Qualcomm Multiple Chipsets incorrect authorization in GPU micronode](https://junglewise.ai/threats/cve-2025-21479-qualcomm-multiple-chipsets-incorrect-authorization-in-gpu) (3 Jun 2025)
- [CVE-2025-21480: Qualcomm Multiple Chipsets incorrect authorization in GPU micronode](https://junglewise.ai/threats/cve-2025-21480-qualcomm-multiple-chipsets-incorrect-authorization-in-gpu) (3 Jun 2025)
- [CVE-2025-27038: Qualcomm Adreno GPU driver use-after-free vulnerability](https://junglewise.ai/threats/cve-2025-27038-qualcomm-adreno-gpu-driver-use-after-free-vulnerability) (3 Jun 2025)
- [CVE-2023-39780: ASUS RT-AX55 OS command injection in start_apply.htm](https://junglewise.ai/threats/cve-2023-39780-asus-rt-ax55-os-command-injection-in-start-apply-htm) (2 Jun 2025)
- [CVE-2025-3935: ConnectWise ScreenConnect remote code execution via ViewState injection](https://junglewise.ai/threats/cve-2025-3935-connectwise-screenconnect-remote-code-execution-via-viewstate) (2 Jun 2025)
- [CVE-2021-32030: ASUS Routers authentication bypass in administrator interface](https://junglewise.ai/threats/cve-2021-32030-asus-routers-authentication-bypass-in-administrator-interface) (2 Jun 2025)
- [CVE-2025-35939: Craft CMS stores arbitrary content provided by unauthenticated users in session…](https://junglewise.ai/threats/cve-2025-35939-craft-cms-arbitrary-code-injection-in-session-files) (2 Jun 2025)
- [CVE-2024-56145: Craft CMS has potential RCE when PHP `register_argc_argv` config setting is enabled](https://junglewise.ai/threats/cve-2024-56145-craft-cms-code-injection-in-php-register-argc-argv-configuration) (2 Jun 2025)
- [CVE-2025-4632: Samsung MagicINFO 9 Server path traversal](https://junglewise.ai/threats/cve-2025-4632-samsung-magicinfo-9-server-path-traversal) (22 May 2025)
- [CVE-2025-4427: Ivanti Endpoint Manager Mobile authentication bypass in API](https://junglewise.ai/threats/cve-2025-4427-ivanti-endpoint-manager-mobile-authentication-bypass-in-api) (19 May 2025)
- [CVE-2023-38950: ZKTeco BioTime path traversal in iclock API](https://junglewise.ai/threats/cve-2023-38950-zkteco-biotime-path-traversal-in-iclock-api) (19 May 2025)
- [CVE-2024-11182: MDaemon Email Server XSS in HTML email messages](https://junglewise.ai/threats/cve-2024-11182-mdaemon-email-server-xss-in-html-email-messages) (19 May 2025)
- [CVE-2024-27443: Synacor Zimbra Collaboration Suite XSS in CalendarInvite](https://junglewise.ai/threats/cve-2024-27443-synacor-zimbra-collaboration-suite-xss-in-calendarinvite) (19 May 2025)
- [CVE-2025-27920: Srimax Output Messenger directory traversal](https://junglewise.ai/threats/cve-2025-27920-srimax-output-messenger-directory-traversal) (19 May 2025)
- [CVE-2025-4428: Ivanti Endpoint Manager Mobile code injection in API component](https://junglewise.ai/threats/cve-2025-4428-ivanti-endpoint-manager-mobile-code-injection-in-api-component) (19 May 2025)
- [CVE-2024-12987: DrayTek Vigor Routers OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-12987-draytek-vigor-routers-os-command-injection-vulnerability) (15 May 2025)
- [CVE-2025-42999: SAP NetWeaver Deserialization Vulnerability](https://junglewise.ai/threats/cve-2025-42999-sap-netweaver-deserialization-vulnerability) (15 May 2025)
- [CVE-2025-32756: Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2025-32756-fortinet-multiple-products-stack-based-buffer-overflow) (14 May 2025)
- [CVE-2025-30397: Microsoft Windows Scripting Engine Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2025-30397-microsoft-windows-scripting-engine-type-confusion-vulnerability) (13 May 2025)
- [CVE-2025-30400: Microsoft Windows DWM Core Library Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2025-30400-microsoft-windows-dwm-core-library-use-after-free-vulnerability) (13 May 2025)
- [CVE-2025-32701: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2025-32701-microsoft-windows-common-log-file-system-clfs-driver-use-after) (13 May 2025)
- [CVE-2025-32706: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow…](https://junglewise.ai/threats/cve-2025-32706-microsoft-windows-common-log-file-system-clfs-driver-heap-based) (13 May 2025)
- [CVE-2025-32709: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2025-32709-microsoft-windows-ancillary-function-driver-for-winsock-use-after) (13 May 2025)
- [CVE-2025-47729: TeleMessage TM SGNL Hidden Functionality Vulnerability](https://junglewise.ai/threats/cve-2025-47729-telemessage-tm-sgnl-hidden-functionality-vulnerability) (12 May 2025)
- [CVE-2024-11120: GeoVision Devices OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-11120-geovision-devices-os-command-injection-vulnerability) (7 May 2025)
- [CVE-2024-6047: GeoVision Devices OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-6047-geovision-devices-os-command-injection-vulnerability) (7 May 2025)
- [CVE-2025-27363: FreeType Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2025-27363-freetype-out-of-bounds-write-vulnerability) (6 May 2025)
- [CVE-2025-3248: Langflow Unauth RCE](https://junglewise.ai/threats/cve-2025-3248-langflow-missing-authentication-vulnerability) (5 May 2025)
- [CVE-2025-34028: Commvault Command Center Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2025-34028-commvault-command-center-path-traversal-vulnerability) (2 May 2025)
- [CVE-2024-58136: yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key](https://junglewise.ai/threats/cve-2024-58136-yiiframework-yii-improper-protection-of-alternate-path) (2 May 2025)
- [CVE-2023-44221: SonicWall SMA100 Appliances OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2023-44221-sonicwall-sma100-appliances-os-command-injection-vulnerability) (1 May 2025)
- [CVE-2024-38475: Apache HTTP Server Improper Escaping of Output Vulnerability](https://junglewise.ai/threats/cve-2024-38475-apache-http-server-improper-escaping-of-output-vulnerability) (1 May 2025)
- [CVE-2025-31324: SAP NetWeaver Unrestricted File Upload Vulnerability](https://junglewise.ai/threats/cve-2025-31324-sap-netweaver-unrestricted-file-upload-vulnerability) (29 Apr 2025)
- [CVE-2025-1976: Broadcom Brocade Fabric OS Code Injection Vulnerability](https://junglewise.ai/threats/cve-2025-1976-broadcom-brocade-fabric-os-code-injection-vulnerability) (28 Apr 2025)
- [CVE-2025-3928: Commvault Web Server Unspecified Vulnerability](https://junglewise.ai/threats/cve-2025-3928-commvault-web-server-unspecified-vulnerability) (28 Apr 2025)
- [CVE-2025-42599: Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2025-42599-qualitia-active-mail-stack-based-buffer-overflow-vulnerability) (28 Apr 2025)
- [CVE-2025-24054: Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability](https://junglewise.ai/threats/cve-2025-24054-microsoft-windows-ntlm-hash-disclosure-spoofing-vulnerability) (17 Apr 2025)
- [CVE-2025-31200: Apple Multiple Products Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2025-31200-apple-multiple-products-memory-corruption-vulnerability) (17 Apr 2025)
- [CVE-2025-31201: Apple Multiple Products Arbitrary Read and Write Vulnerability](https://junglewise.ai/threats/cve-2025-31201-apple-multiple-products-arbitrary-read-and-write-vulnerability) (17 Apr 2025)
- [CVE-2021-20035: SonicWall SMA100 Appliances OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2021-20035-sonicwall-sma100-appliances-os-command-injection-vulnerability) (16 Apr 2025)
- [CVE-2024-53150: Linux Kernel Out-of-Bounds Read Vulnerability](https://junglewise.ai/threats/cve-2024-53150-linux-kernel-out-of-bounds-read-vulnerability) (9 Apr 2025)
- [CVE-2024-53197: Linux Kernel Out-of-Bounds Access Vulnerability](https://junglewise.ai/threats/cve-2024-53197-linux-kernel-out-of-bounds-access-vulnerability) (9 Apr 2025)
- [CVE-2025-29824: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2025-29824-microsoft-windows-common-log-file-system-clfs-driver-use-after) (8 Apr 2025)
- [CVE-2025-30406: Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability](https://junglewise.ai/threats/cve-2025-30406-gladinet-centrestack-and-triofox-use-of-hard-coded-cryptographic) (8 Apr 2025)
- [CVE-2025-31161: CrushFTP Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2025-31161-crushftp-authentication-bypass-vulnerability) (7 Apr 2025)
- [CVE-2025-22457: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow…](https://junglewise.ai/threats/cve-2025-22457-ivanti-connect-secure-policy-secure-and-zta-gateways-stack-based) (4 Apr 2025)
- [CVE-2025-24813: Apache Tomcat: Potential RCE and/or information disclosure and/or information…](https://junglewise.ai/threats/cve-2025-24813-apache-tomcat-path-equivalence-vulnerability) (1 Apr 2025)
- [CVE-2024-20439: Cisco Smart Licensing Utility Static Credential Vulnerability](https://junglewise.ai/threats/cve-2024-20439-cisco-smart-licensing-utility-static-credential-vulnerability) (31 Mar 2025)
- [CVE-2025-2783: Google Chromium Mojo Sandbox Escape Vulnerability](https://junglewise.ai/threats/cve-2025-2783-google-chromium-mojo-sandbox-escape-vulnerability) (27 Mar 2025)
- [CVE-2019-9874: Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability](https://junglewise.ai/threats/cve-2019-9874-sitecore-cms-and-experience-platform-xp-deserialization) (26 Mar 2025)
- [CVE-2019-9875: Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability](https://junglewise.ai/threats/cve-2019-9875-sitecore-cms-and-experience-platform-xp-deserialization) (26 Mar 2025)
- [CVE-2025-30154: reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability](https://junglewise.ai/threats/cve-2025-30154-reviewdog-action-setup-github-action-embedded-malicious-code) (24 Mar 2025)
- [CVE-2024-48248: NAKIVO Backup and Replication Absolute Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2024-48248-nakivo-backup-and-replication-absolute-path-traversal) (19 Mar 2025)
- [CVE-2017-12637: SAP NetWeaver Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2017-12637-sap-netweaver-directory-traversal-vulnerability) (19 Mar 2025)
- [CVE-2025-1316: Edimax IC-7100 IP Camera OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2025-1316-edimax-ic-7100-ip-camera-os-command-injection-vulnerability) (19 Mar 2025)
- [CVE-2025-24472: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2025-24472-fortinet-fortios-and-fortiproxy-authentication-bypass) (18 Mar 2025)
- [CVE-2025-30066: tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability](https://junglewise.ai/threats/cve-2025-30066-tj-actions-changed-files-github-action-embedded-malicious-code) (18 Mar 2025)
- [CVE-2025-21590: Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability](https://junglewise.ai/threats/cve-2025-21590-juniper-junos-os-improper-isolation-or-compartmentalization) (13 Mar 2025)
- [CVE-2025-24201: Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability) (13 Mar 2025)
- [CVE-2025-24991: Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability](https://junglewise.ai/threats/cve-2025-24991-microsoft-windows-ntfs-out-of-bounds-read-vulnerability) (11 Mar 2025)
- [CVE-2025-24993: Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2025-24993-microsoft-windows-ntfs-heap-based-buffer-overflow-vulnerability) (11 Mar 2025)
- [CVE-2025-26633: Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability](https://junglewise.ai/threats/cve-2025-26633-microsoft-windows-management-console-mmc-improper-neutralization) (11 Mar 2025)
- [CVE-2025-24983: Microsoft Windows Win32k Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2025-24983-microsoft-windows-win32k-use-after-free-vulnerability) (11 Mar 2025)
- [CVE-2025-24984: Microsoft Windows NTFS Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2025-24984-microsoft-windows-ntfs-information-disclosure-vulnerability) (11 Mar 2025)
- [CVE-2025-24985: Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2025-24985-microsoft-windows-fast-fat-file-system-driver-integer-overflow) (11 Mar 2025)
- [CVE-2024-57968: Advantive VeraCore Unrestricted File Upload Vulnerability](https://junglewise.ai/threats/cve-2024-57968-advantive-veracore-unrestricted-file-upload-vulnerability) (10 Mar 2025)
- [CVE-2024-13160: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2024-13160-ivanti-endpoint-manager-epm-absolute-path-traversal-vulnerability) (10 Mar 2025)
- [CVE-2024-13159: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2024-13159-ivanti-endpoint-manager-epm-absolute-path-traversal-vulnerability) (10 Mar 2025)
- [CVE-2024-13161: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2024-13161-ivanti-endpoint-manager-epm-absolute-path-traversal-vulnerability) (10 Mar 2025)
- [CVE-2025-25181: Advantive VeraCore SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2025-25181-advantive-veracore-sql-injection-vulnerability) (10 Mar 2025)
- [CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability](https://junglewise.ai/threats/cve-2025-22225-vmware-esxi-arbitrary-write-vulnerability) (4 Mar 2025)
- [CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2025-22226-vmware-esxi-workstation-and-fusion-information-disclosure) (4 Mar 2025)
- [CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability](https://junglewise.ai/threats/cve-2025-22224-vmware-esxi-and-workstation-toctou-race-condition-vulnerability) (4 Mar 2025)
- [CVE-2024-50302: Linux Kernel Use of Uninitialized Resource Vulnerability](https://junglewise.ai/threats/cve-2024-50302-linux-kernel-use-of-uninitialized-resource-vulnerability) (4 Mar 2025)
- [CVE-2024-4885: Progress WhatsUp Gold Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2024-4885-progress-whatsup-gold-path-traversal-vulnerability) (3 Mar 2025)
- [CVE-2022-43769: Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability](https://junglewise.ai/threats/cve-2022-43769-hitachi-vantara-pentaho-ba-server-special-element-injection) (3 Mar 2025)
- [CVE-2018-8639: Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability](https://junglewise.ai/threats/cve-2018-8639-microsoft-windows-win32k-improper-resource-shutdown-or-release) (3 Mar 2025)
- [CVE-2022-43939: Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability](https://junglewise.ai/threats/cve-2022-43939-hitachi-vantara-pentaho-ba-server-authorization-bypass) (3 Mar 2025)
- [CVE-2023-20118: Cisco Small Business RV Series Routers Command Injection Vulnerability](https://junglewise.ai/threats/cve-2023-20118-cisco-small-business-rv-series-routers-command-injection) (3 Mar 2025)
- [CVE-2023-34192: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2023-34192-synacor-zimbra-collaboration-suite-zcs-cross-site-scripting-xss) (25 Feb 2025)
- [CVE-2024-49035: Microsoft Partner Center Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2024-49035-microsoft-partner-center-improper-access-control-vulnerability) (25 Feb 2025)
- [CVE-2017-3066: Adobe ColdFusion Deserialization Vulnerability](https://junglewise.ai/threats/cve-2017-3066-adobe-coldfusion-deserialization-vulnerability) (24 Feb 2025)
- [CVE-2024-20953: Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability](https://junglewise.ai/threats/cve-2024-20953-oracle-agile-product-lifecycle-management-plm-deserialization) (24 Feb 2025)
- [CVE-2025-24989: Microsoft Power Pages Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2025-24989-microsoft-power-pages-improper-access-control-vulnerability) (21 Feb 2025)
- [CVE-2025-0111: Palo Alto Networks PAN-OS File Read Vulnerability](https://junglewise.ai/threats/cve-2025-0111-palo-alto-networks-pan-os-file-read-vulnerability) (20 Feb 2025)
- [CVE-2025-23209: Craft CMS has a potential RCE with a compromised security key](https://junglewise.ai/threats/cve-2025-23209-craft-cms-code-injection-vulnerability) (20 Feb 2025)
- [CVE-2024-53704: SonicWall SonicOS SSLVPN Improper Authentication Vulnerability](https://junglewise.ai/threats/cve-2024-53704-sonicwall-sonicos-sslvpn-improper-authentication-vulnerability) (18 Feb 2025)
- [CVE-2025-0108: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2025-0108-palo-alto-networks-pan-os-authentication-bypass-vulnerability) (18 Feb 2025)
- [CVE-2024-57727: SimpleHelp Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2024-57727-simplehelp-path-traversal-vulnerability) (13 Feb 2025)
- [CVE-2024-41710: Mitel SIP Phones Argument Injection Vulnerability](https://junglewise.ai/threats/cve-2024-41710-mitel-sip-phones-argument-injection-vulnerability) (12 Feb 2025)
- [CVE-2025-24200: Apple iOS and iPadOS Incorrect Authorization Vulnerability](https://junglewise.ai/threats/cve-2025-24200-apple-ios-and-ipados-incorrect-authorization-vulnerability) (12 Feb 2025)
- [CVE-2024-40891: Zyxel DSL CPE OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-40891-zyxel-dsl-cpe-os-command-injection-vulnerability) (11 Feb 2025)
- [CVE-2024-40890: Zyxel DSL CPE OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-40890-zyxel-dsl-cpe-os-command-injection-vulnerability) (11 Feb 2025)
- [CVE-2025-21391: Microsoft Windows Storage Link Following Vulnerability](https://junglewise.ai/threats/cve-2025-21391-microsoft-windows-storage-link-following-vulnerability) (11 Feb 2025)
- [CVE-2025-21418: Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow…](https://junglewise.ai/threats/cve-2025-21418-microsoft-windows-ancillary-function-driver-for-winsock-heap) (11 Feb 2025)
- [CVE-2025-0994: Trimble Cityworks Deserialization Vulnerability](https://junglewise.ai/threats/cve-2025-0994-trimble-cityworks-deserialization-vulnerability) (7 Feb 2025)
- [CVE-2020-15069: Sophos XG Firewall Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2020-15069-sophos-xg-firewall-buffer-overflow-vulnerability) (6 Feb 2025)
- [CVE-2020-29574: CyberoamOS (CROS) SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2020-29574-cyberoamos-cros-sql-injection-vulnerability) (6 Feb 2025)
- [CVE-2022-23748: Dante Discovery Process Control Vulnerability](https://junglewise.ai/threats/cve-2022-23748-dante-discovery-process-control-vulnerability) (6 Feb 2025)
- [CVE-2024-21413: Microsoft Outlook Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2024-21413-microsoft-outlook-improper-input-validation-vulnerability) (6 Feb 2025)
- [CVE-2025-0411: 7-Zip Mark of the Web Bypass Vulnerability](https://junglewise.ai/threats/cve-2025-0411-7-zip-mark-of-the-web-bypass-vulnerability) (6 Feb 2025)
- [CVE-2024-53104: Linux Kernel Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2024-53104-linux-kernel-out-of-bounds-write-vulnerability) (5 Feb 2025)
- [CVE-2018-19410: Paessler PRTG Network Monitor Local File Inclusion Vulnerability](https://junglewise.ai/threats/cve-2018-19410-paessler-prtg-network-monitor-local-file-inclusion-vulnerability) (4 Feb 2025)
- [CVE-2018-9276: Paessler PRTG Network Monitor OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2018-9276-paessler-prtg-network-monitor-os-command-injection-vulnerability) (4 Feb 2025)
- [CVE-2024-29059: Microsoft .NET Framework Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2024-29059-microsoft-net-framework-information-disclosure-vulnerability) (4 Feb 2025)
- [CVE-2024-45195: Apache OFBiz Forced Browsing Vulnerability](https://junglewise.ai/threats/cve-2024-45195-apache-ofbiz-forced-browsing-vulnerability) (4 Feb 2025)
- [CVE-2025-24085: Apple Multiple Products Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2025-24085-apple-multiple-products-use-after-free-vulnerability) (29 Jan 2025)
- [CVE-2025-23006: SonicWall SMA1000 Appliances Deserialization Vulnerability](https://junglewise.ai/threats/cve-2025-23006-sonicwall-sma1000-appliances-deserialization-vulnerability) (24 Jan 2025)
- [CVE-2020-11023: jQuery DOM manipulation XSS via option elements](https://junglewise.ai/threats/cve-2020-11023-jquery-cross-site-scripting-xss-vulnerability) (23 Jan 2025)
- [CVE-2024-50603: Aviatrix Controllers OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-50603-aviatrix-controllers-os-command-injection-vulnerability) (16 Jan 2025)
- [CVE-2024-55591: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-55591-fortinet-fortios-and-fortiproxy-authentication-bypass) (14 Jan 2025)
- [CVE-2025-21333: Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow…](https://junglewise.ai/threats/cve-2025-21333-microsoft-windows-hyper-v-nt-kernel-integration-vsp-heap-based) (14 Jan 2025)
- [CVE-2025-21334: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2025-21334-microsoft-windows-hyper-v-nt-kernel-integration-vsp-use-after) (14 Jan 2025)
- [CVE-2025-21335: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2025-21335-microsoft-windows-hyper-v-nt-kernel-integration-vsp-use-after) (14 Jan 2025)
- [CVE-2023-48365: Qlik Sense HTTP Tunneling Vulnerability](https://junglewise.ai/threats/cve-2023-48365-qlik-sense-http-tunneling-vulnerability) (13 Jan 2025)
- [CVE-2024-12686: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command…](https://junglewise.ai/threats/cve-2024-12686-beyondtrust-privileged-remote-access-pra-and-remote-support-rs-os) (13 Jan 2025)
- [CVE-2025-0282: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow…](https://junglewise.ai/threats/cve-2025-0282-ivanti-connect-secure-policy-secure-and-zta-gateways-stack-based) (8 Jan 2025)
- [CVE-2020-2883: Oracle WebLogic Server Unspecified Vulnerability](https://junglewise.ai/threats/cve-2020-2883-oracle-weblogic-server-unspecified-vulnerability) (7 Jan 2025)
- [CVE-2024-41713: Mitel MiCollab Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2024-41713-mitel-micollab-path-traversal-vulnerability) (7 Jan 2025)
- [CVE-2024-55550: Mitel MiCollab Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2024-55550-mitel-micollab-path-traversal-vulnerability) (7 Jan 2025)
- [CVE-2024-3393: Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability](https://junglewise.ai/threats/cve-2024-3393-palo-alto-networks-pan-os-malicious-dns-packet-vulnerability) (30 Dec 2024)
- [CVE-2021-44207: Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability](https://junglewise.ai/threats/cve-2021-44207-acclaim-systems-usaherds-use-of-hard-coded-credentials) (23 Dec 2024)
- [CVE-2024-12356: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command…](https://junglewise.ai/threats/cve-2024-12356-beyondtrust-privileged-remote-access-pra-and-remote-support-rs) (19 Dec 2024)
- [CVE-2018-14933: NUUO NVRmini Devices OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2018-14933-nuuo-nvrmini-devices-os-command-injection-vulnerability) (18 Dec 2024)
- [CVE-2019-11001: Reolink Multiple IP Cameras OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2019-11001-reolink-multiple-ip-cameras-os-command-injection-vulnerability) (18 Dec 2024)
- [CVE-2021-40407: Reolink RLC-410W IP Camera OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2021-40407-reolink-rlc-410w-ip-camera-os-command-injection-vulnerability) (18 Dec 2024)
- [CVE-2022-23227: NUUO NVRmini2 Devices Missing Authentication Vulnerability](https://junglewise.ai/threats/cve-2022-23227-nuuo-nvrmini2-devices-missing-authentication-vulnerability) (18 Dec 2024)
- [CVE-2024-55956: Cleo Multiple Products Unauthenticated File Upload Vulnerability](https://junglewise.ai/threats/cve-2024-55956-cleo-multiple-products-unauthenticated-file-upload-vulnerability) (17 Dec 2024)
- [CVE-2024-20767: Adobe ColdFusion Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2024-20767-adobe-coldfusion-improper-access-control-vulnerability) (16 Dec 2024)
- [CVE-2024-35250: Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability](https://junglewise.ai/threats/cve-2024-35250-microsoft-windows-kernel-mode-driver-untrusted-pointer) (16 Dec 2024)
- [CVE-2024-50623: Cleo Multiple Products Unrestricted File Upload Vulnerability](https://junglewise.ai/threats/cve-2024-50623-cleo-multiple-products-unrestricted-file-upload-vulnerability) (13 Dec 2024)
- [CVE-2024-49138: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow…](https://junglewise.ai/threats/cve-2024-49138-microsoft-windows-common-log-file-system-clfs-driver-heap-based) (10 Dec 2024)
- [CVE-2024-51378: CyberPanel Incorrect Default Permissions Vulnerability](https://junglewise.ai/threats/cve-2024-51378-cyberpanel-incorrect-default-permissions-vulnerability) (4 Dec 2024)
- [CVE-2023-45727: North Grid Proself Improper Restriction of XML External Entity (XXE) Reference…](https://junglewise.ai/threats/cve-2023-45727-north-grid-proself-improper-restriction-of-xml-external-entity) (3 Dec 2024)
- [CVE-2024-11667: Zyxel Multiple Firewalls Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2024-11667-zyxel-multiple-firewalls-path-traversal-vulnerability) (3 Dec 2024)
- [CVE-2024-11680: ProjectSend Improper Authentication Vulnerability](https://junglewise.ai/threats/cve-2024-11680-projectsend-improper-authentication-vulnerability) (3 Dec 2024)
- [CVE-2023-28461: Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function…](https://junglewise.ai/threats/cve-2023-28461-array-networks-ag-and-vxag-arrayos-missing-authentication-for) (25 Nov 2024)
- [CVE-2024-21287: Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization…](https://junglewise.ai/threats/cve-2024-21287-oracle-agile-product-lifecycle-management-plm-incorrect) (21 Nov 2024)
- [CVE-2024-44308: Apple Multiple Products Code Execution Vulnerability](https://junglewise.ai/threats/cve-2024-44308-apple-multiple-products-code-execution-vulnerability) (21 Nov 2024)
- [CVE-2024-44309: Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2024-44309-apple-multiple-products-cross-site-scripting-xss-vulnerability) (21 Nov 2024)
- [CVE-2024-38812: VMware vCenter Server Heap-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2024-38812-vmware-vcenter-server-heap-based-buffer-overflow-vulnerability) (20 Nov 2024)
- [CVE-2024-38813: VMware vCenter Server Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2024-38813-vmware-vcenter-server-privilege-escalation-vulnerability) (20 Nov 2024)
- [CVE-2024-0012: Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-0012-palo-alto-networks-pan-os-management-interface-authentication) (18 Nov 2024)
- [CVE-2024-1212: Progress Kemp LoadMaster OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-1212-progress-kemp-loadmaster-os-command-injection-vulnerability) (18 Nov 2024)
- [CVE-2024-9474: Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-9474-palo-alto-networks-pan-os-management-interface-os-command) (18 Nov 2024)
- [CVE-2024-9463: Palo Alto Networks Expedition OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-9463-palo-alto-networks-expedition-os-command-injection-vulnerability) (14 Nov 2024)
- [CVE-2024-9465: Palo Alto Networks Expedition SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2024-9465-palo-alto-networks-expedition-sql-injection-vulnerability) (14 Nov 2024)
- [CVE-2014-2120: Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2014-2120-cisco-adaptive-security-appliance-asa-cross-site-scripting-xss) (12 Nov 2024)
- [CVE-2021-26086: Atlassian Jira Server and Data Center Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2021-26086-atlassian-jira-server-and-data-center-path-traversal) (12 Nov 2024)
- [CVE-2021-41277: Metabase GeoJSON API Local File Inclusion Vulnerability](https://junglewise.ai/threats/cve-2021-41277-metabase-geojson-api-local-file-inclusion-vulnerability) (12 Nov 2024)
- [CVE-2024-43451: Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability](https://junglewise.ai/threats/cve-2024-43451-microsoft-windows-ntlmv2-hash-disclosure-spoofing-vulnerability) (12 Nov 2024)
- [CVE-2024-49039: Microsoft Windows Task Scheduler Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2024-49039-microsoft-windows-task-scheduler-privilege-escalation) (12 Nov 2024)
- [CVE-2019-16278: Nostromo nhttpd Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2019-16278-nostromo-nhttpd-directory-traversal-vulnerability) (7 Nov 2024)
- [CVE-2024-43093: Android Framework Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2024-43093-android-framework-privilege-escalation-vulnerability) (7 Nov 2024)
- [CVE-2024-51567: CyberPanel Incorrect Default Permissions Vulnerability](https://junglewise.ai/threats/cve-2024-51567-cyberpanel-incorrect-default-permissions-vulnerability) (7 Nov 2024)
- [CVE-2024-5910: Palo Alto Networks Expedition Missing Authentication Vulnerability](https://junglewise.ai/threats/cve-2024-5910-palo-alto-networks-expedition-missing-authentication-vulnerability) (7 Nov 2024)
- [CVE-2024-8956: PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-8956-ptzoptics-pt30x-sdi-ndi-cameras-authentication-bypass) (4 Nov 2024)
- [CVE-2024-8957: PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-8957-ptzoptics-pt30x-sdi-ndi-cameras-os-command-injection-vulnerability) (4 Nov 2024)
- [CVE-2024-20481: Cisco ASA and FTD Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2024-20481-cisco-asa-and-ftd-denial-of-service-vulnerability) (24 Oct 2024)
- [CVE-2024-37383: RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2024-37383-roundcube-webmail-cross-site-scripting-xss-vulnerability) (24 Oct 2024)
- [CVE-2024-47575: Fortinet FortiManager Missing Authentication Vulnerability](https://junglewise.ai/threats/cve-2024-47575-fortinet-fortimanager-missing-authentication-vulnerability) (23 Oct 2024)
- [CVE-2024-38094: Microsoft SharePoint Deserialization Vulnerability](https://junglewise.ai/threats/cve-2024-38094-microsoft-sharepoint-deserialization-vulnerability) (22 Oct 2024)
- [CVE-2024-9537: ScienceLogic SL1 Unspecified Vulnerability](https://junglewise.ai/threats/cve-2024-9537-sciencelogic-sl1-unspecified-vulnerability) (21 Oct 2024)
- [CVE-2024-40711: Veeam Backup and Replication Deserialization Vulnerability](https://junglewise.ai/threats/cve-2024-40711-veeam-backup-and-replication-deserialization-vulnerability) (17 Oct 2024)
- [CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability](https://junglewise.ai/threats/cve-2024-28987-solarwinds-web-help-desk-hardcoded-credential-vulnerability) (15 Oct 2024)
- [CVE-2024-30088: Microsoft Windows Kernel TOCTOU Race Condition Vulnerability](https://junglewise.ai/threats/cve-2024-30088-microsoft-windows-kernel-toctou-race-condition-vulnerability) (15 Oct 2024)
- [CVE-2024-9680: Mozilla Firefox Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2024-9680-mozilla-firefox-use-after-free-vulnerability) (15 Oct 2024)
- [CVE-2024-23113: Fortinet Multiple Products Format String Vulnerability](https://junglewise.ai/threats/cve-2024-23113-fortinet-multiple-products-format-string-vulnerability) (9 Oct 2024)
- [CVE-2024-9379: Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2024-9379-ivanti-cloud-services-appliance-csa-sql-injection-vulnerability) (9 Oct 2024)
- [CVE-2024-9380: Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-9380-ivanti-cloud-services-appliance-csa-os-command-injection) (9 Oct 2024)
- [CVE-2024-43047: Qualcomm Multiple Chipsets Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2024-43047-qualcomm-multiple-chipsets-use-after-free-vulnerability) (8 Oct 2024)
- [CVE-2024-43572: Microsoft Windows Management Console Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2024-43572-microsoft-windows-management-console-remote-code-execution) (8 Oct 2024)
- [CVE-2024-43573: Microsoft Windows MSHTML Platform Spoofing Vulnerability](https://junglewise.ai/threats/cve-2024-43573-microsoft-windows-mshtml-platform-spoofing-vulnerability) (8 Oct 2024)
- [CVE-2024-45519: Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability](https://junglewise.ai/threats/cve-2024-45519-synacor-zimbra-collaboration-suite-zcs-command-execution) (3 Oct 2024)
- [CVE-2024-29824: Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2024-29824-ivanti-endpoint-manager-epm-sql-injection-vulnerability) (2 Oct 2024)
- [CVE-2019-0344: SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2019-0344-sap-commerce-cloud-deserialization-of-untrusted-data-vulnerability) (30 Sep 2024)
- [CVE-2020-15415: DrayTek Multiple Vigor Routers OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2020-15415-draytek-multiple-vigor-routers-os-command-injection-vulnerability) (30 Sep 2024)
- [CVE-2023-25280: D-Link DIR-820 Router OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2023-25280-d-link-dir-820-router-os-command-injection-vulnerability) (30 Sep 2024)
- [CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-7593-ivanti-virtual-traffic-manager-authentication-bypass-vulnerability) (24 Sep 2024)
- [CVE-2024-8963: Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2024-8963-ivanti-cloud-services-appliance-csa-path-traversal-vulnerability) (19 Sep 2024)
- [CVE-2020-0618: Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-0618-microsoft-sql-server-reporting-services-remote-code-execution) (18 Sep 2024)
- [CVE-2020-14644: Oracle WebLogic Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-14644-oracle-weblogic-server-remote-code-execution-vulnerability) (18 Sep 2024)
- [CVE-2022-21445: Oracle ADF Faces Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2022-21445-oracle-adf-faces-deserialization-of-untrusted-data-vulnerability) (18 Sep 2024)
- [CVE-2024-27348: Apache HugeGraph-Server: Command execution in gremlin](https://junglewise.ai/threats/cve-2024-27348-apache-hugegraph-server-improper-access-control-vulnerability) (18 Sep 2024)
- [CVE-2013-0643: Adobe Flash Player Incorrect Default Permissions Vulnerability](https://junglewise.ai/threats/cve-2013-0643-adobe-flash-player-incorrect-default-permissions-vulnerability) (17 Sep 2024)
- [CVE-2013-0648: Adobe Flash Player Code Execution Vulnerability](https://junglewise.ai/threats/cve-2013-0648-adobe-flash-player-code-execution-vulnerability) (17 Sep 2024)
- [CVE-2014-0497: Adobe Flash Player Integer Underflow Vulnerablity](https://junglewise.ai/threats/cve-2014-0497-adobe-flash-player-integer-underflow-vulnerablity) (17 Sep 2024)
- [CVE-2014-0502: Adobe Flash Player Double Free Vulnerablity](https://junglewise.ai/threats/cve-2014-0502-adobe-flash-player-double-free-vulnerablity) (17 Sep 2024)
- [CVE-2024-43461: Microsoft Windows MSHTML Platform Spoofing Vulnerability](https://junglewise.ai/threats/cve-2024-43461-microsoft-windows-mshtml-platform-spoofing-vulnerability) (16 Sep 2024)
- [CVE-2024-6670: Progress WhatsUp Gold SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2024-6670-progress-whatsup-gold-sql-injection-vulnerability) (16 Sep 2024)
- [CVE-2024-8190: Ivanti Cloud Services Appliance OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-8190-ivanti-cloud-services-appliance-os-command-injection-vulnerability) (13 Sep 2024)
- [CVE-2024-38014: Microsoft Windows Installer Improper Privilege Management Vulnerability](https://junglewise.ai/threats/cve-2024-38014-microsoft-windows-installer-improper-privilege-management) (10 Sep 2024)
- [CVE-2024-38217: Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability](https://junglewise.ai/threats/cve-2024-38217-microsoft-windows-mark-of-the-web-motw-protection-mechanism) (10 Sep 2024)
- [CVE-2024-38226: Microsoft Publisher Protection Mechanism Failure Vulnerability](https://junglewise.ai/threats/cve-2024-38226-microsoft-publisher-protection-mechanism-failure-vulnerability) (10 Sep 2024)
- [CVE-2016-3714: ImageMagick Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2016-3714-imagemagick-improper-input-validation-vulnerability) (9 Sep 2024)
- [CVE-2017-1000253: Linux Kernel PIE Stack Buffer Corruption Vulnerability](https://junglewise.ai/threats/cve-2017-1000253-linux-kernel-pie-stack-buffer-corruption-vulnerability) (9 Sep 2024)
- [CVE-2024-40766: SonicWall SonicOS Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2024-40766-sonicwall-sonicos-improper-access-control-vulnerability) (9 Sep 2024)
- [CVE-2021-20123: Draytek VigorConnect Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2021-20123-draytek-vigorconnect-path-traversal-vulnerability) (3 Sep 2024)
- [CVE-2021-20124: Draytek VigorConnect Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2021-20124-draytek-vigorconnect-path-traversal-vulnerability) (3 Sep 2024)
- [CVE-2024-7262: Kingsoft WPS Office Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2024-7262-kingsoft-wps-office-path-traversal-vulnerability) (3 Sep 2024)
- [CVE-2024-7965: Google Chromium V8 Inappropriate Implementation Vulnerability](https://junglewise.ai/threats/cve-2024-7965-google-chromium-v8-inappropriate-implementation-vulnerability) (28 Aug 2024)
- [CVE-2024-38856: Apache OFBiz Incorrect Authorization Vulnerability](https://junglewise.ai/threats/cve-2024-38856-apache-ofbiz-incorrect-authorization-vulnerability) (27 Aug 2024)
- [CVE-2024-7971: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2024-7971-google-chromium-v8-type-confusion-vulnerability) (26 Aug 2024)
- [CVE-2024-39717: Versa Director Dangerous File Type Upload Vulnerability](https://junglewise.ai/threats/cve-2024-39717-versa-director-dangerous-file-type-upload-vulnerability) (23 Aug 2024)
- [CVE-2021-31196: Microsoft Exchange Server Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2021-31196-microsoft-exchange-server-information-disclosure-vulnerability) (21 Aug 2024)
- [CVE-2021-33044: Dahua IP Camera Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2021-33044-dahua-ip-camera-authentication-bypass-vulnerability) (21 Aug 2024)
- [CVE-2021-33045: Dahua IP Camera Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2021-33045-dahua-ip-camera-authentication-bypass-vulnerability) (21 Aug 2024)
- [CVE-2022-0185: Linux Kernel Heap-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2022-0185-linux-kernel-heap-based-buffer-overflow-vulnerability) (21 Aug 2024)
- [CVE-2024-23897: Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE](https://junglewise.ai/threats/cve-2024-23897-jenkins-command-line-interface-cli-path-traversal-vulnerability) (19 Aug 2024)
- [CVE-2024-28986: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2024-28986-solarwinds-web-help-desk-deserialization-of-untrusted-data) (15 Aug 2024)
- [CVE-2024-38106: Microsoft Windows Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2024-38106-microsoft-windows-kernel-privilege-escalation-vulnerability) (13 Aug 2024)
- [CVE-2024-38107: Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2024-38107-microsoft-windows-power-dependency-coordinator-privilege) (13 Aug 2024)
- [CVE-2024-38178: Microsoft Windows Scripting Engine Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2024-38178-microsoft-windows-scripting-engine-memory-corruption) (13 Aug 2024)
- [CVE-2024-38189: Microsoft Project Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2024-38189-microsoft-project-remote-code-execution-vulnerability) (13 Aug 2024)
- [CVE-2024-38193: Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation…](https://junglewise.ai/threats/cve-2024-38193-microsoft-windows-ancillary-function-driver-for-winsock-privilege) (13 Aug 2024)
- [CVE-2024-38213: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-38213-microsoft-windows-smartscreen-security-feature-bypass) (13 Aug 2024)
- [CVE-2024-32113: Apache OFBiz Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2024-32113-apache-ofbiz-path-traversal-vulnerability) (7 Aug 2024)
- [CVE-2024-36971: Android Kernel Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2024-36971-android-kernel-remote-code-execution-vulnerability) (7 Aug 2024)
- [CVE-2018-0824: Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2018-0824-microsoft-com-for-windows-deserialization-of-untrusted-data) (5 Aug 2024)
- [CVE-2024-37085: VMware ESXi Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-37085-vmware-esxi-authentication-bypass-vulnerability) (30 Jul 2024)
- [CVE-2023-45249: Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability](https://junglewise.ai/threats/cve-2023-45249-acronis-cyber-infrastructure-aci-insecure-default-password) (29 Jul 2024)
- [CVE-2024-4879: ServiceNow Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2024-4879-servicenow-improper-input-validation-vulnerability) (29 Jul 2024)
- [CVE-2024-5217: ServiceNow Incomplete List of Disallowed Inputs Vulnerability](https://junglewise.ai/threats/cve-2024-5217-servicenow-incomplete-list-of-disallowed-inputs-vulnerability) (29 Jul 2024)
- [CVE-2012-4792: Microsoft Internet Explorer Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2012-4792-microsoft-internet-explorer-use-after-free-vulnerability) (23 Jul 2024)
- [CVE-2024-39891: Twilio Authy Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2024-39891-twilio-authy-information-disclosure-vulnerability) (23 Jul 2024)
- [CVE-2022-22948: VMware vCenter Server Incorrect Default File Permissions Vulnerability](https://junglewise.ai/threats/cve-2022-22948-vmware-vcenter-server-incorrect-default-file-permissions) (17 Jul 2024)
- [CVE-2024-28995: SolarWinds Serv-U Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2024-28995-solarwinds-serv-u-path-traversal-vulnerability) (17 Jul 2024)
- [CVE-2024-34102: Magento Open Source affected by an Improper Restriction of XML External Entity…](https://junglewise.ai/threats/cve-2024-34102-adobe-commerce-and-magento-open-source-improper-restriction-of) (17 Jul 2024)
- [CVE-2024-36401: Remote Code Execution (RCE) vulnerability in geoserver](https://junglewise.ai/threats/cve-2024-36401-osgeo-geoserver-geotools-eval-injection-vulnerability) (15 Jul 2024)
- [CVE-2024-23692: Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a…](https://junglewise.ai/threats/cve-2024-23692-rejetto-http-file-server-improper-neutralization-of-special) (9 Jul 2024)
- [CVE-2024-38080: Microsoft Windows Hyper-V Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2024-38080-microsoft-windows-hyper-v-privilege-escalation-vulnerability) (9 Jul 2024)
- [CVE-2024-38112: Microsoft Windows MSHTML Platform Spoofing Vulnerability](https://junglewise.ai/threats/cve-2024-38112-microsoft-windows-mshtml-platform-spoofing-vulnerability) (9 Jul 2024)
- [CVE-2024-20399: Cisco NX-OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-20399-cisco-nx-os-command-injection-vulnerability) (2 Jul 2024)
- [CVE-2020-13965: Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2020-13965-roundcube-webmail-cross-site-scripting-xss-vulnerability) (26 Jun 2024)
- [CVE-2022-2586: Linux Kernel Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2022-2586-linux-kernel-use-after-free-vulnerability) (26 Jun 2024)
- [CVE-2022-24816: Improper Control of Generation of Code ('Code Injection') in jai-ext](https://junglewise.ai/threats/cve-2022-24816-osgeo-geoserver-jai-ext-code-injection-vulnerability) (26 Jun 2024)
- [CVE-2024-26169: Microsoft Windows Error Reporting Service Improper Privilege Management…](https://junglewise.ai/threats/cve-2024-26169-microsoft-windows-error-reporting-service-improper-privilege) (13 Jun 2024)
- [CVE-2024-32896: Android Pixel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2024-32896-android-pixel-privilege-escalation-vulnerability) (13 Jun 2024)
- [CVE-2024-4358: Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability](https://junglewise.ai/threats/cve-2024-4358-progress-telerik-report-server-authentication-bypass-by-spoofing) (13 Jun 2024)
- [CVE-2024-4577: PHP-CGI OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-4577-php-cgi-os-command-injection-vulnerability) (12 Jun 2024)
- [CVE-2024-4610: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2024-4610-arm-mali-gpu-kernel-driver-use-after-free-vulnerability) (12 Jun 2024)
- [CVE-2017-3506: Oracle WebLogic Server OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2017-3506-oracle-weblogic-server-os-command-injection-vulnerability) (3 Jun 2024)
- [CVE-2024-1086: Linux Kernel Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2024-1086-linux-kernel-use-after-free-vulnerability) (30 May 2024)
- [CVE-2024-24919: Check Point Quantum Security Gateways Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2024-24919-check-point-quantum-security-gateways-information-disclosure) (30 May 2024)
- [CVE-2024-4978: Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability](https://junglewise.ai/threats/cve-2024-4978-justice-av-solutions-javs-viewer-installer-embedded-malicious-code) (29 May 2024)
- [CVE-2024-5274: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2024-5274-google-chromium-v8-type-confusion-vulnerability) (28 May 2024)
- [CVE-2020-17519: Path Traversal in Apache Flink](https://junglewise.ai/threats/cve-2020-17519-apache-flink-improper-access-control-vulnerability) (23 May 2024)
- [CVE-2023-43208: NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2023-43208-nextgen-healthcare-mirth-connect-deserialization-of-untrusted) (20 May 2024)
- [CVE-2024-4947: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2024-4947-google-chromium-v8-type-confusion-vulnerability) (20 May 2024)
- [CVE-2014-100005: D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability](https://junglewise.ai/threats/cve-2014-100005-d-link-dir-600-router-cross-site-request-forgery-csrf) (16 May 2024)
- [CVE-2021-40655: D-Link DIR-605 Router Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2021-40655-d-link-dir-605-router-information-disclosure-vulnerability) (16 May 2024)
- [CVE-2024-4761: Google Chromium V8 Out-of-Bounds Memory Write Vulnerability](https://junglewise.ai/threats/cve-2024-4761-google-chromium-v8-out-of-bounds-memory-write-vulnerability) (16 May 2024)
- [CVE-2024-30040: Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-30040-microsoft-windows-mshtml-platform-security-feature-bypass) (14 May 2024)
- [CVE-2024-30051: Microsoft DWM Core Library Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2024-30051-microsoft-dwm-core-library-privilege-escalation-vulnerability) (14 May 2024)
- [CVE-2024-4671: Google Chromium Visuals Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2024-4671-google-chromium-visuals-use-after-free-vulnerability) (13 May 2024)
- [CVE-2023-7028: GitLab Community and Enterprise Editions Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2023-7028-gitlab-community-and-enterprise-editions-improper-access-control) (1 May 2024)
- [CVE-2024-29988: Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-29988-microsoft-smartscreen-prompt-security-feature-bypass) (30 Apr 2024)
- [CVE-2024-20353: Cisco ASA and FTD Denial of Service Vulnerability](https://junglewise.ai/threats/cve-2024-20353-cisco-asa-and-ftd-denial-of-service-vulnerability) (24 Apr 2024)
- [CVE-2024-20359: Cisco ASA and FTD Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2024-20359-cisco-asa-and-ftd-privilege-escalation-vulnerability) (24 Apr 2024)
- [CVE-2024-4040: CrushFTP VFS Sandbox Escape Vulnerability](https://junglewise.ai/threats/cve-2024-4040-crushftp-vfs-sandbox-escape-vulnerability) (24 Apr 2024)
- [CVE-2022-38028: Microsoft Windows Print Spooler Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-38028-microsoft-windows-print-spooler-privilege-escalation) (23 Apr 2024)
- [CVE-2024-3400: Palo Alto Networks PAN-OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-3400-palo-alto-networks-pan-os-command-injection-vulnerability) (12 Apr 2024)
- [CVE-2024-3272: D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability](https://junglewise.ai/threats/cve-2024-3272-d-link-multiple-nas-devices-use-of-hard-coded-credentials) (11 Apr 2024)
- [CVE-2024-3273: D-Link Multiple NAS Devices Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-3273-d-link-multiple-nas-devices-command-injection-vulnerability) (11 Apr 2024)
- [CVE-2024-29745: Android Pixel Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2024-29745-android-pixel-information-disclosure-vulnerability) (4 Apr 2024)
- [CVE-2024-29748: Android Pixel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2024-29748-android-pixel-privilege-escalation-vulnerability) (4 Apr 2024)
- [CVE-2023-24955: Microsoft SharePoint Server Code Injection Vulnerability](https://junglewise.ai/threats/cve-2023-24955-microsoft-sharepoint-server-code-injection-vulnerability) (26 Mar 2024)
- [CVE-2019-7256: Nice Linear eMerge E3-Series OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2019-7256-nice-linear-emerge-e3-series-os-command-injection-vulnerability) (25 Mar 2024)
- [CVE-2021-44529: Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection…](https://junglewise.ai/threats/cve-2021-44529-ivanti-endpoint-manager-cloud-service-appliance-epm-csa-code) (25 Mar 2024)
- [CVE-2023-48788: Fortinet FortiClient EMS SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2023-48788-fortinet-forticlient-ems-sql-injection-vulnerability) (25 Mar 2024)
- [CVE-2024-27198: JetBrains TeamCity Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-27198-jetbrains-teamcity-authentication-bypass-vulnerability) (7 Mar 2024)
- [CVE-2024-23225: Apple Multiple Products Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2024-23225-apple-multiple-products-memory-corruption-vulnerability) (6 Mar 2024)
- [CVE-2024-23296: Apple Multiple Products Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2024-23296-apple-multiple-products-memory-corruption-vulnerability) (6 Mar 2024)
- [CVE-2021-36380: Sunhillo SureLine OS Command Injection Vulnerablity](https://junglewise.ai/threats/cve-2021-36380-sunhillo-sureline-os-command-injection-vulnerablity) (5 Mar 2024)
- [CVE-2023-21237: Android Pixel Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2023-21237-android-pixel-information-disclosure-vulnerability) (5 Mar 2024)
- [CVE-2024-21338: Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control…](https://junglewise.ai/threats/cve-2024-21338-microsoft-windows-kernel-exposed-ioctl-with-insufficient-access) (4 Mar 2024)
- [CVE-2023-29360: Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability](https://junglewise.ai/threats/cve-2023-29360-microsoft-streaming-service-untrusted-pointer-dereference) (29 Feb 2024)
- [CVE-2024-1709: ConnectWise ScreenConnect Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-1709-connectwise-screenconnect-authentication-bypass-vulnerability) (22 Feb 2024)
- [CVE-2020-3259: SafePay ransomware campaign](https://junglewise.ai/threats/cve-2020-3259-cisco-asa-and-ftd-information-disclosure-vulnerability) (15 Feb 2024)
- [CVE-2024-21410: Microsoft Exchange Server Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2024-21410-microsoft-exchange-server-privilege-escalation-vulnerability) (15 Feb 2024)
- [CVE-2024-21351: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-21351-microsoft-windows-smartscreen-security-feature-bypass) (13 Feb 2024)
- [CVE-2024-21412: Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-21412-microsoft-windows-internet-shortcut-files-security-feature-bypass) (13 Feb 2024)
- [CVE-2023-43770: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2023-43770-roundcube-webmail-persistent-cross-site-scripting-xss) (12 Feb 2024)
- [CVE-2024-21762: Fortinet FortiOS Out-of-Bound Write Vulnerability](https://junglewise.ai/threats/cve-2024-21762-fortinet-fortios-out-of-bound-write-vulnerability) (9 Feb 2024)
- [CVE-2023-4762: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2023-4762-google-chromium-v8-type-confusion-vulnerability) (6 Feb 2024)
- [CVE-2022-48618: Apple Multiple Products Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2022-48618-apple-multiple-products-memory-corruption-vulnerability) (31 Jan 2024)
- [CVE-2024-21893: Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery…](https://junglewise.ai/threats/cve-2024-21893-ivanti-connect-secure-policy-secure-and-neurons-server-side) (31 Jan 2024)
- [CVE-2023-22527: Atlassian Confluence Data Center and Server Template Injection Vulnerability](https://junglewise.ai/threats/cve-2023-22527-atlassian-confluence-data-center-and-server-template-injection) (24 Jan 2024)
- [CVE-2024-23222: Apple Multiple Products WebKit Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2024-23222-apple-multiple-products-webkit-type-confusion-vulnerability) (23 Jan 2024)
- [CVE-2023-34048: VMware vCenter Server Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2023-34048-vmware-vcenter-server-out-of-bounds-write-vulnerability) (22 Jan 2024)
- [CVE-2023-35082: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass…](https://junglewise.ai/threats/cve-2023-35082-ivanti-endpoint-manager-mobile-epmm-and-mobileiron-core) (18 Jan 2024)
- [CVE-2023-6549: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-6549-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow) (17 Jan 2024)
- [CVE-2024-0519: Google Chromium V8 Out-of-Bounds Memory Access Vulnerability](https://junglewise.ai/threats/cve-2024-0519-google-chromium-v8-out-of-bounds-memory-access-vulnerability) (17 Jan 2024)
- [CVE-2023-6548: Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability](https://junglewise.ai/threats/cve-2023-6548-citrix-netscaler-adc-and-netscaler-gateway-code-injection) (17 Jan 2024)
- [CVE-2018-15133: Laravel Framework RCE Vulnerability](https://junglewise.ai/threats/cve-2018-15133-laravel-deserialization-of-untrusted-data-vulnerability) (16 Jan 2024)
- [CVE-2024-21887: Ivanti Connect Secure and Policy Secure Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-21887-ivanti-connect-secure-and-policy-secure-command-injection) (10 Jan 2024)
- [CVE-2023-29357: Microsoft SharePoint Server Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-29357-microsoft-sharepoint-server-privilege-escalation-vulnerability) (10 Jan 2024)
- [CVE-2023-46805: Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2023-46805-ivanti-connect-secure-and-policy-secure-authentication-bypass) (10 Jan 2024)
- [CVE-2023-27524: PYSEC-2026-1161 - Apache superset missing check for default SECRET_KEY](https://junglewise.ai/threats/cve-2023-27524-apache-superset-insecure-default-initialization-of-resource) (8 Jan 2024)
- [CVE-2016-20017: D-Link DSL-2750B Devices Command Injection Vulnerability](https://junglewise.ai/threats/cve-2016-20017-d-link-dsl-2750b-devices-command-injection-vulnerability) (8 Jan 2024)
- [CVE-2023-23752: Joomla! Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2023-23752-joomla-improper-access-control-vulnerability) (8 Jan 2024)
- [CVE-2023-29300: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2023-29300-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability) (8 Jan 2024)
- [CVE-2023-38203: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2023-38203-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability) (8 Jan 2024)
- [CVE-2023-41990: Apple Multiple Products Code Execution Vulnerability](https://junglewise.ai/threats/cve-2023-41990-apple-multiple-products-code-execution-vulnerability) (8 Jan 2024)
- [CVE-2023-7024: Google Chromium WebRTC Heap Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-7024-google-chromium-webrtc-heap-buffer-overflow-vulnerability) (2 Jan 2024)
- [CVE-2023-7101: Spreadsheet::ParseExcel Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2023-7101-spreadsheet-parseexcel-remote-code-execution-vulnerability) (2 Jan 2024)
- [CVE-2023-47565: QNAP VioStor NVR OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2023-47565-qnap-viostor-nvr-os-command-injection-vulnerability) (21 Dec 2023)
- [CVE-2023-49897: FXC AE1021, AE1021PE OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2023-49897-fxc-ae1021-ae1021pe-os-command-injection-vulnerability) (21 Dec 2023)
- [CVE-2023-6448: Unitronics Vision PLC and HMI Insecure Default Password Vulnerability](https://junglewise.ai/threats/cve-2023-6448-unitronics-vision-plc-and-hmi-insecure-default-password) (11 Dec 2023)
- [CVE-2023-41265: Qlik Sense HTTP Tunneling Vulnerability](https://junglewise.ai/threats/cve-2023-41265-qlik-sense-http-tunneling-vulnerability) (7 Dec 2023)
- [CVE-2023-41266: Qlik Sense Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2023-41266-qlik-sense-path-traversal-vulnerability) (7 Dec 2023)
- [CVE-2022-22071: Qualcomm Multiple Chipsets Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2022-22071-qualcomm-multiple-chipsets-use-after-free-vulnerability) (5 Dec 2023)
- [CVE-2023-33063: Qualcomm Multiple Chipsets Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2023-33063-qualcomm-multiple-chipsets-use-after-free-vulnerability) (5 Dec 2023)
- [CVE-2023-33106: Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability](https://junglewise.ai/threats/cve-2023-33106-qualcomm-multiple-chipsets-use-of-out-of-range-pointer-offset) (5 Dec 2023)
- [CVE-2023-33107: Qualcomm Multiple Chipsets Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-33107-qualcomm-multiple-chipsets-integer-overflow-vulnerability) (5 Dec 2023)
- [CVE-2023-42916: Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability](https://junglewise.ai/threats/cve-2023-42916-apple-multiple-products-webkit-out-of-bounds-read-vulnerability) (4 Dec 2023)
- [CVE-2023-42917: Apple Multiple Products WebKit Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2023-42917-apple-multiple-products-webkit-memory-corruption-vulnerability) (4 Dec 2023)
- [CVE-2023-49103: ownCloud graphapi Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2023-49103-owncloud-graphapi-information-disclosure-vulnerability) (30 Nov 2023)
- [CVE-2023-6345: Google Skia Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-6345-google-skia-integer-overflow-vulnerability) (30 Nov 2023)
- [CVE-2023-4911: GNU C Library Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-4911-gnu-c-library-buffer-overflow-vulnerability) (21 Nov 2023)
- [CVE-2020-2551: Oracle Fusion Middleware Unspecified Vulnerability](https://junglewise.ai/threats/cve-2020-2551-oracle-fusion-middleware-unspecified-vulnerability) (16 Nov 2023)
- [CVE-2023-1671: Sophos Web Appliance Command Injection Vulnerability](https://junglewise.ai/threats/cve-2023-1671-sophos-web-appliance-command-injection-vulnerability) (16 Nov 2023)
- [CVE-2023-36584: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2023-36584-microsoft-windows-mark-of-the-web-motw-security-feature-bypass) (16 Nov 2023)
- [CVE-2023-36025: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2023-36025-microsoft-windows-smartscreen-security-feature-bypass) (14 Nov 2023)
- [CVE-2023-36033: Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation…](https://junglewise.ai/threats/cve-2023-36033-microsoft-windows-desktop-window-manager-dwm-core-library) (14 Nov 2023)
- [CVE-2023-36036: Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-36036-microsoft-windows-cloud-files-mini-filter-driver-privilege) (14 Nov 2023)
- [CVE-2023-36844: Juniper Junos OS EX Series PHP External Variable Modification Vulnerability](https://junglewise.ai/threats/cve-2023-36844-juniper-junos-os-ex-series-php-external-variable-modification) (13 Nov 2023)
- [CVE-2023-36845: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification…](https://junglewise.ai/threats/cve-2023-36845-juniper-junos-os-ex-series-and-srx-series-php-external-variable) (13 Nov 2023)
- [CVE-2023-36846: Juniper Junos OS SRX Series Missing Authentication for Critical Function…](https://junglewise.ai/threats/cve-2023-36846-juniper-junos-os-srx-series-missing-authentication-for-critical) (13 Nov 2023)
- [CVE-2023-36847: Juniper Junos OS EX Series Missing Authentication for Critical Function…](https://junglewise.ai/threats/cve-2023-36847-juniper-junos-os-ex-series-missing-authentication-for-critical) (13 Nov 2023)
- [CVE-2023-36851: Juniper Junos OS SRX Series Missing Authentication for Critical Function…](https://junglewise.ai/threats/cve-2023-36851-juniper-junos-os-srx-series-missing-authentication-for-critical) (13 Nov 2023)
- [CVE-2023-47246: SysAid Server Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2023-47246-sysaid-server-path-traversal-vulnerability) (13 Nov 2023)
- [CVE-2023-29552: Service Location Protocol (SLP) Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2023-29552-service-location-protocol-slp-denial-of-service-vulnerability) (8 Nov 2023)
- [CVE-2023-22518: Atlassian Confluence Data Center and Server Improper Authorization Vulnerability](https://junglewise.ai/threats/cve-2023-22518-atlassian-confluence-data-center-and-server-improper) (7 Nov 2023)
- [CVE-2023-46604: Armatura One multiple vulnerabilities in access control system](https://junglewise.ai/threats/cve-2023-46604-apache-activemq-deserialization-of-untrusted-data-vulnerability) (2 Nov 2023)
- [CVE-2023-46747: F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2023-46747-f5-big-ip-configuration-utility-authentication-bypass) (31 Oct 2023)
- [CVE-2023-46748: F5 BIG-IP Configuration Utility SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2023-46748-f5-big-ip-configuration-utility-sql-injection-vulnerability) (31 Oct 2023)
- [CVE-2023-5631: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2023-5631-roundcube-webmail-persistent-cross-site-scripting-xss) (26 Oct 2023)
- [CVE-2023-20273: Cisco IOS XE Web UI Command Injection Vulnerability](https://junglewise.ai/threats/cve-2023-20273-cisco-ios-xe-web-ui-command-injection-vulnerability) (23 Oct 2023)
- [CVE-2023-4966: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-4966-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow) (18 Oct 2023)
- [CVE-2023-20198: Cisco IOS XE Web UI Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-20198-cisco-ios-xe-web-ui-privilege-escalation-vulnerability) (16 Oct 2023)
- [CVE-2023-44487: Multiple Vendors HTTP/2 denial of service via Rapid Reset attack](https://junglewise.ai/threats/cve-2023-44487-http-2-rapid-reset-attack-vulnerability) (10 Oct 2023)
- [CVE-2023-20109: Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2023-20109-cisco-ios-and-ios-xe-group-encrypted-transport-vpn-out-of-bounds) (10 Oct 2023)
- [CVE-2023-21608: Adobe Acrobat and Reader Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2023-21608-adobe-acrobat-and-reader-use-after-free-vulnerability) (10 Oct 2023)
- [CVE-2023-36563: Microsoft WordPad Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2023-36563-microsoft-wordpad-information-disclosure-vulnerability) (10 Oct 2023)
- [CVE-2023-41763: Microsoft Skype for Business Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-41763-microsoft-skype-for-business-privilege-escalation-vulnerability) (10 Oct 2023)
- [CVE-2023-22515: Atlassian Confluence Data Center and Server Broken Access Control Vulnerability](https://junglewise.ai/threats/cve-2023-22515-atlassian-confluence-data-center-and-server-broken-access-control) (5 Oct 2023)
- [CVE-2023-40044: Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2023-40044-progress-ws-ftp-server-deserialization-of-untrusted-data) (5 Oct 2023)
- [CVE-2023-42824: Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-42824-apple-ios-and-ipados-kernel-privilege-escalation-vulnerability) (5 Oct 2023)
- [CVE-2023-28229: Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-28229-microsoft-windows-cng-key-isolation-service-privilege-escalation) (4 Oct 2023)
- [CVE-2023-42793: JetBrains TeamCity Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2023-42793-jetbrains-teamcity-authentication-bypass-vulnerability) (4 Oct 2023)
- [CVE-2023-4211: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2023-4211-arm-mali-gpu-kernel-driver-use-after-free-vulnerability) (3 Oct 2023)
- [CVE-2023-5217: Electron heap buffer overflow in libvpx vp8 encoding](https://junglewise.ai/threats/cve-2023-5217-google-chromium-libvpx-heap-buffer-overflow-vulnerability) (2 Oct 2023)
- [CVE-2018-14667: Richfaces vulnerable to arbitrary code execution](https://junglewise.ai/threats/cve-2018-14667-red-hat-jboss-richfaces-framework-expression-language-injection) (28 Sep 2023)
- [CVE-2023-41991: Apple Multiple Products Improper Certificate Validation Vulnerability](https://junglewise.ai/threats/cve-2023-41991-apple-multiple-products-improper-certificate-validation) (25 Sep 2023)
- [CVE-2023-41992: Apple Multiple Products Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-41992-apple-multiple-products-kernel-privilege-escalation-vulnerability) (25 Sep 2023)
- [CVE-2023-41993: Apple Multiple Products WebKit Code Execution Vulnerability](https://junglewise.ai/threats/cve-2023-41993-apple-multiple-products-webkit-code-execution-vulnerability) (25 Sep 2023)
- [CVE-2023-41179: Trend Micro Apex One and Worry-Free Business Security Remote Code Execution…](https://junglewise.ai/threats/cve-2023-41179-trend-micro-apex-one-and-worry-free-business-security-remote-code) (21 Sep 2023)
- [CVE-2023-28434: Privilege Escalation on Linux/MacOS](https://junglewise.ai/threats/cve-2023-28434-minio-security-feature-bypass-vulnerability) (19 Sep 2023)
- [CVE-2014-8361: Realtek SDK Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2014-8361-realtek-sdk-improper-input-validation-vulnerability) (18 Sep 2023)
- [CVE-2017-6884: Zyxel EMG2926 Routers Command Injection Vulnerability](https://junglewise.ai/threats/cve-2017-6884-zyxel-emg2926-routers-command-injection-vulnerability) (18 Sep 2023)
- [CVE-2022-22265: Samsung Mobile Devices Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2022-22265-samsung-mobile-devices-use-after-free-vulnerability) (18 Sep 2023)
- [CVE-2021-3129: Unauthenticated remote code execution in Ignition](https://junglewise.ai/threats/cve-2021-3129-laravel-ignition-file-upload-vulnerability) (18 Sep 2023)
- [CVE-2023-26369: Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2023-26369-adobe-acrobat-and-reader-out-of-bounds-write-vulnerability) (14 Sep 2023)
- [CVE-2023-20269: Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access…](https://junglewise.ai/threats/cve-2023-20269-cisco-adaptive-security-appliance-and-firepower-threat-defense) (13 Sep 2023)
- [CVE-2023-35674: Android Framework Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-35674-android-framework-privilege-escalation-vulnerability) (13 Sep 2023)
- [CVE-2023-4863: RUSTSEC-2023-0060 - libwebp: OOB write in BuildHuffmanTable](https://junglewise.ai/threats/cve-2023-4863-google-chromium-webp-heap-based-buffer-overflow-vulnerability) (13 Sep 2023)
- [CVE-2023-36802: Microsoft Streaming Service Proxy Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-36802-microsoft-streaming-service-proxy-privilege-escalation) (12 Sep 2023)
- [CVE-2023-36761: Microsoft Word Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2023-36761-microsoft-word-information-disclosure-vulnerability) (12 Sep 2023)
- [CVE-2023-41061: Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability](https://junglewise.ai/threats/cve-2023-41061-apple-ios-ipados-and-watchos-wallet-code-execution-vulnerability) (11 Sep 2023)
- [CVE-2023-41064: Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-41064-apple-ios-ipados-and-macos-imageio-buffer-overflow-vulnerability) (11 Sep 2023)
- [CVE-2023-33246: Apache RocketMQ may have remote code execution vulnerability when using update…](https://junglewise.ai/threats/cve-2023-33246-apache-rocketmq-command-execution-vulnerability) (6 Sep 2023)
- [CVE-2023-38831: RARLAB WinRAR Code Execution Vulnerability](https://junglewise.ai/threats/cve-2023-38831-rarlab-winrar-code-execution-vulnerability) (24 Aug 2023)
- [CVE-2023-32315: Administration Console authentication bypass in openfire xmppserver](https://junglewise.ai/threats/cve-2023-32315-ignite-realtime-openfire-path-traversal-vulnerability) (24 Aug 2023)
- [CVE-2023-38035: Ivanti Sentry Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2023-38035-ivanti-sentry-authentication-bypass-vulnerability) (22 Aug 2023)
- [CVE-2023-27532: Veeam Backup & Replication Cloud Connect Missing Authentication for Critical…](https://junglewise.ai/threats/cve-2023-27532-veeam-backup-replication-cloud-connect-missing-authentication-for) (22 Aug 2023)
- [CVE-2023-26359: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2023-26359-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability) (21 Aug 2023)
- [CVE-2023-24489: Citrix Content Collaboration ShareFile Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2023-24489-citrix-content-collaboration-sharefile-improper-access-control) (16 Aug 2023)
- [CVE-2023-38180: .NET Denial of Service Vulnerability](https://junglewise.ai/threats/cve-2023-38180-microsoft-net-core-and-visual-studio-denial-of-service) (9 Aug 2023)
- [CVE-2017-18368: Zyxel P660HN-T1A Routers Command Injection Vulnerability](https://junglewise.ai/threats/cve-2017-18368-zyxel-p660hn-t1a-routers-command-injection-vulnerability) (7 Aug 2023)
- [CVE-2023-35081: Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2023-35081-ivanti-endpoint-manager-mobile-epmm-path-traversal-vulnerability) (31 Jul 2023)
- [CVE-2023-37580: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2023-37580-synacor-zimbra-collaboration-suite-zcs-cross-site-scripting-xss) (27 Jul 2023)
- [CVE-2023-38606: Apple Multiple Products Kernel Unspecified Vulnerability](https://junglewise.ai/threats/cve-2023-38606-apple-multiple-products-kernel-unspecified-vulnerability) (26 Jul 2023)
- [CVE-2023-35078: Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2023-35078-ivanti-endpoint-manager-mobile-authentication-bypass) (25 Jul 2023)
- [CVE-2023-29298: Adobe ColdFusion Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2023-29298-adobe-coldfusion-improper-access-control-vulnerability) (20 Jul 2023)
- [CVE-2023-38205: Adobe ColdFusion Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2023-38205-adobe-coldfusion-improper-access-control-vulnerability) (20 Jul 2023)
- [CVE-2023-3519: Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability](https://junglewise.ai/threats/cve-2023-3519-citrix-netscaler-adc-and-netscaler-gateway-code-injection) (19 Jul 2023)
- [CVE-2023-36884: Microsoft Windows Search Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2023-36884-microsoft-windows-search-remote-code-execution-vulnerability) (17 Jul 2023)
- [CVE-2022-29303: SolarView Compact Command Injection Vulnerability](https://junglewise.ai/threats/cve-2022-29303-solarview-compact-command-injection-vulnerability) (13 Jul 2023)
- [CVE-2023-37450: Apple Multiple Products WebKit Code Execution Vulnerability](https://junglewise.ai/threats/cve-2023-37450-apple-multiple-products-webkit-code-execution-vulnerability) (13 Jul 2023)
- [CVE-2022-31199: Netwrix Auditor Insecure Object Deserialization Vulnerability](https://junglewise.ai/threats/cve-2022-31199-netwrix-auditor-insecure-object-deserialization-vulnerability) (11 Jul 2023)
- [CVE-2023-32046: Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-32046-microsoft-windows-mshtml-platform-privilege-escalation) (11 Jul 2023)
- [CVE-2023-32049: Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2023-32049-microsoft-windows-defender-smartscreen-security-feature-bypass) (11 Jul 2023)
- [CVE-2023-35311: Microsoft Outlook Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2023-35311-microsoft-outlook-security-feature-bypass-vulnerability) (11 Jul 2023)
- [CVE-2023-36874: Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-36874-microsoft-windows-error-reporting-service-privilege-escalation) (11 Jul 2023)
- [CVE-2021-29256: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-29256-arm-mali-gpu-kernel-driver-use-after-free-vulnerability) (7 Jul 2023)
- [CVE-2019-17621: D-Link DIR-859 Router Command Execution Vulnerability](https://junglewise.ai/threats/cve-2019-17621-d-link-dir-859-router-command-execution-vulnerability) (29 Jun 2023)
- [CVE-2019-20500: D-Link DWL-2600AP Access Point Command Injection Vulnerability](https://junglewise.ai/threats/cve-2019-20500-d-link-dwl-2600ap-access-point-command-injection-vulnerability) (29 Jun 2023)
- [CVE-2021-25395: Samsung Mobile Devices Race Condition Vulnerability](https://junglewise.ai/threats/cve-2021-25395-samsung-mobile-devices-race-condition-vulnerability) (29 Jun 2023)
- [CVE-2021-25371: Samsung Mobile Devices Unspecified Vulnerability](https://junglewise.ai/threats/cve-2021-25371-samsung-mobile-devices-unspecified-vulnerability) (29 Jun 2023)
- [CVE-2021-25372: Samsung Mobile Devices Improper Boundary Check Vulnerability](https://junglewise.ai/threats/cve-2021-25372-samsung-mobile-devices-improper-boundary-check-vulnerability) (29 Jun 2023)
- [CVE-2021-25394: Samsung Mobile Devices Race Condition Vulnerability](https://junglewise.ai/threats/cve-2021-25394-samsung-mobile-devices-race-condition-vulnerability) (29 Jun 2023)
- [CVE-2021-25487: Samsung Mobile Devices Out-of-Bounds Read Vulnerability](https://junglewise.ai/threats/cve-2021-25487-samsung-mobile-devices-out-of-bounds-read-vulnerability) (29 Jun 2023)
- [CVE-2021-25489: Samsung Mobile Devices Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2021-25489-samsung-mobile-devices-improper-input-validation-vulnerability) (29 Jun 2023)
- [CVE-2023-20867: VMware Tools Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2023-20867-vmware-tools-authentication-bypass-vulnerability) (23 Jun 2023)
- [CVE-2023-27992: Zyxel Multiple NAS Devices Command Injection Vulnerability](https://junglewise.ai/threats/cve-2023-27992-zyxel-multiple-nas-devices-command-injection-vulnerability) (23 Jun 2023)
- [CVE-2023-32434: Apple Multiple Products Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-32434-apple-multiple-products-integer-overflow-vulnerability) (23 Jun 2023)
- [CVE-2023-32435: Apple Multiple Products WebKit Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2023-32435-apple-multiple-products-webkit-memory-corruption-vulnerability) (23 Jun 2023)
- [CVE-2023-32439: Apple Multiple Products WebKit Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2023-32439-apple-multiple-products-webkit-type-confusion-vulnerability) (23 Jun 2023)
- [CVE-2016-0165: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2016-0165-microsoft-win32k-privilege-escalation-vulnerability) (22 Jun 2023)
- [CVE-2016-9079: Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2016-9079-mozilla-firefox-firefox-esr-and-thunderbird-use-after-free) (22 Jun 2023)
- [CVE-2020-12641: Roundcube Webmail Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-12641-roundcube-webmail-remote-code-execution-vulnerability) (22 Jun 2023)
- [CVE-2020-35730: Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2020-35730-roundcube-webmail-cross-site-scripting-xss-vulnerability) (22 Jun 2023)
- [CVE-2021-44026: Roundcube Webmail SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2021-44026-roundcube-webmail-sql-injection-vulnerability) (22 Jun 2023)
- [CVE-2023-20887: Vmware Aria Operations for Networks Command Injection Vulnerability](https://junglewise.ai/threats/cve-2023-20887-vmware-aria-operations-for-networks-command-injection) (22 Jun 2023)
- [CVE-2023-27997: Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-27997-fortinet-fortios-and-fortiproxy-ssl-vpn-heap-based-buffer) (13 Jun 2023)
- [CVE-2023-3079: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2023-3079-google-chromium-v8-type-confusion-vulnerability) (7 Jun 2023)
- [CVE-2023-33009: Zyxel Multiple Firewalls Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-33009-zyxel-multiple-firewalls-buffer-overflow-vulnerability) (5 Jun 2023)
- [CVE-2023-33010: Zyxel Multiple Firewalls Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-33010-zyxel-multiple-firewalls-buffer-overflow-vulnerability) (5 Jun 2023)
- [CVE-2023-34362: Progress MOVEit Transfer SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2023-34362-progress-moveit-transfer-sql-injection-vulnerability) (2 Jun 2023)
- [CVE-2023-28771: Zyxel Multiple Firewalls OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2023-28771-zyxel-multiple-firewalls-os-command-injection-vulnerability) (31 May 2023)
- [CVE-2023-2868: Barracuda Networks ESG Appliance Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2023-2868-barracuda-networks-esg-appliance-improper-input-validation) (26 May 2023)
- [CVE-2023-28204: Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability](https://junglewise.ai/threats/cve-2023-28204-apple-multiple-products-webkit-out-of-bounds-read-vulnerability) (22 May 2023)
- [CVE-2023-32373: Apple Multiple Products WebKit Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2023-32373-apple-multiple-products-webkit-use-after-free-vulnerability) (22 May 2023)
- [CVE-2023-32409: Apple Multiple Products WebKit Sandbox Escape Vulnerability](https://junglewise.ai/threats/cve-2023-32409-apple-multiple-products-webkit-sandbox-escape-vulnerability) (22 May 2023)
- [CVE-2004-1464: Cisco IOS Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2004-1464-cisco-ios-denial-of-service-vulnerability) (19 May 2023)
- [CVE-2016-6415: Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2016-6415-cisco-ios-ios-xr-and-ios-xe-ikev1-information-disclosure) (19 May 2023)
- [CVE-2023-21492: Samsung Mobile Devices Insertion of Sensitive Information Into Log File…](https://junglewise.ai/threats/cve-2023-21492-samsung-mobile-devices-insertion-of-sensitive-information-into) (19 May 2023)
- [CVE-2014-0196: Linux Kernel Race Condition Vulnerability](https://junglewise.ai/threats/cve-2014-0196-linux-kernel-race-condition-vulnerability) (12 May 2023)
- [CVE-2010-3904: Linux Kernel Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2010-3904-linux-kernel-improper-input-validation-vulnerability) (12 May 2023)
- [CVE-2016-3427: Oracle Java SE and JRockit Unspecified Vulnerability](https://junglewise.ai/threats/cve-2016-3427-oracle-java-se-and-jrockit-unspecified-vulnerability) (12 May 2023)
- [CVE-2021-3560: Red Hat Polkit Incorrect Authorization Vulnerability](https://junglewise.ai/threats/cve-2021-3560-red-hat-polkit-incorrect-authorization-vulnerability) (12 May 2023)
- [CVE-2023-25717: Multiple Ruckus Wireless Products CSRF and RCE Vulnerability](https://junglewise.ai/threats/cve-2023-25717-multiple-ruckus-wireless-products-csrf-and-rce-vulnerability) (12 May 2023)
- [CVE-2015-5317: Jenkins discloses project names via fingerprints](https://junglewise.ai/threats/cve-2015-5317-jenkins-user-interface-ui-information-disclosure-vulnerability) (12 May 2023)
- [CVE-2016-8735: Apache Tomcat Improper Access Control vulnerability](https://junglewise.ai/threats/cve-2016-8735-apache-tomcat-remote-code-execution-vulnerability) (12 May 2023)
- [CVE-2023-29336: Microsoft Win32K Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-29336-microsoft-win32k-privilege-escalation-vulnerability) (9 May 2023)
- [CVE-2023-1389: TP-Link Archer AX-21 Command Injection Vulnerability](https://junglewise.ai/threats/cve-2023-1389-tp-link-archer-ax-21-command-injection-vulnerability) (1 May 2023)
- [CVE-2023-21839: Oracle WebLogic Server Unspecified Vulnerability](https://junglewise.ai/threats/cve-2023-21839-oracle-weblogic-server-unspecified-vulnerability) (1 May 2023)
- [CVE-2021-45046: Incomplete fix for Apache Log4j vulnerability](https://junglewise.ai/threats/cve-2021-45046-apache-log4j2-deserialization-of-untrusted-data-vulnerability) (1 May 2023)
- [CVE-2023-28432: MinIO Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2023-28432-minio-information-disclosure-vulnerability) (21 Apr 2023)
- [CVE-2023-2136: Google Chrome Skia Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-2136-google-chrome-skia-integer-overflow-vulnerability) (21 Apr 2023)
- [CVE-2023-27350: PaperCut MF/NG Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2023-27350-papercut-mf-ng-improper-access-control-vulnerability) (21 Apr 2023)
- [CVE-2017-6742: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6742-cisco-ios-and-ios-xe-software-snmp-remote-code-execution) (19 Apr 2023)
- [CVE-2019-8526: Apple macOS Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2019-8526-apple-macos-use-after-free-vulnerability) (17 Apr 2023)
- [CVE-2023-2033: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2023-2033-google-chromium-v8-type-confusion-vulnerability) (17 Apr 2023)
- [CVE-2023-20963: Android Framework Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-20963-android-framework-privilege-escalation-vulnerability) (13 Apr 2023)
- [CVE-2023-29492: Novi Survey Insecure Deserialization Vulnerability](https://junglewise.ai/threats/cve-2023-29492-novi-survey-insecure-deserialization-vulnerability) (13 Apr 2023)
- [CVE-2023-28252: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation…](https://junglewise.ai/threats/cve-2023-28252-microsoft-windows-common-log-file-system-clfs-driver-privilege) (11 Apr 2023)
- [CVE-2023-28205: Apple Multiple Products WebKit Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2023-28205-apple-multiple-products-webkit-use-after-free-vulnerability) (10 Apr 2023)
- [CVE-2023-28206: Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2023-28206-apple-ios-ipados-and-macos-iosurfaceaccelerator-out-of-bounds) (10 Apr 2023)
- [CVE-2019-1388: Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-1388-microsoft-windows-certificate-dialog-privilege-escalation) (7 Apr 2023)
- [CVE-2021-27876: Veritas Backup Exec Agent File Access Vulnerability](https://junglewise.ai/threats/cve-2021-27876-veritas-backup-exec-agent-file-access-vulnerability) (7 Apr 2023)
- [CVE-2021-27877: Veritas Backup Exec Agent Improper Authentication Vulnerability](https://junglewise.ai/threats/cve-2021-27877-veritas-backup-exec-agent-improper-authentication-vulnerability) (7 Apr 2023)
- [CVE-2021-27878: Veritas Backup Exec Agent Command Execution Vulnerability](https://junglewise.ai/threats/cve-2021-27878-veritas-backup-exec-agent-command-execution-vulnerability) (7 Apr 2023)
- [CVE-2023-26083: Arm Mali GPU Kernel Driver Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2023-26083-arm-mali-gpu-kernel-driver-information-disclosure-vulnerability) (7 Apr 2023)
- [CVE-2022-27926: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2022-27926-synacor-zimbra-collaboration-suite-zcs-cross-site-scripting-xss) (3 Apr 2023)
- [CVE-2013-3163: Microsoft Internet Explorer Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2013-3163-microsoft-internet-explorer-memory-corruption-vulnerability) (30 Mar 2023)
- [CVE-2017-7494: Samba Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-7494-samba-remote-code-execution-vulnerability) (30 Mar 2023)
- [CVE-2021-30900: Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2021-30900-apple-ios-ipados-and-macos-out-of-bounds-write-vulnerability) (30 Mar 2023)
- [CVE-2022-22706: Arm Mali GPU Kernel Driver Unspecified Vulnerability](https://junglewise.ai/threats/cve-2022-22706-arm-mali-gpu-kernel-driver-unspecified-vulnerability) (30 Mar 2023)
- [CVE-2022-3038: Google Chromium Network Service Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2022-3038-google-chromium-network-service-use-after-free-vulnerability) (30 Mar 2023)
- [CVE-2022-38181: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2022-38181-arm-mali-gpu-kernel-driver-use-after-free-vulnerability) (30 Mar 2023)
- [CVE-2022-39197: Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2022-39197-fortra-cobalt-strike-teamserver-cross-site-scripting-xss) (30 Mar 2023)
- [CVE-2022-42948: Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-42948-fortra-cobalt-strike-user-interface-remote-code-execution) (30 Mar 2023)
- [CVE-2023-0266: Linux Kernel Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2023-0266-linux-kernel-use-after-free-vulnerability) (30 Mar 2023)
- [CVE-2023-26360: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2023-26360-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability) (15 Mar 2023)
- [CVE-2022-41328: Fortinet FortiOS Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2022-41328-fortinet-fortios-path-traversal-vulnerability) (14 Mar 2023)
- [CVE-2023-23397: Microsoft Office Outlook Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-23397-microsoft-office-outlook-privilege-escalation-vulnerability) (14 Mar 2023)
- [CVE-2023-24880: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2023-24880-microsoft-windows-smartscreen-security-feature-bypass) (14 Mar 2023)
- [CVE-2020-5741: Plex Media Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-5741-plex-media-server-remote-code-execution-vulnerability) (10 Mar 2023)
- [CVE-2021-39144: XStream is vulnerable to a Remote Command Execution attack](https://junglewise.ai/threats/cve-2021-39144-xstream-remote-code-execution-vulnerability) (10 Mar 2023)
- [CVE-2022-28810: Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-28810-zoho-manageengine-adselfservice-plus-remote-code-execution) (7 Mar 2023)
- [CVE-2022-35914: Teclib GLPI Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-35914-teclib-glpi-remote-code-execution-vulnerability) (7 Mar 2023)
- [CVE-2022-33891: Apache Spark OS command injection in Spark UI via impersonation](https://junglewise.ai/threats/cve-2022-33891-apache-spark-os-command-injection-in-spark-ui-via-impersonation) (7 Mar 2023)
- [CVE-2022-36537: ZK Framework vulnerable to malicious POST](https://junglewise.ai/threats/cve-2022-36537-zk-framework-auuploader-unspecified-vulnerability) (27 Feb 2023)
- [CVE-2022-47986: IBM Aspera Faspex Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-47986-ibm-aspera-faspex-code-execution-vulnerability) (21 Feb 2023)
- [CVE-2022-41223: Mitel MiVoice Connect Code Injection Vulnerability](https://junglewise.ai/threats/cve-2022-41223-mitel-mivoice-connect-code-injection-vulnerability) (21 Feb 2023)
- [CVE-2022-40765: Mitel MiVoice Connect Command Injection Vulnerability](https://junglewise.ai/threats/cve-2022-40765-mitel-mivoice-connect-command-injection-vulnerability) (21 Feb 2023)
- [CVE-2022-46169: Cacti Command Injection Vulnerability](https://junglewise.ai/threats/cve-2022-46169-cacti-command-injection-vulnerability) (16 Feb 2023)
- [CVE-2023-23376: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation…](https://junglewise.ai/threats/cve-2023-23376-microsoft-windows-common-log-file-system-clfs-driver-privilege) (14 Feb 2023)
- [CVE-2023-23529: Apple Multiple Products WebKit Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2023-23529-apple-multiple-products-webkit-type-confusion-vulnerability) (14 Feb 2023)
- [CVE-2023-21823: Microsoft Windows Graphic Component Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-21823-microsoft-windows-graphic-component-privilege-escalation) (14 Feb 2023)
- [CVE-2023-21715: Microsoft Office Publisher Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2023-21715-microsoft-office-publisher-security-feature-bypass-vulnerability) (14 Feb 2023)
- [CVE-2015-2291: Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2015-2291-intel-ethernet-diagnostics-driver-for-windows-denial-of-service) (10 Feb 2023)
- [CVE-2022-24990: TerraMaster OS Remote Command Execution Vulnerability](https://junglewise.ai/threats/cve-2022-24990-terramaster-os-remote-command-execution-vulnerability) (10 Feb 2023)
- [CVE-2023-0669: Withdrawn: Fortra GoAnywhere MFT Deserialization of Untrusted Data vulnerability…](https://junglewise.ai/threats/cve-2023-0669-fortra-goanywhere-mft-remote-code-execution-vulnerability) (10 Feb 2023)
- [CVE-2023-22952: Multiple SugarCRM Products Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2023-22952-multiple-sugarcrm-products-remote-code-execution-vulnerability) (2 Feb 2023)
- [CVE-2022-21587: Oracle E-Business Suite Unspecified Vulnerability](https://junglewise.ai/threats/cve-2022-21587-oracle-e-business-suite-unspecified-vulnerability) (2 Feb 2023)
- [CVE-2017-11357: Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability](https://junglewise.ai/threats/cve-2017-11357-telerik-ui-for-asp-net-ajax-insecure-direct-object-reference) (26 Jan 2023)
- [CVE-2022-47966: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-47966-zoho-manageengine-multiple-products-remote-code-execution) (23 Jan 2023)
- [CVE-2022-44877: CWP Control Web Panel OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2022-44877-cwp-control-web-panel-os-command-injection-vulnerability) (17 Jan 2023)
- [CVE-2023-21674: Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation…](https://junglewise.ai/threats/cve-2023-21674-microsoft-windows-advanced-local-procedure-call-alpc-privilege) (10 Jan 2023)
- [CVE-2022-41080: Microsoft Exchange Server Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-41080-microsoft-exchange-server-privilege-escalation-vulnerability) (10 Jan 2023)
- [CVE-2018-5430: TIBCO JasperReports Server Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2018-5430-tibco-jasperreports-server-information-disclosure-vulnerability) (29 Dec 2022)
- [CVE-2018-18809: TIBCO JasperReports Library Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2018-18809-tibco-jasperreports-library-directory-traversal-vulnerability) (29 Dec 2022)
- [CVE-2022-42856: Apple iOS Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2022-42856-apple-ios-type-confusion-vulnerability) (14 Dec 2022)
- [CVE-2022-27518: Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass…](https://junglewise.ai/threats/cve-2022-27518-citrix-application-delivery-controller-adc-and-gateway) (13 Dec 2022)
- [CVE-2022-42475: Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2022-42475-fortinet-fortios-heap-based-buffer-overflow-vulnerability) (13 Dec 2022)
- [CVE-2022-44698: Microsoft Defender SmartScreen Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2022-44698-microsoft-defender-smartscreen-security-feature-bypass) (13 Dec 2022)
- [CVE-2022-26501: Veeam Backup & Replication Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-26501-veeam-backup-replication-remote-code-execution-vulnerability) (13 Dec 2022)
- [CVE-2022-26500: Veeam Backup & Replication Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-26500-veeam-backup-replication-remote-code-execution-vulnerability) (13 Dec 2022)
- [CVE-2022-4262: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2022-4262-google-chromium-v8-type-confusion-vulnerability) (5 Dec 2022)
- [CVE-2021-35587: Oracle Fusion Middleware Unspecified Vulnerability](https://junglewise.ai/threats/cve-2021-35587-oracle-fusion-middleware-unspecified-vulnerability) (28 Nov 2022)
- [CVE-2022-4135: Google Chrome heap buffer overflow in GPU](https://junglewise.ai/threats/cve-2022-4135-google-chromium-gpu-heap-buffer-overflow-vulnerability) (28 Nov 2022)
- [CVE-2022-41049: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2022-41049-microsoft-windows-mark-of-the-web-motw-security-feature-bypass) (14 Nov 2022)
- [CVE-2021-25370: Samsung Mobile Devices Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2021-25370-samsung-mobile-devices-memory-corruption-vulnerability) (8 Nov 2022)
- [CVE-2022-41073: Microsoft Windows Print Spooler Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-41073-microsoft-windows-print-spooler-privilege-escalation) (8 Nov 2022)
- [CVE-2022-41091: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2022-41091-microsoft-windows-mark-of-the-web-motw-security-feature-bypass) (8 Nov 2022)
- [CVE-2022-41125: Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-41125-microsoft-windows-cng-key-isolation-service-privilege-escalation) (8 Nov 2022)
- [CVE-2022-41128: Microsoft Windows Scripting Languages Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-41128-microsoft-windows-scripting-languages-remote-code-execution) (8 Nov 2022)
- [CVE-2021-25337: Samsung Mobile Devices Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2021-25337-samsung-mobile-devices-improper-access-control-vulnerability) (8 Nov 2022)
- [CVE-2021-25369: Samsung Mobile Devices Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2021-25369-samsung-mobile-devices-improper-access-control-vulnerability) (8 Nov 2022)
- [CVE-2022-3723: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2022-3723-google-chromium-v8-type-confusion-vulnerability) (28 Oct 2022)
- [CVE-2022-42827: Apple iOS and iPadOS Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2022-42827-apple-ios-and-ipados-out-of-bounds-write-vulnerability) (25 Oct 2022)
- [CVE-2018-19320: GIGABYTE Multiple Products Unspecified Vulnerability](https://junglewise.ai/threats/cve-2018-19320-gigabyte-multiple-products-unspecified-vulnerability) (24 Oct 2022)
- [CVE-2018-19321: GIGABYTE Multiple Products Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2018-19321-gigabyte-multiple-products-privilege-escalation-vulnerability) (24 Oct 2022)
- [CVE-2018-19322: GIGABYTE Multiple Products Code Execution Vulnerability](https://junglewise.ai/threats/cve-2018-19322-gigabyte-multiple-products-code-execution-vulnerability) (24 Oct 2022)
- [CVE-2018-19323: GIGABYTE Multiple Products Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2018-19323-gigabyte-multiple-products-privilege-escalation-vulnerability) (24 Oct 2022)
- [CVE-2020-3153: Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path…](https://junglewise.ai/threats/cve-2020-3153-cisco-anyconnect-secure-mobility-client-for-windows-uncontrolled) (24 Oct 2022)
- [CVE-2020-3433: Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability](https://junglewise.ai/threats/cve-2020-3433-cisco-anyconnect-secure-mobility-client-for-windows-dll-hijacking) (24 Oct 2022)
- [CVE-2021-3493: Linux Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-3493-linux-kernel-privilege-escalation-vulnerability) (20 Oct 2022)
- [CVE-2022-41352: Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability](https://junglewise.ai/threats/cve-2022-41352-synacor-zimbra-collaboration-suite-zcs-arbitrary-file-upload) (20 Oct 2022)
- [CVE-2022-40684: Fortinet Multiple Products Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2022-40684-fortinet-multiple-products-authentication-bypass-vulnerability) (11 Oct 2022)
- [CVE-2022-41033: Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-41033-microsoft-windows-com-event-system-service-privilege-escalation) (11 Oct 2022)
- [CVE-2022-41040: Microsoft Exchange Server Server-Side Request Forgery Vulnerability](https://junglewise.ai/threats/cve-2022-41040-microsoft-exchange-server-server-side-request-forgery) (30 Sep 2022)
- [CVE-2022-36804: Atlassian Bitbucket Server and Data Center Command Injection Vulnerability](https://junglewise.ai/threats/cve-2022-36804-atlassian-bitbucket-server-and-data-center-command-injection) (30 Sep 2022)
- [CVE-2022-41082: Microsoft Exchange Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-41082-microsoft-exchange-server-remote-code-execution-vulnerability) (30 Sep 2022)
- [CVE-2022-3236: Sophos Firewall Code Injection Vulnerability](https://junglewise.ai/threats/cve-2022-3236-sophos-firewall-code-injection-vulnerability) (23 Sep 2022)
- [CVE-2022-35405: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-35405-zoho-manageengine-multiple-products-remote-code-execution) (22 Sep 2022)
- [CVE-2013-2596: Linux Kernel Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2013-2596-linux-kernel-integer-overflow-vulnerability) (15 Sep 2022)
- [CVE-2013-2597: Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2013-2597-code-aurora-acdb-audio-driver-stack-based-buffer-overflow) (15 Sep 2022)
- [CVE-2013-6282: Linux Kernel Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2013-6282-linux-kernel-improper-input-validation-vulnerability) (15 Sep 2022)
- [CVE-2022-40139: Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability](https://junglewise.ai/threats/cve-2022-40139-trend-micro-apex-one-and-apex-one-as-a-service-improper) (15 Sep 2022)
- [CVE-2010-2568: Microsoft Windows Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2010-2568-microsoft-windows-remote-code-execution-vulnerability) (15 Sep 2022)
- [CVE-2013-2094: Linux Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2013-2094-linux-kernel-privilege-escalation-vulnerability) (15 Sep 2022)
- [CVE-2022-32917: Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-32917-apple-ios-ipados-and-macos-remote-code-execution-vulnerability) (14 Sep 2022)
- [CVE-2022-37969: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation…](https://junglewise.ai/threats/cve-2022-37969-microsoft-windows-common-log-file-system-clfs-driver-privilege) (14 Sep 2022)
- [CVE-2011-4723: D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability](https://junglewise.ai/threats/cve-2011-4723-d-link-dir-300-router-cleartext-storage-of-a-password) (8 Sep 2022)
- [CVE-2017-5521: NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability](https://junglewise.ai/threats/cve-2017-5521-netgear-multiple-devices-exposure-of-sensitive-information) (8 Sep 2022)
- [CVE-2018-13374: Fortinet FortiOS and FortiADC Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2018-13374-fortinet-fortios-and-fortiadc-improper-access-control) (8 Sep 2022)
- [CVE-2018-2628: Oracle WebLogic Server Unspecified Vulnerability](https://junglewise.ai/threats/cve-2018-2628-oracle-weblogic-server-unspecified-vulnerability) (8 Sep 2022)
- [CVE-2018-6530: D-Link Multiple Routers OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2018-6530-d-link-multiple-routers-os-command-injection-vulnerability) (8 Sep 2022)
- [CVE-2018-7445: MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2018-7445-mikrotik-routeros-stack-based-buffer-overflow-vulnerability) (8 Sep 2022)
- [CVE-2020-9934: Apple iOS, iPadOS, and macOS Input Validation Vulnerability](https://junglewise.ai/threats/cve-2020-9934-apple-ios-ipados-and-macos-input-validation-vulnerability) (8 Sep 2022)
- [CVE-2022-26258: D-Link DIR-820L Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-26258-d-link-dir-820l-remote-code-execution-vulnerability) (8 Sep 2022)
- [CVE-2022-27593: QNAP Photo Station Externally Controlled Reference Vulnerability](https://junglewise.ai/threats/cve-2022-27593-qnap-photo-station-externally-controlled-reference-vulnerability) (8 Sep 2022)
- [CVE-2022-3075: Google Chromium Mojo Insufficient Data Validation Vulnerability](https://junglewise.ai/threats/cve-2022-3075-google-chromium-mojo-insufficient-data-validation-vulnerability) (8 Sep 2022)
- [CVE-2011-1823: Android OS Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2011-1823-android-os-privilege-escalation-vulnerability) (8 Sep 2022)
- [CVE-2021-31010: Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability](https://junglewise.ai/threats/cve-2021-31010-apple-ios-macos-watchos-sandbox-bypass-vulnerability) (25 Aug 2022)
- [CVE-2020-28949: PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2020-28949-pear-archive-tar-deserialization-of-untrusted-data-vulnerability) (25 Aug 2022)
- [CVE-2021-38406: Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2021-38406-delta-electronics-dopsoft-2-improper-input-validation) (25 Aug 2022)
- [CVE-2022-2294: WebRTC Heap Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2022-2294-webrtc-heap-buffer-overflow-vulnerability) (25 Aug 2022)
- [CVE-2022-24112: Apache APISIX Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2022-24112-apache-apisix-authentication-bypass-vulnerability) (25 Aug 2022)
- [CVE-2022-24706: Apache CouchDB Insecure Default Initialization of Resource Vulnerability](https://junglewise.ai/threats/cve-2022-24706-apache-couchdb-insecure-default-initialization-of-resource) (25 Aug 2022)
- [CVE-2022-26352: dotCMS Unrestricted Upload of File Vulnerability](https://junglewise.ai/threats/cve-2022-26352-dotcms-unrestricted-upload-of-file-vulnerability) (25 Aug 2022)
- [CVE-2022-22963: Spring Cloud Function Code Injection with a specially crafted SpEL as a routing…](https://junglewise.ai/threats/cve-2022-22963-vmware-tanzu-spring-cloud-function-remote-code-execution) (25 Aug 2022)
- [CVE-2021-39226: Authentication bypass for viewing and deletions of snapshots](https://junglewise.ai/threats/cve-2021-39226-grafana-authentication-bypass-vulnerability) (25 Aug 2022)
- [CVE-2020-36193: Directory Traversal in Archive_Tar](https://junglewise.ai/threats/cve-2020-36193-pear-archive-tar-improper-link-resolution-vulnerability) (25 Aug 2022)
- [CVE-2022-0028: Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2022-0028-palo-alto-networks-pan-os-reflected-amplification-denial-of) (22 Aug 2022)
- [CVE-2022-22536: SAP Multiple Products HTTP Request Smuggling Vulnerability](https://junglewise.ai/threats/cve-2022-22536-sap-multiple-products-http-request-smuggling-vulnerability) (18 Aug 2022)
- [CVE-2022-26923: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-26923-microsoft-active-directory-domain-services-privilege-escalation) (18 Aug 2022)
- [CVE-2022-32894: Apple iOS and macOS Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2022-32894-apple-ios-and-macos-out-of-bounds-write-vulnerability) (18 Aug 2022)
- [CVE-2022-2856: Google Chromium Intents Insufficient Input Validation Vulnerability](https://junglewise.ai/threats/cve-2022-2856-google-chromium-intents-insufficient-input-validation) (18 Aug 2022)
- [CVE-2017-15944: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-15944-palo-alto-networks-pan-os-remote-code-execution-vulnerability) (18 Aug 2022)
- [CVE-2022-32893: Apple iOS and macOS Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2022-32893-apple-ios-and-macos-out-of-bounds-write-vulnerability) (18 Aug 2022)
- [CVE-2022-21971: Microsoft Windows Runtime Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-21971-microsoft-windows-runtime-remote-code-execution-vulnerability) (18 Aug 2022)
- [CVE-2022-27925: Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability](https://junglewise.ai/threats/cve-2022-27925-synacor-zimbra-collaboration-suite-zcs-arbitrary-file-upload) (11 Aug 2022)
- [CVE-2022-37042: Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2022-37042-synacor-zimbra-collaboration-suite-zcs-authentication-bypass) (11 Aug 2022)
- [CVE-2022-30333: RARLAB UnRAR Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2022-30333-rarlab-unrar-directory-traversal-vulnerability) (9 Aug 2022)
- [CVE-2022-34713: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-34713-microsoft-windows-support-diagnostic-tool-msdt-remote-code) (9 Aug 2022)
- [CVE-2022-27924: Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability](https://junglewise.ai/threats/cve-2022-27924-synacor-zimbra-collaboration-suite-zcs-command-injection) (4 Aug 2022)
- [CVE-2022-26138: Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability](https://junglewise.ai/threats/cve-2022-26138-atlassian-questions-for-confluence-app-hard-coded-credentials) (29 Jul 2022)
- [CVE-2022-22047: Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation…](https://junglewise.ai/threats/cve-2022-22047-microsoft-windows-client-server-runtime-subsystem-csrss-privilege) (12 Jul 2022)
- [CVE-2022-26925: Microsoft Windows LSA Spoofing Vulnerability](https://junglewise.ai/threats/cve-2022-26925-microsoft-windows-lsa-spoofing-vulnerability) (1 Jul 2022)
- [CVE-2018-4344: Apple Multiple Products Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2018-4344-apple-multiple-products-memory-corruption-vulnerability) (27 Jun 2022)
- [CVE-2019-8605: Apple Multiple Products Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2019-8605-apple-multiple-products-use-after-free-vulnerability) (27 Jun 2022)
- [CVE-2020-3837: Apple Multiple Products Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2020-3837-apple-multiple-products-memory-corruption-vulnerability) (27 Jun 2022)
- [CVE-2020-9907: Apple Multiple Products Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2020-9907-apple-multiple-products-memory-corruption-vulnerability) (27 Jun 2022)
- [CVE-2021-30533: Google Chromium PopupBlocker Security Bypass Vulnerability](https://junglewise.ai/threats/cve-2021-30533-google-chromium-popupblocker-security-bypass-vulnerability) (27 Jun 2022)
- [CVE-2021-30983: Apple iOS and iPadOS Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-30983-apple-ios-and-ipados-buffer-overflow-vulnerability) (27 Jun 2022)
- [CVE-2021-4034: Red Hat Polkit Out-of-Bounds Read and Write Vulnerability](https://junglewise.ai/threats/cve-2021-4034-red-hat-polkit-out-of-bounds-read-and-write-vulnerability) (27 Jun 2022)
- [CVE-2022-29499: Mitel MiVoice Connect Data Validation Vulnerability](https://junglewise.ai/threats/cve-2022-29499-mitel-mivoice-connect-data-validation-vulnerability) (27 Jun 2022)
- [CVE-2022-30190: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-30190-microsoft-windows-support-diagnostic-tool-msdt-remote-code) (14 Jun 2022)
- [CVE-2016-2386: SAP NetWeaver SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2016-2386-sap-netweaver-sql-injection-vulnerability) (9 Jun 2022)
- [CVE-2016-2388: SAP NetWeaver Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2016-2388-sap-netweaver-information-disclosure-vulnerability) (9 Jun 2022)
- [CVE-2021-38163: SAP NetWeaver Unrestricted File Upload Vulnerability](https://junglewise.ai/threats/cve-2021-38163-sap-netweaver-unrestricted-file-upload-vulnerability) (9 Jun 2022)
- [CVE-2006-2492: Microsoft Word Malformed Object Pointer Vulnerability](https://junglewise.ai/threats/cve-2006-2492-microsoft-word-malformed-object-pointer-vulnerability) (8 Jun 2022)
- [CVE-2007-5659: Adobe Acrobat and Reader Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2007-5659-adobe-acrobat-and-reader-buffer-overflow-vulnerability) (8 Jun 2022)
- [CVE-2008-0655: Adobe Acrobat and Reader Unspecified Vulnerability](https://junglewise.ai/threats/cve-2008-0655-adobe-acrobat-and-reader-unspecified-vulnerability) (8 Jun 2022)
- [CVE-2009-0557: Microsoft Office Object Record Corruption Vulnerability](https://junglewise.ai/threats/cve-2009-0557-microsoft-office-object-record-corruption-vulnerability) (8 Jun 2022)
- [CVE-2009-0563: Microsoft Office Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2009-0563-microsoft-office-buffer-overflow-vulnerability) (8 Jun 2022)
- [CVE-2009-1862: Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability](https://junglewise.ai/threats/cve-2009-1862-adobe-acrobat-and-reader-flash-player-unspecified-vulnerability) (8 Jun 2022)
- [CVE-2009-3953: Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2009-3953-adobe-acrobat-and-reader-universal-3d-remote-code-execution) (8 Jun 2022)
- [CVE-2009-4324: Adobe Acrobat and Reader Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2009-4324-adobe-acrobat-and-reader-use-after-free-vulnerability) (8 Jun 2022)
- [CVE-2010-1297: Adobe Flash Player Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2010-1297-adobe-flash-player-memory-corruption-vulnerability) (8 Jun 2022)
- [CVE-2010-2572: Microsoft PowerPoint Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2010-2572-microsoft-powerpoint-buffer-overflow-vulnerability) (8 Jun 2022)
- [CVE-2010-2883: Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2010-2883-adobe-acrobat-and-reader-stack-based-buffer-overflow-vulnerability) (8 Jun 2022)
- [CVE-2011-0609: Adobe Flash Player Unspecified Vulnerability](https://junglewise.ai/threats/cve-2011-0609-adobe-flash-player-unspecified-vulnerability) (8 Jun 2022)
- [CVE-2011-2462: Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2011-2462-adobe-reader-and-acrobat-universal-3d-memory-corruption) (8 Jun 2022)
- [CVE-2012-0151: Microsoft Windows Authenticode Signature Verification Remote Code Execution…](https://junglewise.ai/threats/cve-2012-0151-microsoft-windows-authenticode-signature-verification-remote-code) (8 Jun 2022)
- [CVE-2012-0754: Adobe Flash Player Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2012-0754-adobe-flash-player-memory-corruption-vulnerability) (8 Jun 2022)
- [CVE-2012-0767: Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2012-0767-adobe-flash-player-cross-site-scripting-xss-vulnerability) (8 Jun 2022)
- [CVE-2012-1889: Microsoft XML Core Services Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2012-1889-microsoft-xml-core-services-memory-corruption-vulnerability) (8 Jun 2022)
- [CVE-2012-4969: Microsoft Internet Explorer Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2012-4969-microsoft-internet-explorer-use-after-free-vulnerability) (8 Jun 2022)
- [CVE-2012-5054: Adobe Flash Player Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2012-5054-adobe-flash-player-integer-overflow-vulnerability) (8 Jun 2022)
- [CVE-2013-1331: Microsoft Office Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2013-1331-microsoft-office-buffer-overflow-vulnerability) (8 Jun 2022)
- [CVE-2016-1646: Google Chromium V8 Out-of-Bounds Read Vulnerability](https://junglewise.ai/threats/cve-2016-1646-google-chromium-v8-out-of-bounds-read-vulnerability) (8 Jun 2022)
- [CVE-2016-5198: Google Chromium V8 Out-of-Bounds Memory Vulnerability](https://junglewise.ai/threats/cve-2016-5198-google-chromium-v8-out-of-bounds-memory-vulnerability) (8 Jun 2022)
- [CVE-2018-4990: Adobe Acrobat and Reader Double Free Vulnerability](https://junglewise.ai/threats/cve-2018-4990-adobe-acrobat-and-reader-double-free-vulnerability) (8 Jun 2022)
- [CVE-2017-5030: Google Chromium V8 Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2017-5030-google-chromium-v8-memory-corruption-vulnerability) (8 Jun 2022)
- [CVE-2017-5070: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2017-5070-google-chromium-v8-type-confusion-vulnerability) (8 Jun 2022)
- [CVE-2017-6862: NETGEAR Multiple Devices Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2017-6862-netgear-multiple-devices-buffer-overflow-vulnerability) (8 Jun 2022)
- [CVE-2018-17463: Google Chromium V8 Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2018-17463-google-chromium-v8-remote-code-execution-vulnerability) (8 Jun 2022)
- [CVE-2018-17480: Google Chromium V8 Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2018-17480-google-chromium-v8-out-of-bounds-write-vulnerability) (8 Jun 2022)
- [CVE-2018-6065: Google Chromium V8 Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2018-6065-google-chromium-v8-integer-overflow-vulnerability) (8 Jun 2022)
- [CVE-2019-15271: Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2019-15271-cisco-rv-series-routers-deserialization-of-untrusted-data) (8 Jun 2022)
- [CVE-2019-5825: Google Chromium V8 Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2019-5825-google-chromium-v8-out-of-bounds-write-vulnerability) (8 Jun 2022)
- [CVE-2019-7192: QNAP Photo Station Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2019-7192-qnap-photo-station-improper-access-control-vulnerability) (8 Jun 2022)
- [CVE-2019-7193: QNAP QTS Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2019-7193-qnap-qts-improper-input-validation-vulnerability) (8 Jun 2022)
- [CVE-2019-7194: QNAP Photo Station Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2019-7194-qnap-photo-station-path-traversal-vulnerability) (8 Jun 2022)
- [CVE-2019-7195: QNAP Photo Station Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2019-7195-qnap-photo-station-path-traversal-vulnerability) (8 Jun 2022)
- [CVE-2022-26134: Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-26134-atlassian-confluence-server-and-data-center-remote-code-execution) (2 Jun 2022)
- [CVE-2015-8651: Adobe Flash Player Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2015-8651-adobe-flash-player-integer-overflow-vulnerability) (25 May 2022)
- [CVE-2010-0738: Red Hat JBoss Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2010-0738-red-hat-jboss-authentication-bypass-vulnerability) (25 May 2022)
- [CVE-2010-0840: Oracle JRE Unspecified Vulnerability](https://junglewise.ai/threats/cve-2010-0840-oracle-jre-unspecified-vulnerability) (25 May 2022)
- [CVE-2010-1428: Red Hat JBoss Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2010-1428-red-hat-jboss-information-disclosure-vulnerability) (25 May 2022)
- [CVE-2012-1710: Oracle Fusion Middleware Unspecified Vulnerability](https://junglewise.ai/threats/cve-2012-1710-oracle-fusion-middleware-unspecified-vulnerability) (25 May 2022)
- [CVE-2013-0074: Microsoft Silverlight Double Dereference Vulnerability](https://junglewise.ai/threats/cve-2013-0074-microsoft-silverlight-double-dereference-vulnerability) (25 May 2022)
- [CVE-2013-0422: Oracle JRE Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2013-0422-oracle-jre-remote-code-execution-vulnerability) (25 May 2022)
- [CVE-2013-0431: Oracle JRE Sandbox Bypass Vulnerability](https://junglewise.ai/threats/cve-2013-0431-oracle-jre-sandbox-bypass-vulnerability) (25 May 2022)
- [CVE-2013-2423: Oracle JRE Unspecified Vulnerability](https://junglewise.ai/threats/cve-2013-2423-oracle-jre-unspecified-vulnerability) (25 May 2022)
- [CVE-2013-3896: Microsoft Silverlight Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2013-3896-microsoft-silverlight-information-disclosure-vulnerability) (25 May 2022)
- [CVE-2013-3993: IBM InfoSphere BigInsights Invalid Input Vulnerability](https://junglewise.ai/threats/cve-2013-3993-ibm-infosphere-biginsights-invalid-input-vulnerability) (25 May 2022)
- [CVE-2013-7331: Microsoft Internet Explorer Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2013-7331-microsoft-internet-explorer-information-disclosure-vulnerability) (25 May 2022)
- [CVE-2014-0546: Adobe Reader and Acrobat Sandbox Bypass Vulnerability](https://junglewise.ai/threats/cve-2014-0546-adobe-reader-and-acrobat-sandbox-bypass-vulnerability) (25 May 2022)
- [CVE-2014-2817: Microsoft Internet Explorer Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2014-2817-microsoft-internet-explorer-privilege-escalation-vulnerability) (25 May 2022)
- [CVE-2014-3153: Linux Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2014-3153-linux-kernel-privilege-escalation-vulnerability) (25 May 2022)
- [CVE-2014-4077: Microsoft IME Japanese Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2014-4077-microsoft-ime-japanese-privilege-escalation-vulnerability) (25 May 2022)
- [CVE-2014-4123: Microsoft Internet Explorer Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2014-4123-microsoft-internet-explorer-privilege-escalation-vulnerability) (25 May 2022)
- [CVE-2014-4148: Microsoft Windows Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2014-4148-microsoft-windows-remote-code-execution-vulnerability) (25 May 2022)
- [CVE-2014-8439: Adobe Flash Player Dereferenced Pointer Vulnerability](https://junglewise.ai/threats/cve-2014-8439-adobe-flash-player-dereferenced-pointer-vulnerability) (25 May 2022)
- [CVE-2015-0016: Microsoft Windows TS WebProxy Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2015-0016-microsoft-windows-ts-webproxy-directory-traversal-vulnerability) (25 May 2022)
- [CVE-2015-0071: Microsoft Internet Explorer ASLR Bypass Vulnerability](https://junglewise.ai/threats/cve-2015-0071-microsoft-internet-explorer-aslr-bypass-vulnerability) (25 May 2022)
- [CVE-2015-0310: Adobe Flash Player ASLR Bypass Vulnerability](https://junglewise.ai/threats/cve-2015-0310-adobe-flash-player-aslr-bypass-vulnerability) (25 May 2022)
- [CVE-2015-1671: Microsoft Windows Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-1671-microsoft-windows-remote-code-execution-vulnerability) (25 May 2022)
- [CVE-2015-1769: Microsoft Windows Mount Manager Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2015-1769-microsoft-windows-mount-manager-privilege-escalation-vulnerability) (25 May 2022)
- [CVE-2015-2360: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2015-2360-microsoft-win32k-privilege-escalation-vulnerability) (25 May 2022)
- [CVE-2015-2425: Microsoft Internet Explorer Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2015-2425-microsoft-internet-explorer-memory-corruption-vulnerability) (25 May 2022)
- [CVE-2015-4495: Mozilla Firefox Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2015-4495-mozilla-firefox-security-feature-bypass-vulnerability) (25 May 2022)
- [CVE-2015-6175: Microsoft Windows Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2015-6175-microsoft-windows-kernel-privilege-escalation-vulnerability) (25 May 2022)
- [CVE-2016-0034: Microsoft Silverlight Runtime Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2016-0034-microsoft-silverlight-runtime-remote-code-execution-vulnerability) (25 May 2022)
- [CVE-2016-0984: Adobe Flash Player and AIR Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2016-0984-adobe-flash-player-and-air-use-after-free-vulnerability) (25 May 2022)
- [CVE-2016-1010: Adobe Flash Player and AIR Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2016-1010-adobe-flash-player-and-air-integer-overflow-vulnerability) (25 May 2022)
- [CVE-2016-3393: Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2016-3393-microsoft-windows-graphics-device-interface-gdi-remote-code) (25 May 2022)
- [CVE-2016-7256: Microsoft Windows Open Type Font Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2016-7256-microsoft-windows-open-type-font-remote-code-execution) (25 May 2022)
- [CVE-2019-3010: Oracle Solaris Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-3010-oracle-solaris-privilege-escalation-vulnerability) (25 May 2022)
- [CVE-2017-8291: Artifex Ghostscript Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2017-8291-artifex-ghostscript-type-confusion-vulnerability) (24 May 2022)
- [CVE-2016-0162: Microsoft Internet Explorer Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2016-0162-microsoft-internet-explorer-information-disclosure-vulnerability) (24 May 2022)
- [CVE-2017-0005: Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2017-0005-microsoft-windows-graphics-device-interface-gdi-privilege) (24 May 2022)
- [CVE-2016-3298: Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2016-3298-microsoft-internet-explorer-messaging-api-information-disclosure) (24 May 2022)
- [CVE-2016-3351: Microsoft Internet Explorer and Edge Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2016-3351-microsoft-internet-explorer-and-edge-information-disclosure) (24 May 2022)
- [CVE-2017-0022: Microsoft XML Core Services Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2017-0022-microsoft-xml-core-services-information-disclosure-vulnerability) (24 May 2022)
- [CVE-2016-4655: Apple iOS Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2016-4655-apple-ios-information-disclosure-vulnerability) (24 May 2022)
- [CVE-2016-4656: Apple iOS Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2016-4656-apple-ios-memory-corruption-vulnerability) (24 May 2022)
- [CVE-2016-4657: Apple iOS Webkit Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2016-4657-apple-ios-webkit-memory-corruption-vulnerability) (24 May 2022)
- [CVE-2016-6366: Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2016-6366-cisco-adaptive-security-appliance-asa-snmp-buffer-overflow) (24 May 2022)
- [CVE-2016-6367: Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2016-6367-cisco-adaptive-security-appliance-asa-cli-remote-code-execution) (24 May 2022)
- [CVE-2017-0147: Microsoft Windows SMBv1 Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2017-0147-microsoft-windows-smbv1-information-disclosure-vulnerability) (24 May 2022)
- [CVE-2017-0149: Microsoft Internet Explorer Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2017-0149-microsoft-internet-explorer-memory-corruption-vulnerability) (24 May 2022)
- [CVE-2017-0210: Microsoft Internet Explorer Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2017-0210-microsoft-internet-explorer-privilege-escalation-vulnerability) (24 May 2022)
- [CVE-2017-18362: Kaseya VSA SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2017-18362-kaseya-vsa-sql-injection-vulnerability) (24 May 2022)
- [CVE-2017-8543: Microsoft Windows Search Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-8543-microsoft-windows-search-remote-code-execution-vulnerability) (24 May 2022)
- [CVE-2018-19943: QNAP NAS File Station Cross-Site Scripting Vulnerability](https://junglewise.ai/threats/cve-2018-19943-qnap-nas-file-station-cross-site-scripting-vulnerability) (24 May 2022)
- [CVE-2018-19949: QNAP NAS File Station Command Injection Vulnerability](https://junglewise.ai/threats/cve-2018-19949-qnap-nas-file-station-command-injection-vulnerability) (24 May 2022)
- [CVE-2018-19953: QNAP NAS File Station Cross-Site Scripting Vulnerability](https://junglewise.ai/threats/cve-2018-19953-qnap-nas-file-station-cross-site-scripting-vulnerability) (24 May 2022)
- [CVE-2018-8611: Microsoft Windows Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2018-8611-microsoft-windows-kernel-privilege-escalation-vulnerability) (24 May 2022)
- [CVE-2018-5002: Adobe Flash Player Stack-based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2018-5002-adobe-flash-player-stack-based-buffer-overflow-vulnerability) (23 May 2022)
- [CVE-2018-8589: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2018-8589-microsoft-win32k-privilege-escalation-vulnerability) (23 May 2022)
- [CVE-2019-0676: Microsoft Internet Explorer Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2019-0676-microsoft-internet-explorer-information-disclosure-vulnerability) (23 May 2022)
- [CVE-2019-0703: Microsoft Windows SMB Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2019-0703-microsoft-windows-smb-information-disclosure-vulnerability) (23 May 2022)
- [CVE-2019-0880: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-0880-microsoft-windows-privilege-escalation-vulnerability) (23 May 2022)
- [CVE-2019-1130: Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-1130-microsoft-windows-appx-deployment-service-privilege-escalation) (23 May 2022)
- [CVE-2019-11707: Mozilla Firefox and Thunderbird Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2019-11707-mozilla-firefox-and-thunderbird-type-confusion-vulnerability) (23 May 2022)
- [CVE-2019-11708: Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability](https://junglewise.ai/threats/cve-2019-11708-mozilla-firefox-and-thunderbird-sandbox-escape-vulnerability) (23 May 2022)
- [CVE-2019-13720: Google Chrome WebAudio Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2019-13720-google-chrome-webaudio-use-after-free-vulnerability) (23 May 2022)
- [CVE-2019-1385: Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-1385-microsoft-windows-appx-deployment-extensions-privilege-escalation) (23 May 2022)
- [CVE-2019-18426: WhatsApp Cross-Site Scripting Vulnerability](https://junglewise.ai/threats/cve-2019-18426-whatsapp-cross-site-scripting-vulnerability) (23 May 2022)
- [CVE-2019-7286: Apple Multiple Products Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2019-7286-apple-multiple-products-memory-corruption-vulnerability) (23 May 2022)
- [CVE-2019-7287: Apple iOS Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2019-7287-apple-ios-memory-corruption-vulnerability) (23 May 2022)
- [CVE-2019-8720: WebKitGTK Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2019-8720-webkitgtk-memory-corruption-vulnerability) (23 May 2022)
- [CVE-2020-0638: Microsoft Update Notification Manager Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2020-0638-microsoft-update-notification-manager-privilege-escalation) (23 May 2022)
- [CVE-2020-1027: Microsoft Windows Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2020-1027-microsoft-windows-kernel-privilege-escalation-vulnerability) (23 May 2022)
- [CVE-2021-0920: Android Kernel Race Condition Vulnerability](https://junglewise.ai/threats/cve-2021-0920-android-kernel-race-condition-vulnerability) (23 May 2022)
- [CVE-2021-1048: Android Kernel Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-1048-android-kernel-use-after-free-vulnerability) (23 May 2022)
- [CVE-2021-30883: Apple Multiple Products Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2021-30883-apple-multiple-products-memory-corruption-vulnerability) (23 May 2022)
- [CVE-2022-20821: Cisco IOS XR Open Port Vulnerability](https://junglewise.ai/threats/cve-2022-20821-cisco-ios-xr-open-port-vulnerability) (23 May 2022)
- [CVE-2019-5786: Google Puppeteer use-after-free in Chromium FileReader](https://junglewise.ai/threats/cve-2019-5786-google-chrome-blink-use-after-free-vulnerability) (23 May 2022)
- [CVE-2022-30525: Zyxel Multiple Firewalls OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2022-30525-zyxel-multiple-firewalls-os-command-injection-vulnerability) (16 May 2022)
- [CVE-2022-22947: Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint…](https://junglewise.ai/threats/cve-2022-22947-vmware-spring-cloud-gateway-code-injection-vulnerability) (16 May 2022)
- [CVE-2022-1388: F5 BIG-IP Missing Authentication Vulnerability](https://junglewise.ai/threats/cve-2022-1388-f5-big-ip-missing-authentication-vulnerability) (10 May 2022)
- [CVE-2021-1789: Apple Multiple Products Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2021-1789-apple-multiple-products-type-confusion-vulnerability) (4 May 2022)
- [CVE-2014-0160: OpenSSL Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2014-0160-openssl-information-disclosure-vulnerability) (4 May 2022)
- [CVE-2014-0322: Microsoft Internet Explorer Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2014-0322-microsoft-internet-explorer-use-after-free-vulnerability) (4 May 2022)
- [CVE-2014-4113: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2014-4113-microsoft-win32k-privilege-escalation-vulnerability) (4 May 2022)
- [CVE-2019-8506: Apple Multiple Products Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2019-8506-apple-multiple-products-type-confusion-vulnerability) (4 May 2022)
- [CVE-2019-1003029: Sandbox bypass in Script Security Plugin](https://junglewise.ai/threats/cve-2019-1003029-jenkins-script-security-plugin-sandbox-bypass-vulnerability) (25 Apr 2022)
- [CVE-2021-41357: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-41357-microsoft-win32k-privilege-escalation-vulnerability) (25 Apr 2022)
- [CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-0847-linux-kernel-privilege-escalation-vulnerability) (25 Apr 2022)
- [CVE-2022-21919: Microsoft Windows User Profile Service Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-21919-microsoft-windows-user-profile-service-privilege-escalation) (25 Apr 2022)
- [CVE-2022-26904: Microsoft Windows User Profile Service Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-26904-microsoft-windows-user-profile-service-privilege-escalation) (25 Apr 2022)
- [CVE-2022-29464: WSO2 Multiple Products Unrestrictive Upload of File Vulnerability](https://junglewise.ai/threats/cve-2022-29464-wso2-multiple-products-unrestrictive-upload-of-file-vulnerability) (25 Apr 2022)
- [CVE-2021-40450: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-40450-microsoft-win32k-privilege-escalation-vulnerability) (25 Apr 2022)
- [CVE-2018-6882: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2018-6882-synacor-zimbra-collaboration-suite-zcs-cross-site-scripting-xss) (19 Apr 2022)
- [CVE-2019-3568: WhatsApp VOIP Stack Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2019-3568-whatsapp-voip-stack-buffer-overflow-vulnerability) (19 Apr 2022)
- [CVE-2022-22718: Microsoft Windows Print Spooler Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-22718-microsoft-windows-print-spooler-privilege-escalation) (19 Apr 2022)
- [CVE-2010-5330: Ubiquiti AirOS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2010-5330-ubiquiti-airos-command-injection-vulnerability) (15 Apr 2022)
- [CVE-2018-7841: Schneider Electric U.motion Builder SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2018-7841-schneider-electric-u-motion-builder-sql-injection-vulnerability) (15 Apr 2022)
- [CVE-2016-4523: Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2016-4523-trihedral-vtscada-formerly-vts-denial-of-service-vulnerability) (15 Apr 2022)
- [CVE-2022-22960: VMware Multiple Products Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-22960-vmware-multiple-products-privilege-escalation-vulnerability) (15 Apr 2022)
- [CVE-2019-3929: Crestron Multiple Products Command Injection Vulnerability](https://junglewise.ai/threats/cve-2019-3929-crestron-multiple-products-command-injection-vulnerability) (15 Apr 2022)
- [CVE-2014-0780: InduSoft Web Studio NTWebServer Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2014-0780-indusoft-web-studio-ntwebserver-directory-traversal-vulnerability) (15 Apr 2022)
- [CVE-2022-1364: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2022-1364-google-chromium-v8-type-confusion-vulnerability) (15 Apr 2022)
- [CVE-2007-3010: Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2007-3010-alcatel-omnipcx-enterprise-remote-code-execution-vulnerability) (15 Apr 2022)
- [CVE-2019-16057: D-Link DNS-320 Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-16057-d-link-dns-320-remote-code-execution-vulnerability) (15 Apr 2022)
- [CVE-2022-22954: VMware Workspace ONE Access and Identity Manager Server-Side Template Injection…](https://junglewise.ai/threats/cve-2022-22954-vmware-workspace-one-access-and-identity-manager-server-side) (14 Apr 2022)
- [CVE-2018-7602: Drupal Core Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2018-7602-drupal-core-remote-code-execution-vulnerability) (13 Apr 2022)
- [CVE-2015-5122: Adobe Flash Player Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2015-5122-adobe-flash-player-use-after-free-vulnerability) (13 Apr 2022)
- [CVE-2014-9163: Adobe Flash Player Stack-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2014-9163-adobe-flash-player-stack-based-buffer-overflow-vulnerability) (13 Apr 2022)
- [CVE-2015-0311: Adobe Flash Player Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-0311-adobe-flash-player-remote-code-execution-vulnerability) (13 Apr 2022)
- [CVE-2015-0313: Adobe Flash Player Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2015-0313-adobe-flash-player-use-after-free-vulnerability) (13 Apr 2022)
- [CVE-2015-2502: Microsoft Internet Explorer Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2015-2502-microsoft-internet-explorer-memory-corruption-vulnerability) (13 Apr 2022)
- [CVE-2015-3113: Adobe Flash Player Heap-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2015-3113-adobe-flash-player-heap-based-buffer-overflow-vulnerability) (13 Apr 2022)
- [CVE-2015-5123: Adobe Flash Player Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2015-5123-adobe-flash-player-use-after-free-vulnerability) (13 Apr 2022)
- [CVE-2018-20753: Kaseya VSA Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2018-20753-kaseya-vsa-remote-code-execution-vulnerability) (13 Apr 2022)
- [CVE-2022-24521: Microsoft Windows CLFS Driver Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-24521-microsoft-windows-clfs-driver-privilege-escalation-vulnerability) (13 Apr 2022)
- [CVE-2021-42287: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-42287-microsoft-active-directory-domain-services-privilege-escalation) (11 Apr 2022)
- [CVE-2022-23176: WatchGuard Firebox and XTM Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-23176-watchguard-firebox-and-xtm-privilege-escalation-vulnerability) (11 Apr 2022)
- [CVE-2021-42278: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-42278-microsoft-active-directory-domain-services-privilege-escalation) (11 Apr 2022)
- [CVE-2021-39793: Google Pixel Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2021-39793-google-pixel-out-of-bounds-write-vulnerability) (11 Apr 2022)
- [CVE-2021-27852: Checkbox Survey Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2021-27852-checkbox-survey-deserialization-of-untrusted-data-vulnerability) (11 Apr 2022)
- [CVE-2021-22600: Linux Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-22600-linux-kernel-privilege-escalation-vulnerability) (11 Apr 2022)
- [CVE-2020-2509: QNAP Network-Attached Storage (NAS) Command Injection Vulnerability](https://junglewise.ai/threats/cve-2020-2509-qnap-network-attached-storage-nas-command-injection-vulnerability) (11 Apr 2022)
- [CVE-2017-11317: Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability](https://junglewise.ai/threats/cve-2017-11317-telerik-ui-for-asp-net-ajax-unrestricted-file-upload) (11 Apr 2022)
- [CVE-2017-0148: Microsoft SMBv1 Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-0148-microsoft-smbv1-server-remote-code-execution-vulnerability) (6 Apr 2022)
- [CVE-2021-3156: Sudo Heap-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-3156-sudo-heap-based-buffer-overflow-vulnerability) (6 Apr 2022)
- [CVE-2021-31166: Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-31166-microsoft-http-protocol-stack-remote-code-execution-vulnerability) (6 Apr 2022)
- [CVE-2022-22675: Apple macOS Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2022-22675-apple-macos-out-of-bounds-write-vulnerability) (4 Apr 2022)
- [CVE-2022-22674: Apple macOS Out-of-Bounds Read Vulnerability](https://junglewise.ai/threats/cve-2022-22674-apple-macos-out-of-bounds-read-vulnerability) (4 Apr 2022)
- [CVE-2021-45382: D-Link Multiple Routers Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-45382-d-link-multiple-routers-remote-code-execution-vulnerability) (4 Apr 2022)
- [CVE-2022-22965: Remote Code Execution in Spring Framework](https://junglewise.ai/threats/cve-2022-22965-spring-framework-jdk-9-remote-code-execution-vulnerability) (4 Apr 2022)
- [CVE-2018-10561: Dasan GPON Routers Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2018-10561-dasan-gpon-routers-authentication-bypass-vulnerability) (31 Mar 2022)
- [CVE-2018-10562: Dasan GPON Routers Command Injection Vulnerability](https://junglewise.ai/threats/cve-2018-10562-dasan-gpon-routers-command-injection-vulnerability) (31 Mar 2022)
- [CVE-2021-21551: Dell dbutil Driver Insufficient Access Control Vulnerability](https://junglewise.ai/threats/cve-2021-21551-dell-dbutil-driver-insufficient-access-control-vulnerability) (31 Mar 2022)
- [CVE-2021-28799: QNAP NAS Improper Authorization Vulnerability](https://junglewise.ai/threats/cve-2021-28799-qnap-nas-improper-authorization-vulnerability) (31 Mar 2022)
- [CVE-2021-34484: Microsoft Windows User Profile Service Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-34484-microsoft-windows-user-profile-service-privilege-escalation) (31 Mar 2022)
- [CVE-2022-26871: Trend Micro Apex Central Arbitrary File Upload Vulnerability](https://junglewise.ai/threats/cve-2022-26871-trend-micro-apex-central-arbitrary-file-upload-vulnerability) (31 Mar 2022)
- [CVE-2022-1040: Sophos Firewall Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2022-1040-sophos-firewall-authentication-bypass-vulnerability) (31 Mar 2022)
- [CVE-2016-7201: ChakraCore RCE Vulnerability](https://junglewise.ai/threats/cve-2016-7201-microsoft-edge-memory-corruption-vulnerability) (28 Mar 2022)
- [CVE-2016-7200: ChakraCore RCE Vulnerability](https://junglewise.ai/threats/cve-2016-7200-microsoft-edge-memory-corruption-vulnerability) (28 Mar 2022)
- [CVE-2021-26085: Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability](https://junglewise.ai/threats/cve-2021-26085-atlassian-confluence-server-pre-authorization-arbitrary-file-read) (28 Mar 2022)
- [CVE-2012-2034: Adobe Flash Player Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2012-2034-adobe-flash-player-memory-corruption-vulnerability) (28 Mar 2022)
- [CVE-2012-2539: Microsoft Word Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2012-2539-microsoft-word-remote-code-execution-vulnerability) (28 Mar 2022)
- [CVE-2010-4398: Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2010-4398-microsoft-windows-kernel-stack-based-buffer-overflow-vulnerability) (28 Mar 2022)
- [CVE-2011-2005: Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2011-2005-microsoft-ancillary-function-driver-afd-sys-improper-input) (28 Mar 2022)
- [CVE-2012-0518: Oracle Fusion Middleware Unspecified Vulnerability](https://junglewise.ai/threats/cve-2012-0518-oracle-fusion-middleware-unspecified-vulnerability) (28 Mar 2022)
- [CVE-2012-5076: Oracle Java SE Sandbox Bypass Vulnerability](https://junglewise.ai/threats/cve-2012-5076-oracle-java-se-sandbox-bypass-vulnerability) (28 Mar 2022)
- [CVE-2013-1690: Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2013-1690-mozilla-firefox-and-thunderbird-denial-of-service-vulnerability) (28 Mar 2022)
- [CVE-2013-2465: Oracle Java SE Unspecified Vulnerability](https://junglewise.ai/threats/cve-2013-2465-oracle-java-se-unspecified-vulnerability) (28 Mar 2022)
- [CVE-2013-2551: Microsoft Internet Explorer Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2013-2551-microsoft-internet-explorer-use-after-free-vulnerability) (28 Mar 2022)
- [CVE-2013-2729: Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2013-2729-adobe-reader-and-acrobat-arbitrary-integer-overflow-vulnerability) (28 Mar 2022)
- [CVE-2013-3660: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2013-3660-microsoft-win32k-privilege-escalation-vulnerability) (28 Mar 2022)
- [CVE-2015-1770: Microsoft Office Uninitialized Memory Use Vulnerability](https://junglewise.ai/threats/cve-2015-1770-microsoft-office-uninitialized-memory-use-vulnerability) (28 Mar 2022)
- [CVE-2015-2419: Microsoft Internet Explorer Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2015-2419-microsoft-internet-explorer-memory-corruption-vulnerability) (28 Mar 2022)
- [CVE-2015-2426: Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-2426-microsoft-windows-adobe-type-manager-library-remote-code-execution) (28 Mar 2022)
- [CVE-2016-0040: Microsoft Windows Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2016-0040-microsoft-windows-kernel-privilege-escalation-vulnerability) (28 Mar 2022)
- [CVE-2016-0151: Microsoft Windows CSRSS Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2016-0151-microsoft-windows-csrss-security-feature-bypass-vulnerability) (28 Mar 2022)
- [CVE-2016-0189: Microsoft Internet Explorer Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2016-0189-microsoft-internet-explorer-memory-corruption-vulnerability) (28 Mar 2022)
- [CVE-2017-0037: Microsoft Edge and Internet Explorer Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2017-0037-microsoft-edge-and-internet-explorer-type-confusion-vulnerability) (28 Mar 2022)
- [CVE-2017-0059: Microsoft Internet Explorer Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2017-0059-microsoft-internet-explorer-information-disclosure-vulnerability) (28 Mar 2022)
- [CVE-2017-0213: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2017-0213-microsoft-windows-privilege-escalation-vulnerability) (28 Mar 2022)
- [CVE-2018-8440: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2018-8440-microsoft-windows-privilege-escalation-vulnerability) (28 Mar 2022)
- [CVE-2018-8405: Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2018-8405-microsoft-directx-graphics-kernel-privilege-escalation) (28 Mar 2022)
- [CVE-2018-8406: Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2018-8406-microsoft-directx-graphics-kernel-privilege-escalation) (28 Mar 2022)
- [CVE-2019-7483: SonicWall SMA100 Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2019-7483-sonicwall-sma100-directory-traversal-vulnerability) (28 Mar 2022)
- [CVE-2021-20028: SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2021-20028-sonicwall-secure-remote-access-sra-sql-injection-vulnerability) (28 Mar 2022)
- [CVE-2021-34486: Microsoft Windows Event Tracing Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-34486-microsoft-windows-event-tracing-privilege-escalation) (28 Mar 2022)
- [CVE-2021-38646: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-38646-microsoft-office-access-connectivity-engine-remote-code-execution) (28 Mar 2022)
- [CVE-2022-0543: Debian-specific Redis Server Lua Sandbox Escape Vulnerability](https://junglewise.ai/threats/cve-2022-0543-debian-specific-redis-server-lua-sandbox-escape-vulnerability) (28 Mar 2022)
- [CVE-2022-1096: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2022-1096-google-chromium-v8-type-confusion-vulnerability) (28 Mar 2022)
- [CVE-2014-3120: Elasticsearch Improper Access Control vulnerability](https://junglewise.ai/threats/cve-2014-3120-elasticsearch-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2015-1427: Improper Access Control in Elasticsearch](https://junglewise.ai/threats/cve-2015-1427-elasticsearch-groovy-scripting-engine-remote-code-execution) (25 Mar 2022)
- [CVE-2017-12617: Unrestricted Upload of File with Dangerous Type Apache Tomcat](https://junglewise.ai/threats/cve-2017-12617-apache-tomcat-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2019-6340: Drupal Core Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-6340-drupal-core-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2019-1003030: Sandbox bypass in Jenkins Pipeline: Groovy Plugin](https://junglewise.ai/threats/cve-2019-1003030-jenkins-matrix-project-plugin-remote-code-execution) (25 Mar 2022)
- [CVE-2013-2251: Code injection in Apache Struts](https://junglewise.ai/threats/cve-2013-2251-apache-struts-improper-input-validation-vulnerability) (25 Mar 2022)
- [CVE-2017-0146: Microsoft Windows SMB Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-0146-microsoft-windows-smb-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2005-2773: HP OpenView Network Node Manager Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2005-2773-hp-openview-network-node-manager-remote-code-execution) (25 Mar 2022)
- [CVE-2009-0927: Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2009-0927-adobe-reader-and-adobe-acrobat-stack-based-buffer-overflow) (25 Mar 2022)
- [CVE-2009-1151: phpMyAdmin Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2009-1151-phpmyadmin-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2009-2055: Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2009-2055-cisco-ios-xr-border-gateway-protocol-bgp-denial-of-service) (25 Mar 2022)
- [CVE-2010-2861: Adobe ColdFusion Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2010-2861-adobe-coldfusion-directory-traversal-vulnerability) (25 Mar 2022)
- [CVE-2010-3035: Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2010-3035-cisco-ios-xr-border-gateway-protocol-bgp-denial-of-service) (25 Mar 2022)
- [CVE-2010-4344: Exim Heap-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2010-4344-exim-heap-based-buffer-overflow-vulnerability) (25 Mar 2022)
- [CVE-2010-4345: Exim Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2010-4345-exim-privilege-escalation-vulnerability) (25 Mar 2022)
- [CVE-2012-1823: PHP-CGI Query String Parameter Vulnerability](https://junglewise.ai/threats/cve-2012-1823-php-cgi-query-string-parameter-vulnerability) (25 Mar 2022)
- [CVE-2013-4810: HP Multiple Products Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2013-4810-hp-multiple-products-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2013-5223: D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability](https://junglewise.ai/threats/cve-2013-5223-d-link-dsl-2760u-gateway-cross-site-scripting-vulnerability) (25 Mar 2022)
- [CVE-2014-6287: Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2014-6287-rejetto-http-file-server-hfs-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2014-6324: Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2014-6324-microsoft-kerberos-key-distribution-center-kdc-privilege) (25 Mar 2022)
- [CVE-2014-6332: Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code…](https://junglewise.ai/threats/cve-2014-6332-microsoft-windows-object-linking-embedding-ole-automation-array) (25 Mar 2022)
- [CVE-2015-0666: Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2015-0666-cisco-prime-data-center-network-manager-dcnm-directory-traversal) (25 Mar 2022)
- [CVE-2015-1187: D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-1187-d-link-and-trendnet-multiple-devices-remote-code-execution) (25 Mar 2022)
- [CVE-2015-3035: TP-Link Multiple Archer Devices Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2015-3035-tp-link-multiple-archer-devices-directory-traversal-vulnerability) (25 Mar 2022)
- [CVE-2015-4068: Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2015-4068-arcserve-unified-data-protection-udp-directory-traversal) (25 Mar 2022)
- [CVE-2016-10174: NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2016-10174-netgear-wnr2000v5-router-buffer-overflow-vulnerability) (25 Mar 2022)
- [CVE-2016-11021: D-Link DCS-930L Devices OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2016-11021-d-link-dcs-930l-devices-os-command-injection-vulnerability) (25 Mar 2022)
- [CVE-2016-1555: NETGEAR Multiple WAP Devices Command Injection Vulnerability](https://junglewise.ai/threats/cve-2016-1555-netgear-multiple-wap-devices-command-injection-vulnerability) (25 Mar 2022)
- [CVE-2016-4171: Adobe Flash Player Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2016-4171-adobe-flash-player-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2016-7892: Adobe Flash Player Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2016-7892-adobe-flash-player-use-after-free-vulnerability) (25 Mar 2022)
- [CVE-2017-3881: Cisco IOS and IOS XE Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-3881-cisco-ios-and-ios-xe-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2018-14839: LG N1A1 NAS Remote Command Execution Vulnerability](https://junglewise.ai/threats/cve-2018-14839-lg-n1a1-nas-remote-command-execution-vulnerability) (25 Mar 2022)
- [CVE-2017-6316: Citrix Multiple Products Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6316-citrix-multiple-products-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2017-6334: NETGEAR DGN2200 Devices OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2017-6334-netgear-dgn2200-devices-os-command-injection-vulnerability) (25 Mar 2022)
- [CVE-2018-0125: Cisco VPN Routers Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2018-0125-cisco-vpn-routers-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2018-0147: Cisco Secure Access Control System Java Deserialization Vulnerability](https://junglewise.ai/threats/cve-2018-0147-cisco-secure-access-control-system-java-deserialization) (25 Mar 2022)
- [CVE-2018-11138: Quest KACE System Management Appliance Remote Command Execution Vulnerability](https://junglewise.ai/threats/cve-2018-11138-quest-kace-system-management-appliance-remote-command-execution) (25 Mar 2022)
- [CVE-2018-6961: VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability](https://junglewise.ai/threats/cve-2018-6961-vmware-sd-wan-edge-by-velocloud-command-injection-vulnerability) (25 Mar 2022)
- [CVE-2018-8373: Microsoft Scripting Engine Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2018-8373-microsoft-scripting-engine-memory-corruption-vulnerability) (25 Mar 2022)
- [CVE-2018-8414: Microsoft Windows Shell Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2018-8414-microsoft-windows-shell-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2019-0903: Microsoft GDI Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-0903-microsoft-gdi-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2019-10068: Kentico Xperience Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2019-10068-kentico-xperience-deserialization-of-untrusted-data-vulnerability) (25 Mar 2022)
- [CVE-2019-11043: PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2019-11043-php-fastcgi-process-manager-fpm-buffer-overflow-vulnerability) (25 Mar 2022)
- [CVE-2019-12989: Citrix SD-WAN and NetScaler SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2019-12989-citrix-sd-wan-and-netscaler-sql-injection-vulnerability) (25 Mar 2022)
- [CVE-2019-12991: Citrix SD-WAN and NetScaler Command Injection Vulnerability](https://junglewise.ai/threats/cve-2019-12991-citrix-sd-wan-and-netscaler-command-injection-vulnerability) (25 Mar 2022)
- [CVE-2019-15107: Webmin Command Injection Vulnerability](https://junglewise.ai/threats/cve-2019-15107-webmin-command-injection-vulnerability) (25 Mar 2022)
- [CVE-2019-16920: D-Link Multiple Routers Command Injection Vulnerability](https://junglewise.ai/threats/cve-2019-16920-d-link-multiple-routers-command-injection-vulnerability) (25 Mar 2022)
- [CVE-2019-2616: Oracle BI Publisher Unauthorized Access Vulnerability](https://junglewise.ai/threats/cve-2019-2616-oracle-bi-publisher-unauthorized-access-vulnerability) (25 Mar 2022)
- [CVE-2020-1631: Juniper Junos OS Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2020-1631-juniper-junos-os-path-traversal-vulnerability) (25 Mar 2022)
- [CVE-2020-2021: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2020-2021-palo-alto-networks-pan-os-authentication-bypass-vulnerability) (25 Mar 2022)
- [CVE-2020-2506: QNAP Helpdesk Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2020-2506-qnap-helpdesk-improper-access-control-vulnerability) (25 Mar 2022)
- [CVE-2020-25223: Sophos SG UTM Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-25223-sophos-sg-utm-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2020-7247: OpenSMTPD Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-7247-opensmtpd-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2020-9054: Zyxel Multiple NAS Devices OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2020-9054-zyxel-multiple-nas-devices-os-command-injection-vulnerability) (25 Mar 2022)
- [CVE-2020-9377: D-Link DIR-610 Devices Remote Command Execution](https://junglewise.ai/threats/cve-2020-9377-d-link-dir-610-devices-remote-command-execution) (25 Mar 2022)
- [CVE-2021-22941: Citrix ShareFile Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2021-22941-citrix-sharefile-improper-access-control-vulnerability) (25 Mar 2022)
- [CVE-2022-21999: Microsoft Windows Print Spooler Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-21999-microsoft-windows-print-spooler-privilege-escalation) (25 Mar 2022)
- [CVE-2021-42237: Sitecore XP Remote Command Execution Vulnerability](https://junglewise.ai/threats/cve-2021-42237-sitecore-xp-remote-command-execution-vulnerability) (25 Mar 2022)
- [CVE-2022-26143: MiCollab, MiVoice Business Express Access Control Vulnerability](https://junglewise.ai/threats/cve-2022-26143-micollab-mivoice-business-express-access-control-vulnerability) (25 Mar 2022)
- [CVE-2022-26318: WatchGuard Firebox and XTM Appliances Arbitrary Code Execution](https://junglewise.ai/threats/cve-2022-26318-watchguard-firebox-and-xtm-appliances-arbitrary-code-execution) (25 Mar 2022)
- [CVE-2020-1956: Command Injection in Kylin](https://junglewise.ai/threats/cve-2020-1956-apache-kylin-os-command-injection-vulnerability) (25 Mar 2022)
- [CVE-2020-5410: Directory traversal attack in Spring Cloud Config](https://junglewise.ai/threats/cve-2020-5410-vmware-tanzu-spring-cloud-config-directory-traversal-vulnerability) (25 Mar 2022)
- [CVE-2018-1273: Spring Data Commons remote code injection vulnerability](https://junglewise.ai/threats/cve-2018-1273-vmware-tanzu-spring-data-commons-property-binder-vulnerability) (25 Mar 2022)
- [CVE-2017-12615: When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to…](https://junglewise.ai/threats/cve-2017-12615-apache-tomcat-on-windows-remote-code-execution-vulnerability) (25 Mar 2022)
- [CVE-2014-0130: actionpack Path Traversal vulnerability](https://junglewise.ai/threats/cve-2014-0130-ruby-on-rails-directory-traversal-vulnerability) (25 Mar 2022)
- [CVE-2016-0752: Directory traversal vulnerability in Action View in Ruby on Rails](https://junglewise.ai/threats/cve-2016-0752-ruby-on-rails-directory-traversal-vulnerability) (25 Mar 2022)
- [CVE-2019-0841: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation…](https://junglewise.ai/threats/cve-2019-0841-microsoft-windows-appx-deployment-service-appxsvc-privilege) (15 Mar 2022)
- [CVE-2019-1064: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation…](https://junglewise.ai/threats/cve-2019-1064-microsoft-windows-appx-deployment-service-appxsvc-privilege) (15 Mar 2022)
- [CVE-2019-1069: Microsoft Task Scheduler Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-1069-microsoft-task-scheduler-privilege-escalation-vulnerability) (15 Mar 2022)
- [CVE-2019-1129: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation…](https://junglewise.ai/threats/cve-2019-1129-microsoft-windows-appx-deployment-service-appxsvc-privilege) (15 Mar 2022)
- [CVE-2019-1132: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-1132-microsoft-win32k-privilege-escalation-vulnerability) (15 Mar 2022)
- [CVE-2019-1315: Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-1315-microsoft-windows-error-reporting-manager-privilege-escalation) (15 Mar 2022)
- [CVE-2019-1322: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-1322-microsoft-windows-privilege-escalation-vulnerability) (15 Mar 2022)
- [CVE-2019-1405: Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation…](https://junglewise.ai/threats/cve-2019-1405-microsoft-windows-universal-plug-and-play-upnp-service-privilege) (15 Mar 2022)
- [CVE-2020-5135: SonicWall SonicOS Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2020-5135-sonicwall-sonicos-buffer-overflow-vulnerability) (15 Mar 2022)
- [CVE-2019-1253: Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-1253-microsoft-windows-appx-deployment-server-privilege-escalation) (15 Mar 2022)
- [CVE-2015-2546: Microsoft Win32k Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2015-2546-microsoft-win32k-memory-corruption-vulnerability) (15 Mar 2022)
- [CVE-2016-3309: Microsoft Windows Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2016-3309-microsoft-windows-kernel-privilege-escalation-vulnerability) (15 Mar 2022)
- [CVE-2017-0101: Microsoft Windows Transaction Manager Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2017-0101-microsoft-windows-transaction-manager-privilege-escalation) (15 Mar 2022)
- [CVE-2018-8120: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2018-8120-microsoft-win32k-privilege-escalation-vulnerability) (15 Mar 2022)
- [CVE-2019-0543: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-0543-microsoft-windows-privilege-escalation-vulnerability) (15 Mar 2022)
- [CVE-2009-3960: Adobe BlazeDS Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2009-3960-adobe-blazeds-information-disclosure-vulnerability) (7 Mar 2022)
- [CVE-2013-0625: Adobe ColdFusion Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2013-0625-adobe-coldfusion-authentication-bypass-vulnerability) (7 Mar 2022)
- [CVE-2013-0629: Adobe ColdFusion Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2013-0629-adobe-coldfusion-directory-traversal-vulnerability) (7 Mar 2022)
- [CVE-2013-0631: Adobe ColdFusion Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2013-0631-adobe-coldfusion-information-disclosure-vulnerability) (7 Mar 2022)
- [CVE-2016-6277: NETGEAR Multiple Routers Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2016-6277-netgear-multiple-routers-remote-code-execution-vulnerability) (7 Mar 2022)
- [CVE-2017-6077: NETGEAR DGN2200 Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6077-netgear-dgn2200-remote-code-execution-vulnerability) (7 Mar 2022)
- [CVE-2019-11581: Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability](https://junglewise.ai/threats/cve-2019-11581-atlassian-jira-server-and-data-center-server-side-template) (7 Mar 2022)
- [CVE-2020-8218: Pulse Connect Secure Code Injection Vulnerability](https://junglewise.ai/threats/cve-2020-8218-pulse-connect-secure-code-injection-vulnerability) (7 Mar 2022)
- [CVE-2021-21973: VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF)…](https://junglewise.ai/threats/cve-2021-21973-vmware-vcenter-server-and-cloud-foundation-server-side-request) (7 Mar 2022)
- [CVE-2022-26485: Mozilla Firefox Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2022-26485-mozilla-firefox-use-after-free-vulnerability) (7 Mar 2022)
- [CVE-2022-26486: Mozilla Firefox Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2022-26486-mozilla-firefox-use-after-free-vulnerability) (7 Mar 2022)
- [CVE-2018-8298: ChakraCore RCE Vulnerability](https://junglewise.ai/threats/cve-2018-8298-chakracore-scripting-engine-type-confusion-vulnerability) (3 Mar 2022)
- [CVE-2015-3043: Adobe Flash Player Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2015-3043-adobe-flash-player-memory-corruption-vulnerability) (3 Mar 2022)
- [CVE-2002-0367: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2002-0367-microsoft-windows-privilege-escalation-vulnerability) (3 Mar 2022)
- [CVE-2004-0210: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2004-0210-microsoft-windows-privilege-escalation-vulnerability) (3 Mar 2022)
- [CVE-2008-2992: Adobe Reader and Acrobat Input Validation Vulnerability](https://junglewise.ai/threats/cve-2008-2992-adobe-reader-and-acrobat-input-validation-vulnerability) (3 Mar 2022)
- [CVE-2008-3431: Oracle VirtualBox Insufficient Input Validation Vulnerability](https://junglewise.ai/threats/cve-2008-3431-oracle-virtualbox-insufficient-input-validation-vulnerability) (3 Mar 2022)
- [CVE-2009-1123: Microsoft Windows Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2009-1123-microsoft-windows-improper-input-validation-vulnerability) (3 Mar 2022)
- [CVE-2009-3129: Microsoft Excel Featheader Record Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2009-3129-microsoft-excel-featheader-record-memory-corruption-vulnerability) (3 Mar 2022)
- [CVE-2010-0188: Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability](https://junglewise.ai/threats/cve-2010-0188-adobe-reader-and-acrobat-arbitrary-code-execution-vulnerability) (3 Mar 2022)
- [CVE-2011-0611: Adobe Flash Player Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2011-0611-adobe-flash-player-remote-code-execution-vulnerability) (3 Mar 2022)
- [CVE-2010-0232: Microsoft Windows Kernel Exception Handler Vulnerability](https://junglewise.ai/threats/cve-2010-0232-microsoft-windows-kernel-exception-handler-vulnerability) (3 Mar 2022)
- [CVE-2010-3333: Microsoft Office Stack-based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2010-3333-microsoft-office-stack-based-buffer-overflow-vulnerability) (3 Mar 2022)
- [CVE-2011-1889: Microsoft Forefront TMG Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2011-1889-microsoft-forefront-tmg-remote-code-execution-vulnerability) (3 Mar 2022)
- [CVE-2011-3544: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability](https://junglewise.ai/threats/cve-2011-3544-oracle-java-se-runtime-environment-jre-arbitrary-code-execution) (3 Mar 2022)
- [CVE-2012-0507: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability](https://junglewise.ai/threats/cve-2012-0507-oracle-java-se-runtime-environment-jre-arbitrary-code-execution) (3 Mar 2022)
- [CVE-2012-1535: Adobe Flash Player Arbitrary Code Execution Vulnerability](https://junglewise.ai/threats/cve-2012-1535-adobe-flash-player-arbitrary-code-execution-vulnerability) (3 Mar 2022)
- [CVE-2012-1723: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability](https://junglewise.ai/threats/cve-2012-1723-oracle-java-se-runtime-environment-jre-arbitrary-code-execution) (3 Mar 2022)
- [CVE-2012-1856: Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2012-1856-microsoft-office-mscomctl-ocx-remote-code-execution-vulnerability) (3 Mar 2022)
- [CVE-2012-4681: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability](https://junglewise.ai/threats/cve-2012-4681-oracle-java-se-runtime-environment-jre-arbitrary-code-execution) (3 Mar 2022)
- [CVE-2013-0632: Adobe ColdFusion Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2013-0632-adobe-coldfusion-authentication-bypass-vulnerability) (3 Mar 2022)
- [CVE-2013-0640: Adobe Reader and Acrobat Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2013-0640-adobe-reader-and-acrobat-memory-corruption-vulnerability) (3 Mar 2022)
- [CVE-2013-0641: Adobe Reader Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2013-0641-adobe-reader-buffer-overflow-vulnerability) (3 Mar 2022)
- [CVE-2013-1347: Microsoft Internet Explorer Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2013-1347-microsoft-internet-explorer-remote-code-execution-vulnerability) (3 Mar 2022)
- [CVE-2013-1675: Mozilla Firefox Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2013-1675-mozilla-firefox-information-disclosure-vulnerability) (3 Mar 2022)
- [CVE-2013-3346: Adobe Reader and Acrobat Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2013-3346-adobe-reader-and-acrobat-memory-corruption-vulnerability) (3 Mar 2022)
- [CVE-2013-3897: Microsoft Internet Explorer Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2013-3897-microsoft-internet-explorer-use-after-free-vulnerability) (3 Mar 2022)
- [CVE-2013-5065: Microsoft Windows Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2013-5065-microsoft-windows-kernel-privilege-escalation-vulnerability) (3 Mar 2022)
- [CVE-2014-0496: Adobe Reader and Acrobat Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2014-0496-adobe-reader-and-acrobat-use-after-free-vulnerability) (3 Mar 2022)
- [CVE-2014-4114: Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution…](https://junglewise.ai/threats/cve-2014-4114-microsoft-windows-object-linking-embedding-ole-remote-code) (3 Mar 2022)
- [CVE-2015-1642: Microsoft Office Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2015-1642-microsoft-office-memory-corruption-vulnerability) (3 Mar 2022)
- [CVE-2015-1701: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2015-1701-microsoft-win32k-privilege-escalation-vulnerability) (3 Mar 2022)
- [CVE-2015-2387: Microsoft ATM Font Driver Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2015-2387-microsoft-atm-font-driver-privilege-escalation-vulnerability) (3 Mar 2022)
- [CVE-2015-2424: Microsoft PowerPoint Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2015-2424-microsoft-powerpoint-memory-corruption-vulnerability) (3 Mar 2022)
- [CVE-2015-2545: Microsoft Office Malformed EPS File Vulnerability](https://junglewise.ai/threats/cve-2015-2545-microsoft-office-malformed-eps-file-vulnerability) (3 Mar 2022)
- [CVE-2015-2590: Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-2590-oracle-java-se-and-java-se-embedded-remote-code-execution) (3 Mar 2022)
- [CVE-2015-4902: Oracle Java SE Integrity Check Vulnerability](https://junglewise.ai/threats/cve-2015-4902-oracle-java-se-integrity-check-vulnerability) (3 Mar 2022)
- [CVE-2015-5119: Adobe Flash Player Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2015-5119-adobe-flash-player-use-after-free-vulnerability) (3 Mar 2022)
- [CVE-2015-7645: Adobe Flash Player Arbitrary Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-7645-adobe-flash-player-arbitrary-code-execution-vulnerability) (3 Mar 2022)
- [CVE-2016-0099: Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2016-0099-microsoft-windows-secondary-logon-service-privilege-escalation) (3 Mar 2022)
- [CVE-2016-1019: Adobe Flash Player Arbitrary Code Execution Vulnerability](https://junglewise.ai/threats/cve-2016-1019-adobe-flash-player-arbitrary-code-execution-vulnerability) (3 Mar 2022)
- [CVE-2016-4117: Adobe Flash Player Arbitrary Code Execution Vulnerability](https://junglewise.ai/threats/cve-2016-4117-adobe-flash-player-arbitrary-code-execution-vulnerability) (3 Mar 2022)
- [CVE-2016-5195: Linux Kernel Race Condition Vulnerability](https://junglewise.ai/threats/cve-2016-5195-linux-kernel-race-condition-vulnerability) (3 Mar 2022)
- [CVE-2016-7193: Microsoft Office Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2016-7193-microsoft-office-memory-corruption-vulnerability) (3 Mar 2022)
- [CVE-2016-7262: Microsoft Office Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2016-7262-microsoft-office-security-feature-bypass-vulnerability) (3 Mar 2022)
- [CVE-2016-7855: Adobe Flash Player Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2016-7855-adobe-flash-player-use-after-free-vulnerability) (3 Mar 2022)
- [CVE-2016-8562: Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability](https://junglewise.ai/threats/cve-2016-8562-siemens-simatic-cp-1543-1-improper-privilege-management) (3 Mar 2022)
- [CVE-2017-0001: Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2017-0001-microsoft-graphics-device-interface-gdi-privilege-escalation) (3 Mar 2022)
- [CVE-2017-0261: Microsoft Office Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2017-0261-microsoft-office-use-after-free-vulnerability) (3 Mar 2022)
- [CVE-2017-11292: Adobe Flash Player Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2017-11292-adobe-flash-player-type-confusion-vulnerability) (3 Mar 2022)
- [CVE-2017-11826: Microsoft Office Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-11826-microsoft-office-remote-code-execution-vulnerability) (3 Mar 2022)
- [CVE-2017-12231: Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2017-12231-cisco-ios-software-network-address-translation-denial-of-service) (3 Mar 2022)
- [CVE-2017-12232: Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service…](https://junglewise.ai/threats/cve-2017-12232-cisco-ios-software-for-cisco-integrated-services-routers-denial) (3 Mar 2022)
- [CVE-2017-12233: Cisco IOS Software Common Industrial Protocol Request Denial-of-Service…](https://junglewise.ai/threats/cve-2017-12233-cisco-ios-software-common-industrial-protocol-request-denial-of) (3 Mar 2022)
- [CVE-2017-12234: Cisco IOS Software Common Industrial Protocol Request Denial-of-Service…](https://junglewise.ai/threats/cve-2017-12234-cisco-ios-software-common-industrial-protocol-request-denial-of) (3 Mar 2022)
- [CVE-2017-12235: Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET…](https://junglewise.ai/threats/cve-2017-12235-cisco-ios-software-for-cisco-industrial-ethernet-switches) (3 Mar 2022)
- [CVE-2017-12237: Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2017-12237-cisco-ios-and-ios-xe-software-internet-key-exchange-denial-of) (3 Mar 2022)
- [CVE-2017-12238: Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2017-12238-cisco-catalyst-6800-series-switches-vpls-denial-of-service) (3 Mar 2022)
- [CVE-2017-12240: Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-12240-cisco-ios-and-ios-xe-software-dhcp-remote-code-execution) (3 Mar 2022)
- [CVE-2017-12319: Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol…](https://junglewise.ai/threats/cve-2017-12319-cisco-ios-xe-software-ethernet-virtual-private-network-border) (3 Mar 2022)
- [CVE-2017-6627: Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing…](https://junglewise.ai/threats/cve-2017-6627-cisco-ios-software-and-cisco-ios-xe-software-udp-packet-processing) (3 Mar 2022)
- [CVE-2017-6663: Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2017-6663-cisco-ios-software-and-cisco-ios-xe-software-denial-of-service) (3 Mar 2022)
- [CVE-2017-6736: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6736-cisco-ios-and-ios-xe-software-snmp-remote-code-execution) (3 Mar 2022)
- [CVE-2017-6737: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6737-cisco-ios-and-ios-xe-software-snmp-remote-code-execution) (3 Mar 2022)
- [CVE-2017-6738: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6738-cisco-ios-and-ios-xe-software-snmp-remote-code-execution) (3 Mar 2022)
- [CVE-2017-6739: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6739-cisco-ios-and-ios-xe-software-snmp-remote-code-execution) (3 Mar 2022)
- [CVE-2017-6740: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6740-cisco-ios-and-ios-xe-software-snmp-remote-code-execution) (3 Mar 2022)
- [CVE-2017-6743: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6743-cisco-ios-and-ios-xe-software-snmp-remote-code-execution) (3 Mar 2022)
- [CVE-2017-6744: Cisco IOS Software SNMP Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6744-cisco-ios-software-snmp-remote-code-execution-vulnerability) (3 Mar 2022)
- [CVE-2017-8540: Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability](https://junglewise.ai/threats/cve-2017-8540-microsoft-malware-protection-engine-improper-restriction-of) (3 Mar 2022)
- [CVE-2018-0151: Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code…](https://junglewise.ai/threats/cve-2018-0151-cisco-ios-software-and-cisco-ios-xe-software-quality-of-service) (3 Mar 2022)
- [CVE-2018-0154: Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2018-0154-cisco-ios-software-integrated-services-module-for-vpn-denial-of) (3 Mar 2022)
- [CVE-2018-0155: Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2018-0155-cisco-catalyst-bidirectional-forwarding-detection-denial-of) (3 Mar 2022)
- [CVE-2018-0156: Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service…](https://junglewise.ai/threats/cve-2018-0156-cisco-ios-software-and-cisco-ios-xe-software-smart-install-denial) (3 Mar 2022)
- [CVE-2018-0158: Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability](https://junglewise.ai/threats/cve-2018-0158-cisco-ios-and-xe-software-internet-key-exchange-memory-leak) (3 Mar 2022)
- [CVE-2018-0159: Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service…](https://junglewise.ai/threats/cve-2018-0159-cisco-ios-and-xe-software-internet-key-exchange-version-1-denial) (3 Mar 2022)
- [CVE-2018-0161: Cisco IOS Software Resource Management Errors Vulnerability](https://junglewise.ai/threats/cve-2018-0161-cisco-ios-software-resource-management-errors-vulnerability) (3 Mar 2022)
- [CVE-2018-0167: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2018-0167-cisco-ios-xr-and-xe-software-buffer-overflow-vulnerability) (3 Mar 2022)
- [CVE-2018-0172: Cisco IOS and IOS XE Software Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2018-0172-cisco-ios-and-ios-xe-software-improper-input-validation) (3 Mar 2022)
- [CVE-2018-0173: Cisco IOS and IOS XE Software Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2018-0173-cisco-ios-and-ios-xe-software-improper-input-validation) (3 Mar 2022)
- [CVE-2018-0174: Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2018-0174-cisco-ios-software-and-cisco-ios-xe-software-improper-input) (3 Mar 2022)
- [CVE-2018-0175: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2018-0175-cisco-ios-xr-and-xe-software-buffer-overflow-vulnerability) (3 Mar 2022)
- [CVE-2018-0179: Cisco IOS Software Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2018-0179-cisco-ios-software-denial-of-service-vulnerability) (3 Mar 2022)
- [CVE-2018-0180: Cisco IOS Software Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2018-0180-cisco-ios-software-denial-of-service-vulnerability) (3 Mar 2022)
- [CVE-2018-8581: Microsoft Exchange Server Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2018-8581-microsoft-exchange-server-privilege-escalation-vulnerability) (3 Mar 2022)
- [CVE-2019-1297: Microsoft Excel Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-1297-microsoft-excel-remote-code-execution-vulnerability) (3 Mar 2022)
- [CVE-2019-1652: Cisco Small Business Routers Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2019-1652-cisco-small-business-routers-improper-input-validation) (3 Mar 2022)
- [CVE-2019-16928: Exim Out-of-bounds Write Vulnerability](https://junglewise.ai/threats/cve-2019-16928-exim-out-of-bounds-write-vulnerability) (3 Mar 2022)
- [CVE-2020-11899: Treck TCP/IP stack Out-of-Bounds Read Vulnerability](https://junglewise.ai/threats/cve-2020-11899-treck-tcp-ip-stack-out-of-bounds-read-vulnerability) (3 Mar 2022)
- [CVE-2021-41379: Microsoft Windows Installer Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-41379-microsoft-windows-installer-privilege-escalation-vulnerability) (3 Mar 2022)
- [CVE-2022-20699: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2022-20699-cisco-small-business-rv-series-routers-stack-based-buffer) (3 Mar 2022)
- [CVE-2022-20700: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2022-20700-cisco-small-business-rv-series-routers-stack-based-buffer) (3 Mar 2022)
- [CVE-2022-20701: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2022-20701-cisco-small-business-rv-series-routers-stack-based-buffer) (3 Mar 2022)
- [CVE-2022-20703: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2022-20703-cisco-small-business-rv-series-routers-stack-based-buffer) (3 Mar 2022)
- [CVE-2022-20708: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2022-20708-cisco-small-business-rv-series-routers-stack-based-buffer) (3 Mar 2022)
- [CVE-2020-1938: Improper Privilege Management in Tomcat](https://junglewise.ai/threats/cve-2020-1938-apache-tomcat-improper-privilege-management-vulnerability) (3 Mar 2022)
- [CVE-2017-8570: Microsoft Office Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-8570-microsoft-office-remote-code-execution-vulnerability) (25 Feb 2022)
- [CVE-2022-24682: Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability](https://junglewise.ai/threats/cve-2022-24682-synacor-zimbra-collaborate-suite-zcs-cross-site-scripting) (25 Feb 2022)
- [CVE-2014-6352: Microsoft Windows Code Injection Vulnerability](https://junglewise.ai/threats/cve-2014-6352-microsoft-windows-code-injection-vulnerability) (25 Feb 2022)
- [CVE-2017-0222: Microsoft Internet Explorer Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-0222-microsoft-internet-explorer-remote-code-execution-vulnerability) (25 Feb 2022)
- [CVE-2022-23134: Zabbix Frontend Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2022-23134-zabbix-frontend-improper-access-control-vulnerability) (22 Feb 2022)
- [CVE-2022-23131: Zabbix Frontend Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2022-23131-zabbix-frontend-authentication-bypass-vulnerability) (22 Feb 2022)
- [CVE-2017-9841: Code Injection in PHPUnit](https://junglewise.ai/threats/cve-2017-9841-phpunit-command-injection-vulnerability) (15 Feb 2022)
- [CVE-2022-0609: Use after free in Animation](https://junglewise.ai/threats/cve-2022-0609-google-chromium-animation-use-after-free-vulnerability) (15 Feb 2022)
- [CVE-2022-24086: Magento improper input validation vulnerability](https://junglewise.ai/threats/cve-2022-24086-adobe-commerce-and-magento-open-source-improper-input-validation) (15 Feb 2022)
- [CVE-2018-15982: Adobe Flash Player Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2018-15982-adobe-flash-player-use-after-free-vulnerability) (15 Feb 2022)
- [CVE-2019-0752: Microsoft Internet Explorer Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2019-0752-microsoft-internet-explorer-type-confusion-vulnerability) (15 Feb 2022)
- [CVE-2018-8174: Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2018-8174-microsoft-windows-vbscript-engine-out-of-bounds-write) (15 Feb 2022)
- [CVE-2018-20250: WinRAR Absolute Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2018-20250-winrar-absolute-path-traversal-vulnerability) (15 Feb 2022)
- [CVE-2014-1761: Microsoft Word Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2014-1761-microsoft-word-memory-corruption-vulnerability) (15 Feb 2022)
- [CVE-2013-3906: Microsoft Graphics Component Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2013-3906-microsoft-graphics-component-memory-corruption-vulnerability) (15 Feb 2022)
- [CVE-2022-22620: Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2022-22620-apple-ios-ipados-and-macos-webkit-use-after-free-vulnerability) (11 Feb 2022)
- [CVE-2016-3088: Improper Input Validation in Apache ActiveMQ](https://junglewise.ai/threats/cve-2016-3088-apache-activemq-improper-input-validation-vulnerability) (10 Feb 2022)
- [CVE-2017-9791: Code execution in Apache Struts 1 plugin](https://junglewise.ai/threats/cve-2017-9791-apache-struts-1-improper-input-validation-vulnerability) (10 Feb 2022)
- [CVE-2018-1000861: Deserialization of Untrusted Data in Jenkins](https://junglewise.ai/threats/cve-2018-1000861-jenkins-stapler-web-framework-deserialization-of-untrusted-data) (10 Feb 2022)
- [CVE-2021-36934: Microsoft Windows SAM Local Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-36934-microsoft-windows-sam-local-privilege-escalation-vulnerability) (10 Feb 2022)
- [CVE-2017-0262: Microsoft Office Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-0262-microsoft-office-remote-code-execution-vulnerability) (10 Feb 2022)
- [CVE-2014-4404: Apple OS X Heap-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2014-4404-apple-os-x-heap-based-buffer-overflow-vulnerability) (10 Feb 2022)
- [CVE-2015-1130: Apple OS X Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2015-1130-apple-os-x-authentication-bypass-vulnerability) (10 Feb 2022)
- [CVE-2015-1635: Microsoft HTTP.sys Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-1635-microsoft-http-sys-remote-code-execution-vulnerability) (10 Feb 2022)
- [CVE-2015-2051: D-Link DIR-645 Router Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-2051-d-link-dir-645-router-remote-code-execution-vulnerability) (10 Feb 2022)
- [CVE-2017-0144: Microsoft SMBv1 Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-0144-microsoft-smbv1-remote-code-execution-vulnerability) (10 Feb 2022)
- [CVE-2017-0145: Microsoft SMBv1 Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-0145-microsoft-smbv1-remote-code-execution-vulnerability) (10 Feb 2022)
- [CVE-2017-0263: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2017-0263-microsoft-win32k-privilege-escalation-vulnerability) (10 Feb 2022)
- [CVE-2017-10271: Oracle Corporation WebLogic Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-10271-oracle-corporation-weblogic-server-remote-code-execution) (10 Feb 2022)
- [CVE-2017-8464: Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-8464-microsoft-windows-shell-lnk-remote-code-execution-vulnerability) (10 Feb 2022)
- [CVE-2020-0796: Microsoft SMBv3 Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-0796-microsoft-smbv3-remote-code-execution-vulnerability) (10 Feb 2022)
- [CVE-2022-21882: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-21882-microsoft-win32k-privilege-escalation-vulnerability) (4 Feb 2022)
- [CVE-2020-5722: Grandstream Networks UCM6200 Series SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2020-5722-grandstream-networks-ucm6200-series-sql-injection-vulnerability) (28 Jan 2022)
- [CVE-2020-0787: Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege…](https://junglewise.ai/threats/cve-2020-0787-microsoft-windows-background-intelligent-transfer-service-bits) (28 Jan 2022)
- [CVE-2021-20038: SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-20038-sonicwall-sma-100-appliances-stack-based-buffer-overflow) (28 Jan 2022)
- [CVE-2022-22587: Apple Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2022-22587-apple-memory-corruption-vulnerability) (28 Jan 2022)
- [CVE-2017-5689: Intel Active Management Technology (AMT), Small Business Technology (SBT), and…](https://junglewise.ai/threats/cve-2017-5689-intel-active-management-technology-amt-small-business-technology) (28 Jan 2022)
- [CVE-2014-1776: Microsoft Internet Explorer Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2014-1776-microsoft-internet-explorer-memory-corruption-vulnerability) (28 Jan 2022)
- [CVE-2014-6271: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability](https://junglewise.ai/threats/cve-2014-6271-gnu-bourne-again-shell-bash-arbitrary-code-execution-vulnerability) (28 Jan 2022)
- [CVE-2014-7169: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability](https://junglewise.ai/threats/cve-2014-7169-gnu-bourne-again-shell-bash-arbitrary-code-execution-vulnerability) (28 Jan 2022)
- [CVE-2012-0391: Apache Struts Remote Java Code Execution](https://junglewise.ai/threats/cve-2012-0391-apache-struts-2-improper-input-validation-vulnerability) (21 Jan 2022)
- [CVE-2006-1547: Improper Input Validation in Apache Struts](https://junglewise.ai/threats/cve-2006-1547-apache-struts-1-actionform-denial-of-service-vulnerability) (21 Jan 2022)
- [CVE-2021-35247: SolarWinds Serv-U Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2021-35247-solarwinds-serv-u-improper-input-validation-vulnerability) (21 Jan 2022)
- [CVE-2018-8453: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2018-8453-microsoft-win32k-privilege-escalation-vulnerability) (21 Jan 2022)
- [CVE-2020-14864: Oracle Business Intelligence Enterprise Edition Path Transversal](https://junglewise.ai/threats/cve-2020-14864-oracle-business-intelligence-enterprise-edition-path-transversal) (18 Jan 2022)
- [CVE-2021-25296: Nagios XI OS Command Injection](https://junglewise.ai/threats/cve-2021-25296-nagios-xi-os-command-injection) (18 Jan 2022)
- [CVE-2021-25297: Nagios XI OS Command Injection](https://junglewise.ai/threats/cve-2021-25297-nagios-xi-os-command-injection) (18 Jan 2022)
- [CVE-2021-25298: Nagios XI OS Command Injection](https://junglewise.ai/threats/cve-2021-25298-nagios-xi-os-command-injection) (18 Jan 2022)
- [CVE-2021-40870: Aviatrix Controller Unrestricted Upload of File](https://junglewise.ai/threats/cve-2021-40870-aviatrix-controller-unrestricted-upload-of-file) (18 Jan 2022)
- [CVE-2021-33766: Microsoft Exchange Server Information Disclosure](https://junglewise.ai/threats/cve-2021-33766-microsoft-exchange-server-information-disclosure) (18 Jan 2022)
- [CVE-2021-22991: F5 BIG-IP Traffic Management Microkernel Buffer Overflow](https://junglewise.ai/threats/cve-2021-22991-f5-big-ip-traffic-management-microkernel-buffer-overflow) (18 Jan 2022)
- [CVE-2021-21975: VMware Server Side Request Forgery in vRealize Operations Manager API](https://junglewise.ai/threats/cve-2021-21975-vmware-server-side-request-forgery-in-vrealize-operations-manager) (18 Jan 2022)
- [CVE-2020-13671: Drupal core Unrestricted Upload of File with Dangerous Type](https://junglewise.ai/threats/cve-2020-13671-drupal-core-un-restricted-upload-of-file) (18 Jan 2022)
- [CVE-2021-32648: Account Takeover in Octobercms](https://junglewise.ai/threats/cve-2021-32648-october-cms-improper-authentication) (18 Jan 2022)
- [CVE-2021-21315: System Information Library for Node.JS Command Injection](https://junglewise.ai/threats/cve-2021-21315-system-information-library-for-node-js-command-injection) (18 Jan 2022)
- [CVE-2020-13927: Authentication bypass in Apache Airflow](https://junglewise.ai/threats/cve-2020-13927-apache-airflow-s-experimental-api-authentication-bypass) (18 Jan 2022)
- [CVE-2020-11978: Remote code execution (RCE) in Apache Airflow](https://junglewise.ai/threats/cve-2020-11978-apache-airflow-command-injection) (18 Jan 2022)
- [CVE-2018-13383: Fortinet FortiOS and FortiProxy Out-of-bounds Write](https://junglewise.ai/threats/cve-2018-13383-fortinet-fortios-and-fortiproxy-out-of-bounds-write) (10 Jan 2022)
- [CVE-2021-36260: Hikvision Improper Input Validation](https://junglewise.ai/threats/cve-2021-36260-hikvision-improper-input-validation) (10 Jan 2022)
- [CVE-2013-3900: Microsoft WinVerifyTrust function Remote Code Execution](https://junglewise.ai/threats/cve-2013-3900-microsoft-winverifytrust-function-remote-code-execution) (10 Jan 2022)
- [CVE-2015-7450: IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.](https://junglewise.ai/threats/cve-2015-7450-ibm-websphere-application-server-and-server-hypervisor-edition) (10 Jan 2022)
- [CVE-2018-13382: Fortinet FortiOS and FortiProxy Improper Authorization](https://junglewise.ai/threats/cve-2018-13382-fortinet-fortios-and-fortiproxy-improper-authorization) (10 Jan 2022)
- [CVE-2021-27860: FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit](https://junglewise.ai/threats/cve-2021-27860-fatpipe-warp-ipvpn-and-mpvpn-configuration-upload-exploit) (10 Jan 2022)
- [CVE-2019-10149: Exim Mail Transfer Agent (MTA) Improper Input Validation](https://junglewise.ai/threats/cve-2019-10149-exim-mail-transfer-agent-mta-improper-input-validation) (10 Jan 2022)
- [CVE-2019-1458: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-1458-microsoft-win32k-privilege-escalation-vulnerability) (10 Jan 2022)
- [CVE-2019-1579: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-1579-palo-alto-networks-pan-os-remote-code-execution-vulnerability) (10 Jan 2022)
- [CVE-2019-2725: Oracle WebLogic Server, Injection](https://junglewise.ai/threats/cve-2019-2725-oracle-weblogic-server-injection) (10 Jan 2022)
- [CVE-2019-7609: Kibana Arbitrary Code Execution](https://junglewise.ai/threats/cve-2019-7609-kibana-arbitrary-code-execution) (10 Jan 2022)
- [CVE-2019-9670: Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External…](https://junglewise.ai/threats/cve-2019-9670-synacor-zimbra-collaboration-suite-zcs-improper-restriction-of-xml) (10 Jan 2022)
- [CVE-2020-6572: Google Chrome Media Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2020-6572-google-chrome-media-use-after-free-vulnerability) (10 Jan 2022)
- [CVE-2021-22017: VMware vCenter Server Improper Access Control](https://junglewise.ai/threats/cve-2021-22017-vmware-vcenter-server-improper-access-control) (10 Jan 2022)
- [CVE-2017-1000486: Inadequate Encryption Strength](https://junglewise.ai/threats/cve-2017-1000486-primetek-primefaces-remote-code-execution-vulnerability) (10 Jan 2022)
- [CVE-2021-4102: Google Chromium V8 Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-4102-google-chromium-v8-use-after-free-vulnerability) (15 Dec 2021)
- [CVE-2021-43890: Microsoft Windows AppX Installer Spoofing Vulnerability](https://junglewise.ai/threats/cve-2021-43890-microsoft-windows-appx-installer-spoofing-vulnerability) (15 Dec 2021)
- [CVE-2021-44228: Remote code injection in Log4j](https://junglewise.ai/threats/cve-2021-44228-apache-log4j2-remote-code-execution-vulnerability) (10 Dec 2021)
- [CVE-2021-35394: Realtek Jungle SDK Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-35394-realtek-jungle-sdk-remote-code-execution-vulnerability) (10 Dec 2021)
- [CVE-2020-8816: Pi-Hole AdminLTE Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-8816-pi-hole-adminlte-remote-code-execution-vulnerability) (10 Dec 2021)
- [CVE-2020-17463: Fuel CMS SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2020-17463-fuel-cms-sql-injection-vulnerability) (10 Dec 2021)
- [CVE-2019-7238: Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability](https://junglewise.ai/threats/cve-2019-7238-sonatype-nexus-repository-manager-incorrect-access-control) (10 Dec 2021)
- [CVE-2019-13272: Linux Kernel Improper Privilege Management Vulnerability](https://junglewise.ai/threats/cve-2019-13272-linux-kernel-improper-privilege-management-vulnerability) (10 Dec 2021)
- [CVE-2017-17562: Embedthis GoAhead Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-17562-embedthis-goahead-remote-code-execution-vulnerability) (10 Dec 2021)
- [CVE-2017-12149: Red Hat JBoss Application Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-12149-red-hat-jboss-application-server-remote-code-execution) (10 Dec 2021)
- [CVE-2010-1871: Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2010-1871-red-hat-linux-jboss-seam-2-remote-code-execution-vulnerability) (10 Dec 2021)
- [CVE-2021-44515: Zoho Desktop Central Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2021-44515-zoho-desktop-central-authentication-bypass-vulnerability) (10 Dec 2021)
- [CVE-2021-44168: Fortinet FortiOS Arbitrary File Download](https://junglewise.ai/threats/cve-2021-44168-fortinet-fortios-arbitrary-file-download) (10 Dec 2021)
- [CVE-2019-10758: mongo-express remote code execution in index creation](https://junglewise.ai/threats/cve-2019-10758-mongodb-mongo-express-remote-code-execution-vulnerability) (10 Dec 2021)
- [CVE-2019-0193: XML External Entity (XXE) Injection in Apache Solr](https://junglewise.ai/threats/cve-2019-0193-apache-solr-dataimporthandler-code-injection-vulnerability) (10 Dec 2021)
- [CVE-2018-14847: MikroTik Router OS Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2018-14847-mikrotik-router-os-directory-traversal-vulnerability) (1 Dec 2021)
- [CVE-2021-44077: Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-44077-zoho-manageengine-servicedesk-plus-remote-code-execution) (1 Dec 2021)
- [CVE-2020-11261: Qualcomm Multiple Chipsets Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2020-11261-qualcomm-multiple-chipsets-improper-input-validation) (1 Dec 2021)
- [CVE-2021-37415: Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2021-37415-zoho-manageengine-servicedesk-authentication-bypass-vulnerability) (1 Dec 2021)
- [CVE-2021-40438: Apache HTTP Server-Side Request Forgery (SSRF)](https://junglewise.ai/threats/cve-2021-40438-apache-http-server-side-request-forgery-ssrf) (1 Dec 2021)
- [CVE-2021-40449: Microsoft Windows Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-40449-microsoft-windows-win32k-privilege-escalation-vulnerability) (17 Nov 2021)
- [CVE-2021-42321: Microsoft Exchange Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-42321-microsoft-exchange-server-remote-code-execution-vulnerability) (17 Nov 2021)
- [CVE-2021-42292: Microsoft Excel Security Feature Bypass](https://junglewise.ai/threats/cve-2021-42292-microsoft-excel-security-feature-bypass) (17 Nov 2021)
- [CVE-2021-22204: ExifTool Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-22204-exiftool-remote-code-execution-vulnerability) (17 Nov 2021)
- [CVE-2020-0601: GO-2022-0535 - Certificate validation bypass on Windows in crypto/x509](https://junglewise.ai/threats/cve-2020-0601-microsoft-windows-cryptoapi-spoofing-vulnerability) (3 Nov 2021)
- [CVE-2020-1147: .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution…](https://junglewise.ai/threats/cve-2020-1147-microsoft-net-framework-sharepoint-and-visual-studio-remote-code) (3 Nov 2021)
- [CVE-2020-7961: Deserialization of Untrusted Data in Liferay Portal](https://junglewise.ai/threats/cve-2020-7961-liferay-portal-deserialization-of-untrusted-data-vulnerability) (3 Nov 2021)
- [CVE-2016-4437: Improper Access Control in Apache Shiro](https://junglewise.ai/threats/cve-2016-4437-apache-shiro-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2018-7600: Drupal Core Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2018-7600-drupal-core-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-17530: Remote code execution in Apache Struts](https://junglewise.ai/threats/cve-2020-17530-apache-struts-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-1350: Microsoft Windows DNS Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-1350-microsoft-windows-dns-server-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-1380: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2020-1380-microsoft-internet-explorer-scripting-engine-memory-corruption) (3 Nov 2021)
- [CVE-2020-1464: Microsoft Windows Spoofing Vulnerability](https://junglewise.ai/threats/cve-2020-1464-microsoft-windows-spoofing-vulnerability) (3 Nov 2021)
- [CVE-2020-1472: Microsoft Netlogon Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2020-1472-microsoft-netlogon-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2020-14750: Oracle WebLogic Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-14750-oracle-weblogic-server-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-14871: Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability](https://junglewise.ai/threats/cve-2020-14871-oracle-solaris-and-zettabyte-file-system-zfs-unspecified) (3 Nov 2021)
- [CVE-2020-14882: Oracle WebLogic Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-14882-oracle-weblogic-server-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-14883: Oracle WebLogic Server Unspecified Vulnerability](https://junglewise.ai/threats/cve-2020-14883-oracle-weblogic-server-unspecified-vulnerability) (3 Nov 2021)
- [CVE-2020-15505: Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-15505-ivanti-mobileiron-multiple-products-remote-code-execution) (3 Nov 2021)
- [CVE-2020-16010: Google Chrome for Android UI Heap Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2020-16010-google-chrome-for-android-ui-heap-buffer-overflow-vulnerability) (3 Nov 2021)
- [CVE-2020-17087: Microsoft Windows Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2020-17087-microsoft-windows-kernel-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2020-17144: Microsoft Exchange Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-17144-microsoft-exchange-server-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-17496: vBulletin PHP Module Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-17496-vbulletin-php-module-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-24557: Trend Micro Multiple Products Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2020-24557-trend-micro-multiple-products-improper-access-control) (3 Nov 2021)
- [CVE-2020-25213: WordPress File Manager Plugin Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-25213-wordpress-file-manager-plugin-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-25506: D-Link DNS-320 Device Command Injection Vulnerability](https://junglewise.ai/threats/cve-2020-25506-d-link-dns-320-device-command-injection-vulnerability) (3 Nov 2021)
- [CVE-2020-2555: Oracle Multiple Products Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-2555-oracle-multiple-products-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-26919: Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability](https://junglewise.ai/threats/cve-2020-26919-netgear-jgs516pe-devices-missing-function-level-access-control) (3 Nov 2021)
- [CVE-2020-27930: Apple Multiple Products Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2020-27930-apple-multiple-products-memory-corruption-vulnerability) (3 Nov 2021)
- [CVE-2020-27932: Apple Multiple Products Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2020-27932-apple-multiple-products-type-confusion-vulnerability) (3 Nov 2021)
- [CVE-2020-27950: Apple Multiple Products Memory Initialization Vulnerability](https://junglewise.ai/threats/cve-2020-27950-apple-multiple-products-memory-initialization-vulnerability) (3 Nov 2021)
- [CVE-2020-29557: D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2020-29557-d-link-dir-825-r1-devices-buffer-overflow-vulnerability) (3 Nov 2021)
- [CVE-2020-29583: Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability](https://junglewise.ai/threats/cve-2020-29583-zyxel-multiple-products-use-of-hard-coded-credentials) (3 Nov 2021)
- [CVE-2020-3118: Cisco IOS XR Software Discovery Protocol Format String Vulnerability](https://junglewise.ai/threats/cve-2020-3118-cisco-ios-xr-software-discovery-protocol-format-string) (3 Nov 2021)
- [CVE-2020-3161: Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2020-3161-cisco-ip-phones-web-server-remote-code-execution-and-denial-of) (3 Nov 2021)
- [CVE-2020-3452: Cisco ASA and FTD Read-Only Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2020-3452-cisco-asa-and-ftd-read-only-path-traversal-vulnerability) (3 Nov 2021)
- [CVE-2020-3566: Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability](https://junglewise.ai/threats/cve-2020-3566-cisco-ios-xr-software-dvmrp-memory-exhaustion-vulnerability) (3 Nov 2021)
- [CVE-2020-3569: Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability](https://junglewise.ai/threats/cve-2020-3569-cisco-ios-xr-software-dvmrp-memory-exhaustion-vulnerability) (3 Nov 2021)
- [CVE-2020-3580: Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2020-3580-cisco-asa-and-ftd-cross-site-scripting-xss-vulnerability) (3 Nov 2021)
- [CVE-2020-3950: VMware Multiple Products Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2020-3950-vmware-multiple-products-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2020-3952: VMware vCenter Server Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2020-3952-vmware-vcenter-server-information-disclosure-vulnerability) (3 Nov 2021)
- [CVE-2020-3992: VMware ESXi OpenSLP Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2020-3992-vmware-esxi-openslp-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2020-4006: Multiple VMware Products Command Injection Vulnerability](https://junglewise.ai/threats/cve-2020-4006-multiple-vmware-products-command-injection-vulnerability) (3 Nov 2021)
- [CVE-2020-4427: IBM Data Risk Manager Security Bypass Vulnerability](https://junglewise.ai/threats/cve-2020-4427-ibm-data-risk-manager-security-bypass-vulnerability) (3 Nov 2021)
- [CVE-2020-4428: IBM Data Risk Manager Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-4428-ibm-data-risk-manager-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-4430: IBM Data Risk Manager Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2020-4430-ibm-data-risk-manager-directory-traversal-vulnerability) (3 Nov 2021)
- [CVE-2020-5735: Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2020-5735-amcrest-cameras-and-nvr-stack-based-buffer-overflow-vulnerability) (3 Nov 2021)
- [CVE-2020-5847: Unraid Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-5847-unraid-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-5849: Unraid Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2020-5849-unraid-authentication-bypass-vulnerability) (3 Nov 2021)
- [CVE-2020-5902: F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution…](https://junglewise.ai/threats/cve-2020-5902-f5-big-ip-traffic-management-user-interface-tmui-remote-code) (3 Nov 2021)
- [CVE-2020-6207: SAP Solution Manager Missing Authentication for Critical Function Vulnerability](https://junglewise.ai/threats/cve-2020-6207-sap-solution-manager-missing-authentication-for-critical-function) (3 Nov 2021)
- [CVE-2020-6287: SAP NetWeaver Missing Authentication for Critical Function Vulnerability](https://junglewise.ai/threats/cve-2020-6287-sap-netweaver-missing-authentication-for-critical-function) (3 Nov 2021)
- [CVE-2020-6418: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2020-6418-google-chromium-v8-type-confusion-vulnerability) (3 Nov 2021)
- [CVE-2020-6819: Mozilla Firefox And Thunderbird Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2020-6819-mozilla-firefox-and-thunderbird-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2020-6820: Mozilla Firefox And Thunderbird Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2020-6820-mozilla-firefox-and-thunderbird-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2020-8193: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability](https://junglewise.ai/threats/cve-2020-8193-citrix-adc-gateway-and-sd-wan-wanop-appliance-authorization-bypass) (3 Nov 2021)
- [CVE-2020-8195: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2020-8195-citrix-adc-gateway-and-sd-wan-wanop-appliance-information) (3 Nov 2021)
- [CVE-2020-8196: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2020-8196-citrix-adc-gateway-and-sd-wan-wanop-appliance-information) (3 Nov 2021)
- [CVE-2020-8243: Ivanti Pulse Connect Secure Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-8243-ivanti-pulse-connect-secure-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-8260: Ivanti Pulse Connect Secure Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-8260-ivanti-pulse-connect-secure-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-8467: Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-8467-trend-micro-apex-one-and-officescan-remote-code-execution) (3 Nov 2021)
- [CVE-2020-8468: Trend Micro Multiple Products Content Validation Escape Vulnerability](https://junglewise.ai/threats/cve-2020-8468-trend-micro-multiple-products-content-validation-escape) (3 Nov 2021)
- [CVE-2020-8515: Multiple DrayTek Vigor Routers Web Management Page Vulnerability](https://junglewise.ai/threats/cve-2020-8515-multiple-draytek-vigor-routers-web-management-page-vulnerability) (3 Nov 2021)
- [CVE-2020-8599: Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2020-8599-trend-micro-apex-one-and-officescan-authentication-bypass) (3 Nov 2021)
- [CVE-2020-8644: PlaySMS Server-Side Template Injection Vulnerability](https://junglewise.ai/threats/cve-2020-8644-playsms-server-side-template-injection-vulnerability) (3 Nov 2021)
- [CVE-2020-8655: EyesOfNetwork Improper Privilege Management Vulnerability](https://junglewise.ai/threats/cve-2020-8655-eyesofnetwork-improper-privilege-management-vulnerability) (3 Nov 2021)
- [CVE-2020-8657: EyesOfNetwork Use of Hard-Coded Credentials Vulnerability](https://junglewise.ai/threats/cve-2020-8657-eyesofnetwork-use-of-hard-coded-credentials-vulnerability) (3 Nov 2021)
- [CVE-2020-9818: Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2020-9818-apple-ios-ipados-and-watchos-out-of-bounds-write-vulnerability) (3 Nov 2021)
- [CVE-2020-9819: Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2020-9819-apple-ios-ipados-and-watchos-memory-corruption-vulnerability) (3 Nov 2021)
- [CVE-2020-9859: Apple Multiple Products Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-9859-apple-multiple-products-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2021-1497: Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability](https://junglewise.ai/threats/cve-2021-1497-cisco-hyperflex-hx-installer-virtual-machine-command-injection) (3 Nov 2021)
- [CVE-2021-1498: Cisco HyperFlex HX Data Platform Command Injection Vulnerability](https://junglewise.ai/threats/cve-2021-1498-cisco-hyperflex-hx-data-platform-command-injection-vulnerability) (3 Nov 2021)
- [CVE-2021-1647: Microsoft Defender Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-1647-microsoft-defender-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2021-1675: Microsoft Windows Print Spooler Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-1675-microsoft-windows-print-spooler-remote-code-execution) (3 Nov 2021)
- [CVE-2021-1732: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-1732-microsoft-win32k-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2021-1782: Apple Multiple Products Race Condition Vulnerability](https://junglewise.ai/threats/cve-2021-1782-apple-multiple-products-race-condition-vulnerability) (3 Nov 2021)
- [CVE-2021-1870: Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-1870-apple-ios-ipados-and-macos-webkit-remote-code-execution) (3 Nov 2021)
- [CVE-2021-1871: Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-1871-apple-ios-ipados-and-macos-webkit-remote-code-execution) (3 Nov 2021)
- [CVE-2021-21017: Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-21017-adobe-acrobat-and-reader-heap-based-buffer-overflow-vulnerability) (3 Nov 2021)
- [CVE-2021-1879: Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2021-1879-apple-ios-ipados-and-watchos-webkit-cross-site-scripting-xss) (3 Nov 2021)
- [CVE-2021-1905: Qualcomm Multiple Chipsets Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-1905-qualcomm-multiple-chipsets-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2021-1906: Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability](https://junglewise.ai/threats/cve-2021-1906-qualcomm-multiple-chipsets-detection-of-error-condition-without) (3 Nov 2021)
- [CVE-2021-20016: SonicWall SSLVPN SMA100 SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2021-20016-sonicwall-sslvpn-sma100-sql-injection-vulnerability) (3 Nov 2021)
- [CVE-2021-20021: SonicWall Email Security Improper Privilege Management Vulnerability](https://junglewise.ai/threats/cve-2021-20021-sonicwall-email-security-improper-privilege-management) (3 Nov 2021)
- [CVE-2021-20022: SonicWall Email Security Unrestricted Upload of File Vulnerability](https://junglewise.ai/threats/cve-2021-20022-sonicwall-email-security-unrestricted-upload-of-file) (3 Nov 2021)
- [CVE-2021-20023: SonicWall Email Security Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2021-20023-sonicwall-email-security-path-traversal-vulnerability) (3 Nov 2021)
- [CVE-2021-20090: Arcadyan Buffalo Firmware Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2021-20090-arcadyan-buffalo-firmware-path-traversal-vulnerability) (3 Nov 2021)
- [CVE-2021-21148: Google Chromium V8 Heap Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-21148-google-chromium-v8-heap-buffer-overflow-vulnerability) (3 Nov 2021)
- [CVE-2021-21166: Google Chromium Race Condition Vulnerability](https://junglewise.ai/threats/cve-2021-21166-google-chromium-race-condition-vulnerability) (3 Nov 2021)
- [CVE-2021-21193: Google Chromium Blink Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-21193-google-chromium-blink-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2021-21206: Google Chromium Blink Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-21206-google-chromium-blink-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2021-21220: Google Chromium V8 Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2021-21220-google-chromium-v8-improper-input-validation-vulnerability) (3 Nov 2021)
- [CVE-2021-21224: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2021-21224-google-chromium-v8-type-confusion-vulnerability) (3 Nov 2021)
- [CVE-2021-21972: VMware vCenter Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-21972-vmware-vcenter-server-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2021-21985: VMware vCenter Server Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2021-21985-vmware-vcenter-server-improper-input-validation-vulnerability) (3 Nov 2021)
- [CVE-2021-22005: VMware vCenter Server File Upload Vulnerability](https://junglewise.ai/threats/cve-2021-22005-vmware-vcenter-server-file-upload-vulnerability) (3 Nov 2021)
- [CVE-2021-22502: Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-22502-micro-focus-operation-bridge-report-obr-remote-code-execution) (3 Nov 2021)
- [CVE-2021-22506: Micro Focus Access Manager Information Leakage Vulnerability](https://junglewise.ai/threats/cve-2021-22506-micro-focus-access-manager-information-leakage-vulnerability) (3 Nov 2021)
- [CVE-2021-22893: Ivanti Pulse Connect Secure Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-22893-ivanti-pulse-connect-secure-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2021-22894: Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-22894-ivanti-pulse-connect-secure-collaboration-suite-buffer-overflow) (3 Nov 2021)
- [CVE-2021-22899: Ivanti Pulse Connect Secure Command Injection Vulnerability](https://junglewise.ai/threats/cve-2021-22899-ivanti-pulse-connect-secure-command-injection-vulnerability) (3 Nov 2021)
- [CVE-2021-22900: Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability](https://junglewise.ai/threats/cve-2021-22900-ivanti-pulse-connect-secure-unrestricted-file-upload) (3 Nov 2021)
- [CVE-2021-22986: F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution…](https://junglewise.ai/threats/cve-2021-22986-f5-big-ip-and-big-iq-centralized-management-icontrol-rest-remote) (3 Nov 2021)
- [CVE-2021-23874: McAfee Total Protection (MTP) Improper Privilege Management Vulnerability](https://junglewise.ai/threats/cve-2021-23874-mcafee-total-protection-mtp-improper-privilege-management) (3 Nov 2021)
- [CVE-2021-26084: Atlassian Confluence Server and Data Center Object-Graph Navigation Language…](https://junglewise.ai/threats/cve-2021-26084-atlassian-confluence-server-and-data-center-object-graph) (3 Nov 2021)
- [CVE-2021-26411: Microsoft Internet Explorer Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2021-26411-microsoft-internet-explorer-memory-corruption-vulnerability) (3 Nov 2021)
- [CVE-2021-26855: Microsoft Exchange Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-26855-microsoft-exchange-server-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2021-26857: Microsoft Exchange Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-26857-microsoft-exchange-server-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2021-26858: Microsoft Exchange Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-26858-microsoft-exchange-server-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2021-27059: Microsoft Office Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-27059-microsoft-office-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2021-27065: Microsoft Exchange Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-27065-microsoft-exchange-server-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2021-27103: Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability](https://junglewise.ai/threats/cve-2021-27103-accellion-fta-server-side-request-forgery-ssrf-vulnerability) (3 Nov 2021)
- [CVE-2021-27104: Accellion FTA OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2021-27104-accellion-fta-os-command-injection-vulnerability) (3 Nov 2021)
- [CVE-2021-27561: Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability](https://junglewise.ai/threats/cve-2021-27561-yealink-device-management-server-side-request-forgery-ssrf) (3 Nov 2021)
- [CVE-2021-27562: Arm Trusted Firmware Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2021-27562-arm-trusted-firmware-out-of-bounds-write-vulnerability) (3 Nov 2021)
- [CVE-2021-28310: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-28310-microsoft-win32k-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2021-28550: Adobe Acrobat and Reader Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-28550-adobe-acrobat-and-reader-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2021-28663: Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-28663-arm-mali-graphics-processing-unit-gpu-use-after-free) (3 Nov 2021)
- [CVE-2021-28664: Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability](https://junglewise.ai/threats/cve-2021-28664-arm-mali-graphics-processing-unit-gpu-unspecified-vulnerability) (3 Nov 2021)
- [CVE-2021-30116: Kaseya Virtual System/Server Administrator (VSA) Information Disclosure…](https://junglewise.ai/threats/cve-2021-30116-kaseya-virtual-system-server-administrator-vsa-information) (3 Nov 2021)
- [CVE-2021-30551: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2021-30551-google-chromium-v8-type-confusion-vulnerability) (3 Nov 2021)
- [CVE-2021-30554: Google Chromium WebGL Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-30554-google-chromium-webgl-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2021-30563: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2021-30563-google-chromium-v8-type-confusion-vulnerability) (3 Nov 2021)
- [CVE-2021-30632: Google Chromium V8 Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2021-30632-google-chromium-v8-out-of-bounds-write-vulnerability) (3 Nov 2021)
- [CVE-2021-30633: Google Chromium Indexed DB API Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-30633-google-chromium-indexed-db-api-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2021-30657: Apple macOS Unspecified Vulnerability](https://junglewise.ai/threats/cve-2021-30657-apple-macos-unspecified-vulnerability) (3 Nov 2021)
- [CVE-2021-30661: Apple Multiple Products WebKit Storage Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-30661-apple-multiple-products-webkit-storage-use-after-free) (3 Nov 2021)
- [CVE-2021-30663: Apple Multiple Products WebKit Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-30663-apple-multiple-products-webkit-integer-overflow-vulnerability) (3 Nov 2021)
- [CVE-2021-30665: Apple Multiple Products WebKit Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2021-30665-apple-multiple-products-webkit-memory-corruption-vulnerability) (3 Nov 2021)
- [CVE-2021-30666: Apple iOS WebKit Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-30666-apple-ios-webkit-buffer-overflow-vulnerability) (3 Nov 2021)
- [CVE-2021-30713: Apple macOS Unspecified Vulnerability](https://junglewise.ai/threats/cve-2021-30713-apple-macos-unspecified-vulnerability) (3 Nov 2021)
- [CVE-2021-30761: Apple iOS WebKit Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2021-30761-apple-ios-webkit-memory-corruption-vulnerability) (3 Nov 2021)
- [CVE-2021-30762: Apple iOS WebKit Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-30762-apple-ios-webkit-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2021-30807: Apple Multiple Products Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2021-30807-apple-multiple-products-memory-corruption-vulnerability) (3 Nov 2021)
- [CVE-2021-30858: Apple iOS, iPadOS, macOS Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-30858-apple-ios-ipados-macos-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2021-30860: Apple Multiple Products Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-30860-apple-multiple-products-integer-overflow-vulnerability) (3 Nov 2021)
- [CVE-2021-30869: Apple iOS, iPadOS, and macOS Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2021-30869-apple-ios-ipados-and-macos-type-confusion-vulnerability) (3 Nov 2021)
- [CVE-2021-31199: Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-31199-microsoft-enhanced-cryptographic-provider-privilege-escalation) (3 Nov 2021)
- [CVE-2021-31201: Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-31201-microsoft-enhanced-cryptographic-provider-privilege-escalation) (3 Nov 2021)
- [CVE-2021-31207: Microsoft Exchange Server Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2021-31207-microsoft-exchange-server-security-feature-bypass-vulnerability) (3 Nov 2021)
- [CVE-2021-31755: Tenda AC11 Router Stack Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-31755-tenda-ac11-router-stack-buffer-overflow-vulnerability) (3 Nov 2021)
- [CVE-2021-31955: Microsoft Windows Kernel Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2021-31955-microsoft-windows-kernel-information-disclosure-vulnerability) (3 Nov 2021)
- [CVE-2021-31956: Microsoft Windows NTFS Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-31956-microsoft-windows-ntfs-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2021-31979: Microsoft Windows Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-31979-microsoft-windows-kernel-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2021-33739: Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation…](https://junglewise.ai/threats/cve-2021-33739-microsoft-desktop-window-manager-dwm-core-library-privilege) (3 Nov 2021)
- [CVE-2021-33742: Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-33742-microsoft-windows-mshtml-platform-remote-code-execution) (3 Nov 2021)
- [CVE-2021-33771: Microsoft Windows Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-33771-microsoft-windows-kernel-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2021-34448: Microsoft Windows Scripting Engine Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2021-34448-microsoft-windows-scripting-engine-memory-corruption) (3 Nov 2021)
- [CVE-2021-34473: Microsoft Exchange Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-34473-microsoft-exchange-server-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2021-34523: Microsoft Exchange Server Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-34523-microsoft-exchange-server-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2021-34527: Microsoft Windows Print Spooler Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-34527-microsoft-windows-print-spooler-remote-code-execution) (3 Nov 2021)
- [CVE-2021-35211: SolarWinds Serv-U Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-35211-solarwinds-serv-u-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2021-35395: Realtek AP-Router SDK Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-35395-realtek-ap-router-sdk-buffer-overflow-vulnerability) (3 Nov 2021)
- [CVE-2021-35464: ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-35464-forgerock-access-management-am-core-server-remote-code-execution) (3 Nov 2021)
- [CVE-2021-36741: Trend Micro Multiple Products Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2021-36741-trend-micro-multiple-products-improper-input-validation) (3 Nov 2021)
- [CVE-2021-36742: Trend Micro Multiple Products Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2021-36742-trend-micro-multiple-products-improper-input-validation) (3 Nov 2021)
- [CVE-2021-36942: Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability](https://junglewise.ai/threats/cve-2021-36942-microsoft-windows-local-security-authority-lsa-spoofing) (3 Nov 2021)
- [CVE-2021-36948: Microsoft Windows Update Medic Service Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-36948-microsoft-windows-update-medic-service-privilege-escalation) (3 Nov 2021)
- [CVE-2021-36955: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation…](https://junglewise.ai/threats/cve-2021-36955-microsoft-windows-common-log-file-system-clfs-driver-privilege) (3 Nov 2021)
- [CVE-2021-37973: Google Chromium Portals Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-37973-google-chromium-portals-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2021-37975: Google Chromium V8 Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2021-37975-google-chromium-v8-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2021-37976: Google Chromium Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2021-37976-google-chromium-information-disclosure-vulnerability) (3 Nov 2021)
- [CVE-2021-38000: Google Chromium Intents Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2021-38000-google-chromium-intents-improper-input-validation-vulnerability) (3 Nov 2021)
- [CVE-2021-38003: Google Chromium V8 Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2021-38003-google-chromium-v8-memory-corruption-vulnerability) (3 Nov 2021)
- [CVE-2021-38645: Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-38645-microsoft-open-management-infrastructure-omi-privilege-escalation) (3 Nov 2021)
- [CVE-2021-38647: Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-38647-microsoft-open-management-infrastructure-omi-remote-code) (3 Nov 2021)
- [CVE-2021-38648: Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-38648-microsoft-open-management-infrastructure-omi-privilege-escalation) (3 Nov 2021)
- [CVE-2021-38649: Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2021-38649-microsoft-open-management-infrastructure-omi-privilege-escalation) (3 Nov 2021)
- [CVE-2021-40444: Microsoft MSHTML Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-40444-microsoft-mshtml-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2021-40539: Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2021-40539-zoho-manageengine-adselfservice-plus-authentication-bypass) (3 Nov 2021)
- [CVE-2021-41773: Apache HTTP Server Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2021-41773-apache-http-server-path-traversal-vulnerability) (3 Nov 2021)
- [CVE-2021-42013: Apache HTTP Server Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2021-42013-apache-http-server-path-traversal-vulnerability) (3 Nov 2021)
- [CVE-2021-42258: BQE BillQuick Web Suite SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2021-42258-bqe-billquick-web-suite-sql-injection-vulnerability) (3 Nov 2021)
- [CVE-2021-22205: GitLab Community and Enterprise Editions Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-22205-gitlab-community-and-enterprise-editions-remote-code-execution) (3 Nov 2021)
- [CVE-2010-5326: SAP NetWeaver Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2010-5326-sap-netweaver-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2012-0158: Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2012-0158-microsoft-mscomctl-ocx-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2012-3152: Oracle Fusion Middleware Unspecified Vulnerability](https://junglewise.ai/threats/cve-2012-3152-oracle-fusion-middleware-unspecified-vulnerability) (3 Nov 2021)
- [CVE-2014-1812: Microsoft Windows Group Policy Preferences Password Privilege Escalation…](https://junglewise.ai/threats/cve-2014-1812-microsoft-windows-group-policy-preferences-password-privilege) (3 Nov 2021)
- [CVE-2015-1641: Microsoft Office Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2015-1641-microsoft-office-memory-corruption-vulnerability) (3 Nov 2021)
- [CVE-2015-4852: Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2015-4852-oracle-weblogic-server-deserialization-of-untrusted-data) (3 Nov 2021)
- [CVE-2016-0167: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2016-0167-microsoft-win32k-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2016-0185: Microsoft Windows Media Center Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2016-0185-microsoft-windows-media-center-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2016-3235: Microsoft Office OLE DLL Side Loading Vulnerability](https://junglewise.ai/threats/cve-2016-3235-microsoft-office-ole-dll-side-loading-vulnerability) (3 Nov 2021)
- [CVE-2016-3643: SolarWinds Virtualization Manager Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2016-3643-solarwinds-virtualization-manager-privilege-escalation) (3 Nov 2021)
- [CVE-2016-3715: ImageMagick Arbitrary File Deletion Vulnerability](https://junglewise.ai/threats/cve-2016-3715-imagemagick-arbitrary-file-deletion-vulnerability) (3 Nov 2021)
- [CVE-2016-3718: ImageMagick Server-Side Request Forgery (SSRF) Vulnerability](https://junglewise.ai/threats/cve-2016-3718-imagemagick-server-side-request-forgery-ssrf-vulnerability) (3 Nov 2021)
- [CVE-2016-3976: SAP NetWeaver Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2016-3976-sap-netweaver-directory-traversal-vulnerability) (3 Nov 2021)
- [CVE-2016-7255: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2016-7255-microsoft-win32k-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2016-9563: SAP NetWeaver XML External Entity (XXE) Vulnerability](https://junglewise.ai/threats/cve-2016-9563-sap-netweaver-xml-external-entity-xxe-vulnerability) (3 Nov 2021)
- [CVE-2017-0143: Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-0143-microsoft-windows-server-message-block-smbv1-remote-code-execution) (3 Nov 2021)
- [CVE-2017-0199: Microsoft Office and WordPad Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-0199-microsoft-office-and-wordpad-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2017-11774: Microsoft Office Outlook Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2017-11774-microsoft-office-outlook-security-feature-bypass-vulnerability) (3 Nov 2021)
- [CVE-2017-11882: Microsoft Office Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2017-11882-microsoft-office-memory-corruption-vulnerability) (3 Nov 2021)
- [CVE-2017-16651: Roundcube Webmail File Disclosure Vulnerability](https://junglewise.ai/threats/cve-2017-16651-roundcube-webmail-file-disclosure-vulnerability) (3 Nov 2021)
- [CVE-2017-6327: Symantec Messaging Gateway Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6327-symantec-messaging-gateway-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2017-7269: Microsoft Windows Server Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2017-7269-microsoft-windows-server-buffer-overflow-vulnerability) (3 Nov 2021)
- [CVE-2017-8759: Microsoft .NET Framework Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-8759-microsoft-net-framework-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2017-9248: Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness…](https://junglewise.ai/threats/cve-2017-9248-progress-telerik-ui-for-asp-net-ajax-and-sitefinity-cryptographic) (3 Nov 2021)
- [CVE-2018-0171: Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2018-0171-cisco-ios-and-ios-xe-software-smart-install-remote-code-execution) (3 Nov 2021)
- [CVE-2021-27101: Accellion FTA SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2021-27101-accellion-fta-sql-injection-vulnerability) (3 Nov 2021)
- [CVE-2018-0296: Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2018-0296-cisco-adaptive-security-appliance-asa-denial-of-service) (3 Nov 2021)
- [CVE-2018-0798: Microsoft Office Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2018-0798-microsoft-office-memory-corruption-vulnerability) (3 Nov 2021)
- [CVE-2018-0802: Microsoft Office Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2018-0802-microsoft-office-memory-corruption-vulnerability) (3 Nov 2021)
- [CVE-2021-27102: Accellion FTA OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2021-27102-accellion-fta-os-command-injection-vulnerability) (3 Nov 2021)
- [CVE-2018-13379: Fortinet FortiOS SSL VPN Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2018-13379-fortinet-fortios-ssl-vpn-path-traversal-vulnerability) (3 Nov 2021)
- [CVE-2018-14558: Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability](https://junglewise.ai/threats/cve-2018-14558-tenda-ac7-ac9-and-ac10-routers-command-injection-vulnerability) (3 Nov 2021)
- [CVE-2018-15961: Adobe ColdFusion Unrestricted File Upload Vulnerability](https://junglewise.ai/threats/cve-2018-15961-adobe-coldfusion-unrestricted-file-upload-vulnerability) (3 Nov 2021)
- [CVE-2018-20062: ThinkPHP "noneCms" Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2018-20062-thinkphp-nonecms-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2018-2380: SAP Customer Relationship Management (CRM) Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2018-2380-sap-customer-relationship-management-crm-path-traversal) (3 Nov 2021)
- [CVE-2018-4878: Adobe Flash Player Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2018-4878-adobe-flash-player-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2018-4939: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2018-4939-adobe-coldfusion-deserialization-of-untrusted-data-vulnerability) (3 Nov 2021)
- [CVE-2018-6789: Exim Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2018-6789-exim-buffer-overflow-vulnerability) (3 Nov 2021)
- [CVE-2018-8653: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2018-8653-microsoft-internet-explorer-scripting-engine-memory-corruption) (3 Nov 2021)
- [CVE-2019-0211: Apache HTTP Server Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-0211-apache-http-server-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2019-0541: Microsoft MSHTML Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-0541-microsoft-mshtml-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2019-0604: Microsoft SharePoint Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-0604-microsoft-sharepoint-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2019-0708: Microsoft Remote Desktop Services Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-0708-microsoft-remote-desktop-services-remote-code-execution) (3 Nov 2021)
- [CVE-2019-0797: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-0797-microsoft-win32k-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2019-0803: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-0803-microsoft-win32k-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2019-0808: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-0808-microsoft-win32k-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2019-0859: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-0859-microsoft-win32k-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2019-0863: Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-0863-microsoft-windows-error-reporting-wer-privilege-escalation) (3 Nov 2021)
- [CVE-2021-27085: Microsoft Internet Explorer Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-27085-microsoft-internet-explorer-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2019-11510: Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability](https://junglewise.ai/threats/cve-2019-11510-ivanti-pulse-connect-secure-arbitrary-file-read-vulnerability) (3 Nov 2021)
- [CVE-2019-11539: Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability](https://junglewise.ai/threats/cve-2019-11539-ivanti-pulse-connect-secure-and-policy-secure-command-injection) (3 Nov 2021)
- [CVE-2019-11580: Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-11580-atlassian-crowd-and-crowd-data-center-remote-code-execution) (3 Nov 2021)
- [CVE-2019-11634: Citrix Workspace Application and Receiver for Windows Remote Code Execution…](https://junglewise.ai/threats/cve-2019-11634-citrix-workspace-application-and-receiver-for-windows-remote-code) (3 Nov 2021)
- [CVE-2019-1214: Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-1214-microsoft-windows-privilege-common-log-file-system-clfs-escalation) (3 Nov 2021)
- [CVE-2019-1215: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-1215-microsoft-windows-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2019-13608: Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability](https://junglewise.ai/threats/cve-2019-13608-citrix-storefront-server-xml-external-entity-xxe-processing) (3 Nov 2021)
- [CVE-2019-1367: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2019-1367-microsoft-internet-explorer-scripting-engine-memory-corruption) (3 Nov 2021)
- [CVE-2019-1429: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2019-1429-microsoft-internet-explorer-scripting-engine-memory-corruption) (3 Nov 2021)
- [CVE-2019-15752: Docker Desktop Community Edition Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-15752-docker-desktop-community-edition-privilege-escalation) (3 Nov 2021)
- [CVE-2019-15949: Nagios XI Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-15949-nagios-xi-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2019-16256: SIMalliance Toolbox Browser Command Injection Vulnerability](https://junglewise.ai/threats/cve-2019-16256-simalliance-toolbox-browser-command-injection-vulnerability) (3 Nov 2021)
- [CVE-2019-1653: Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2019-1653-cisco-small-business-rv320-and-rv325-routers-information) (3 Nov 2021)
- [CVE-2019-16759: vBulletin PHP Module Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-16759-vbulletin-php-module-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2019-17026: Mozilla Firefox And Thunderbird Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2019-17026-mozilla-firefox-and-thunderbird-type-confusion-vulnerability) (3 Nov 2021)
- [CVE-2019-18187: Trend Micro OfficeScan Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2019-18187-trend-micro-officescan-directory-traversal-vulnerability) (3 Nov 2021)
- [CVE-2019-18935: Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2019-18935-progress-telerik-ui-for-asp-net-ajax-deserialization-of-untrusted) (3 Nov 2021)
- [CVE-2019-18988: TeamViewer Desktop Bypass Remote Login Vulnerability](https://junglewise.ai/threats/cve-2019-18988-teamviewer-desktop-bypass-remote-login-vulnerability) (3 Nov 2021)
- [CVE-2019-19356: Netis WF2419 Devices Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-19356-netis-wf2419-devices-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2019-19781: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-19781-citrix-adc-gateway-and-sd-wan-wanop-appliance-code-execution) (3 Nov 2021)
- [CVE-2019-20085: TVT NVMS-1000 Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2019-20085-tvt-nvms-1000-directory-traversal-vulnerability) (3 Nov 2021)
- [CVE-2019-2215: Android Kernel Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2019-2215-android-kernel-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2019-3396: Atlassian Confluence Server and Data Center Server-Side Template Injection…](https://junglewise.ai/threats/cve-2019-3396-atlassian-confluence-server-and-data-center-server-side-template) (3 Nov 2021)
- [CVE-2019-3398: Atlassian Confluence Server and Data Center Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2019-3398-atlassian-confluence-server-and-data-center-path-traversal) (3 Nov 2021)
- [CVE-2019-4716: IBM Planning Analytics Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-4716-ibm-planning-analytics-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2019-5544: VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2019-5544-vmware-esxi-and-horizon-daas-openslp-heap-based-buffer-overflow) (3 Nov 2021)
- [CVE-2019-5591: Fortinet FortiOS Default Configuration Vulnerability](https://junglewise.ai/threats/cve-2019-5591-fortinet-fortios-default-configuration-vulnerability) (3 Nov 2021)
- [CVE-2019-6223: Apple iOS and macOS Group Facetime Vulnerability](https://junglewise.ai/threats/cve-2019-6223-apple-ios-and-macos-group-facetime-vulnerability) (3 Nov 2021)
- [CVE-2019-7481: SonicWall SMA100 SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2019-7481-sonicwall-sma100-sql-injection-vulnerability) (3 Nov 2021)
- [CVE-2019-8394: Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability](https://junglewise.ai/threats/cve-2019-8394-zoho-manageengine-servicedesk-plus-sdp-file-upload-vulnerability) (3 Nov 2021)
- [CVE-2019-9082: ThinkPHP Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-9082-thinkphp-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2019-9978: WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability](https://junglewise.ai/threats/cve-2019-9978-wordpress-social-warfare-plugin-cross-site-scripting-xss) (3 Nov 2021)
- [CVE-2020-0041: Android Kernel Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2020-0041-android-kernel-out-of-bounds-write-vulnerability) (3 Nov 2021)
- [CVE-2020-0069: Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability](https://junglewise.ai/threats/cve-2020-0069-mediatek-multiple-chipsets-insufficient-input-validation) (3 Nov 2021)
- [CVE-2020-0646: Microsoft .NET Framework Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-0646-microsoft-net-framework-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2020-0674: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2020-0674-microsoft-internet-explorer-scripting-engine-memory-corruption) (3 Nov 2021)
- [CVE-2020-0683: Microsoft Windows Installer Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2020-0683-microsoft-windows-installer-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2020-0688: Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-0688-microsoft-exchange-server-validation-key-remote-code-execution) (3 Nov 2021)
- [CVE-2020-0878: Microsoft Edge and Internet Explorer Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2020-0878-microsoft-edge-and-internet-explorer-memory-corruption) (3 Nov 2021)
- [CVE-2020-0938: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-0938-microsoft-windows-adobe-font-manager-library-remote-code-execution) (3 Nov 2021)
- [CVE-2020-0968: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2020-0968-microsoft-internet-explorer-scripting-engine-memory-corruption) (3 Nov 2021)
- [CVE-2020-0986: Microsoft Windows Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2020-0986-microsoft-windows-kernel-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2020-10148: SolarWinds Orion Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2020-10148-solarwinds-orion-authentication-bypass-vulnerability) (3 Nov 2021)
- [CVE-2020-10181: Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability](https://junglewise.ai/threats/cve-2020-10181-sumavision-emr-cross-site-request-forgery-csrf-vulnerability) (3 Nov 2021)
- [CVE-2020-10189: Zoho ManageEngine Desktop Central File Upload Vulnerability](https://junglewise.ai/threats/cve-2020-10189-zoho-manageengine-desktop-central-file-upload-vulnerability) (3 Nov 2021)
- [CVE-2020-1020: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-1020-microsoft-windows-adobe-font-manager-library-remote-code-execution) (3 Nov 2021)
- [CVE-2020-10221: rConfig OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2020-10221-rconfig-os-command-injection-vulnerability) (3 Nov 2021)
- [CVE-2020-1040: Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-1040-microsoft-hyper-v-remotefx-vgpu-remote-code-execution) (3 Nov 2021)
- [CVE-2020-1054: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2020-1054-microsoft-win32k-privilege-escalation-vulnerability) (3 Nov 2021)
- [CVE-2020-10987: Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-10987-tenda-ac1900-router-ac15-model-remote-code-execution) (3 Nov 2021)
- [CVE-2020-11738: WordPress Snap Creek Duplicator Plugin File Download Vulnerability](https://junglewise.ai/threats/cve-2020-11738-wordpress-snap-creek-duplicator-plugin-file-download) (3 Nov 2021)
- [CVE-2020-12271: Sophos SFOS SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2020-12271-sophos-sfos-sql-injection-vulnerability) (3 Nov 2021)
- [CVE-2020-12812: Fortinet FortiOS SSL VPN Improper Authentication Vulnerability](https://junglewise.ai/threats/cve-2020-12812-fortinet-fortios-ssl-vpn-improper-authentication-vulnerability) (3 Nov 2021)
- [CVE-2020-16009: Inappropriate implementation in V8](https://junglewise.ai/threats/cve-2020-16009-google-chromium-v8-type-confusion-vulnerability) (3 Nov 2021)
- [CVE-2020-16017: Use after free in CefSharp](https://junglewise.ai/threats/cve-2020-16017-google-chrome-use-after-free-vulnerability) (3 Nov 2021)
- [CVE-2020-16013: Inappropriate implementation in V8 in CefSharp](https://junglewise.ai/threats/cve-2020-16013-google-chromium-v8-incorrect-implementation-vulnerabililty) (3 Nov 2021)
- [CVE-2020-16846: SaltStack Salt Command Injection in netapi ssh client](https://junglewise.ai/threats/cve-2020-16846-saltstack-salt-shell-injection-vulnerability) (3 Nov 2021)
- [CVE-2020-15999: Heap buffer overflow in CefSharp](https://junglewise.ai/threats/cve-2020-15999-google-chrome-freetype-heap-buffer-overflow-vulnerability) (3 Nov 2021)
- [CVE-2020-11651: SaltStack Salt Unauthenticated Remote Code Execution](https://junglewise.ai/threats/cve-2020-11651-saltstack-salt-authentication-bypass-vulnerability) (3 Nov 2021)
- [CVE-2020-11652: SaltStack Salt is vulnerable Arbitrary Directory Access](https://junglewise.ai/threats/cve-2020-11652-saltstack-salt-path-traversal-vulnerability) (3 Nov 2021)
- [CVE-2020-10199: Nexus Repository Manager 3 - Remote Code Execution](https://junglewise.ai/threats/cve-2020-10199-sonatype-nexus-repository-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2019-17558: Improper Input Validation in Apache Solr](https://junglewise.ai/threats/cve-2019-17558-apache-solr-velocityresponsewriter-plug-in-remote-code-execution) (3 Nov 2021)
- [CVE-2018-15811: Inadequate Encryption Strength in DotNetNuke](https://junglewise.ai/threats/cve-2018-15811-dotnetnuke-dnn-inadequate-encryption-strength-vulnerability) (3 Nov 2021)
- [CVE-2018-18325: Inadequate Encryption Strength in DotNetNuke](https://junglewise.ai/threats/cve-2018-18325-dotnetnuke-dnn-inadequate-encryption-strength-vulnerability) (3 Nov 2021)
- [CVE-2018-11776: Apache Struts vulnerable to remote command execution (RCE) due to improper input…](https://junglewise.ai/threats/cve-2018-11776-apache-struts-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2017-5638: Apache Struts vulnerable to remote arbitrary command execution due to improper…](https://junglewise.ai/threats/cve-2017-5638-apache-struts-remote-code-execution-vulnerability) (3 Nov 2021)
- [CVE-2017-9805: REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for…](https://junglewise.ai/threats/cve-2017-9805-apache-struts-deserialization-of-untrusted-data-vulnerability) (3 Nov 2021)
- [CVE-2017-9822: DNN (aka DotNetNuke) has Remote Code Execution via a cookie](https://junglewise.ai/threats/cve-2017-9822-dotnetnuke-dnn-remote-code-execution-vulnerability) (3 Nov 2021)

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Vulnerabilities exploited in the wild", https://junglewise.ai/threats/exploited, 13 November 2026.