The KEV catalog lists vulnerabilities that are known to be actively exploited in the wild. Federal agencies are required to remediate these on defined deadlines.
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2021-22899 | UNKNOWN | — | Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles. | Nov 3, 2021 |
| CVE-2020-6418 | UNKNOWN | — | Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | Nov 3, 2021 |
| CVE-2021-30554 | UNKNOWN | — | Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | Nov 3, 2021 |
| CVE-2016-3715 | UNKNOWN | — | ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading. | Nov 3, 2021 |
| CVE-2020-0878 | UNKNOWN | — | Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user. | Nov 3, 2021 |
| CVE-2021-31955 | UNKNOWN | — | Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process. | Nov 3, 2021 |
| CVE-2021-1647 | UNKNOWN | — | Microsoft Defender contains an unspecified vulnerability that allows for remote code execution. | Nov 3, 2021 |
| CVE-2016-0185 | UNKNOWN | — | Microsoft Windows Media Center contains a remote code execution vulnerability when Windows Media Center opens a specially crafted Media Center link (.mcl) file that references malicious code. | Nov 3, 2021 |
| CVE-2020-0683 | UNKNOWN | — | Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers to bypass access restrictions to add or remove files. | Nov 3, 2021 |
| CVE-2020-1380 | UNKNOWN | — | Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user. | Nov 3, 2021 |
| CVE-2020-11651 | UNKNOWN | — | SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method calls. The vulnerability allows a remote user to access some methods without authentication, which can be used to retrieve user tokens from the salt master and/or run commands on salt minions. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability. | Nov 3, 2021 |
| CVE-2020-16846 | UNKNOWN | — | SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API using the SSH client. This vulnerability affects any users running the Salt API. | Nov 3, 2021 |
| CVE-2018-2380 | UNKNOWN | — | SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validation of path information provided by users. | Nov 3, 2021 |
| CVE-2019-18988 | UNKNOWN | — | TeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different customers' installations. If an attacker were to know this key, they could decrypt protected information stored in registry or configuration files or decryption of the Unattended Access password to the system (which allows for remote login to the system). | Nov 3, 2021 |
| CVE-2017-9248 | UNKNOWN | — | Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI.dll that can be exploited to disclose encryption keys (Telerik.Web.UI.DialogParametersEncryptionKey and/or the MachineKey), perform cross-site-scripting (XSS) attacks, compromise the ASP.NET ViewState, and/or upload and download files. | Nov 3, 2021 |
| CVE-2019-16759 | UNKNOWN | — | The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request. | Nov 3, 2021 |
| CVE-2020-3952 | UNKNOWN | — | VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information. | Nov 3, 2021 |
| CVE-2021-21985 | UNKNOWN | — | VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution. | Nov 3, 2021 |
| CVE-2021-27561 | UNKNOWN | — | Yealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution. | Nov 3, 2021 |
| CVE-2021-40539 | UNKNOWN | — | Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution. | Nov 3, 2021 |
| CVE-2020-8644 | UNKNOWN | — | PlaySMS contains a server-side template injection vulnerability that allows for remote code execution. | Nov 3, 2021 |
| CVE-2020-14883 | UNKNOWN | — | Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and availability. | Nov 3, 2021 |
| CVE-2012-3152 | UNKNOWN | — | Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and integrity of affected systems. | Nov 3, 2021 |
| CVE-2019-0863 | UNKNOWN | — | Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode. | Nov 3, 2021 |
| CVE-2021-33739 | UNKNOWN | — | Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation. | Nov 3, 2021 |