Heist/ feed

Security feed

Back to latest events

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges. CISA required action: Apply updates per vendor instructions.

Announced

Win32kCVE-2018-8453
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-8453

Win32k

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2018-8453

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2915 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Apache Struts 2 Improper Input Validation Vulnerability

The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.

Announced

Struts 2CVE-2012-0391
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-0391

Struts 2

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2012-0391

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2914 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Apache Struts 1 ActionForm Denial-of-Service Vulnerability

ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.

Announced

Struts 1CVE-2006-1547
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2006-1547

Struts 1

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2006-1547

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2913 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271. CISA required action: Apply updates per vendor instructions.

Announced

Bourne-Again Shell (Bash)CVE-2014-7169
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-7169

Bourne-Again Shell (Bash)

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2014-7169

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2912 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. CISA required action: Apply updates per vendor instructions.

Announced

Bourne-Again Shell (Bash)CVE-2014-6271
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-6271

Bourne-Again Shell (Bash)

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2014-6271

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2911 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user. CISA required action: Apply updates per vendor instructions.

Announced

Internet ExplorerCVE-2014-1776
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-1776

Internet Explorer

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2014-1776

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2910 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability

Intel products contain a vulnerability which can allow attackers to perform privilege escalation. CISA required action: Apply updates per vendor instructions.

Announced

Active Management Technology (AMT), Small Business Technology (SBT), and Standard ManageabilityCVE-2017-5689
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-5689

Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2017-5689

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2909 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges. CISA required action: Apply updates per vendor instructions.

Announced

WindowsCVE-2020-0787
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-0787

Windows

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2020-0787

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2908 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Grandstream Networks UCM6200 Series SQL Injection Vulnerability

Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root. CISA required action: Apply updates per vendor instructions.

Announced

UCM6200CVE-2020-5722
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-5722

UCM6200

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2020-5722

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2907 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability

SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution. CISA required action: Apply updates per vendor instructions.

Announced

SMA 100 AppliancesCVE-2021-20038
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-20038

SMA 100 Appliances

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2021-20038

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2906 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Apple Memory Corruption Vulnerability

Apple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code with kernel privileges. CISA required action: Apply updates per vendor instructions.

Announced

iOS and macOSCVE-2022-22587
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-22587

iOS and macOS

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2022-22587

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2905 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.

Announced

Win32kCVE-2022-21882
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-21882

Win32k

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2022-21882

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2904 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Apple OS X Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context. CISA required action: Apply updates per vendor instructions.

Announced

OS XCVE-2014-4404
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-4404

OS X

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2014-4404

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2903 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Microsoft HTTP.sys Remote Code Execution Vulnerability

Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.

Announced

HTTP.sysCVE-2015-1635
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-1635

HTTP.sys

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2015-1635

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2902 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Apple OS X Authentication Bypass Vulnerability

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges. CISA required action: Apply updates per vendor instructions.

Announced

OS XCVE-2015-1130
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-1130

OS X

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2015-1130

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2901 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

D-Link DIR-645 Router Remote Code Execution Vulnerability

D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Announced

DIR-645 RouterCVE-2015-2051
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-2051

DIR-645 Router

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2015-2051

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2900 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Apache ActiveMQ Improper Input Validation Vulnerability

The Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request CISA required action: Apply updates per vendor instructions.

Announced

ActiveMQCVE-2016-3088
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-3088

ActiveMQ

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2016-3088

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2899 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Microsoft SMBv1 Remote Code Execution Vulnerability

The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets. CISA required action: Apply updates per vendor instructions.

Announced

SMBv1CVE-2017-0145
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-0145

SMBv1

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2017-0145

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2898 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Microsoft SMBv1 Remote Code Execution Vulnerability

The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets. CISA required action: Apply updates per vendor instructions.

Announced

SMBv1CVE-2017-0144
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-0144

SMBv1

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2017-0144

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2897 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office. CISA required action: Apply updates per vendor instructions.

Announced

OfficeCVE-2017-0262
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-0262

Office

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2017-0262

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2896 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
Older events