Security Vulnerabilities - Known exploited
CVE-2021-36380
Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi.
Known exploited
CVSS Score
9.8
EPSS Score
0.976
Published
2021-08-13
CVE-2021-36942
Windows LSA Spoofing Vulnerability
Known exploited
CVSS Score
7.5
EPSS Score
0.66
Published
2021-08-12
CVE-2021-36948
Windows Update Medic Service Elevation of Privilege Vulnerability
Known exploited
CVSS Score
7.8
EPSS Score
0.267
Published
2021-08-12
CVE-2021-34484
Windows User Profile Service Elevation of Privilege Vulnerability
Known exploited
CVSS Score
7.8
EPSS Score
0.217
Published
2021-08-12
CVE-2021-34486
Windows Event Tracing Elevation of Privilege Vulnerability
Known exploited
CVSS Score
7.8
EPSS Score
0.093
Published
2021-08-12
CVE-2021-20028
Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier
Known exploited
CVSS Score
9.8
EPSS Score
0.299
Published
2021-08-04
CVE-2021-30563
Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Known exploited
CVSS Score
8.8
EPSS Score
0.089
Published
2021-08-03
CVE-2021-26085
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.
Known exploited
CVSS Score
5.3
EPSS Score
0.999
Published
2021-08-03
CVE-2021-36741
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product�s management console in order to exploit this vulnerability.
Known exploited
CVSS Score
8.8
EPSS Score
0.05
Published
2021-07-29
CVE-2021-36742
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Known exploited
CVSS Score
7.8
EPSS Score
0.015
Published
2021-07-29