Security Vulnerabilities - Known exploited
CVE-2021-31199
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Known exploited
CVSS Score
5.2
EPSS Score
0.03
Published
2021-06-08
CVE-2021-31201
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Known exploited
CVSS Score
5.2
EPSS Score
0.026
Published
2021-06-08
CVE-2021-31955
Windows Kernel Information Disclosure Vulnerability
Known exploited
CVSS Score
5.5
EPSS Score
0.811
Published
2021-06-08
CVE-2021-31956
Windows NTFS Elevation of Privilege Vulnerability
Known exploited
CVSS Score
7.8
EPSS Score
0.223
Published
2021-06-08
CVE-2021-30533
Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.
Known exploited
CVSS Score
6.5
EPSS Score
0.167
Published
2021-06-07
CVE-2021-27852
Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. This issue affects: Checkbox Survey versions prior to 7.
Known exploited
CVSS Score
9.8
EPSS Score
0.303
Published
2021-05-27
CVE-2021-22894
A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously crafted meeting room.
Known exploited
CVSS Score
8.8
EPSS Score
0.413
Published
2021-05-27
CVE-2021-22899
A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature
Known exploited
CVSS Score
8.8
EPSS Score
0.229
Published
2021-05-27
CVE-2021-22900
A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
Known exploited
CVSS Score
7.2
EPSS Score
0.141
Published
2021-05-27
CVE-2021-21985
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.
Known exploited
CVSS Score
9.8
EPSS Score
1.0
Published
2021-05-26