Vulnerability archive

The complete catalogue of actively exploited vulnerabilities (CISA KEV and EUVD/ENISA) tracked by Radar — search by CVE, vendor, or product.

6 of 1856 vulnerabilities

CVE: CVE-2021-27102
Vendor / product: Accellion · FTA
Accellion FTA contains an OS command injection vulnerability exploited via a local web service call.
View source ↗
Source: CISA KEV
Added: 11/3/21
Severity: [Known ransomware use]
CVE: CVE-2019-1068[watched vendor]
Vendor / product: Microsoft
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.
View source ↗
Source: EUVD / ENISA
Added: 7/15/19
Severity: [High · CVSS 8.8]
CVE: CVE-2017-10271
Vendor / product: Oracle Corporation
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
View source ↗
Source: EUVD / ENISA
Added: 10/19/17
Severity: [High · CVSS 7.5]
CVE: CVE-2016-3081
Vendor / product: n/a
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.
View source ↗
Source: EUVD / ENISA
Added: 4/26/16
Severity: [High · CVSS 8.1]
CVE: CVE-2015-5477
Vendor / product: n/a
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
View source ↗
Source: EUVD / ENISA
Added: 7/29/15
Severity: [High · CVSS 7.5]
CVE: CVE-2015-3306
Vendor / product: n/a
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
View source ↗
Source: EUVD / ENISA
Added: 5/18/15
Severity: [Critical · CVSS 10.0]